Privacy Policy

Thank you for visiting our website www.nuville-frankfurt.de ("website") and for your interest in our company. When you visit our website, we also process your personal data ("data") in the sense of Art. 4 (1) of the General Data Protection Regulation ("GDPR"). We are aware of the importance of the data you entrust to us. Protecting your privacy when processing your data is of great importance to us and we always take this into account in our business processes. Your data will be handled in accordance with the legal provisions governing data protection.


1. Controller and data protection officer

The controller within the meaning of Art. 4 (7) GDPR for the processing of your data relating to this website is:

Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH ("NH” or “we”)

Schaumainkai 47
60596 Frankfurt am Main
Phone.: 069/678674-0
E-mail: kontakt@naheimst.de
Fax: 069/678674-300

You can reach NH’s data protection officer at the following address:

Dr Dennis Voigt
UBG mbH
Im Breitspiel 21
69126 Heidelberg
Phone: 069/6530006-23
E-mail: datenschutz@naheimst.de

 


2. Purpose of data processing, legal basis, storage period, recipients, and transfer to third countries

Your data may be processed on a different legal basis depending on the purpose of processing. When operating our website, we are supported in part by contract processors who handle your data on our behalf and in accordance with our instructions and are therefore recipients of your data ("service providers"). Your data may also be disclosed to other companies.

Below we set out the different purposes for which your data may be processed on our website, stating the relevant legal basis as well as indicating the retention period. We also provide you with information about whether the company is a service provider and whether any transfer of your data will take place outside the EU or the European Economic Area ("EEA").

a. Accessing our website and the server logfile

It is strictly necessary from a technical perspective for the web server hosting our website to process data from you in order to display our website on your terminal device. For this purpose, we process your IP address together with the date and time of access, name and URL of the accessed file, referrer URL (website from which access is made), the amount of data transferred and loading time in a server log file. A service provider assists us with hosting. 

The legal basis for storing information in the form of cookies or in the server log file on your terminal device or accessing this information on your terminal device is Section 25 (2) (2) of the German Telecommunications and Teleservices Data Protection Act (TTDSG).

Your data is processed in accordance with Art. 6 (1) (f) GDPR. It is necessary to process your IP address in order to protect our legitimate interests with regard to the accessibility and correct presentation of our website. Storing your data in a server log file in addition to this serves to protect our legitimate interests in operating our website securely and without errors and in being able to recognise, limit and eliminate faults and errors. 

Your data stored in our server logfile will be automatically deleted 1 month after your visit to our website.

b. Contact

Our website gives you the opportunity to contact us about a variety of topics.

If you use our contact form to contact us, the mandatory information you have to provide is marked as such. This information is required in order to process your request. All other information is voluntary and will only be used to answer your enquiry more precisely. You can also contact us by telephone, e-mail, post, or fax. The data we process from you in this context may vary depending on the communication channel, but we generally collect your first and last name, your address, your telephone number, your e-mail address, and your fax number. A service provider assists us with the contact form. Furthermore, the following data are collected:

  • Identifier of the last selected flat ("flat ID")
  • Identifiers of other selected flats ("favourites"), where applicable
  • URL of the navigator accessed
  • The language selected in the navigator
  • Browser user agent data

If the purpose of your contact is to find out more about the freehold flats offered on our website, we will forward your enquiry to the relevant sales representative, who will contact you and provide a comprehensive response to your request.

The legal basis for accessing information in your terminal device is Section 25 (2) (2) TTDSG.

If the purpose of your contact is to conclude a contract or is related to a contract, we process your data on the basis of Art. 6 (1) (b) GDPR. If the purpose of your contact is of a general nature, we process your data in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interests in answering your enquiry about our company and/or our service offering individually and in the most appropriate manner.

Where your data are related to a contractual relationship, we will delete them only after the expiry of any retention obligations under commercial or tax law, which may be up to 6 years from the end of the year in which you contacted us. We will delete all other data when your enquiry has been finally clarified and we are not subject to any legal obligation to retain the relevant data.

c. Communication by post

If you contact us with a view to concluding a contract or in connection with a contract, we may subsequently use the information you have given us to contact you by post.

The processing of your data is based on Art. 6 (1) (b) GDPR.

We may only delete your data after the expiry of commercial or tax retention obligations, which can be up to 6 years from the end of the year in which you contacted us.

d. Strictly necessary cookies

Cookies are small files that are sent by us to your terminal's browser when you visit our website and are stored there. We use strictly necessary cookies on our website to ensure the basic functions of our website. The cookies contain a what is known as a session ID, which can be assigned to various requests made by your terminal device during your visit to our website. 

The legal basis for storing information in the form of cookies on your terminal device or accessing this information on your terminal device is Section 25 (2) (2) of the German Telecommunications and Teleservices Data Protection Act (TTDSG).

