Privacy Policy information
– Information pursuant to Article 12 et seq. of the General Data Protection Regulation (GDPR) –
In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to the data protection regulations, in particular the European Data Protection Regulation (GDPR).
Personal data in the sense of the GDPR are all data that can be personally related to you, e.g. name, address, e-mail addresses, date of birth etc.
We use the data protection terms used in our data protection information according to the GDPR. This includes terms such as personal data, processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, undertaking, supervisory authority and international organisation. For these terms, you can find corresponding definitions in Art. 4 GDPR.
Notice regarding the transmission of third party data by yourself:
If you transfer personal data about your spouse, life partner, relatives or other third parties (such as guarantors), please inform them about the processing of their personal data by us and refer to this data protection information. If necessary, the consent of these persons to the data transfer is required.
1. Who is responsible for data processing and who can I contact?
Responsible person:
Quartier FÜRstenried West GmbH & Co. geschl.
InvKG Theodor-Heuss-Allee 70 60486 Frankfurt am Main
Please address your data protection inquiries to us as follows: datenschutz@fuerstenriedwest.de
2. For what purposes do we process your data and on what legal basis?
We process personal data that we receive from you as part of your use of our website and, if applicable, our business relationship/management of the rental contract.
In the case of solely informative use of the website, i.e if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website solely for information purposes, we collect the following access data, which are technically necessary for us to display our website to you and to ensure its stability and security. This access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, browser type as well as language and version of the browser software, notification of successful retrieval.
Furthermore, we receive your personal data if you contact us, for example via contact form or e-mail. Personal data here are e.g name, address, e-mail, telephone number and, if applicable, the data you send us as a message (hereinafter referred to as “contact data”). We process personal data for the following purposes and on the following legal basis:
Purposes |
Legal basis |
We process your personal data regarding the decision on the establishment of the tenancy as well as after the establishment of the tenancy for its implementation, for the fulfilment of the obligations resulting from a law and for the settlement of the tenancy after the end of the contract. For the establishment of the tenancy we process the following data in particular:
After conclusion of a rental agreement, we and a property management company commissioned by us as a service provider will process your data for the purpose of implementing the rental agreement. This processing can also take place via an online portal to which you will receive access data. The content of the contract processing is in particular the following data:
Your personal data may be processed to organise a competition/lottery, in particular to determine and notify the winners. We may subsequently collect and process additional data, e.g. your postal address, for the purpose of sending and delivering prizes. We may subsequently collect and process additional data, e.g. your postal address, for the purpose of sending and delivering prizes. After termination of the rental agreement, we process your data for the final settlement of the rental relationship and the rental deposit. |
For the fulfillment of pre-contractual and contractual obligations, Art. 6 para. 1b GDPR |
Where necessary, we process your data beyond the actual performance of the contract to protect legitimate interests of us or third parties. This includes in particular the following data processing:
|
As part of the balancing of interests to safeguard legitimate interests, Art. 6 para. 1f GDPR |
In addition, we are subject to legal obligations. These include in particular the fulfilment of storage, control and reporting obligations under tax law. |
Due to legal requirements, Art. 6 para. 1c GDPR, or in the public interest, Art. 6 para. 1 e GDPR |
If you have given us your consent to process personal data for certain purposes (e.g. storing your data for future rental offers, passing on data to third parties, sending newsletters), this processing is lawful on the basis of your consent. Consent given can be revoked at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. |
Based on your consent, Art. 6 para. 1a GDPR |
3. Who can access my data?
Within our company, only those departments will have access to your data that need it to fulfil our contractual and legal obligations.
Processors used by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of trades for construction and repair measures, meter reading companies (such as ISTA and others), laboratories for testing the water for legionella, IT services for the maintenance of our hardware and software, logistics or letter dispatch and debt collection. If we use processors to provide our services, we take appropriate legal precautions and technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal requirements.
