Data protection

1. Responsible

The responsible party for this website is:

Stadtmarken GmbH
Technology Center at Europaplatz
Dennewartstraße 25-27
52068 Aachen

Postal and visitoraddress
Aachener-und-Münchener-Allee9
52064 Aachen

Further information about our company and the persons authorized to represent it can be found in our legal notice.

 

2.     Data protection contact

If you have any questions or concerns about data protection on our website, please contact us as follows:

Phone: +49 (0)241 9631-107
datenschutz@landmarken-ag.de

You can reach our external data protection officer as follows:

VUV Beratungs- und Service GmbH
- Data Protection Officer of the Stadtmarken GmbH Group -
Theaterstr. 55, 52064 Aachen
juergen.kuck@vuv-consult.de

 

3.     Processing of personal data

3.1. Provision of the website and log files

 

3.1.1. Description and scope of processing

Each time our website is accessed, our system, i.e. the web server, automatically collects information from the system of the accessing computer or the user's terminal device. In order for the pages to be displayed in your browser, the IP address of the terminal device you are using must be processed.

We collect the following data:

• IP address of the terminal device
• Type and version of browser used
• Operating system of the terminal device
• Date and time of the request
• Website from which the website was accessed (referrer URL)
• Type of HTTP request: GET
• HTTP status code
• File accessed

The data is stored in log files on the servers beyond the duration of the session.

 

3.1.2. Purpose and legal basis of processing

Temporary storage during your visit to the website is necessary to enable the website to be delivered and displayed correctly. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems (e.g., for attack detection). These purposes also justify our legitimate interest in data processing. The data is not evaluated for marketing purposes in this context.

However, we may use it to compile and evaluate statistical data on the use of our website (see website analysis).

The data is therefore processed on the basis of Art. 6 (1) lit. f GDPR to protect our legitimate interests as the responsible website operator.

Right to object

Since we base the processing on a legitimate interest, you have a right to object to this in accordance with Art. 21 (1) GDPR. Please address your objection to the contact details provided in section 2 and, if necessary, specify the particular circumstances arising from your specific situation. We will then take these into account in the balancing of interests.

 

3.1.3. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended.

The log files are stored for a period of 30 days and are directly and exclusively accessible to administrators. Storage beyond this period is possible, but in this case we will delete or anonymize the user's IP address so that it is no longer possible to identify the client accessing the website and the data contained therein no longer refers to any specific individual.

In addition, log files are stored on AWS for a period of 30 days and are directly and exclusively accessible to administrators. Storage beyond this period is possible, but in this case, we will delete or anonymize the user's IP address so that it is no longer possible to identify the client accessing the site and the data contained therein no longer refers to any specific individual. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended.

 

3.2. Email contacts and contact form, inquiries Hansator Münster parking garage

 

3.2.1. Description and scope of processing

You can contact us via our contact form and the email address provided by us. In this case, your personal data transmitted with the inquiry will be stored. This data will be used exclusively for processing your inquiry.

 

3.2.2. Purpose and legal basis of processing

Requests received via the contact form on our website are processed electronically by us in order to respond to your request. In this context, other persons or departments and, if applicable, third parties commissioned by us may also become aware of the contents of the form you have submitted. The form data is transmitted via the Internet using an encrypted connection.

Data processing is carried out in the case of specific inquiries for the fulfillment of a contract or the initiation of a contract in accordance with Art. 6 (1) lit. b GDPR. In the case of general inquiries, processing is based on a balancing of interests in accordance with Art. 6 (1) lit. f GDPR. Our legitimate interest here lies in providing an effective means of communication for your inquiry.

Right to object

If we base the processing on a legitimate interest, you have the right to object to this in accordance with Art. 21 (1) GDPR. Please address your objection to the contact details provided in section 2 and, if necessary, specify the particular circumstances arising from your specific situation. We will then take these into account in the balancing of interests.

