Privacy policy

The following Privacy Policy describes how we handle your personal data in accordance with Article 13 of the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the processing described below is

Branicks Group AG
Neue Mainzer Straße 32-36
60311 Frankfurt am Main
Germany

Tel.: + 49 69 94548 58-0
Fax: + 49 69 9454858-99 98
E-mail: info@branicks.com

2. General data processing when using our website

2.1. Usage data

Purposes and scope of the processing/legal bases:

When your visit our website, usage data is temporarily processed on the web server to enable you to access our website.

This data includes the following:

name and address of the requested content;
date and time of the request;
data volume transferred;
access status (content transferred, content not found);
description of the web browser and operating system used, including information on the selected language;
referrer URL, which indicates the page from which you accessed our site;
the IP address of the requesting terminal device.

The legal basis for the processing is Article 6(1) sentence 1 (f) GDPR and our legitimate interest in being able to provide you with an attractive and functional website.

We anonymise your IP address by truncating it in such a manner that it is no longer possible to determine an individual’s identity based on any usage data.

Recipients/categories of recipients:

For the purpose of operating and providing our website, we transfer your data to the following processors which process the data on our behalf strictly subject to our instructions and bound by contract:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Deutschland,
mabu:design, Maik Burdina, Südliche Ringstraße 239, 63225 Langen, Deutschland

2.2. Consent management via Borlabs Cookie consent management platform

Purposes and scope of the processing/legal bases:

Insofar as we use technically necessary cookies and similar technologies in the context of integrating the service, the legal basis for this is section 25 (2) no. 2 of the German Telecommunications Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz, “TTDSG”). The subsequent processing by Borlabs Cookie is carried out on the basis of Article 6(1) sentence 1 (f) GDPR for the purpose and in the pursuit of our legitimate interest in being able to use cookies and similar technologies on our website in a manner consistent with the requirements of data protection law and enabling you to easily and conveniently withdraw your consent.

When you configure settings via our consent banner, we process the following data:

the lifetime of the Borlabs Cookie cookie;
the version of the Borlabs Cookie cookie;
the address of the website from which your consent was sent;
the date and time of consent;
a pseudonym known as a randomly generated unique identifier (UID);
your consent status, which serves as proof of your consent.

This data is logged on our servers and stored on your terminal device in the Borlabs Cookie cookie.

This is how our website is able to check your consent status on all subsequent and future visits and how cookies and other technologies are enabled or disabled when you return to the page based on your decision to use them.

Verification takes place by matching the key and consent status from the Borlabs Cookie on your terminal device with the values provided to us when you gave your consent, to ensure that the status of the consent you originally gave has not changed.

Storage time/criteria for determining storage time:

Your pseudonym (UID) and your consent status are also stored in both the browser of your terminal device in the Borlabs Cookie and on our servers for a period of one year.

2.3. Cookies and similar technologies

Purposes and scope of the processing/legal bases:

Where necessary, this website uses cookies and similar technologies to store data in the browser of your terminal device and to read data that has already been stored. Cookies, your browser’s local storage, pixels and tags may be used for this purpose.

These are used for technical purposes in order to provide the content necessary for the website (essential); to store and manage any of the website visitor’s optional settings and security settings (functional and security); to track the visitor’s interactions through statistical analysis for optimising the design of the website (statistics); and to analyse and control the effectiveness of targeted advertising (marketing).

Cookies are small text files that can be stored on your terminal device and read.

There are different types of cookies, such as session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session for a certain period of time.

In addition to cookies, way may also use your browser’s local storage to store and read data there.

We may also incorporate pixels into our website. Pixels are small individualised image files that are loaded when a page loads and can be used to track user activity.

Finally, we may use tags (markers) on our website. Tags are small HTML or Java Script code fragments or markers which allow website analysis or user tracking services to distinguish or identify users and track specific user activities.

Detailed information on the cookies and similar technologies we use in the categories “essential”, “functional and security”, “statistics” and “marketing”, in particular on the name, purpose description, domain name, provider, expiry of validity of the cookie or technology and, where applicable, information on transfers to third countries, is available on our consent management platform via the following link: Edit cookie settings.

The legal basis for the use of technically necessary cookies and similar technologies in the “essential” category is section 25 (2) no. 2 TTDSG. Subsequent data processing is based on our legitimate interests pursuant to Article 6(1) sentence 1 (f) GDPR.

