Name and address of the company
The party responsible under the meaning of the General Data Protection Regulation (hereinafter “GDPR”) and other national data protection laws of the Member States of the European Union and other data protection regulations is:
Generali Real Estate S.p.A.
Frau Heike Mies-Bendner
Tel: +49 (0) 221 4203 - 4212
Fax: +49 (0) 221 4203 - 40 - 4212
Name and address of the data controller
Generali Deutschland AG
Herrn Bernd Wagner
Tel: +49 (0) 221 1636 7636 email@example.com
General data processing
Scope and authorisation for the processing of personal data
When you (hereinafter “you” or “data subject”) visit our website, we will only collect and process your personal data insofar as this is necessary to guarantee the functionality of our website and to provide our content and services. Generally, we only collect and process your personal data with your consent.
One exception to this general principle applies in cases where your prior consent cannot be obtained for factual reasons and the processing of your data is required by law.
The legal basis for processing personal data with the prior consent of the data subject is Article 6 (1) a) of the GDPR. The legal basis for the processing of personal data required for the fulfilment of a contract or for the implementation of pre-contractual measures is Article 6 (1) b) of the GDPR. Personal data are processed in order to fulfil a legal obligation in accordance with Article 6 (1) c) of the GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) d) of the GDPR shall serve as the legal basis. Where processing is necessary to protect a legitimate interest of our company or a third party, and if these interests override the interests of the data subject, taking into account the fundamental rights and freedoms of the data subject, Article 6 (1) f) shall provide the legal basis for processing the data.
Storage and erasure of personal data
We will erase or restrict the processing of your personal data as soon as the purpose for storing your personal data ceases to apply. Your data may be stored for longer if this is required by legal provisions. In such a case, your data will be erased or restricted from processing as soon as the legally prescribed storage period expires, unless your personal data are required for the conclusion or fulfilment of a contract and therefore need to be stored for a longer period.
How we process the personal data of visitors to our website
Visiting our website
When you visit our website, your browser automatically sends information to our website’s server. This information is temporarily stored in a server log file. The following information is recorded automatically and stored until it is automatically deleted: your IP address, the date and time of your visit, the name and URL of the web page(s) or file(s) you retrieve, the referrer URL (the previous web page you visited), your browser type and version and, if applicable, your computer’s operating system and the name of your Internet service provider.
We process this data to provide you with a smooth connection to our website, to guarantee the functionality and user-friendliness of our website, to evaluate the security of our system, to ensure the stability of our website and for other administrative purposes.
The legal basis for this data processing is Article 6 (1) f) of the GDPR. Our legitimate interest in collecting and processing your personal data follows from the purposes listed above. Under no circumstances do we use the data we collect to identify or draw conclusions about you personally.
Using our contact form
Our website has an integrated contact form which you can use to contact us directly. If you use this option, the data you enter in the contact form, together with your IP address and the date and time of your contact will be transmitted to us and stored. You consent to the processing of these data as part of the message submission process and reference is made to this process in this data protection statement. In this case, the legal basis for processing the data is Article 6 (1) a) of the GDPR.
Alternatively, you can contact us via the email address provided. In this case, the personal data you transmit to us by email will be stored. In this context, the data will not be passed on to third parties. The legal basis for the processing of this data is Article 6 (1) f) of the GDPR. If the purpose of your email contact is to conclude a contract with us, then the additional legal basis for the processing of these data is provided by Art 6 (1) b) of the GDPR.
The data transmitted to us for the purpose of contacting us is processed on the basis of your voluntary consent in accordance with Article 6 (1) a). The personal data collected by us via the contact form will be automatically deleted after your request has been processed.
Disclosure of data to third parties
We will not transmit your personal data to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent pursuant to Article 6 (1) a) GDPR; if the disclosure pursuant to Article 6 (1) f) of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data; if the disclosure pursuant to Article 6 (1) f) is required by law, but only insofar as this is legally permissible in accordance with Article 6 (1) c) of the GDPR; or is necessary for the performance of a contract or in order to take steps prior to entering into a contract with you, as required by Article 6 (1) b) of the GDPR.
We use technical means to pseudonymise the data we collect from our website’s users via cookies. This means that it is impossible for us to associate these data with you or any other specific user. These data are not stored together with any of your other personal data.
The legal basis for the processing of personal data using cookies is Article 6 (1) f) of the GDPR. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) f) of the GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Article 6 (1) a) of the GDPR.
These purposes also constitute legitimate interest in the processing of personal data in accordance with Article 6 (1) f) of the GDPR.
Our website features content and services from other providers. These include maps provided by Google Maps, videos from YouTube and graphics and images from other websites. In order for these data to be retrieved and displayed correctly in your browser, it is absolutely necessary to transmit your IP address to these third-party providers. These providers (hereinafter referred to as “third-party providers”) therefore receive the IP address of each respective user of our website.
Although we make every effort to use only third-party providers who use your IP address solely for the provision of content, we have no influence on whether they also store your IP address. In such cases, your IP address is stored for statistical purposes, among other things. Where we have knowledge that your IP address will be stored, we make sure to point this out.