 

3.2.3. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of personal data that has been transmitted to us in the manner described above, this is the case when the respective communication with the user has ended. Communication is terminated when it is clear from the circumstances that the matter in question has been finally clarified. In the case of contractual obligations or statutory retention obligations, deletion will only be considered after the respective retention obligation has expired.

 

3.3. Information on cookies & local storage

 

3.3.1. Description and scope of processing

Cookies are storage notes that store information on end devices and read information from the end devices. This website uses cookies that are absolutely necessary to make the website available and to meet legal requirements (consent management). In addition, cookies may be necessary to enable certain functions of our website.

Some functions (map and videos) also store information in the web browser's "local storage."

Our website uses only first-party cookies. These are stored by our web servers and are not made accessible by browsers across domains.

 

3.3.2. Purpose and legal basis of processing

Insofar as the storage and retrieval of information is necessary, this is based on Section 25 (2) No. 2 TTDSG (German Telemedia Act). If personal data (e.g., IP addresses or other identifiers) are also processed in this context, the legal basis for data protection is Art. 6 (1) lit. f GDPR. The interest pursued here is the provision of a functional and legally compliant website.

Right to object and right to erasure

You can object to the use of cookies by blocking the setting of cookies by our website in the browser you are using. However, we would like to point out that the site can then no longer be used to its full extent.

Insofar as the storage and retrieval of information is only necessary for certain functions (e.g., interactive map, video integration), this will only be processed with your consent. The legal basis for the processing of personal data is Art. 6 (1) (a) GDPR. You can give your consent in advance via the consent banner or manually via a button for the respective integrated function.

Revocation and cookie settings

You can change your settings at any time via the cookie settings in the footer. A change also revokes any consent already given, without affecting the lawfulness of the previous processing.

 

3.3.3. Storage period

With regard to the storage period, a distinction is made between the following types of cookies: Temporary cookies (session cookies) are deleted at the latest after a user has left an online offer and closed their browser.

Persistent cookies remain stored for a predefined period of time (lifetime) even after the web browser is closed and can be read when the website is visited again.

 

Name	Provider	Purpose	Lifetime	Type
yfinite_session	First-party	Session control	Session	Required cookie
yfinite_cookies	First-party	Consent management	Session	Required cookie
event.mapbox.com	MapBox	Display of interactive map	Session	Local storage with consent
player	Vimoep	Storage of video settings	1 year	Non-essential cookie
vuid	Vimeo	Collection of information about interactions on websites with Vimeo videos	2 years	Non-essential cookie
_apexps	Vimeo	Storage of settings for language, region, or user name	1 year	Non-essential cookie
contiuous_play_v3	Vimeo	Storage of information about playback status	1 year	Non-essential cookie

 

 

3.4. Interactive map (e.g., MapBox)

 

3.4.1. Description and scope of data processing

Our website provides you with Mapbox Tiles for the display of interactive maps.

The Mapbox Tiles API is a map service provided by Mapbox Inc. When you access the interactive map, your browser establishes a direct connection to the Mapbox servers. The map content is transmitted directly from Mapbox to your browser and integrated into the website.

MapBox collects the user's IP address, the address of the page visited, device and browser information, the operating system of the end device, limited usage data about the interaction, and, in the case of mobile devices, approximate location data, date and time, and from which website which map content was accessed.

A data processing addendum has been concluded with Mapbox, which obliges the provider to process personal data only in accordance with instructions. We would like to point out that personal data may be transferred to the USA in this context. The basis for the transfer to the third country is the standard contractual clauses issued by the EU Commission, which oblige Mapbox to comply with the EU data protection level specified by the GDPR when transferring and processing personal data in third countries.

The EU Commission's implementing decision and the text of the standard contractual clauses can be found at:

https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en

Further information can be found in the privacy policy of Mapbox, Inc.: https://www.mapbox.com/privacy/

 

3.4.2. Purpose and legal basis of processing

We would like to use the maps to give you the opportunity to get an impression of the surroundings of our properties and to plan your journey. The interactive map is only displayed with your consent. The legal basis is Art. 6 (1) (a) GDPR.

