Datenschutz Bild

Data Privacy

Name and address of the responsible body

The responsible body as defined by the General Data Protection Regulation (GDPR)and other national data protection laws of the EU Member States and other dataprivacy policy regulations is the:

Opernplatz S.à r.l.
6, route de Trèves
L-2633 Senningerberg
Luxembourg
Telefon: 069 7191549-0
propertymanagement@opernturm.de

Name and address of the Data Privacy Officer

The Data Privacy Officer of the responsible body is:
Dr. Marc Cziesielsky, LL.M., Rechtsanwalt, Attorney at Law (N.Y.)
TERRA NOVA LAW
Königsallee 227a, 37081 Göttingen

I. General Information on Data Processing

1. Scope of the processing of personal data

We only process your personal data insofar as this is necessary to make our websiteavailable and with it the displayed content and services offered. And we only processpersonal data if you have given us your consent to do so or data processing ispermissible owing to legal regulations.

2. Legal basis for the processing of personal data

If we have obtained your consent the legal basis for the processing of personal datais art.6 para.1 lit.a GDPR.If the processing of personal data serves the fulfilment of a contract or the executionof contractual measures then the legal basis is art. 6 para. 1 lit. b GDPR, when theperson in question is the contracting party.Insofar as the processing of data is necessary for the fulfilment of legal obligations,we must meet the legal basis for doing so is art.6 para.1 lit.c GDPR.Should vital interests of the person in question or other natural persons make aprocessing of personal data necessary the legal basis is art.6 para.1 lit.d GDPR.
If the processing is necessary to protect our legitimate interests or the legitimateinterests of a third party and if these interests outweigh the basic rights and basicfreedoms of the person in question then the legal basis for processing is Art.6para.1 lit.f GDPR.

3. Deletion and storage duration of personal data

An individual’s personal data is deleted or blocked once the purpose for storage nolonger applies. Data may also be stored if this is foreseen by a European or nationallegislative body in EU decrees, laws or other regulations to which the individual issubject. Data is also blocked or deleted in those instances when a storage periodprescribed by one of the afore-mentioned standards expires, unless the continuedstorage of the data is necessary for concluding a contract or its performance.

II. Calling up the website

1. Scope of data processing

When the website is used for information purposes only, in other words when you donot register on the site or otherwise provide us with information, we collect thepersonal data that your browser sends to our server. If you would like to browse ourwebsite we collect the following data, which are technically necessary for us to showyou the website and ensure its stability and safety.

  • IP address
  • Date and time of your request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the data request (specific page)
  • Access status/HTTP-status code
  • Amount of data transferred
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

This data is stored in log files in our system. It is not stored together with otherpersonal data.

2. Hosting der Website

As our website is hosted by an external service provider for us, the above data thatare processed on this website are also processed on the server of our host. Thewebsite is hosted by:

Softloop GmbH
Lindleystr. 8A
60314 Frankfurt am Main

We have a contract with the host for order data processing pursuant to Art. 28GDPR. As regards data processing the host is strictly bound by our instructions.

3.Legal basis for data processing

The legal basis for the temporary storage of data is art.6 para.1 lit.f GDPR.

4.Purpose of data processing

The temporary processing of this data by the system is necessary in order to enablethe communication of our server with the end device of the user and display thewebsite. To this end, the user’s IP address must remain stored for the duration of thesession. The storage in log files is necessary in order to ensure the properfunctioning of the website. In addition, this data serves to optimize the website andensure the safety of our IT-systems. An evaluation of the data for marketingpurposes does not take place in this context.

These purposes constitute a legitimate interest in the data being processed as perart.6 para.1 lit.f GDPR.

5.Duration of storage

The data is erased once it is no longer necessary for achieving the purpose for whichit was originally collected. In the case of collecting data for making the websiteavailable this is the case when the session is over.

6.Objection and erasure options

Die Erfassung der Daten zur Bereitstellung der Website und die Speicherung der Daten in Logfiles ist für den Betrieb der Internetseite zwingend erforderlich. Es besteht folglich seitens des Nutzers keine Widerspruchsmöglichkeit.

III. Cookies

1. Scope of data processing

Our website uses so-called cookies. These are text files that are stored in thebrowser and on your end device. When you visit our website a cookie can be stored

on your operating system. This cookie contains a characteristic string of randomletters and numbers that enable a clear identification of the browser when thewebsite is visited again.