The legal basis for the associated processing of your data is Art. 6 (1) (f) GDPR. The use of strictly necessary cookies is required to protect our legitimate interests with regard to the accessibility and correct presentation of our website and to ensure its full functionality. 

Strictly necessary cookies are deleted at the latest after you have closed the browser you are using.

If you do not wish cookies to be set on your terminal device, you can manage this centrally in the browser you use. You can also delete cookies via your browser. 

However, blocking or deleting them may result in a noticeable restriction of the usability of our website for you.

e. Consent management

Our website also makes use of cookies that are not strictly necessary for technical purposes and other technologies for a variety of purposes, which we list below.

If you are visiting our website for the first time, we will ask you for your consent for the use of such services, which involve the use of cookies that are not strictly necessary. In order to manage your consent, i.e., whether you have given consent or not, we store your selection in a cookie so that we can recognise you when you visit our website again. The legal basis for storing information on your terminal device and accessing it is Section 25 (2) (2) TTDSG. In doing so, we process your IP address, the time of your visit to our website, information about your browser and information about your terminal device.

The associated processing of your data is based on Art. 6 (1) (f) GDPR and serves our legitimate interest in providing you with the most enjoyable user experience possible when using our website, as well as for the defence against legal claims that may arise in connection with the use of such services that use cookies and other technologies that are not deemed strictly necessary.

The cookie is valid for 365 days unless you delete it from your browser before then.

f. Matomo

Our website uses the web analytics tool Matomo (formerly Piwik) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("InnoCraft Ltd.”).

Matomo is an open-source tool for web analytics. Cookies are used for this purpose, which are stored on your computer, and which enable a pseudonymous analysis of the way you use our website. The IP address is abridged immediately after it is acquired and before it is stored. If you consent to web analysis using Matomo, the following data will be collected when you access individual pages on our website:

  • The user's IP address, with the last three bytes removed (anonymised)
  • The particular page called and the time of retrieval
  • The page from which the user accessed our website (referrer)
  • Which browser is used with which plug-ins, together with the operating system and screen resolution
  • The duration of the visit to our website
  • The pages that are visited from the actual page accessed

If you consent to the use of Matomo, cookies will be set on your terminal device, for which the legal basis is Section 25 (1) TTDSG. Any subsequent processing of data is based on your consent given to us in accordance with Art. 6 (1) (a) GDPR.

The data collected by Matomo will remain active from the end of the browser session up to 13 months and is used to recognise the user of the website for statistical purposes, to store attribution information and to store a unique visitor ID.

You can find Matomo's privacy policy at: https://matomo.org/docs/privacy/.

We host Matomo exclusively on our own servers so that all analytical data remains with us and are not shared.


3. Data transfer to third countries

No data will be transferred to a third country.


4. Data recipients

When you visit our website, the recipients of your data are initially only the service providers and companies named above. In addition, service providers commissioned by us assist us with maintaining, enhancing, and further developing our website; these service providers only process your data on our instructions and on our behalf. Your data may also be passed on to other companies affiliated with us for internal administrative purposes.

Your data will only be disclosed beyond this on the basis of a legal obligation, such as to authorities or for the defence, assertion, exercise, or defence of legal claims.


5. Necessity of data collection

You are under no contractual or legal obligation to provide us with the information described in this Privacy Policy.


6. Data subject's rights

You have the following rights and claims against the controller under the GDPR: 

  • The right to information (Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)

You have the right to revoke any consent given to us at any time with effect for the future. This also applies to consent for cookies and other technologies.


7. Data subject's right to object in accordance with Art. 21 GDPR

Art. 21 GDPR gives the data subject the right to object at any time, on grounds relating to their particular situation, to the processing of personal data relating to them that is performed on the basis of Art. 6(1)(f) GDPR with effect for the future.

The controller will then no longer process the data subject's personal data unless the controller can demonstrate compelling legitimate grounds for processing which override the data subject's interests, rights and freedoms, or processing is for the purpose of asserting, exercising, or defending legal claims.

The data subject may object to the processing of data for the purpose of direct marketing at any time with effect for the future. In the event of an objection, the controller will refrain from any further processing of the data for the purpose of direct marketing.


8. Right to complain to a supervisory authority

The data subject has the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. According to this provision, any data subject may, without prejudice to any other administrative or judicial remedy, lodge a complaint with a supervisory authority, in particular in the Member State where they reside, work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR.

The following data protection supervisory authority is responsible for us:

Commissioner for Data Protection and Freedom of Information in Hesse
Gustav-Stresemann-Ring
65189 Wiesbaden
You can find the online complaint form at:
https://datenschutz.hessen.de/service/beschwerde

You are also welcome to contact us first. As we all know, a telephone call can clarify a lot of things.