Information on data privacy as specified under Article 13 of the General Data Protection Regulation (GDPR)
Here, we provide you with information on the processing of your personal data by Kutzner Immobilien Consulting as well as your associated rights.
Data Protection Officer
Purpose and legal basis for data processing
Our collection and use of personal data meets the statutory requirements of the EU’s General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG) and area specific regulations (special laws) with the relevant data protection provisions.
If you are enquiring about viewing a property or a legal Agreement, we require the personal details you submit to conclude the Agreement and estimate the risk assumed. Where an Agreement is concluded, we process your data to implement the terms of the Agreement e.g., Rental Agreement, Property Management Agreement.
It is not possible to conclude or implement the terms of the Agreement without processing your personal data.
The legal basis for processing the data for entering into an Agreement or the performance of an Agreement to which the data subject is party is Article 6 (1) (b), EU General Data Protection Regulation (GDPR). Should special categories of personal data be necessary for this purpose, e.g. on the data subject’s state of health, your consent is granted under Article 9 (2) (a) in conjunction with Article 7, EU General Data Protection Regulation (GDPR).
We also partially process your data to protect the legitimate interests pursued by the Data Controller or by a third party, pursuant to Article 6 (1) (f), EU General Data Protection Regulation (GDPR). Such processing of data may be to:
- Ensure the safe operation of the IT system and software procedures,
- Provide advertising for our own products or for the purposes of surveys or market research,
- Prevent, investigate or detect criminal offences.
Furthermore, your personal data is processed as necessary to meet the legal obligations under Article 6 (1) (c), EU General Data Protection Regulation (GDPR).
Categories of data recipients
External service providers
In the course of fulfilling our statutory and contractual duties, we use some services from external providers. We use such providers in particular for the following services: Property repairs and maintenance, preparing heat cost billing, trades and services (e.g., plumber, carpenter), IT services, legal advice and tax consulting.
In addition, we may transfer your data to other recipients, for instance, to fulfil the statutory duty to convey information to authorities such as social insurance institutions, financial authorities or criminal prosecution authorities.
Duration of data storage
Your data will be deleted as soon as its storage is no longer necessary for the purposes as listed above. In this process, your data may remain stored for the statutory retention period in which claims against our company may be pursued (statutory limitation period – 3 years). In addition, we store your data where there is a statutory duty to do so. Such duties are specified, for example, in the German Commercial Code (HGB) and the German Tax Code (AO).
You have the right at any time to revoke your consent to processing your personal data with effect for the future. This applies equally to the withdrawal of consent submitted to us, where applicable, before the GDPR passed into law, i.e., before 25 May 2018.
Rights of the data subject
At the above address, you may obtain details of your personal data stored at any time. In addition, you have the right to the rectification or erasure (right to be forgotten) of such data, a right to restrict the processing or transfer of your data or withdraw your consent for such processing or transfer.
Right to revoke consent
You have the right to revoke your consent to the terms of this data processing at any time with future effect. You can revoke your consent by email, fax or post or by personally handing in a written declaration (see contact address above).
Right to lodge an objection
Providing the data is processed pursuant to Article 6 (1) (e) or (f), EU General Data Protection Regulation (GDPR), you have the right to object at any time to the processing of your relevant personal data, providing such an objection arises from grounds relating to your particular situation.
After a justified objection, we will no longer process your relevant personal data except where there are compelling legitimate grounds for such processing which override the interests, rights and freedoms of the data subject, or that processing the data serves in asserting, exercising or defending legal claims.
Right to lodge a complaint with a regulatory authority
You have the right to lodge a complaint with the Data Protection Officer as specified above or with a data supervisory authority, in particular in the European Economic Area Member State of your habitual residence, place of work or place of the alleged infringement, for example, with the
Berlin Commissioner for Data Protection and Freedom of Information
Data transfer to a third county
No data is transferred to a third country.