Our website uses fonts from MyFonts Inc, 600 Unicorn Park Drive, Woburn, MA 01801, USA. When you visit our website, data is also retrieved from a MyFonts server. At a minimum, this means that MyFonts is informed that your IP address has been used to access our website. MyFonts is also informed that you have accessed the font via our website, and receives some technical information about your browser, as almost all web browsers automatically send these data every time they access a server. Some browsers allow you to restrict or modify the data that is sent to the server, but this depends on your browser. Even if MyFonts only needs your data, in particular your IP address, to deliver the retrieved content, we are not aware of and cannot influence whether and to what extent MyFonts also statistically evaluates or stores these data. Further information on data protection at MyFonts can be found at the following link: https://www.myfonts.com/info/terms-and-conditions.
In order to ensure that fonts are displayed correctly, our website uses web fonts provided by Fonticons, Inc. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. To do this, your browser needs to connect to Fonticons, Inc. servers. This informs Fonticons, Inc. that your IP address has been used to access our website. We use web fonts to ensure that our website’s visitors enjoy a uniform and appealing presentation of our online content. This represents a legitimate interest in accordance with Article 6 (1) f) of the GDPR.
Our website features integrated plugins from YouTube. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, together with music videos, trailers and videos produced by users themselves can be viewed on the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you access one of our pages that features a YouTube plugin (YouTube video), the browser on your device is automatically prompted by the YouTube plugin to download an icon of the corresponding YouTube plugin directly from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical process, YouTube and Google are informed about the specific subpage of our website you have visited.
If you are logged into your YouTube account when you access a subpage of our website that features a YouTube video, YouTube is able to recognize the specific subpage of our website you have visited. This information is collected by YouTube and Google and assigned to your YouTube account.
YouTube and Google receive information via the YouTube plugin that you have visited our website whenever you are logged into your YouTube account when you access our website; this happens regardless of whether you interact with a YouTube video or not. If you do not want such data to be transmitted to YouTube and Google, you should log out of your YouTube account before you access our website.
The data protection regulations published by YouTube, which are available at https://www.google.de/intl/de/policies/privacy/ rovide information about the collection, processing and use of personal data by YouTube and Google.
Our website uses the “Google Maps” service, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google.”
Each time you access one of our pages with a Google Maps component, Google creates a cookie on your computer to process your settings and data when you view the page that includes the Google Maps component. As a rule, this cookie is not deleted when you close your browser, but expires after a certain period of time, unless you delete it manually before it expires.
The use of Google Maps and the data and information obtained via Google Maps is subject to Google’s Terms of Service http://www.google.de/intl/de/policies/terms/regional.html and Google’s additional Terms of Service for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Data protection for job applicants
We collect and process the personal data of applicants for the purpose of processing job applications. This processing may also be carried out electronically. This is particularly the case if an applicant submits their application documents to us by electronic means, for example by email or via a job application form on our website. If we conclude an employment contract with an applicant, the data he or she has transmitted to us will be stored for the purpose of preparing and concluding the employment relationship in compliance with statutory provisions. If we do not conclude an employment contract with the applicant, his or her application documents will be automatically erased two months after notification of the rejection decision, provided that no other legitimate interests on our part stand in the way of erasure. Other legitimate interests in this sense include, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
Rights of data subjects
As a data subject, you have the right:
(1) to request information regarding your personal data we process in accordance with Article 15 of the GDPR. In particular, you can request information relating to the processing; the categories of personal data we store and process; the categories of recipients to whom your data have been or will be disclosed; the planned retention period; the existence of your right to have your personal data rectified or erased or to have restrictions placed on the processing of your personal data; the right to object to such processing; the existence of your right to lodge a complaint; the origin of your data, if not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information on their details;
(2) to request the rectification or completion of any inaccurate or incomplete personal data we store or process in accordance with Article 16 of the GDPR;
(3) to request the erasure of your personal data we store and process, unless such processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims in accordance with Article 17 of the GDPR;
(4) to request that we restrict the processing of your personal data if you dispute the accuracy of the data; if the processing is unlawful, but you refuse to have it erased; and if we no longer require the data, but you need it to assert, exercise or defend legal claims; or if you have filed an objection against the processing of your personal data in accordance with Article 21 of the GDPR;
(5) to receive your data in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance in accordance with Article 20 of the GDPR;
(6) to revoke your consent to us at any time in accordance with Article 7 (3) of the GDPR. As a result, we will no longer process any of the personal data you have transmitted to us that is covered by your withdrawal of consent; and
(7) to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you can contact the supervisory authority of your habitual place of residence or work, or our office.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on point (e) or (f) of Article 6 (1), including profiling based on these provisions.
If you exercise your right to object, we will not process your data further, unless there are legitimate grounds for us to do so that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your data are processed for the purpose of direct marketing, you may object to such processing at any time. This also applies to profiling insofar as it is related to direct marketing.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.
You have the right to object to the processing of your data for information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests, or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data referred to in Article 9 (1) of the GDPR, unless Article 9 (2) a) or g) applies and suitable measures to safeguard your rights and freedoms and your legitimate interests are in place.
In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the data controller, the right to express your point of view and to contest the decision.
As a responsible company, we do not use automatic decision-making or profiling.
Like many other websites, we use SSL (Secure Socket Layer) technology in connection with the highest level of encryption supported by your browser. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether a page of our website is transmitted in encrypted form from the icon of a closed padlock displayed in your browser’s status bar.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological advances.
Validity and changes to this data protection statement
This data protection statement is currently valid and was last revised in May 2018.
Due to updates to our website and services, or due to changes in legal or statutory requirements, it may be necessary to amend this data protection statement periodically. You can access and print out the currently valid data protection statement at any time from this page.