Privacy Policy

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy, which is set out below.

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. Their contact details can be found in the section ‘Information on the data controller’ in this privacy policy.

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically or, with your consent, by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or the time the page was accessed). This data is collected automatically as soon as you access this website.

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.

You have the right at any time to obtain, free of charge, information about the source, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to the processing of your data, you may withdraw this consent at any time with effect for the future. Furthermore, you have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the relevant supervisory authority.

Please feel free to contact us at any time regarding this matter or any other questions you may have about data protection.

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various items of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.

The data controller for data processing on this website is:
Sternefeld Medien GmbH
Niederkasseler Straße 1
D-40547 Düsseldorf
Telephone: +49 211 5 77 08 -0
Email: datenschutz@sternefeld.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Unless a more specific retention period is stated in this privacy policy, we will retain your personal data until the purpose for which it is processed no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased, provided we have no other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, erasure will take place once these grounds no longer apply.

Where you have consented to the processing of your data, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, where special categories of data as defined in Article 9(1) of the GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. Where you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) of the TDDDG. Consent may be withdrawn at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data, insofar as this is necessary to comply with a legal obligation, on the basis of Article 6(1)(c) of the GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The relevant legal bases in each individual case are set out in the following paragraphs of this privacy policy.

Among other things, we use tools provided by companies based in the USA or other third countries that do not offer an adequate level of data protection. When these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For example, US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. intelligence services) may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Where data processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Article 21(1) of the GDPR).

If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for the purposes of direct marketing (objection under Article 21(2) of the GDPR).

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged infringement occurred. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place to the extent that it is technically feasible.

In accordance with the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its source and recipients, and the purpose of the data processing, and, where applicable, the right to have this data rectified or erased. You may contact us at any time regarding this matter or any other questions you may have about personal data.

You have the right to request that the processing of your personal data be restricted. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:

• If you dispute the accuracy of your personal data held by us, we generally need time to verify this. For the duration of this verification, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was or is unlawful, you may request that the processing be restricted instead of erasure.
  If we no longer require your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have lodged an objection under Article 21(1) of the GDPR, a balancing of your interests against ours must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
• If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or

For security reasons and to protect the transmission of confidential information – such as orders or enquiries that you send to us as the website operator – this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from ‘http://’ to ‘https://’ and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Our website uses so-called ‘cookies’. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).
Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to analyse user behaviour or to display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide specific functions requested by you (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies for measuring website traffic) are stored on the basis of Article 6(1)(f) of the GDPR, unless otherwise specified.

Our website uses Borlabs Cookie’s cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter ‘Borlabs’).

When you visit our website, a Borlabs cookie is stored in your browser, which records the consents you have given or any withdrawal of those consents. This data is not passed on to the provider of Borlabs Cookie. You can change your Borlabs Cookie settings here: Borlabs Cookie Settings

The data collected is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by the Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The Borlabs Cookie Consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data

We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Time of the server request
• IP address

This data is not combined with other data sources. The legal basis for the processing of this data is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes of data collection, system security and stability listed below.

You can register on our website to access additional features on the site. We use the data you provide for this purpose solely for the purpose of using the specific offer or service for which you have registered. The mandatory details requested during registration must be provided in full. Otherwise, we will reject your registration. In the event of important changes, such as to the scope of our services or technically necessary changes, we will use the email address provided during registration to inform you accordingly. The processing of the data entered during registration is based on your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of any data processing that has already taken place remains unaffected by the withdrawal. We will store the data collected during registration for as long as you remain registered on our website, after which it will be deleted. Statutory retention periods remain unaffected.

Our social media accounts are intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analytics processes initiated by the social media platforms may be based on different legal grounds, which must be specified by the operators of those platforms (e.g. consent within the meaning of Article 6(1)(a) of the GDPR). Data controller and exercising your rights When you visit one of our social media pages (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. You may, in principle, exercise your rights (right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against us and against the operator of the relevant social media platform (e.g. against Facebook). Please note that, despite our joint responsibility with the social media platform operators, we do not have full control over the data processing operations carried out by the social media platforms. Our options depend largely on the corporate policy of the respective provider.