The legal basis for the use of optional cookies and similar technologies in the categories “functional and security”, “statistics” and “marketing” is section 25 (1) TTDSG. Subsequent data processing is based on your consent given pursuant to Article 6(1) sentence 1 (a) GDPR.

Your consent is given voluntarily and may be withdrawn at any time via the following link: Edit cookie settings provided at the bottom of each page. Your consent is generally valid for one year. It is stored in a cookie on your terminal device and will be requested again after that cookie is deleted, after your consent is withdrawn or after expiry of one year.

Please note that without certain cookies and similar technologies, our website may not display properly and some functions may no longer be available.

Data processing in third countries:

Cookies and similar technologies may also be used to process your data in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries which do not offer an appropriate level of data protection. If your data is transferred to third countries, in particular to the USA, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having the right to appeal.

Therefore, when transferring data to third countries, we take measures to ensure an appropriate level of data protection in accordance with Article 44 et seq. GDPR. In particular, standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c), (5) sentence 2 GDPR are agreed and other technical measures put in place. In future, the clauses will be replaced by standard data protection clauses adopted by the European Commission pursuant to Article 46(2)(c), GDPR.

Detailed information on transfers to third countries associated with the use of cookies and similar technologies is available on our consent management platform via the following link: Edit cookie settings.

Recipients/categories of recipients:

Detailed information on the recipients/providers of the cookies and similar technologies is available on our consent management platform via the following link: Edit cookie settings.

Storage time/criteria for determining storage time:

By integrating cookies and similar technologies on our website, data is stored on your terminal device, transferred to the specified recipients if necessary, and stored there for as long as this is required to achieve the specified purposes.

Detailed information on the storage time for cookies and similar technologies and the data processed using them is available on our consent management platform via the following link: Edit cookie settings.

2.4. Google reCAPTCHA

Purposes and scope of the processing/legal bases:

Our website uses Google reCAPTCHA a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), Google reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google reCAPTCHA automatically captures all user input and mouse movements that you make on our website (regardless of whether you visit pages containing web forms or not). The data collected this way is used to determine whether the information is being entered by a human or an automated program.

Since Google reCAPTCHA is provided by Google and is reloaded from its servers when a page is accessed, the usage data required for technical purposes to access the page is also transferred. In this respect, Google also receives your IP address which is necessary for technical purposes to access the content.

When integrating Google reCAPTCHA, cookies and other technologies from Google may also be used to store and read information on your terminal device. For information on the cookies and other similar technologies used, see “Cookies and other similar technologies” above.

Insofar as we use optional cookies and similar technologies in the context of integrating the service or insofar as data is stored on or read from your terminal device by the service, the legal basis for this is section 25 (1) TTDSG. Subsequent data processing is based on your consent given pursuant to Article 6(1) sentence 1 (a) GDPR insofar as you have given your consent via our “Borlabs Cookie” consent management platform.

Your consent is voluntary and may be withdrawn at any time with effect for the future pursuant to Article 7(3) sentence 1 GDPR. To exercise your right of withdrawal, please use our consent management platform via the following link: Edit cookie settings.

Data processing in third countries:

Google reCAPTCHA may also be used to process your data in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries which do not offer an appropriate level of data protection, such as the USA in particular.

If your data is transferred to third countries, there is a risk that authorities there may access your data for security and surveillance purposes without you being informed or having the right to appeal.

To ensure an appropriate level of data protection when transferring your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c), (5) sentence 2 GDPR have been agreed and other technical measures put in place. Google LLC is also certified under the Data Privacy Framework.

Recipients/categories of recipients:

In the context of using Google reCAPTCHA, we transfer your data to the following recipients:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We generally have no control over any further data processing by the third-party provider.

For further information on how Google handles your personal data, see https://policies.google.com/privacy?hl=de.

Storage time/criteria for determining storage time:

By integrating Google reCAPTCHA on our website, data is transferred to the aforementioned recipients and stored there for as long as this is required to achieve the aforementioned purpose. We do not store the collected data separately.

2.5. Vimeo video platform

Purposes and scope of the processing/legal bases:

We embed videos from the Vimeo video platform provided by Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA.