Revocation and cookie settings

You can change your settings at any time via the cookie settings in the footer. A change also revokes any consent already given, without affecting the lawfulness of the previous processing.

 

3.4.3. Storage period

IP addresses are deleted after 30 days so that they can no longer be linked to a specific person. The data may be used in anonymized and aggregated form for statistical analysis and to improve the service.

 

3.5. Video integration (e.g., Vimeo) and virtual property viewing

 

3.5.1. Vimeo

Description and scope of processing

We occasionally provide videos on our website. These are integrated via Vimeo LLC. For technical reasons, the integration causes calls to be made to Vimeo's servers. Data from your browser or device is transmitted to the Vimeo server. If a user is located in the EU, the data is usually retrieved from the German data center or another data center in the EU.

When the video is accessed, cookies may also be used to store settings such as volume, screen resolution, and playback status. If you are logged in to Vimeo as a registered member, more data may be collected and linked to your user account.

For information on the associated use of data from your browser or end device, please refer to the privacy policy of the provider responsible in this regard:

https://vimeo.com/privacy

A data processing agreement (OTT Data Processing Addendum) has been concluded with Vimeo, which obliges the provider to process personal data only in accordance with instructions. We would like to point out that personal data may be transferred to the USA in this context. The basis for the transfer to the third country is the standard contractual clauses issued by the EU Commission, which oblige Vimeo to comply with the EU data protection level specified by the GDPR when transferring and processing personal data in third countries.

Purpose and legal basis of processing

The video integration serves to design the website in line with user needs. Processing only takes place if you have consented to it. The legal basis for this is Art. 6 (1) (a) GDPR. You can revoke your consent at any time via the cookie settings without affecting the legality of the processing carried out to date.

Storage period

We do not store any personal data in connection with the use of the video. The storage period at Vimeo and the lifetime of the cookies can be found in the provider's privacy policy or in the list under 3.3.

 

3.5.2. Immoviewer

Description and scope of processing

We use Immoviewer to integrate virtual property tours into our website. The integration is done via iFrames. An iFrame is an HTML element that is used to integrate third-party content into your own website via a content window. To do this, the iFrame loads the content of the other page and then displays it within the frame. In our case, 45info GmbH, Karl-Liebknecht-Straße 21-22 in 14482 Potsdam, is the service provider that makes its Immoviewer service available in the iFrame.

The privacy policy of 45info GmbH contains relevant information on data protection: www.immoviewer.de/datenschutz.

Purpose and legal basis of processing

The legal basis for the integration of the Immoviewer tool is, where applicable, a pre-contractual measure in accordance with Art. 6 (1) (b) GDPR or our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest lies in the adequate and user-friendly presentation of the properties offered on the website.

Storage period

We do not store any personal data in connection with the use of Immoviewer. The storage period at 45info GmbH can be found in the provider's privacy policy.

 

3.6. Website analysis (Matomo)

 

3.6.1. Description and scope of processing

We use the Matomo analysis software on our website to track and evaluate statistical data on the use of our website. No cookies are used in the configuration we have set up. Only the information automatically sent to the web server (system data, system configuration, calls, and delivery) is processed. The IP address is truncated beforehand so that the information can no longer be assigned to a specific person. The software is integrated locally on the servers we control, so that no information is transferred to third parties.

We use this information to compile the following statistics in particular:

• How many users accessed the website in a specific period
• Which pages of the website were accessed and how often
• From which end devices the visits were made
• How long users stay on the website (session duration)
• Which parts of the website are used more intensively (heat maps)
• Approximately where the visits originated from.

 

3.6.2. Purpose and legal basis of processing

The analysis of this data helps us to continuously improve the user experience of our website and individual functions and offers. By statistically evaluating user behavior, we improve our offer and make it more interesting for visitors.