Data is only transferred to third parties within the framework of legal requirements. We only pass on user data to third parties if this is necessary, e.g. on the basis of Art. 6 para. 1 b) GDPR for contractual purposes or based on legitimate interests pursuant to Art. 6 para. 1 f) GDPR in an economic and effective operation of our business or if you have consented to the data transfer. Under these conditions, recipients of personal data can be in particular:
- Ackermann Hausverwaltung GmbH, Garmischer Str. 7, 80339 München
- Hines Immobilien GmbH, Joachimsthaler Str.1, 10623 Berlin
- Universal-Investment-GmbH, Theodor-Heuss-Allee 70, 60486 Frankfurt am Main (Kapitalverwaltungsgesellschaft (KVG)
- Bayerische Versorgungskammer, Denninger Str. 37, 81925 München
- Bayerischer Versorgungsverband – Zusatzversorgungskasse der bayerischen Gemeinden, Denninger Straße 37, 81925 München
- Bayerische Ärzteversorgung, rechtsfähige Anstalt des öffentlichen Rechts mit Selbstverwaltung, Denninger Straße 37, 81925 München
- Versorgungsanstalt der deutschen Bühnen, Anstalt des öffentlichen Rechts, Arabellastraße 31, 81925 München
- Versorgungsanstalt der deutschen Kulturorchester, Anstalt des öffentlichen Rechts, Arabellastraße 31, 81925 München
- Bayerische Apothekerversorgung, Anstalt des öffentlichen Rechts, Arabellastraße 31, 81925 München
- überall GmbH, Geigelsteinstraße 5c, 83209 Prien am Chiemsee
- Public authorities (including financial, tax, administrative, criminal or judicial authorities)
- Tax consultants and auditors (e.g. to carry out and inspect our accounting)
- Lawyers and courts for the assertion of legal claims and defence in legal disputes
- Banks, e.g. for the execution of direct debiting or the provision of rental deposits
- Third parties for the purpose of providing the rental deposit, in particular: rental deposit insurers, guarantors, banks
- Jobcenter and registration office on their request (e.g. information about the persons living in the flat)
- Wohnungsämter and state investment banks, e.g. for the fulfilment of legal requirements or for the initial and continued submission of applications for the granting of income-oriented subsidies in the case of subsidised dwellings within the framework of the subsidisation under the housing subsidy provisions
- utility companies, e.g. as the basic supplier of your apartment after you moved in
- Other tenants (e.g. to justify rent increases by way of comparative rent increase)
- Prospective tenants (e.g. to view the apartment before you move out of our apartment)
- Buyers and prospective buyers of real estate (e.g. to arrange a viewing appointment)
- Credit agencies (e.g. SCHUFA, CRIF, CREDITREFORM)
- Suppliers, service providers and craftsmen, insofar as they are not processors (e.g. to carry out a repair in your home)
- Brokerage companies
4. How long will my data be stored?
For security reasons (e.g. to clarify acts of abuse or fraud), log file information is stored for a maximum of seven days and then deleted (see point 2 above). Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the final clarification of the respective incident.
As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a rental agreement.
In the case of participation in a competition: The processed data will be deleted after the end or expiry of the competition and dispatch of the prizes. If a participant has consented to the sending of information by e-mail / newsletter when registering, the data covered by this consent will continue to be processed as long as we do not receive a cancellation.
If we do not offer you a rental contract after checking the documents or if you are not interested in concluding a rental contract with us and you have not given us your consent to further storage, we will delete your data stored by us after 3 months calculated from the time of our or your rejection of the rental contract. You will receive back the documents you have handed over to us. The legal basis for storing the documents for 3 months is our legitimate interest (Art. 6 Para. 1f GDPR) in defending against the assertion of claims by prospective tenants, in particular in accordance with the General Equal Treatment Act (AGG).
In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are two to ten years. For example, we must retain the rental agreement containing your personal data for at least 10 years – calculated from the end of the rental agreement.
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are usually 3 years, but in certain cases can be up to thirty years, whereby the regular limitation period is three years.
5. Is data transferred to a third country or to an international organization?
A data transfer to third countries (countries outside the European Union or the European Economic Union) does not take place. An exception applies in the case of your consent for the use of external online services. Please see for more details below: 11. Processing of personal data in the context of the use of external online services.
6 What data protection rights do I have?
Each data subject shall
- the right to access their data according to Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time),
- the right to rectification in accordance with Art. 16 GDPR (i.e. in the event that your personal data is inaccurate or incomplete, you may request that it be rectified),
- the right to erasure according to Art. 17 GDPR and the right to restriction of processing according to Art. 18 GDPR (i.e. you may have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and legal retention obligations do not require the continued storage),
- the right to data portability from Art. 20 GDPR (i.e. you may have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance).