Embedded videos are reloaded by Vimeo’s servers when the page is accessed and the usage data necessary for technical purposes to access the page is also transferred in the process. In this respect, Vimeo.com, Inc. also receives your IP address which is necessary for technical purposes to access the content.

When videos are embedded using the Vimeo video platform, cookies and similar technologies may be used to store or read data on your terminal device. For information on the cookies and other similar technologies used, see “Cookies and other similar technologies” above.

Data processing in third countries:

Vimeo may also be used to process your data in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries which do not offer an appropriate level of data protection, such as the USA in particular.

To ensure an appropriate level of data protection when transferring your data to Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA, standard contractual clauses adopted by the European Commission pursuant to Article 46(2)(c), (5) sentence 2 GDPR have been agreed and other technical measures put in place.

Recipients/categories of recipients:

In the context of using the YouTube video platform, we transfer your data to the following recipients:

com, Inc., 555 West 18th Street, New York, NY 10011, USA.

We generally have no control over any further data processing by the third-party provider.

For further information on how Vimeo Inc. handles your personal data, see https://vimeo.com/privacy.

Storage time/criteria for determining storage time:

By integrating the Vimeo video platform on our website, data is transferred to the aforementioned recipients and stored there for as long as this is required to achieve the aforementioned purpose. We do not store the collected data separately.

3. Newsletter and newsletter tracking

Our website also offers you the opportunity to subscribe to our newsletter and other electronic communications.

Whenever you submit your e-mail address to us on a form contained on our website, we send you an e-mail with a link asking you to confirm your e-mail address and thus register to receive promotional e-mails.

This allows us to ensure that only authorised persons use your e-mail address to register to receive our promotional e-mails. The legal basis for sending such e-mails is Article 6(1) sentence 1 (f) GDPR.

In the context of registration, we process your e-mail address, as required information, to inform you by e-mail about our products, projects, events and promotions and to send you promotional news.

Once your e-mail address has been confirmed by activating the link, the promotional e-mails are sent the basis of your consent given pursuant to Article 6(1) sentence 1 (a) GDPR.

By giving us your consent, you also give us permission to process data about whether you received and opened our promotional e-mails, the extent to which you interacted with the content, in particular which links you clicked on and to what extent you read or skimmed our e-mails.

For this purpose, we read data from your terminal device or store data there or use optional cookies and similar technologies in accordance with section 25 (1) TTDSG. Subsequent data processing is based on your consent given pursuant to Article 6(1) sentence 1 (a) GDPR.

Your consent is voluntary and may be withdrawn at any time with effect for the future pursuant to Article 7(3) GDPR. If you no longer wish to receive e-mails or electronic promotional communications in the future, you can unsubscribe at any time using the link provided in every newsletter e-mail. Otherwise, you can withdraw your consent by sending an e-mail to info@branicks.com.

Recipients/categories of recipients:

In the context of registering to receive our newsletter or other electronic promotional communications, and in sending them, we transfer your data to

EQS Group AG,Karlstraße 47, 80333 Munich, Germany,

which processes the data on our behalf strictly subject to our instructions and bound by contract and assists us with sending the newsletter and the data processing operations associated therewith.

Storage time/criteria for determining storage time:

We process your data for as long as this is necessary to achieve the aforementioned purposes or until you withdraw your consent.

Purposes and scope of the processing/legal bases:

Our website may provide restricted access areas where further information and documents can be made available to a certain group of users, such as our investors and their employees or other business partners.

In this context, we only process the data that is required to log in to this area (user name and password). As a rule, the user name will be your e-mail address.

The legal basis for the processing is Article 6(1) sentence 1 (b) GDPR or, in the case of employees of our investors or business partners, Article 6(1) sentence 1 (f) GDPR for the purposes of our legitimate interest in providing you with the information and documents in the restricted access area.

Storage time/criteria for determining storage time:

We process your data for as long as this is necessary to achieve the aforementioned purpose. Thereafter, we will delete your data unless processing, including in other systems where applicable, remains lawful on another legal basis or is obligatory for us (e.g., where statutory retention requirements exist).

Recipients/categories of recipients:

For the purpose of operating and providing the restricted access area, we transfer your data to processors which process data on our behalf strictly subject to our instructions and bound by contract.

