1. Information on the collection of personal data

In the following we inform about the collection of personal data when using our website. Personal data are all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.

The person responsible pursuant to Art. 4 (7) EU Data Protection Ordinance (DSGVO) is Winters & Hirsch Real Estate Advisory GmbH & Co. KG, Bleibtreustraße 22/23, 10707 Berlin, also available by e-mail at info@winters-hirsch.de (see our legal notice). Enquiries about data protection issues can be directed to us via info@winters-hirsch.de or via our postal address, with the addendum ‘Data Protection Matter’.

2. Collection and storage of personal data as well as type and purpose of their use

a) when visiting the website

When you visit our website www.winters-hirsch.de, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer
• date and time of access
• name and URL of the retrieved file
• website from which access is made (referrer URL)
• the browser used and, if applicable, the operating system of your computer as well as the name of your access provider

The mentioned data will be processed by us for the following purposes:

• ensuring a smooth connection of the website
• ensuring comfortable use of our website
• evaluation of system security and stability
• as well as for other administrative purposes

The legal basis for data processing is Art. 6 par. 1 S. 1 lit. f DSGVO. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under sections 4 and 5 of this data protection declaration.

b) when using our contact form

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can respond to it. Further information can be provided voluntarily. The data will be processed for the purpose of contacting us in accordance with Art. 6 par. 1 S. 1 lit. f) DSGVO.

The personal data collected by us using the contact form will be automatically deleted after your request has been processed.

3. Cooperation with third parties and contract processors

Data will only be passed on within the framework of existing laws. If we disclose data to third parties in the course of our processing, this is done on the basis of Art. 6 par. 1 DSGVO, e.g. on the basis of our legitimate interests when using web hosts etc (Art. 6 par. 1 lit. f DSGVO). In addition, data may be transferred to third parties if you have given your consent or if there is a legal obligation to do so. If we appoint service providers to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 DSGVO.

4. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device, do not contain viruses, trojans or other malware. Information is stored in the cookie that results in each case in connection with the specifically used terminal device. However, this does not mean that we immediately become aware of your identity.

The use of cookies on the one hand serves to make the use of our offer for you more pleasant. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These will be deleted automatically after leaving our site.

In addition, we also use temporary cookies that are stored on your end device for a specified period of time to optimize user-friendliness. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer (see Section 5). These cookies enable us to automatically recognize when you return to our site that you have already been with us. These cookies are automatically deleted after a defined period of time. The data processed by cookies are required for the purposes mentioned in order to protect our legitimate interests and those of third parties pursuant to Art. 6 par. 1 sentence 1 lit. f DSGVO. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies might cause some functions of our website not to work properly.

5. Newsletter

With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The newsletter contains advertising information, the content of which is specifically described within the scope of a registration. In addition, the newsletter contains information about our services and us.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP address you are using as well as the time of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your e-mail address. There is an option allowing you to enter your name so that we can address you personally. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 par. 1 lit. a DSGVO.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to info@winters-hirsch.de or by sending a message to the contact details given in the legal notice.

6. Google Webfonts

We use so-called web fonts from Google (www.google.com/webfonts/) to display the font on our website. To do this, your browser loads the required web font into your browser cache when you call up our page. This is necessary so that your browser can also display an optically improved representation of our texts. If your browser does not support this feature, your computer will use a standard font for display. For more information about Google web fonts, visit https://developers.google.com/fonts/faq?hl=en-GB&csw=1. For general information about Google’s privacy practices, visit http://www.google.com/intl/de-DE/policies/privacy/.

7. Rights of the persons concerned

You have the following rights towards us with regard to personal data concerning you:

• law of information
• right to correction or deletion
• right to limitation of processing
• right of objection to the processing
• right to data transferability

You also have the right to complain to a data protection supervisory authority about the processing of your personal data in our company.

8. Right of objection

If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 par. 1 sentence 1 letter f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are reasons which arise from your particular situation or the objection is directed against forms of direct advertisement. In the latter case, you have a general right of revocation which we will implement without specifying a particular situation.

If you wish to exercise your right of revocation or objection, send an e-mail to info@winters-hirsch.de.

9. Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the respective highest level of protection, which is supported by your browser during the website visit. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption we use 128-bit v3 technology instead. You can tell whether a single page of our website is transferred with encryption by checking the key-demonstration in the lower bar of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Updating and amendment of this data protection declaration

This data protection declaration is currently valid as of May 2018.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration.