This policy is intended for all visitors to my website, my employees, applicants, customers, and partners, and is always essential if we receive data about you. Therefore, it doesn’t matter whether you have become a customer or even a contractual arrangement between us. In each case, this policy should make it transparent for you how we deal with data.
In the following, we explain which information is collected during your visit to my website, how we use this information, and for what purpose and who we share it with. In addition, we explain your rights concerning the processing of your personal data, such as the right to information, rectification, objection, and erasure.
Within the legal meaning of Data, the Data Controller is the company named in my ‘Imprint’ on my website. You can contact them by email at email@example.com or by post at the address stated in the ‘Imprint’ with the note ‘for the attention of the Data Protection Officer. You can also contact my management representatives mentioned there or contact my Data Protection Officer. A Data Protection Officer is not bound to the instructions given by management.
Process and purpose of storage
When you visit my website, your computer transmits your IP address to us, and depending on the nature of your visit to our website and your computer’s settings; we save small text files on your hard drive (‘Cookies’) as part of this process. My Team creates these files so that our website functions better for you. It is a form of short-term memory of your browser. You can switch off this short-term memory by making the appropriate adjustments within your browser.
We also place text files on our system, which could contain the following information about you: type of browser and browser version, operating system used, the URL of the website which you came from, the name of your computer, and the time of your visit (‘Log files’). The Log files are not assignable to a specific person by us.
My Team does not combine this Data with Cookies or IP addresses. However, we reserve the right to subsequently assess this Data in individual cases if there are specific reasons that indicate unlawful use. The Log files help us understand which kind of computers our web pages must function and when a particularly large (or small) number of people are using our web pages. In this way, website structure, servers, and database systems can be adjusted accordingly.
When you create a user account with us or enter into a contract with us as a customer (e.g., by ordering goods, having a newsletter sent to you, etc.), we create a customer account for you in our system. This account contains the master data that you have provided to us, your order, and, where applicable, your billing data (‘Customer data’). We store and process this Data because otherwise, we cannot fulfill our contract with you. If you enter into a contract with me as a customer, I also use your Customer data to inform you about current campaigns and attractions that we are promoting, provided that you have not objected to the use of your data in this way.
If you send me an application, My Team will use all of the information provided therein to process your application. If you receive a rejection, your Data will be deleted six months after the rejection unless you authorize us in advance to contact you again in the future.
If you are our employee, we will store your application documents, master data, billing data, and insurance data for the execution of the contract of employment, insofar as this is necessary for simpler administration and implementation of the contract. This is managed with the help of the partner companies listed below.
The basis for the storage
In most cases, the most essential basis for the storage is your agreement with me, irrespective of whether you register for a newsletter on my website or if you have negotiated a contract with Estate Investments Consulting Group for your clients. The following bases are possible:
In addition, legal obligations according to GDPR can be a basis, for example, to fulfill and comply with applicable laws, provisions, legal procedures, or an enforceable official directive.
Location of the storage and disclosure of Data to third parties
We don’t process your Data entirely by ourselves. In processing your Data, we also use programmers and services from other companies (‘Tools’). We will occasionally change the Tools we use if this seems reasonable to us based on legal, technical, or economic considerations.
To ensure global access by our customers to our offering (if, for example, you want to access Estate Investments Consulting Group while on a business trip abroad or if your company has multiple branches), we store Customer data globally. The storage locations are:
- United States of America
We currently use the following tools for the administration and preparation of Data (in particular Customer data, IP address, Cookies, and Log files):
- Google Analytics (measurement of traffic on the website)
- Amazon Web Services (website operation, server space)
- Datev (administration of master data, accounting)
- Personio (personnel management)
- Hrworks (travel expense accounting)
- Microsoft Exchange Server (contact data, emails)
- Mailchimp (contact data, emails to large groups)
- Contact Monkey (email tracking)
- Pendo (use analysis and user communication)
- Userlike (provision of service chat windows on the website)
- Salesviewer (lead generation and analysis)
- Square (processing of payments)
- Nfon (internal and external calls)
- Limesurvey (expert surveys)
- Keyingress (opinion research and market research)
- Zapier (Automation Tool)
- PayPal (processing of payments)
If you prohibit using these Tools, we may not be able to fulfill existing contracts between us or may need to switch to solutions that are less convenient for you.
Additional information about data processing using Google Analytics can be found at the following link: www.google.com/policies/privacy/partners/
Procedure and deletion periods
We use the standard procedure to secure the Data and thus create rights and roles in applications and ensure backups and upgrades are carried out in our systems if this is advisable according to the state of technology.
Where the storage of business documents is regulated. My Team store your Data until the completion of the task for which you provided the Data to us or until the expiry of the legal retention periods. In the case of applications and employment contracts, we may also have a legitimate interest in the continued retention of such Data as a result of questions with respect to the execution of the application process or in relation to the issue of billing.
You have the legal right to obtain information about the Data we have stored about you at any time. If, despite our efforts to ensure data is correct and up to date, in correction, information is stored about you, we will rectify such data as quickly as possible upon your request. If the processing of the Data is based on your consent, you can withdraw your consent to this processing of your Data at any time in the future.
Suppose you feel that we are not fulfilling our information obligations towards you. In that case, you have the right to lodge a complaint with a supervisory authority (e.g., the Data Protection Officer of the Federal States in the USA) at any time.
Voluntarily provided Data
In order to conclude and execute contracts between you and us, the processing of your Data to the extent described above is necessary. Withdrawal of your consent to data processing thus only affects such Data that we do not require in order to execute the contract, rather an information that you have also voluntarily provided to us.
If we intend to continue to process such Data for a purpose other than the purpose for which you have provided us with the Data, we will provide you with specific information about this other purpose and the reason behind our intentions prior to processing this data.
Technical and Organizational Measures