We base the processing on a legitimate interest in accordance with the legal basis of Art. 6 (1) lit. f GDPR, whereby the interest pursued lies in the purposes described.

Right to object

Since we base the processing on a legitimate interest, you have a right to object to this in accordance with Art. 21 (1) GDPR. Please address your objection to the contact details provided in section 2 and, if necessary, specify the particular circumstances arising from your specific situation. We will then take these into account in the balancing of interests. However, we would like to point out that we cannot assign the statistical data to any specific person.

 

3.6.3. Storage period

If the data is completely anonymized, it is not subject to any specific data protection deletion period. It will be deleted as soon as it is no longer required for the purposes for which it was collected. If you allow personal reference based on the IP address, the deletion period specified in 3.1.3 applies.

 

3.7. Newsletter

 

3.7.1. Description and scope of processing

On our website, you can subscribe to free newsletters with promotional information if you have expressly consented to receiving them.

When you register for the newsletter, your email address, IP address, and the date and time of your registration are transmitted to us and stored and processed by us. Registration for our newsletter is done using a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address. Changes to your data stored by the mailing service provider are also logged. This data is used exclusively to prove consent to receive and send the newsletter. Data is not passed on to third parties.

We use the CleverReach service (//CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany), which processes your data exclusively on our behalf and in accordance with our instructions (so-called processor according to Article 28 GDPR) and has taken appropriate technical and organizational measures to protect your rights (see https://www.cleverreach.com/de/datensicherheit/).

This service provider also helps us to determine, on a pseudonymized basis, how many recipients have opened our newsletters and which links contained therein have been clicked on. This does not involve the creation of user profiles.

 

3.7.2. Purpose and legal basis of processing

The legal basis for the processing of your data for the delivery of the newsletter and the usage analysis to the extent described is Art. 6 (1) lit. a GDPR. You give your consent when you subscribe to the newsletter. This includes the collection and evaluation of statistical opening and click rates. The purpose of this is to assess how the newsletter is received and which content was interesting or less interesting for the recipients overall. It is also necessary to identify errors in delivery. Data processing serves as a basis for improving the content and design of the newsletter.

The registration process is logged on the basis of our legitimate interest for the purpose of proving compliance with legal requirements. If we commission a service provider to send emails, this is done on the basis of our legitimate interest in an efficient and secure mailing system.

 

3.7.3. Storage period

Your data will be stored for as long as we send you the newsletter on a regular basis. In the event that we no longer send you a newsletter, we will delete your data 12 months after sending you the last newsletter, unless the data is still required to prove that the procedure was carried out correctly or to assert, Exercise, or defense of legal claims.

Please note that you can revoke your consent at any time with effect for the future and unsubscribe from the newsletter by clicking on the unsubscribe link included in every newsletter.

 

3.8. Our social media presence

 

3.8.1. General information on the scope of data processing

We maintain publicly accessible profiles on various social networks. Your visit to these profiles triggers a variety of data processing operations. Below, we provide an overview of which of your personal data is collected, used, and stored when you visit our profiles.

We would like to point out that user data may be processed outside the European Union. This may pose risks for users, as it could, for example, make it more difficult to enforce user rights. You can find out what measures have been taken to ensure an adequate level of data protection in these cases below under "Processing in third countries."

Furthermore, user data within social networks is generally processed by the network operators for market research and advertising purposes and may be passed on to third parties. Cookies and related technologies are also used to create cross-device usage profiles, especially if you are logged in as a registered user of the platform. For details on the collection and storage of your personal data and the nature, scope, and purpose of its use by the operator of the respective social network, please refer to the privacy policies of the respective operator (see "Privacy Policy of the Platform Operators" below).

We only receive personal data if you contact us directly via social networks (e.g., by creating your own posts, responding to one of our posts, or sending us private messages). In addition, some platform operators provide us with pseudonymized usage statistics, which we use to improve the user experience when visiting our social media sites (see "Joint responsibility" below).

You use these networks and their functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). Alternatively, you can also access the information offered on this page on our website at https://www.stadtmarken.de.

 

3.8.2. Social media presence in detail

Stadtmarken GmbH uses the following social media platforms:

LinkedIn

Company presence: https://www.linkedin.com/company/stadtmarken-gmbh/

Platform operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com

Joint responsibility: Page Insights Joint Controller Addendum; https://legal.linkedin.com/pages-joint-controller-addendum

Order processing and ensuring an adequate level of data protection when processing in third countries: LinkedIn Data Processing Agreement (DPA); https://legal.linkedin.com/dpa

Privacy policy of the platform operator: https://www.linkedin.com/legal/privacy-policy

 

XING

Company presence: https://www.xing.com/pages/landmarkenag

Platform operator: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany; Website: https://www.xing.de

Privacy policy of the platform operator: https://privacy.xing.com/de/datenschutzerklaerung

 

Instagram

Company website: https://www.instagram.com/stadtmarken/

Platform operator: Service provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; Website: https://www.instagram.com

Joint responsibility: Information on page insights; https://www.facebook.com/legal/terms/page_controller_addendum

Processing in third countries: Facebook contract addendum for the transfer of European data: https://www.facebook.com/legal/EU_data_transfer_addendum

Data protection information from the platform operator: https://instagram.com/about/legal/privacy

 

Facebook

Company website: https://www.facebook.com/stadtmarken

Platform operator: Service provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland; Website: https://www.facebook.com/

Joint responsibility: Information on page insights; https://www.facebook.com/legal/terms/page_controller_addendum

Processing in third countries: Facebook contract addendum for the transfer of European data: https://www.facebook.com/legal/EU_data_transfer_addendum

Data protection information from the platform operator: https://www.facebook.com/policy

 

YouTube:

Company website: https://www.youtube.com/channel/UCa2M9fHl4aTqNQXAY5ySxHQ

Platform operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com

Privacy policy of the platform operator: https://policies.google.com/privacy?hl=de

 

3.9. Recipients and disclosure of data

Unless already mentioned above, data that you provide to us or that we collect will not be disclosed to third parties. In particular, this data will not be disclosed to third parties for their advertising purposes.

However, we use service providers for the operation of the website (in particular programming, web hosting) or for e-mail services, for example. In this context, it may happen that a service provider gains knowledge of personal data. We select these service providers carefully, particularly with regard to data protection and data security, and take all measures required by data protection law to ensure permissible data processing.

As part of the Landmarken AG group of companies, personal data may be passed on within this group if this is necessary, for example, to process a specific inquiry or carry out a project.

Unless otherwise specified in the cases described above, data processing outside the European Union does not take place and personal data is not transferred to third countries.

 

4. Your rights

Unless otherwise described above, please contact the above-mentioned contacts to assert your rights as a data subject.

 

4.1. Right to information

In accordance with Art. 15 GDPR, you may request information about the personal data we process.

 

4.2. Right to rectification

If the information concerning you is not (or no longer) correct, you can request rectification in accordance with Art. 16 GDPR. If your information is incomplete, you can request that it be completed.

 

4.3. Right to erasure

In accordance with Art. 17 GDPR, you have the right to have your personal data erased.

 

4.4. Right to restriction of processing

According to Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data if the requirements are met.

 

4.5. Right to data portability

If the requirements of Art. 20 (1) GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract transferred to you or to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, but are justified pursuant to Art. 6 (1) (f) GDPR and therefore do not meet the requirements for data portability.

 

4.6. Right to object pursuant to Article 21(1) of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data by us pursuant to Article 6(1)(f) GDPR, i.e., processing based on our legitimate interests. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing is for the establishment, Exercising, or defending legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.

 

4.7. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Article 77(1) of the GDPR.

 

5. changes and updates to the privacy policy

This privacy policy will be updated from time to time if changes in the data processing we carry out make this necessary or if the legal framework or its interpretation and application practice change.

The current version can be found on this website.
As of: November 7, 2022