The responsible body for this website (www.dortmundflats.com) within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states of the European Union as well as other data protection regulations:

Dortmund Flats GmbH
Ernst-Mehlich-Str. 2-4, 44141 Dortmund
Tel.: +49 (0)231 177 21 895
E-Mail: info@dortmundflats.de

The following provides information on how personal data is collected and processed while or after using our website. Personal data are individual details about personal or factual circumstances of an identified or identifiable natural person, e.g., name, postal address, e-mail addresses, IP addresses, user behavior, etc.

1.2 Scope of processing of personal data

In principle, we collect and process personal data of our users only to the extent necessary for providing a functional website, content, and offers, as described below.

1.3 Legal basis of data processing

Processing personal data is only lawful if a legal basis exists. According to Article 6 (1) letters (a-f) GDPR, the legal basis for processing may be, in particular:

Consent in accordance with Article 6 (1) letter (a) GDPR. Consent is any voluntary statement of intent in the specific case, offered in an informed and unequivocal manner, in the form of an explicit statement or other clearly affirmative act by which the data subject indicates his consent to the processing of personal data concerning the data subject.
Necessity for contract fulfillment or to carry out preparatory measures in accordance with Article 6 (1) letter (b) GDPR, i.e., processing of your data is necessary so that we can fulfill justified contractual obligations towards you or to prepare the conclusion of a contract with you.
Processing for the fulfillment of legal obligations pursuant to Article 6 (1) letter (c) GDPR, i.e., processing of data is prescribed by law or other regulations, for example.
Processing for the protection of the data subject's vital interests in accordance with Article 6 (1) letter (d) GDPR.
Processing to safeguard legitimate interests pursuant to Article 6 (1) letter (f) GDPR, i.e., processing is necessary to safeguard legitimate interests on our part or on behalf of third parties, unless the interests or fundamental rights and freedoms on your part which require the protection of personal data prevail, in particular where the data subject is a child.

1.4 Rights of data subject

You are the data subject to the extent your personal data is concerned. You have the following rights with regard to the processing of data by us within the scope of the respectively listed articles of the General Data Protection Regulation:

Right of access by the data subject in accordance with Art. 15 GDPR
Right to rectification in accordance with Art. 16 GDPR
Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
Right to restriction of processing in accordance with Art. 18 GDPR
Right to data portability in accordance with Art. 20 GDPR
Right to object in accordance with Art. 21 GDPR

1.5 Data erasure and storage duration

The personal data of the data subject is deleted or blocked as soon as the purpose for storage has expired. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the responsible body is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

2 DATA PROCESSING ON OUR WEBSITE

2.1 Data collection when visiting the website

Every time you visit our website, our systems automatically collect data and information from the system of the connecting computer.

2.1.1 Scope of data processing

When you visit our website, the following data is collected and stored:

The name of the requested file
Information about the browser type and version used
The operating system of the user
The IP address of the user
The date and time of the access

The data is stored in the log files of our system. The data is not stored in conjunction with other personal data of the user.

2.1.2 Legal basis

The legal basis for processing the data is Art. 6 (1) letter (f) GDPR.
The legitimate interest within the meaning of Art. 6 (1) letter (f) GDPR pertains to the functionality of our website and its availability.

2.1.3 Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. This requires that the IP address of the user remains stored for the duration of the session.

The remaining data is stored in order to ensure the functionality of the website. In addition, we use the data to correct errors and optimize the website and to ensure the security of our computer systems. The data is not exploited for marketing purposes.

2.1.4 Duration of storage

The log files are deleted after one month at the latest, unless it is necessary to keep the data for the aforementioned purpose due to specific events.
Further storage is possible. In this case, the IP addresses of the users are deleted or pseudonymized so that it is no longer possible to assign them to a specific user.

2.1.5 Right to object and removal

The collection of data for the provision of the website and the storage of data in log files is imperative for operating the website. Consequently, the user cannot object.

2.2 Contact form

2.2.1 Scope of data processing

We provide a contact form on our website for electronic contact with us. If you enter data in the input mask, these data are transmitted to us and stored. These data are: your name, e-mail address, subject of the message as well as your individual message to us. The data and time of your message is also automatically recorded.

Alternatively, you may contact us via e-mail address provided at the beginning of this statement. In this case, the personal data transmitted by the user is stored by us.

2.2.2 Legal basis

The legal basis for processing data collected in the course of sending an e-mail to us is Art. 6 (1) letter (f) and possibly also letter (a) GDPR. If the objective of contacting by e-mail is to conclude a contract, Art. 6 (1) letter (b) GDPR constitutes an additional legal basis. The legitimate interest within the meaning of Art. 6 (1) letter (f) GDPR lies in answering a customer inquiry or responding to a contact request on other topics.

2.2.3 Purpose of data processing

The purpose of the data storage is the contact made on behalf of the website user.

2.2.4 Duration of storage

The data is stored for as long as it is necessary to process the request or the subsequent conversation. Insofar as these are commercial letters subject to retention in accordance with commercial and tax law, they will also be stored for the statutory retention period.

2.2.5 Right to object and removal

The user may at any time revoke his consent to the processing of personal data or object to the further use. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. The data can only be deleted if there is no legal retention period; in this case, however, the data will be blocked for another use. The conversation cannot continue in such a case.

3 DATA SUBJECT RIGHTS

3.1 Revocation of consent

If the processing of personal data is based on consent given, you have the right to withdraw your consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

You can contact us at any time to exercise your right of withdrawal.

3.2 Right to confirmation

You have the right to request confirmation from the person responsible as to whether we are processing personal data relating to you. You can request confirmation at any time using the contact details above.

3.3 Right to information

If we process your personal data, you can request information about this personal data and the following information at any time:

the purposes of the processing;
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular in the case of recipients in third countries or international organizations;
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
the existence of a right to correction or deletion of your personal data or to restriction of processing by the person responsible or a right to object to this processing
the right to lodge a complaint with a supervisory authority;
if the personal data are not collected from the data subject, all available information on the origin of the data;
the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
If personal data is transmitted to a third country or to an international organization, you have the right to be informed about the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission. We provide a copy of the personal data that is the subject of the processing. For all further copies that you request, we can charge a reasonable fee based on the administrative costs. If you submit the application electronically, the information must be made available in a common electronic format, unless otherwise specified. The right to receive a copy under paragraph 3 must not affect the rights and freedoms of other persons.

3.4 Right to rectification

You have the right to request us to correct any incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.

3.5 Right to deletion ("right to be forgotten")

You have the right to demand that the person responsible delete personal data relating to you immediately, and we are obliged to delete personal data immediately if one of the following reasons applies:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject revokes their consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing in accordance with Article 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Article 21 Paragraph 2 GDPR.
The personal data was processed unlawfully.
The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

If the person responsible has made the personal data public and is obliged to delete it in accordance with paragraph 1, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data to inform