Currently, these are processors which support us in operating and making our website available.

4. Ordering our annual report

Purposes and scope of the processing/legal bases:

We process your personal data in the context of processing your order for our annual report, be it to send it to you in electronic form (name, e-mail address) or in paper form to your stated address (name, street no. postal code, city, country).

To the extent that you voluntarily provide us with information about your company, your status as a retail or institutional investor, analyst or otherwise, we will use such information to contact you after you order our annual report for purposes of taking further steps to initiate a contract.

The legal basis is Article 6(1) sentence 1 (b) GDPR pursuant to which processing is necessary for the performance of a contract or taking further steps to initiate a contract insofar as you as a natural person are our counterparty.

Insofar as you are an employee of a company and order our annual report on your company’s behalf, we process your data on the basis of pursuing our legitimate interest in performing a contract or taking further steps to initiate a contract. Our legitimate interest overrides any potential opposing interest you may have in not having your business contact data processed. The legal basis for processing your data is Article 6(1) sentence 1 (f) GDPR.

Finally, we process your personal data for the purpose and in the pursuit of our legitimate interest in informing you in the future by post about products, services, events and promotions and contacting you for marketing purposes. Our legitimate interest herein overrides any potential opposing interest you may have in not having your contact data processed. The legal basis for processing your data is Article 6(1) sentence 1 (f) GDPR.

Storage time/criteria for determining storage time:

We generally store your data as long as this is necessary to achieve the aforementioned purposes and you have not objected to the data processing or exercised your right of withdrawal and the processing is required to achieve other purposes stated herein or to comply with statutory retention or documentation requirements.

Recipients/categories of recipients:

When you order our annual report, we transfer your data to

Werbemittelagentur Thomas Heinz, Paul-Ehrlich-Str. 22–26/F10, 63322 Rödermark, Germany,

which processes the data on our behalf strictly subject to our instructions and bound by contract and assists us with processing your order and the data processing operations associated therewith.

If you have elected to have the report sent by post, the service providers used by us for shipping purposes will also receive your data.

5. Enquiries and contact by post, telephone, fax and e-mail

Purposes and scope of the processing/legal bases:

If you contact us directly by post, telephone, fax or e-mail, we process personal data that you provide to us as well as data associated with your selected mode of communication (e.g., name, address, e-mail address or fax or telephone number) for purposes of responding to your enquiry.

The legal basis for the processing is Article 6(1) sentence 1 (f) GDPR or Article 6(1) sentence 1 (b) GDPR if processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract.

We and you have a mutual (legitimate) interest in the processing of such data so that we can respond to your enquiries, resolve any problems that may exist, provide the requested information, etc., and thus maintain and promote your satisfaction as a (potential) client.

You are free to decide what other optional information or any special category of personal data you wish to provide to us.

The legal basis for the processing is your consent given pursuant to Article 6(1) sentence 1 (a) GDPR.

Your consent is voluntary and may be withdrawn at any time with effect for the future. Please use the controller’s contact details specified for this purpose.

Storage time/criteria for determining storage time:

6. Data processing in the case of prospective clients, suppliers and business partners

6.1. General processing of business partners’ data

Controller:

Where applicable, instead of the controller cited in section 1 above, the respective company which you contact, in whose products and services you or your company are interested, or with which you or your company already have or plan to enter into a business relationship, will be the controller responsible for collecting and processing your data as a client, business partner, supplier or prospective client or contact person for a business partner, supplier or prospective client. Please contact that company at its stated address.

Purposes and scope of the processing/legal bases:

In the context of the business relationship with you as our clients, business partners, suppliers and prospective clients, we process personal data such as name, address, e-mail address, telephone/fax number, tax ID, client number, bank account details and, where applicable, place of birth, date of birth, nationality if you have provided us with this data voluntarily, and creditworthiness data. The processing is carried out for the purposes of verifying identity, initiating, performing, managing and settling contracts, assessing creditworthiness and collateral and, in particular, preparing billing statements and credit notes or refunds, managing and enforcing claims, legal compliance, data security and in the interest of providing full customer service.

The legal basis for the processing is Article 6(1) sentence 1 (b) GDPR or, in the case of employees of prospective clients, suppliers and business partners, Article 6(1) sentence 1 (f) GDPR and Article 6(1) sentence 1 (c) GDPR.

