040 75 66 80 - 18
1. GENERAL REMARKS
STUART Management GmbH
represented by managing directors Daniel Crasemann, Hendrik de Waal, Dr Hans-Wilhelm Jenckel and Jan Kuschnik
20354 Hamburg, Germany
Telephone: +49 (0)40 75 66 80 – 18
The company’s Data Protection Officer can be contacted at the above address, to the attention of Mr Sievers (Data Protection Officer), or he can also be reached at firstname.lastname@example.org.
3. PERSONAL DATA
3.1 Visit to the website
When you visit our website https://www.stuart-apartments.com/, the browser on your device sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• The browser used and, if applicable, the operating system of your
computer and the name of your access provider.
The above data will be processed by us for the following purposes:
• Ensuring a smooth connection of the website,
• Ensuring easy use of our website,
• Evaluation of system security and stability, as well as
• Other administrative purposes.
3.2 Contact form
If you are interested in leasing one of our apartments, you may choose to contact us using the form provided on our website. Your personal data is processed in accordance with Art. 6 (1) s. 1, lit. a GDPR on the basis of your voluntary consent. The personal data collected in the contact form is stored for six months from the indicated desired move-in date and is used to process your interest in leasing the apartment and to contact you if a suitable apartment should become available. If a lease agreement is not concluded between you and STUART Apartments GmbH after these six months, we will delete the personal data that we have collected. If you are still interested in our apartments after these six months, you can send us another completed contact form or confirm your consent to continue processing your personal data at the following email address: email@example.com.
3.3 Contact by e-mail
If you have any questions, we also offer you the opportunity to contact us by e-mail. Further information about yourself may be provided voluntarily. The data will be processed for the purpose of contacting us in accordance with Art. 6 para. 1 sentence 1 letter a of the GDPR based on your voluntary consent. The personal data collected by us for contacting you will be deleted after your request has been processed.
When declaring a specific interest in renting our apartments, we will proceed with your data as described in section 3.2.
4. FORWARDING OF DATA
Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
• you have given your express consent pursuant to Art. 6 para. 1 sentence 1 letter a of the GDPR,
• disclosure pursuant to Art. 6 para. 1 sentence 1 letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 sentence 1 letter c of the GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 letter b of the GDPR.
We have integrated YouTube videos into our online offer that are available at http://www.YouTube.com and which can be played directly from our website. YouTube is a product of Google, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The videos are all integrated into the “Enhanced privacy mode”, i.e. no data concerning you as the user is transferred to YouTube if you do not play the videos. The data specified in paragraph 2 is only transferred if you play the videos. We have no influence on this transfer of data.
By visiting the website, YouTube is informed that you have accessed the relevant subpage on our website. This occurs independent of whether YouTube provides a user account through which you have logged in, or whether no user account exists. If you are logged in to Google, the data is assigned directly to your account. If you do not wish the data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research and/or ensuring an appropriate website design. This kind of evaluation particularly occurs (even for users who are not logged in) to provide appropriate advertising and to inform other users in the social network of your activities on our website. You are entitled to object to the establishment of these user profiles, but this right must be exercised directly with YouTube.
Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
7. GOOGLE MAPS
Additional guidance on managing your data in connection with Google products is available here:https://support.google.com/accounts/answer/3024190.
8. DATA SUBJECTS’ RIGHTS
In accordance with Art. 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data, if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.
In accordance with Art. 16 of the GDPR, you have the right to demand the immediate rectification of incorrect, or completion of personal data stored by us.
In accordance with Art. 17 of the GDPR, you have the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
8.4 Restriction of processing
In accordance with Art. 18 of the GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 of the GDPR.
8.5 Data portability
In accordance with Art. 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format or to request its transfer to another data controller.
8.6 Withdrawal of consent
In accordance with Art. 7 para. 3 of the GDPR you have the right to withdraw your consent at any time. As a result, we will no longer be allowed to continue processing data based on this consent in the future.
8.7 Right to complain
In accordance with Art. 77 of the GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
9. RIGHT OF OBJECTION
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 letter f of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR, provided that there are reasons for this arising from your particular situation. If you wish to exercise your right of withdrawal or objection, simply send an e-mail to firstname.lastname@example.org.
10. DATA SECURITY
On our website, we use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.