1. General remarks

This data privacy policy gives you an overview of what happens to your personal data when you visit our website. Personal data includes all data that provide information about your identity.

2. Responsibility

This privacy policy applies to the processing of personal data by STUART Management GmbH represented by managing directors Daniel Crasemann, Hendrik de Waal, Dr Hans-Wilhelm Jenckel and Jan Kuschnik
Alter Wall 12
20457 Hamburg, Germany
Email: info@stuart-management.com
Telephone: +49 (0)40 883 608 100

The company’s Data Protection Officer can be contacted at the above address, to the attention of Mr Sievers (Data Protection Officer), or he can also be reached at
datenschutzbeauftragter@stuart-management.com.

3. Personal data

3.1 Visit to the website

When you visit our website, https://www.stuart-apartments.com/ the browser on your device sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• The browser used and, if applicable, the operating system of your computer and the name of your access provider.

The above data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring easy use of our website,
• Evaluation of system security and stability, as well as
• Other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 letter f of the GDPR. Our legitimate interest arises from the purposes of data collection listed above. We do not use the data collected for the purpose of drawing conclusions about you personally under any circumstances. In addition, we use cookies when you visit our website. For more information, please refer to section 5 of this data privacy policy.

3.2 Contact form

If you are interested in leasing one of our apartments, you may choose to contact us using the form provided on our website. Your personal data is processed in accordance with Art. 6 (1) s. 1, lit. a GDPR on the basis of your voluntary consent. The personal data collected in the contact form is stored for six months from the indicated desired move-in date and is used to process your interest in leasing the apartment and to contact you if a suitable apartment should become available. If a lease agreement is not concluded between you and STUART Apartments GmbH after these six months, we will delete the personal data that we have collected. If you are still interested in our apartments after these six months, you can send us another completed contact form or confirm your consent to continue processing your personal data at the following email address: info@stuart-management.com.

3.3 Contact by e-mail

If you have any questions, we also offer you the opportunity to contact us by e-mail. Further information about yourself may be provided voluntarily. The data will be processed for the purpose of contacting us in accordance with Art. 6 para. 1 sentence 1 letter a of the GDPR based on your voluntary consent. The personal data collected by us for contacting you will be deleted after your request has been processed. When declaring a specific interest in renting our apartments, we will proceed with your data as described in section 3.2.

4. Forwarding of data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

• you have given your express consent pursuant to Art. 6 para. 1 sentence 1 letter a of the GDPR,
• disclosure pursuant to Art. 6 para. 1 sentence 1 letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 sentence 1 letter c of the GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 letter b of the GDPR.

5. Cookies

We use cookies on our website. Cookies are small files that your browser creates automatically and which are stored on your terminal (laptop, tablet, smartphone, etc.) when you visit our website. The cookie stores information generated in connection with the specific terminal used. However, this does not mean that we receive direct knowledge of your identity.

Cookies are used to make the use of our website more comfortable for you. We use cookies to create statistics on the use of our website and to evaluate the optimisation of our offer for you. These cookies allow us to automatically recognise that you have already visited us during your next visit. These cookies are automatically erased after a defined period of time. The data processed by cookies is necessary for the purposes of protecting our legitimate interests, as well as those of third parties in accordance with Art. 6 (1) s. 1, lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser such that no cookies are stored on your computer or so that a note is always displayed before a new cookie is created. However, the complete deactivation of cookies may mean that you are not able to use all the functions on our website.

5.1. Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie preferences.

Borlabs Cookie does not collect any personal data.

The borlabs-cookie cookie stores the consent you have given when you entered the website. If you wish to revoke these consents, simply delete the cookie from your browser. If you re-enter/reload the website, you will be asked again for your cookie consent.

6. Google Analytics

For the purpose of customising and continuously optimising our pages, we use Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House Barrow Street, Dublin 4; hereinafter “Google”). For this purpose, we create anonymous user profiles and use cookies (see section 4 below). The information generated by the cookie about your use of this website, such as

• Browser type/version,
• the operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that attribution is not possible (IP-Masking).

The legal basis for this processing is your voluntarily given consent according to Art. 6.1 of GDPR. You can manage this under cookie settings and revoke it if required.

You can also prevent cookies from being installed by adjusting the browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data protection in connection with Google Analytics can be found here: https://www.google.com/analytics/terms/de.html.

7. Data subjects’ rights

7.1 Information

In accordance with Art. 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data, if not collected by us, and the existence of automated decisionmaking including profiling and, if applicable, meaningful information on their details.

7.2 Rectification

In accordance with Art. 16 of the GDPR, you have the right to demand the immediate rectification of incorrect, or completion of personal data stored by us.

7.3 Erasure

In accordance with Art. 17 of the GDPR, you have the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

7.4 Restriction of processing

In accordance with Art. 18 of the GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 of the GDPR.

7.5 Data portability

In accordance with Art. 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request its transfer to another data controller.

7.6 Withdrawal of consent

In accordance with Art. 7 para. 3 of the GDPR you have the right to withdraw your consent at any time. As a result, we will no longer be allowed to continue processing data based on this consent in the future.

7.7 Right to complain

In accordance with Art. 77 of the GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

8. Right of objection

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 letter f of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR, provided that there are reasons for this arising from your particular situation. If you wish to exercise your right of withdrawal or objection, simply send an e-mail to datenschutzbeauftragter@stuart-management.com.

9. Data security

On our website, we use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Updates and changes to this data privacy policy

This data privacy policy is currently valid and is applicable as from 25 May 2018. Due to the further development of our website and related offers, or due to changed legal or official requirements, it may become necessary to amend this data privacy policy.