Recipients/categories of recipients:

Your data will generally only be disclosed to third parties if you have expressly consented to the transfer in advance or we are obligated to do so by law.

The legal basis for the processing is Article 6(1) sentence 1 (a) GDPR where consent has been given or Article 6(1) sentence 1 (c) GDPR where processing is necessary for compliance with a legal obligation.

Within Branicks Group companies, your data will be disclosed to other entities for purposes including performing or initiating the business relationship.

The legal basis for the processing is Article 6(1) sentence 1 (f) GDPR.

The legitimate interest is to enable the other entities to perform or initiate contractual relations with you or your company.

In exceptional cases, data will be processed by processors on our behalf. These are carefully selected in each case and are also audited by us and bound by contract.

Storage time/criteria for determining storage time:

We store the data required in any given case for the duration of the business relationship with you and until expiry of the applicable limitation periods and any claims and statutory retention obligations arising therefrom.

6.2. Processing of contact persons’ data

Purposes and scope of the processing/legal bases:

We process the contact data of contact persons at clients, prospective clients, suppliers and other business partners to enable communication by e-mail, telephone, fax and post. The legal basis for the processing is Article 6(1) sentence 1 (b) and (f) GDPR.

In this respect, we have a legitimate interest in maintaining existing or initiating new business relationships with clients, prospective clients, suppliers and other business partners and in maintaining personal contact with contact persons in the process.

Recipients/categories of recipients:

Your data will only be disclosed to third parties if you have expressly consented to the transfer in advance or we are obligated to do so by law.

Within Branicks Group companies, your data will be disclosed to other entities for purposes including performing or initiating the business relationship.

The legal basis for the processing is Article 6(1) sentence 1 (f) GDPR.

The legitimate interest is to enable the other entities to perform or initiate contractual relations with you or your company.

In exceptional cases, data will be processed by processors on our behalf. These are carefully selected in each case and are also audited by us and bound by contract.

Storage time/criteria for determining storage time:

Personal data will be stored for the purpose of performing business relationships for as long as a legitimate interest therein exists.

6.3. Data processing for marketing purposes

Purposes and scope of the processing/legal bases:

Branicks Group companies use personal data for marketing purposes, in particular for advertising by e-mail, telephone and post. The purpose of data processing in connection with marketing activities is to inform data subjects about the products and services offered by the Branicks Group.

The legal basis for sending advertising material by post is Article 6(1) sentence 1 (f) GDPR. In this respect, we have a legitimate interest in sending (prospective) clients information about products and services.

The legal basis for e-mail and telephone marketing activities is generally Article 6(1) sentence 1 (a) GDPR and a separate declaration of consent given by you. Specific provisions may additionally apply in the case of marketing activities aimed at existing clients.

You may object to the receipt of advertising material at any time with effect for the future or withdraw any consent given by sending a message to that effect to info@branicks.

Recipients/categories of recipients:

No data is disclosed to third parties outside the Branicks Group.

Whenever external processors are used to send advertising material, they are bound by contract and audited to ensure that appropriate organisational and technical security measures are in place.

Within Branicks Group companies, your data may be disclosed to other entities for marketing purposes.

The legal basis for the processing is Article 6(1) sentence 1 (f) GDPR.

The legitimate interest is to enable the other entities to perform or initiate contractual relations with you or your company.

Storage time/criteria for determining storage time:

If you object to the receipt of advertising material, your data will be blocked immediately and then deleted, unless it is also stored for other purposes.

7. Data processing in the employment application process

Controller:

Where applicable, instead of the controller cited in section 1 above, the respective company to which you have applied for employment will be the controller responsible for collecting and processing your data in the context of the application process. Please contact that company at its stated address.

Purposes and scope of the processing/legal bases:

In the context of your application, we process data from you that we require as part of the application process so that we can make a decision on potentially hiring you (establishing an employment relationship).

This may include contact details, all data associated with the application (CV, references, qualifications, responses to questions, etc.) and, where applicable, data on bank account details (for reimbursing travel expenses).

The legal basis for the processing is section 26 (1) of the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”) in conjunction with Article 6(1) sentence 1 (b) GDPR and Article 88 GDPR.