Data collected directly by us via our social media presence is deleted from our systems as soon as the purpose for which it was stored no longer applies, you request its deletion, you withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. We have no influence over the duration for which your data is stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Our website incorporates plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise the Facebook plugins by the Facebook logo or the ‘Like’ button on our website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our page using your IP address. If you click the Facebook “Like” button whilst logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to associate your visit to our pages with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by Facebook.

Further information on this can be found in Facebook’s privacy policy at: https://www.facebook.com/policy.php. If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Our website uses features provided by the XING network. The provider is XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany.
Each time one of our pages containing XING features is accessed, a connection is established with XING’s servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored, nor is user behaviour analysed. Further information on data protection and the XING Share button can be found in XING’s privacy policy at: https://privacy.xing.com/de/datenschutzerklaerung.

Our website uses features provided by the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Every time you access one of our pages that contains LinkedIn features, a connection is established with LinkedIn’s servers. LinkedIn is informed that you have visited our website using your IP address. If you click on the LinkedIn ‘Recommend’ button whilst logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn.

Further information on this can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

We use the web analytics software PIWIK PRO Analytics Suite from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin (“Piwik PRO”) on our website to analyse visitor traffic and user behaviour. Piwik PRO may use cookies, tags, IP addresses and so-called fingerprinting for this purpose. This may involve the collection or processing of the following data:

• IP address (anonymised)
• User ID
• Date and time of the request
• Title or URL of the page visited
• URL of the previously visited page
• Screen resolution
• Time zone
• Files clicked on and downloaded
• Links to external websites that were clicked on
• Page loading speed
• User’s geolocation data (country, region, city, approximate longitude and latitude)
• Browser language
• User-agent of the browser used
• Randomly assigned unique visitor ID
• Time of a user’s first visit
• Time of a user’s previous visit
• Number of visits by a user

We use Piwik PRO to analyse and regularly improve the use of our website. The statistics we gather enable us to improve our website and make it more interesting for you as a user. The information collected by the cookies regarding the use of our website is stored on servers operated by Piwik PRO or by service providers commissioned by Piwik PRO within the EU. The IP address is anonymised immediately after processing and before it is stored. Privacy Policy:

We have integrated Wordfence into this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter ‘Wordfence’).

Wordfence serves to protect our website against unauthorised access or malicious cyber attacks. To this end, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can cross-reference its databases with the access attempts made on our website and block them where necessary.

The use of Wordfence is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyber attacks. Where consent has been sought, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

This website uses Revive Adserver to display advertising banners. Revive also uses so-called ‘cookies’, which are text files stored on your computer to collect statistical data regarding the display of advertisements. The information generated by the cookie regarding your use of the site is not passed on to third parties. Furthermore, information regarding your use of this website is stored on our server in Germany. The IP address is anonymised immediately after processing and before it is stored. You can prevent the installation of cookies by adjusting the settings in your browser software accordingly.

If you wish to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or is collected only on a voluntary basis. We use this data exclusively for the purpose of sending the requested information and do not pass it on to third parties. The processing of data entered into the newsletter subscription form is carried out solely on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent to the storage of your data and email address, and to their use for sending the newsletter, at any time, for example via the ‘Unsubscribe’ link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by this withdrawal. The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted once you have unsubscribed. Data stored by us for other purposes (e.g. email addresses for the members’ area) remains unaffected by this.

This website uses Brevo to send out newsletters. The service provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

Brevo is a service that can be used, amongst other things, to organise and analyse the sending of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany.

If you do not wish your data to be analysed by Brevo, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

Data analysis by Brevo

Brevo enables us to analyse our newsletter campaigns. This allows us, for example, to see whether a newsletter has been opened and whether any links have been clicked.
If you do not wish your data to be analysed by Brevo, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. For detailed information on Brevo’s functions, please see the following link: https://www.brevo.com/de/.

Legal basis
Data processing is carried out on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

Retention period
The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list once you have unsubscribed. Data stored by us for other purposes remains unaffected by this.

