Privacy Policy

Real Exchange AG welcomes you to our internet site. We are delighted about your interest in our company and would like to make your visit to our websites as pleasant as possible. For us, it goes without saying that we will handle your data responsibly and in full compliance in every respect with the legal requirements in Germany. In the following statement, we will explain how we process your personal data and provide you with additional information relevant in this context.

1. Scope of application

This privacy information applies to the following internet site: www.real-exchange.de

2. Who is responsible for the processing of your personal data?

Die Real Exchange AG, Kurze Mühren 20 (company address)/ Raboisen 6 (visitor address), 20095 Hamburg (hereinafter referred to as “we”) is the controller in the sense of the EU General Data Protection Regulation (“GDPR”).

3. Data protection officer

Whenever you have any questions concerning the processing of your personal data and the exercise of your rights pursuant to the GDPR, you may contact our data protection team at datenschutz@hih.de or our data protection officer, Mr Wolfgang Schwarz, for advice (phone: +49 6195 – 9779450, info@ga-schwarz.de).

4. For what purposes and on what legal grounds do we process personal data?

a. Surfing on our website

We collect data about every server access related to our sites (so-called server log files). These data are used for the administration and optimisation of the internet sites and for statistical purposes.

Our website also uses cookies. Cookies are small text files that your web browser stores on your device. Cookies help us to make our sites more user friendly, more effective and more secure.

Some cookies are known as “session cookies”. Cookies of this type are deleted automatically at the end of your browser session. Other types of cookies, however, remain on your device until you delete them yourself. These types of cookies help us to recognise you when you pay a return visit to our website.

You can change the settings on the internet browser you use to prevent the placement of cookies. Some browsers permit the placement of cookies as their default settings. If you do not wish to allow this, you can change the settings of your browser. Please see the instructions from the manufacturer of your browser to see how this is done. Disabling cookies can result in limitations on the functions available on our website.

The placement of cookies that are required for the performance of electronic communications processes or for the provision of certain functions you wish to have is based on point (f) of Art. 6 (1) GDPR. As the operators of this website, we have a legitimate interest in the placement of cookies to ensure technically error-free and frictionless provision of our services.

We also use Google Analytics for evaluation of the ways our visitors use our sites. Google processes the information collected here on our behalf for the evaluation of your use of our website and compiles reports about activities within this website. The processed data may be used to create pseudonym use profiles of the users.

The analysis of cookies is done in pursuit of our interest in an attractive presentation of our online services. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR.

You will find details about Google Analytics’ handling of user data and how you can object to the collection of your data in point (c) of Section 6 of this privacy statement.

b. Contacting us and communications

Some of the sections of the sites offer you the opportunity to enter personal data in entry fields for the purpose of establishing correspondence with us. These data are processed solely for the purpose you intended in providing the data to us, e.g. processing your queries and, at your request, contacting you.

In this case, processing of the personal data is done with your consent and is consequently lawful pursuant to point (a) of Art. 6 (1) GDPR.

5. What categories of personal data do we process?

a. Surfing on our website

The following data are collected for the administration and optimisation of our internet sites:

  • Name of the accessed website
  • File
  • Date and time of the access
  • Quantity of transferred data
  • Report of successful access
  • Host name of the accessing computer
  • Type and version of browser
  • User’s operating system
  • Referrer URL (previously visited site)
  • IP address and the accessing provider
b. Contacting us and communications

We process data that are related to your contact request. These are general data about you personally (such as name, address and contact information) and any additional information that you send to us as part of your contact request.

6. What categories of recipients are there?

If you send to us a contract request, your personal data may be transferred to the companies affiliated with us shown in the list below insofar as this is permissible within the scope of the purposes and legal grounds described in Section 4:

  • easol GmbH
  • HIH Real Estate GmbH
  • HIH Institutional Advisory GmbH
  • HIH Property Management GmbH
  • HIH Business Development GmbH
  • HIH Projektentwicklung GmbH
  • IntReal International Real Estate Kapitalverwaltungsgesellschaft mbH
  • IntReal Solutions GmbH
  • IntReal Legal Advisory GmbH
  • Real Exchange AG
  • Warburg-HIH Invest Real Estate GmbH

In addition, contents from third-party providers such as videos on YouTube and map material from Google Maps have been integrated into our websites. These applications are hosted on the partners’ servers and are operated by these partners. Please note that the use of such applications is governed by the privacy policies published on these sites of the partners operating the applications and that these partners are the controllers of the processing in the sense of Art. 4 (7) GDPR.

a. YouTube

Our website uses plugins from YouTube for the integration and presentation of video contents. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a site with an integrated YouTube plugin, a connection to the YouTube servers is established. This means that YouTube obtains information regarding which of our sites you have accessed. YouTube can attribute your surfing activities directly to your personal profile if you are logged in to your YouTube account. You can prevent this by logging out of your account before accessing the site.

The use of YouTube is done in pursuit of our interest in an attractive presentation of our online services. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR. You will find more information about the handling of user information in YouTube’s privacy statement at: https://policies.google.com/privacy?hl=de&gl=de.

b. Google Maps

Our website uses plugins from Google Maps for the integration and presentation of map contents. The provider of the portal is Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. When you visit a site with an integrated Google Maps plugin, a connection to the Google servers is established. This means that Google obtains information regarding which of our sites you have accessed. Google can attribute your surfing activities directly to your personal profile if you are logged in to your Google account. You can prevent this by logging out of your account before accessing the site.