We use cookies solely to ensure the correct technical display of our website. Someelements of our internet page require that the browser calling up a site can also beidentified after a page change.

The following data are stored and transmitted in cookies:

  • Language settings
  • Log-in information

2. Legal basis for data processing

The legal basis for processing personal data using cookies is art. 6 para. 1 lit. fGDPR.

3. Purpose of data processing

We deploy those cookies that are technically necessary to make it easier for you touse our website. Some functions of our website cannot be offered without the use ofcookies, as they require that the browser is recognized again after you have left thewebsite. The data collected in this context is not used for analytical or advertising purposes

The above-mentioned purposes constitute our legitimate interest pursuant with art. 6para. 1 lit. f GDPR.

4. Cookies: duration of storage, options for objection or deletion

Cookies are stored on your end device from where they are transmitted to ourhomepage. This means you as user are completely in control of the use of cookies.By altering the settings in your internet browser, you can limit or disable thetransmission of cookies. Cookies that have already been stored can be deleted atany time. This can also be performed automatically. However, if cookies aredeactivated for our website you may not be able to use all the functions of thewebsite fully.

IV. Newsletter

1. Scope of data processing

Users can subscribe to our free newsletter through our website. When users registerfor the newsletter the data from the input screen is transmitted to us (e.g., name,email address).

In addition, the following data is collected during registration:

  • IP address
  • Date and time of registration

During the registration procedure we will ask for you to consent to us processing this data.

This data is used exclusively for the mailing of the newsletter. Data is not forwarded to third parties.

2. Legal basis of data processing

After registration for the newsletter and providing the user has given their consent thelegal basis for data processing is art. 6 para. 1 lit. a GDPR.

3. Purpose of the data processing

The user’s email address is collected in order to deliver the newsletter and to preventthe misuse of the email address.

4. Duration of storage

Your data is only stored as long as you actively subscribe to the newsletter. Onceyou cancel the newsletter or revoke your consent the data is deleted.

5. Objection and erasure options

The user can cancel their subscription to the newsletter at any time. This can bedone via the link featured in every newsletter.

This link can also be used to revoke your consent to the storage of personal datacollected during registration for the newsletter.

V. Login and registration

1. Description and scope of data processing

On our website we offer you the option of registering with your personal data. Thedata entered into the input screen will be transmitted to us and stored. This data willnot be forwarded to third parties.

The following data are stored during registration:

  • IP address
  • Date and time of registration

During the registration procedure you will be asked to give your consent to theprocessing of this data.

2. Legal basis for data processing

The legal basis for the processing of the data providing the user has given theirconsent is art. 6 para. 1 lit. a GDPR.
If registration serves to perform a contract, and you are a contracting party or itserves the execution of contractual measures then the legal basis of the processingof the data is art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

Registration for the internal area of our website is necessary in order to make certaincontent available to you or offer you certain functions

4. Duration of storage

Data is deleted once it is no longer necessary in order to achieve the purpose forwhich it was originally collected.
This is the case for the data collected during registration if registration on our websitehas been altered or withdrawn.

This is also the case for the data collected during registration to perform a contract orexecute contractual measures if the data is no longer needed to perform thatcontract. Even after the conclusion of a contract there may still be a need to storepersonal data in order to meet contractual or legal obligations.

5.Objection and deletion options

You may revoke your registration at any time. You may also alter the data storedabout you at any time.
If the data is necessary for the performance of a contract or the execution ofcontractual measures then the premature deletion of data is only possible providingthat deletion is not precluded by contractual or legal obligations.

VI. Contact options

1. Description and scope of data processing

You can contact us via the email address given on our website or using the contactform provided on the website. The data you enter in the input screen or in the email(such as name, email address) will subsequently be transmitted to us.

This data will not be forwarded to third parties. This data will be used exclusively forprocessing your request.

2. Legal basis for data processing

The legal basis for the processing of data collected during your contact with us isart.6 para.1 lit.f GDPR.
If the contact is made via email or the contact form marks the commencement ofcontract talks or the initiation of a contract the additional legal basis is art. 6 para. 1lit. b GDPR.

3. Purpose of data processing

We use this personal data solely to process your communication with us. Such acontact also constitutes the legitimate interest necessary for the processing of data.The other personal data processed during the sending of the message serves toprevent the contact form being misused and to ensure the security of our IT systems.