Storage time/criteria for determining storage time:

Insofar as we are not subject to any statutory retention requirements, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage no longer exists. As a rule, this will be within six months after the application process is concluded, assuming that no employment relationship is established.

In individual cases, specific data may be stored for a longer period (e.g., travel expenses statement). The storage time then depends on the statutory retention requirements, for example under the German Fiscal Code (Abgabenordnung, “AO”) (6 years) or the German Commercial Code (Handelsgesetzbuch, “HGB”) (10 years).

If you were not hired but your application is still of interest to us, we will ask you separately for your permission to keep your application on file for future job openings.

Recipients/categories of recipients:

Your data will of course be treated confidentially and will not be disclosed to third parties.

When you use the career portal, we transfer your data solely to processors which process data on our behalf strictly subject to our instructions and bound by contract:

HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg, Germany.

8. Data processing on our social media sites

Joint controllers:

Where applicable, instead of the controller cited in section 1 above, the respective company specified in the legal information section on our respective social media site is the controller responsible for collecting and processing your data on our social media sites. Please contact that company at its stated address.

Social media sites may, for example, be operated on the following platforms:

The information on data processing on our social media sites also applies to other sites on other platforms, insofar as they are linked to this Privacy Policy.

In addition to the company specified in the legal information section on our respective social media site, the operator of the respective social media platform also acts as controller responsible for processing your personal data (joint controllers).

Insofar as we are able to influence this and parameterise the data processing, we work within the scope of our available options to ensure that the operator of the social media platform handles the data in a manner consistent with the requirements of data protection law. In this context, please also refer to the privacy policies of the respective social media platform.

Purposes and scope of the processing by us/legal bases:

Any data that you enter or post on our social media sites, such as user names, comments, videos, images, likes, public messages, etc., is published by the social media platform and is at no time processed by us for other purposes. We merely reserve the right to delete content should this be necessary. In some cases, we share your content on our site if this is a feature of the social media platform and we communicate with you via the social media platform.

If you send us an enquiry via the social media platform, depending on the content, we may also refer you to other more secure communication channels that guarantee confidentiality. For example, you can always send your enquires to us using the contact addresses specified in the legal information section on our respective social media site. In this respect, you are responsible for choosing the appropriate communication channel.

The legal basis for processing your data is Article 6(1) sentence 1 (f) GDPR. We have a legitimate interest in processing the data for our corporate public relations purposes and being able to communicate with you.

Some social media platforms generate statistics based on usage data and contain information about your interaction with our social media site. We cannot influence or prevent such statistics from being generated and made available. However, we do not utilise optional statistics from the social media platform.

We process this information on the basis of Article 6(1) sentence 1 (f) GDPR and our legitimate interest in validating the use of our social media sites and better tailoring our content to the respective target audience.

We also occasionally use those social media platforms to display targeted ads.

For this purpose, we use target group definitions made available to us by the social media provider. We only use anonymous target group definitions, defining attributes based for example on general demographics, behaviour, interests and connections. The social media platform operator uses these to display ads targeted to its users.

The legal basis for this is the consent given to the social media platform operator by its users. Should you wish to withdraw your consent, please avail yourself of the options furnished for this purpose by the provider of the social media platform, as the social media platform operator is the controller responsible for the processing in this case.

Occasionally, we or the provider of the social media platform also use publicly available data for the purposes of defining target groups. The legal basis for the processing in that case is Article 6(1) sentence 1 (f) GDPR. In this respect, we have a legitimate interest in defining a target group as accurately as possible. Under no circumstances do we ever use sensitive categories of personal data (as referred to in Articles 9 and 10 GDPR) for the purposes of defining target groups.

We do not use any target group definitions based on location data. We do not disclose any personal data to the social media platform operator in the context of defining target groups.

Occasionally, we also use information about visits to or interaction with other sites (remarketing) to define target groups. We also use cookies for this purpose, among other things. However, in such cases we use a consent banner on those other sites to first obtain the user’s consent and then provide information about the data processing. You may withdraw that consent at any time by re-selecting the consent banner (consent management platform) for the relevant website.

If you wish to object to a particular data processing operation over which we have control, please use the contact details provided in the legal information section on our respective social media site.

Storage time/criteria for determining storage time:

We delete your personal data when the data is no longer required for the aforementioned purposes of processing and no statutory retention requirements exist that would prevent us from so doing.