Furthermore, you can withdraw your consent, in principle with effect for the future.
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). You can find the supervisory authority responsible for you at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Information about your right to object in accordance with Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) of the GDPR which we use for questionnaire evaluation or advertising purposes. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. The objection can be made form-free and no transmission costs other than those according to the base rates will be incurred. The objection should be sent to the contact details provided above.
7. To what extent is there automated decision-making including profiling in individual cases?
For the establishment and implementation of the business relationship, we do not use fully automated automatic decision-making pursuant to Article 22 GDPR. We also do not process your data automatically with the aim of evaluating certain personal aspects (profiling).
8. am I obliged to provide data?
On our website, you must provide the personal data necessary for using our Website for technical or IT security reasons. You cannot use our website unless you provide the above-mentioned data.
When contacting us via form or by e-mail, you only need to provide the personal data required to process your request. Otherwise we will be unable to process your request.
Within the scope of our business relationship, you only have to provide the personal data that is required for the establishment, execution and termination of a rental agreement or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude a rental agreement or will no longer be able to execute an existing agreement and may have to terminate it. If a statement can be made voluntarily, we have marked this statement accordingly in the respective survey form.
When contacting us by form or email or participating in a competition, you only need to provide the personal data that is required to process your enquiry or participate in the competition. Otherwise we will not be able to process your enquiry or you cannot take part in the competition.
9. Where do we obtain your data from and what categories of data are involved?
We process personal data that we receive from you in the course of our business relationship.
We also receive your information from the following sources:
- Real estate agencies
- Online portals for the mediation of prospective tenants
These are personal data for the purpose of verifying the establishment of the tenancy relationship, see under 2
10. Cookies
We use cookies on our website. Cookies are small text files, usually consisting of letters and numbers, which are stored on the user’s computer when visiting certain Internet pages.
Some of these cookies are essential for our website to function, while other cookies help us improve our website by giving us insight into how you use the website.
By default, we only use necessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly. Necessary cookies can only be prevented by appropriate settings in your browser.
We only use cookies that are not necessary for the website to function (“non-essential cookies”) if you have given your consent via our cookie banner. You can return to our privacy information at any time and withdraw your consent or make changes.
In order for our website to function properly, we use cookies.
In order to obtain your valid consent to the use and storage of cookies in the browser you use to access our website and to properly document this, we use a consent management platform: CookieFirst.
This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands.
Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with the CookieFirst server to enable us to obtain valid consent from you for the use of certain cookies.
CookieFirst then stores a cookie in your browser in order to be able to activate only the cookies to which you have consented and to properly document this.
The processed data will be stored until the specified storage period expires or you request the deletion of the data.
Notwithstanding this, certain statutory retention periods may apply.
CookieFirst is used to obtain the legally required consent for the use of cookies.
The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (GDPR). Data processing agreement We have concluded a data processing agreement with CookieFirst.
This is a contract required by data protection law, which ensures that the data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR. Server log files Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us.
The following data is collected:
- Your consent status or the withdrawal of your consent
- Your anonymized IP address
- Information about your browser
- Information about your device
- The date and time of your visit to our website
- The URL of the website on which you have saved or updated your consent settings
- The approximate location of the user who has saved their consent preferences
- A universally unique identifier (UUID) of the website visitor who clicked on the banner cookie
11. Processing of personal data in the context of the use of external online services
We use the web analytics service Google Analytics provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google collects information on our behalf about the use of our website in order to evaluate it, compile reports about the activities within this website and provide us with other services related to the use of this website. For these purposes, Google sets cookies on our website that are stored on your device.
Google Analytics processes the following data: IP address and geographical location, browser and device information and the referrer URL. In addition, information on the usage behaviour of our visitors on the website is collected. Google creates pseudonymous usage profiles. The collected data is stored for 38 months.
We use Google Analytics with IP anonymisation activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser will not be merged with other data from Google.
The data may be transmitted to a server in the USA. Google LLC is a certified recipient of the data under the EU-U.S. Data Privacy Framework.
The data collection and data storage is carried out in accordance with § 25 para. 1 TTDSG. The following data processing is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of your express consent. By giving your consent, you agree to the processing of your data in the USA despite potential access by US authorities, Art. 49 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future in the consent settings.
For more information on Google’s privacy policy, please visit