4. Duration of storage

Data is deleted once it is no longer necessary in order to achieve the purpose forwhich it was originally collected.

This is also the case if the respective communication with you is ended. Theconversation is considered to be ended when it can be deduced from thecir cumstances that the matter in question has been satisfactorily clarified.

5. Options to object and erase

If a user contacts us, they can revoke consent to the storage of their personal data atany time. In such an event the conversation cannot be continued.
All personal data that was stored as part of the conversation will then be deleted..

VII. Rights of the data subject/person affected

Rights of the data subject/person affected

1. Right to information

You can request that the responsible body provide confirmation whether yourpersonal data was processed by us.

2. Right to correct

You have the right vis-à-vis the responsible body to amend and/or complete yourdata insofar as the processed personal data are incorrect or incomplete. The responsible body must make the correction without delay.

3. Right to restrict the scope of processing

You can request that the processing of your personal data is restricted under thefollowing circumstances:

(1) if you contest the accuracy of your personal data for a period of time, whichenables the responsible body to review the accuracy of the personal data;

(2)the processing is unlawful and you reject the deletion of your personal dataand instead demand the use of your data be restricted;

(3) the responsible body no longer needs the personal data for the purpose ofprocessing, but you need them for the enforcement, execution or defense of legalclaims, or

(4) If you have lodged an objection against the processing pursuant to art. 21para. 1 GDPR and it is not yet clear whether the legitimate interests of theresponsible body outweigh your reasons.

If the processing of your personal data was restricted this data may – apart from itsstorage – only be processed with your consent or for the enforcement, execution ordefense of legal claims or for the protection of rights of another natural or legalperson or for reasons of an important public interest of the EU or an EU MemberState.

If the restriction was revoked owing to the above circumstances, you will be informedby the responsible body before the restriction is cancelled.

4. Right to deletion

You can request from the responsible body that the personal data in question bedeleted without delay and the responsible body is obliged to delete this data withou tdelay providing we are no longer entitled to store this data..

5. Right to information

If you have enforced the right to have the processing of your data corrected, deleted or restricted vis-a-vis the responsible body then the latter shall be obliged to informall recipients to whom the personal data was revealed of this correction, deletion orrestriction of processing unless this proves to be impossible or would involve disproportionate efforts.

6. Right to data portability

You have the right to receive the personal data you have already made available to the responsible body in a structured, standard and machine-readable format.

7. Right to object

You have the right at any time and for reasons arising out of your special situation to file an objection against the processing of your personal data which is processed onthe basis of art. 6 para. 1 lit. e or f GDPR; this also applies to a profiling based on these regulations. The responsible body shall no longer processes your personal data unless it can provide legitimate reasons warranting this processing that override your interests, rights and liberties or the processing serves the enforcement, execution or defense of legal claims

If your personal data is processed in order to conduct direct advertising you have the right at any time to lodge a complaint against the processing of your personal data for the purposes of such advertising; this shall also apply to profiling insofar as it is connected with such direct advertising. If you object to the processing for the purposes of direct advertising then your personal data will no longer be processed for these purposes.

8. Right to revoke the declaration of consent

You have the right to revoke your declaration of consent at any time. The revocation of your consent does not affect the legitimacy of the processing conducted up until this revocation on the basis of your previous consent.

9. Automated decision in particular cases including profiling

You have the right to not be subjected to a decision based solely on automatedprocessing – including profiling – that has a legal effect on you or otherwise affectsyou considerably in a similar manner.

10. Right to make a complaint with a supervisory body

Regardless of other administrative or judicial redress you are entitled to make acomplaint with a supervisory body, in particular in the Member State of yourworkplace or the place of the suspected violation, if you are of the opinion that theprocessing of your personal data contravenes the GDPR.

Alternatively, you can contact the data protection authority responsible for us, namely:

Prof. Dr. Michael Ronellenfitsch

Presse- und Öffentlichkeitsarbeit
Gustav-Stresemann-Ring
165189 Wiesbaden,
Germany

Tel.: 0611-1408 0
Fax.: 0611-1408 611
Email: poststelle@datenschutz.hessen.de

The supervisory authority that you submit your complaint to will inform the personlodging the complaint about the status and outcome of the complaint including thepossibility of a judicial redress pursuant with Art. 78 GDPR.

Tenant login