We, the EverEstate GmbH, value your interest in our company and our website. We take the protection of your personal data seriously. We would therefore like to inform you of which data we store, when we do so and how we use these data. Your personal data are processed in strict compliance with the relevant legal provisions; the data are deleted as soon as they are no longer needed for the purpose for which they were collected.
Our website can contain links to websites of other providers. We have no influence on compliance with data privacy regulations by these providers.
a) User account
On the website you have the opportunity to create a user account. On your account you can review, inter alia, the status of the purchase process, the contact details of your agent and appointments. For this purpose, EverEstate GmbH collects your title, your first and last name, your Email and your phone number. After submitting your application you will receive a confirmation and authorisation Email from us that asks you to click on the link in the Email to confirm that you wish to create an account. If you activate your account you will be asked to set a password.
The legal basis for the data processing is Art. 6 (1) 1 lit. b GDPR. The data will be stored until you deactivate your account. Legal retention obligations remain unaffected.
Your personal data will also be made available to the agent for whose offer you have made an enquiry. The purpose of the data transmission is that the agent can inform you about the status of the process via the account. Legal basis for the data transmission is Art. 6 (1) 1 lit. b GDPR.
You have have the opportunity to contact us (e.g. via Email, contact form). If you make an enquiry or request the provision of one of our brochures (e.g. Investor’s Guide) EverEstate GmbH processes your personal data (title, first and last name, e-mail, phone number, content of the request) to answer your enquiries. The legal basis for the data processing is Art. 6 (1) 1 lit. b GDPR.
If your enquiry relates to a specific property, your personal data will be disclosed to the agent of the property, EverEstate GmbH, Schlüterstr. 54, 10629 Berlin, in order to enable the agent to contact you.
You can contact our privacy commissioner via firstname.lastname@example.org.
c) Information on specific topics
As a customer you have the opportunity to receive information on specific topics (e.g. property search, property financing, interior, tailor-made offers). For this purpose, you can consent to the transmission of the information on our website. In some cases, this may require the transfer of your personal data to other companies. You will be notified accordingly in the context of the declaration of consent.
The data processing is based on Art. 6 (1) 1 lit. a GDPR. Consent is freely given. You can withdraw the consent at any time with effect for the future.
We provide the possibility to save your search for apartments on our website and receive notification via Email when new apartments fitting your search criteria become available. For this purpose we process your title, your first and last name, your Email address as well as the search criteria you were using (e.g. location, budget, rooms, space, features). Before the notification is sent, you must expressly confirm to us in the double opt-in procedure that we should activate the notification service for you. You will then receive a confirmation and authorisation e-mail from us that asks you to click on the link in the e-mail and to confirm that you wish to receive our notifications.
The legal basis is Art. 6 (1) 1 lit. a GDPR.
You can revoke your consent at any time with future effect, e.g. by sending an e-mail to the following address: email@example.com.
If you use the website for information purposes only, i.e. if you do not log in to or register to use the website, use the contact form or otherwise send us information, we do not collect any personal data except the data sent by your browser that allows for the use of the website (e.g. IP address, date and time of the request, browser type and pages viewed).
Insofar as the data processing is necessary for the provision of our services, the legal basis for the processing is Art. 6 (1) 1 lit. b GDPR. Any further data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest in ensuring the security and effective use of our website.
Internet pages use what are known as cookies in several ways. They help to make our website more user-friendly and effective. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are “session cookies”, which are limited to the duration of your visit to our website. For certain features, we use persistent cookies, which are used to recognise visitors and are stored on your computer for future sessions. Persistent cookies are deleted automatically after a set period, which can vary according to the cookie.
Cookies, which are necessary to carry out the electronic communication process or to provide certain functions requested by you, are stored on the basis of Art. 6 (1) 1 lit. b GDPR.
EverEstate GmbH takes technical and organizational security measures to protect your data that we manage against manipulation, loss, destruction and access by unauthorised persons. Our security measures are continuously updated and improved in line with technological developments.
You can also apply to EverEstate GmbH electronically. Naturally, we will use your personal data you have submitted within the scope of the application only for the processing of your application and will not pass them on to third parties. Please note that e-mails sent unencrypted are not protected against access.
The data processing is based on § 26 (1) German Data Protection Law (BDSG). Insofar as you conclude an employment contract with EverEstate GmbH your personal data that is necessary to perform the contract will be stored beyond that time period in accordance with the legal retention obligations.
The data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise the services and advertising on the website. The data transmission to Google is based on Art. 28 GDPR in conjunction with the respective data processing agreement.
You can prevent cookies from being stored by changing the settings in your browser software; however, we must advise you that you may not be able to use all the functions of this website in full in this event.
You can prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of these data by Google by downloading and installing the browser plug-in from the following link: tools.google.com/dlpage/gaoptout This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, and a direct personal connection is therefore impossible. Further information on the terms and conditions of use and privacy of Google Analytics can be found at www.google.com/analytics/terms or www.google.com/intl/en/policies/.
This website uses Google Tag Manager from Google. Google Tag Manager is a solution that enables marketers to manage web page tags through an interface. The Google Tag Manager service itself (which implements the tags) is a cookie-free domain and does not collect personal data. The Google Tag Manager service triggers other tags that may in turn collect data. Google Tag Manager does not access these data. If disabled at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.
The data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise the services and advertising on the website. The data transmission to Google is based on Art. 28 GDPR in conjunction with a data processing agreement.