The use of Google Maps is done in pursuit of our interest in an attractive presentation of our online services. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR. You will find more information about the handling of user data in Google’s privacy statement at: https://policies.google.com/privacy?hl=de&gl=de.

c. Google Analytics

We utilise Google Analytics, a web analysis service, for the analysis and optimisation of our websites. The provider of the analysis service is Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The information collected by the Google cookies about the use of our websites is transferred to a Google server in the USA and stored there.

Since the IP anonymisation has been enabled, Google truncates your IP address within the member states of the European Union (or in other countries of the European Economic Area), which removes information that can be used to identify you. However, it is possible in exceptional cases that the full IP address will be transferred to a Google server in the USA and not be truncated until it is on that server. The IP address your browser provides is not associated with other Google data, however.

You can prevent the storage of cookies on your device by making the appropriate settings in your browser software. If you want to prevent the transfer of the data generated by the cookies to Google and their processing by Google, you can download and install a browser plugin that makes this possible: http://tools.google.com/dlpage/gaoptout?hl=de.

If you want to prevent the collection of your data by Google Analytics, we offer you the opportunity to prevent the collection of your data when you visit this website in future by placing an opt-out cookie: Disable Google Analytics.

Google is certified in accordance with the Privacy Shield treaty, which guarantees its compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). You will find more information about the handling of user data in Google’s privacy statement at: https://policies.google.com/privacy?hl=de&gl=de.

7. How long are your data stored?

a. Surfing on our website

“Session cookies” are deleted automatically at the end of your browser session. Other types of cookies, however, remain on your device until you delete them yourself.

The personal data collected by Google Analytics are either erased or anonymised after 14 months.

b. Contacting us and communications

We erase your data in this context when the purpose for which you have given us the data has been fulfilled or completed and we are not entitled or obligated to continue to store the data by legal regulations.

8. What rights do you have?

You have the following rights with regard to the personal data concerning you:

a. Information and access

You have the right to obtain information about your personal data we have processed and to request access to your personal data and/or copies of these data. This includes information about the purpose of the use, the category of the data used, the recipients of the data and the parties authorised to access the data and, if possible, the envisaged period of the data storage or, if this is not possible, the criteria for determining this period.

b. Rectification

You have the right to request from us the rectification without undue delay of any inaccurate personal data concerning you. You have the right to request the completion of any incomplete personal data — including by means of providing a supplementary statement — taking into account the purposes of the processing.

c. Right to object

Insofar as the processing of personal data concerning you is based on point (f) of Art. 6 (1) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of these data. We will no longer process these personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims. You will find more information about your right to object with respect to our third-party providers under Section 6.

d. Right to withdraw consent

If the processing is based on your consent, you have the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent prior to the withdrawal.

e. Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we have the obligation to erase these personal data without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • You object to the processing in accordance with point (c) of Section 8 above and there are no overriding legitimate reasons for the processing;
  • The personal data have been unlawfully processed;
  • The personal data must be erased in compliance with a legal obligation in EU law or member state law to which we are subject. The above provisions do not apply if and when the processing is necessary:
  • For the fulfilment of a legal obligation that requires the processing in accordance with EU law or member state law to which we are subject;
  • For the establishment, exercise, or defence of legal claims.
f. Right to restriction of processing

You have the right to request from us the restriction of processing if one of the following prerequisites has been met:

  • You contest the accuracy of the personal data; the processing is restricted pending our verification of the accuracy of the personal data;
  • The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
  • We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
  • You have objected to the processing pursuant to point (c) of Section 8 above; the processing is restricted pending verification of whether our legitimate interests override yours. Where processing has been restricted on the basis of the aforementioned conditions, these personal data may, with the exception of storage, be processed solely with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state. If you have obtained restriction of the processing, we will notify you before the restriction is lifted.
g. Right to data portability

You have the right to receive from us your personal data in machine-readable format if the processing was based on your consent or a contract and was performed automatically.

h. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. You will find a list of the data protection supervisory authorities, including data protection officers and their contact data, at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

The exercise of these rights is free of charge for you. You will find our contact data in Section 3 of this privacy statement.

9. Requirement to provide personal data

The provision of personal data is required neither by law nor by contract, nor are you obligated to provide the personal data. However, the provision of personal data is necessary to establish contact with us. Moreover, we cannot guarantee that you will be able to utilise all the functions of this website without restriction if your browser blocks cookies.

10. Update of this data protection information

It may be necessary to update this data protection information from time to time, e.g. because of new services or products on our internet site or in compliance with legal changes. You will find the most recent version here. In general, we recommend that you retrieve this data protection information at regular intervals to see if there have been any changes. You can determine this by checking the date of the most recent revision displayed at the end of this document or by other means.

11. Miscellaneous

You can print out and save this data protection information directly, e.g. by using the print or save function in your browser.

This data protection information was prepared on 18 May 2018. It was most recently revised on 21 May 2019.