Once you have unsubscribed from the newsletter mailing list, your email address may be stored on a blacklist by us or the newsletter service provider, as appropriate, in order to prevent future mailings. The data on the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage on the blacklist. You may object to this storage provided that your interests override our legitimate interest.
For further details, please refer to Brevo’s Privacy Policy at: https://www.brevo.com/de/legal/privacypolicy/.

Data Processing Agreement

We have entered into a data processing agreement with the aforementioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Description and purpose:

We use RapidMail to send out newsletters. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg, Germany. RapidMail is used, amongst other things, to organise and analyse the sending of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on rapidmail’s servers in Germany. If you do not wish your data to be analysed by rapidmail, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. For analysis purposes, emails sent via rapidmail contain a so-called tracking pixel, which connects to rapidmail’s servers when the email is opened. This allows us to determine whether a newsletter message has been opened. Furthermore, with the help of rapidmail, we can determine whether and which links in the newsletter message have been clicked. Optionally, links in the email may be set up as tracking links, which allow your clicks to be counted.

Legal basis:
The legal basis for data processing is Article 6(1)(a) of the GDPR.
Recipients: The recipient of the data is Positive Group Deutschland GmbH.
Transfer to third countries: No data is transferred to third countries.

Duration:
The data stored by us on the basis of your consent for the purpose of the newsletter will be retained by us until you unsubscribe from the newsletter and will be deleted from both our servers and those of RapidMail once you have unsubscribed. Data stored by us for other purposes (e.g. email addresses for the members’ area) remains unaffected by this.
Right to withdraw consent: You may withdraw your consent to data processing at any time with future effect. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.
Further data protection information: For further details, please refer to rapidmail’s data security information at: https://www.rapidmail.de/datenschutz. For further details on rapidmail’s analytics functions, please refer to the following link: https://www.rapidmail.de/hilfe

Data Processing Agreement

We have entered into a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Our website uses plugins from YouTube, a site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages featuring a YouTube plugin, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interests of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de&gl=de

(1) We may have embedded videos from the provider Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.

(2) Some of our web pages contain videos from Vimeo. When you access such a page on our website, a connection is established with the Vimeo servers. This transmits information to the Vimeo server regarding which of our web pages you have visited. If you are logged in to your Vimeo account at the time, Vimeo will associate this information with your personal user account. Clicking the play button on a video may also result in this information being associated with an existing user account. You can prevent this association by logging out of your Vimeo user account before using our website and deleting the relevant Vimeo cookies.

(3) We use this service within our online offering on the basis of a legitimate interest – in the analysis, optimisation and commercial operation of our online offering. The legal basis is Article 6(1)(f) of the GDPR.

(4) Further information on data processing and details regarding data protection by Vimeo can be found at https://vimeo.com/privacy.

(5) In addition, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is displayed. This is Vimeo’s own tracking system, to which we have no access. You can prevent tracking by Google Analytics by using the opt-out tools that Google provides for certain web browsers. Users can also prevent Google from collecting the data generated by Google Analytics relating to their use of the website (including their IP address) and from processing this data by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

We use the podcast hosting service Podigee, provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are either uploaded by Podigee or streamed via Podigee. This is based on our legitimate interests, i.e. our interest in the secure and efficient provision, analysis and optimisation of our podcast service in accordance with Article 6(1)(f) of the GDPR.

Podigee processes IP addresses and device information to enable podcast downloads and playback, and to collect statistical data, such as the number of plays. This data is anonymised or pseudonymised before being stored in Podigee’s database, provided it is not necessary for the provision of the podcasts. Further information and options to object can be found in Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/.

Our websites may use Google Maps (“Google Maps”), a map service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to display interactive maps, provided you have given us your consent to do so.

In order to display the maps you access, your IP address is collected by Google, which may be transferred by Google to servers in the USA and stored there. In addition, Google may collect data regarding your use of Google Maps. Please note that we, S Immobilienpartner GmbH, have no control over the collection, storage and use of such data by Google and do not have access to the data collected. Please read Google’s Privacy Policy carefully before using any Google Maps features. You can find Google’s Privacy Policy here. By using Google Maps on our website, you agree to Google’s Terms of Service, which you can view here.