Our website uses the “Facebook Pixel” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This tracks user activity after they are redirected to the provider’s website by clicking on a Facebook ad. This procedure serves to assess the effectiveness of Facebook ads for statistical and market research purposes, and can help to optimise future ads.
The data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise the services and advertising on the website.
The data collected are anonymous for us, and therefore do not provide any information on the identity of users. However, the data is stored and processed by Facebook so that it can make a connection to the respective user profile, and so that Facebook can use the data for its own advertising purposes in line with the Facebook data usage policy (https://www.facebook.com/about/privacy/). These data enable Facebook and its partners to place ads on and outside Facebook. A cookie can also be stored on your computer for these purposes.
This website uses the online advertising programme “Google AdWords” from Google and its conversion tracking. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits specific pages of this website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. It is therefore not possible to track cookies through the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who have clicked on their ad and were redirected to a page with a conversion tracking tag. However, they receive no information with which users can be personally identified. Users who do not wish to participate in tracking can easily disable the Google conversion tracking cookie on their Internet browser under user settings.
The data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest to provide targeted advertisement on the website.
However, please note that some web pages may not function properly if you do not accept cookies.
This website uses the Mixpanel web analytics functions of Mixpanel, Inc., 405 Howard Street, 2nd Floor, San Francisco, CA 94105 (https://mixpanel.com/) (“Mixpanel”). On behalf of the operator of this website, Mixpanel will process your personal data to evaluate your use of the website, to compile reports on website activities and to provide other services related to website and Internet usage for the website operator. The information collected is stored on a server in the US. Mixpanel creates pseudonymous user profiles based on the data collected. The profiles created thus are not combined with personal data in a way that would enable the identification of the user.
If you do not wish for Mixpanel to process your data for the purposes of web analysis, you can opt out of processing at any time with future effect at mixpanel.com/optout/. Please note that this will set a cookie on your device that prevents the collection of data by Mixpanel for the purposes of web analysis. Opt-out will remain effective until you delete the cookie.
The data processing is based on Art. 6 (1) 1 lit. f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise the services on the website. The data transmission to Mixpanel in the USA is protected by EU-US-Privacy-Shield certification of Mixpanel (https://mixpanel.com/legal/privacy-policy/).
This website uses Hotjar, an analysis software of Hotjar Ltd ("Hotjar"), Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta, Europe. Hotjar allows us to analyse the usage patterns on our website in order to better understand the needs of our users and optimise our website. For this purpose, Hotjar processes the following data on our behalf:
Data processing is based on GDPR Art. 6, para. 1, sentence 1, point f. We have a legitimate interest in analysing user behaviour in order to optimise the customer experience on our website. If you do not wish the data to be processed by Hotjar, you can object to the processing at any time with effect for the future at https://www.hotjar.com/legal/compliance/opt-out. Please note that this will set a cookie on your device which will prevent Hotjar from collecting data for web analysis purposes. The objection applies until you delete the cookie.
Promotional information will be sent to your e-mail address only if you have consented to the use of your e-mail address for this purpose. Your e-mail address must be provided to receive our newsletter. Before the newsletter is sent, you must expressly confirm to us in the double opt-in procedure that we should activate the newsletter service for you. You will then receive a confirmation and authorisation e-mail from us that asks you to click on the link in the e-mail and to confirm that you wish to receive our newsletter.
This data processing is based on Art. 6 (1) 1 lit. a GDPR.
You can revoke your consent at any time with future effect, e.g. by sending an e-mail to the following address: firstname.lastname@example.org.
To access the information you have stored with us for this purpose, please send us an e-mail at email@example.com.
The newsletter is sent via MailChimp, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
Your email address will be stored on MailChimp's servers in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use your data to contact you or pass it on to third parties.
The legal basis is Art. 28 GDPR in connection with the data processing agreement.
The newsletters contain a so-called "web-beacon" (invisible graphics), i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behaviour on the basis of the retrieval locations (which can be determined with the help of the IP address) or the access times.
Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is not our aim, nor the aim of MailChimp, to observe individual users. The evaluations serve rather to recognize the reading habits of our users and to adapt our contents to these or to dispatch different contents according to the interests of our users.
The legal basis for carrying out statistical surveys and analyses as well as recording the registration procedure is Art. 6 para. 1 S. 1 lit. f GDPR. Our legitimate interest is in the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users.
In telephone calls, if you so wish and give your express consent, we will record your telephone number and name, in addition to possible property requests, for further calls, offers and consultations.
Generally, we do not pass on data to third parties – except in the cases specifically mentioned in this privacy notice – unless you have expressly agreed to this (e.g. by completing a form to contact an agent) or this is required by law.
Some data are passed on in line with strict contractual and legal conditions:
To external service providers for data processing: When service providers come into contact with the personal data of our customers (e.g. for the purpose of sending requested information brochures, web tracking or audience measurement), this is done in the context of contract data processing. This is expressly allowed by law (Art. 28 GDPR). EverEstate GmbH remains responsible for the privacy of your data in such event. The service provider works exclusively in accordance with our instructions, which is ensured by strict contractual regulations, technical and organisational measures and supplementary controls.
On the basis of a legal obligation: In certain cases, we are legally required to send data in response to a request by a government agency. In these cases, legal basis is Art. 6 (1) 1 lit. c GDPR.
We do not make a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Depending on the specific circumstances, you have the following privacy rights:
Your trust is important to us. If you have any questions about the processing of your personal data, please do not hesitate to contact us:
Schlüterstr. 54, 10629 Berlin, Germany
Date: 29 June 2018