Data processing by the social media platform operator:

The social media platform operator employs web tracking technologies. Web tracking may take place regardless of whether you are logged in to or registered with the social media platform.

Therefore, please be advised that the provider of the social media platform may use your profile and browsing data to analyse your habits, personal relationships, preferences, etc. We have no influence on the processing of your data by the social media platform provider in this respect. Therefore, use of the social media platform is at your own risk.

For more detailed information on data processing by the social media platform provider, configuration options to protect your privacy, further opt-out options and any data processing agreement entered into pursuant to Article 26 GDPR, see the privacy policies of the specified providers:

XING: https://privacy.xing.com/de/datenschutzerklaerung
Kununu: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn: https://www.linkedin.com/static?key=privacy_policy and https://legal.linkedin.com/pages-joint-controller-addendum
Instagram: https://privacycenter.instagram.com/policy/
Facebook: https://www.facebook.com/privacy/policy/ and https://www.facebook.com/legal/controller_addendum

Insofar as the aforementioned privacy policies are also linked on other social media sites on other platforms, see the privacy policy of the respective provider for more detailed information on data processing by the social media platform provider, configuration options to protect your privacy, further opt-out options and any data processing agreement entered into pursuant to Article 26 GDPR.

9. Voluntary provision of your data

You are under no contractual or legal obligation to provide your personal data.

However, in certain cases this is necessary to allow us to respond to your enquiry or so that you can use or access the services we offer.

If you do not provide your personal data, we may not be able to respond to your enquiry, you may not be able to use the services offered, or we may not be able to process your application.

Excepted herefrom are, of course, those data processing operations that are based solely on your consent, which is always freely given. You may withdraw any consent you have given at any time with effect for the future.

10. Your rights

You have certain rights under the GDPR with respect to the processing of your personal data:

10.1. Right of access (Article 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to obtain information about such personal data and to the specific information set out Article 15 GDPR.

10.2. Right to rectification (Article 16 GDPR)

You have the right to have any inaccurate personal data be corrected without undue delay and to have any incomplete personal data completed.

10.3. Right to erasure (Article 17 GDPR)

You also have the right to have your personal data erased without undue delay where one of the grounds set out in Article 17 GDPR applies, e.g., where the personal data is no longer required for the purposes for which it was collected or processed.

10.4. Right to restriction of processing (Article 18 GDPR)

You have the right to have processing restricted where one of prerequisites set out in Article 18 GDPR applies, e.g., where you have objected to the processing pursuant to Article 21 GDPR or pending verification of whether our legitimate interests override your interests as the data subject.

10.5. Right to data portability (Article 20 GDPR)

In certain cases specified in detail in Article 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have that data transferred to a third party.

10.6. Right to object (Article 21 GDPR)

Where data is collected on the basis of Article 6(1) sentence 1 (f) GDPR (processing necessary for legitimate interests), you have the right to object to the data processing at any time on grounds relating to your particular situation. In such case, we will no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

10.7. Right of withdrawal (Article 7(3) sentence 1 GDPR)

If your personal data is processed on the basis of consent given pursuant to Article 6(1) sentence 1 (a) GDPR, you have the right to withdraw your consent pursuant to Article 7(3) sentence 1 GDPR. You may withdraw your consent at any time with effect for the future.

10.8. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes data protection law. The right to lodge a complaint with a supervisory authority may be exercised in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

The competent supervisory authority for us is Commissioner for Data Protection and Freedom of Information of Hesse, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

11. Contact details of the data protection officer

Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection and may be contacted at:

datenschutz süd GmbH
Subject: “Branicks Group”
Wörthstraße 15
97082 Würzburg, Germany

E-mail: office@datenschutz-sued.de
Telephone: +49 (0)931 304 976 0
Web: www.dsn-group.de

[1] The Branicks Group comprises in particular Branicks Group AG, Branicks Onsite GmbH, Deutsche Immobilien Chancen AG & Co. KGaA, Deutsche Immobilien Chancen Beteiligungs AG, Branicks Institutional GmbH, GEG Real Estate Management GmbH and DIC Fund Balance GmbH.

12. Amendment of this Privacy Policy

This Privacy Policy was last updated on 02.10.2023 .