Data Protection

Data Protection Declaration

Information on data protection

Thank you for visiting our microsite and for your interest in our company. We take the protection of your personal data seriously and want you to feel safe and comfortable when visiting our microsite.

Name and contact details of the Controller and the Data Protection Officer

Within the meaning of the General Data Protection Regulation (“GDPR”), the Controller is:

Berlin Hyp AG
Corneliusstr. 7
10787 Berlin

If you have any questions regarding the processing of your personal data, you can get in touch with our Data Protection Officer; he is also at your disposal if you have any queries, claims or complaints:

Data Protection Officer:

Nikolaus Renner

Berlin Hyp AG
Corneliusstr. 7
10787 Berlin

T: +49 30 2599 9381
E-mail: datenschutz@berlinhyp.de

Collection and processing of personal data

We process personal data as far as this is necessary to document your consent to receiving advertising. In doing so, the following data is processed:

• Contact details (form of address, title, surname, first name, e-mail address, telephone)
• IP address of the terminal device you are using
• Date and time of access / consent

Storage on the microsite is only temporary and does not usually last longer than 6 weeks.

After the process of documenting your consent to receiving advertising on the microsite has been completed, the secure transfer and final documen­tation is made in our CRM, i.e. in our customer relationship management system. We can thus ensure that only those contacts and customers who have given their express consent receive advertising. As soon as the customer relationship is terminated and there are no longer any storage obligations, your personal data will be erased.
The processing of the aforemen­tioned data is carried out on the basis of a balancing of interests in accordance with Art. 6 Para. 1 Sentence 1 (f) GDRP, for the protection of legitimate interests (documenting consent to receiving advertising) and, if consent to receiving advertising has been granted, on the basis of consent in accordance with Art. 6 Para. 1 Sentence 1 (a) GDPR.

Disclosure of personal data in connection with consent to receiving advertising

We do not disclose your personal data to third parties but, provided you have given your consent, we only use them for our own advertising activities.

For the microsite, however, we use processors (Art. 28 GDPR) who process your data exclusively on our behalf and in accordance with our instructions. To ensure that the processing is carried out according to regulations on data protection and to safeguard the protection of your rights, we have ascertained that the processors we commission have sufficient guarantees that suitable technical and organi­sa­tional measures are in place.

Data processing occurs exclusively in the Federal Republic of Germany; no data is transferred to third countries (countries outside the European Economic Area - EEA).

Communi­cation via e-mail

Communi­cation via e-mail can have security gaps. E-mails sent to our employees, for example, can be stopped and viewed by adept Internet users. If we receive an e-mail from you, we assume that we are entitled to reply by e-mail. If not, express reference must be made to a different method of communi­cation.

Security and right to access

To protect the data you have provided us with from accidental or intentional manipu­lation, loss, destruction or access by unauthorised persons, we use technical and organi­sa­tional security measures. Our security measures are under continuous improvement in line with techno­logical developments.

For more information on our email encryption, VPN clients and certificates, see:
https://www.berlinhyp.de/en/data-protection.

Your rights in data protection

Vis-à-vis Berlin Hyp AG, you have the following rights regarding any personal data relating to you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

Right of objection to the processing of data for direct marketing purposes

You have the right to object at any time to the processing of personal data on you for purposes of direct marketing.

If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes and will erase them immediately.

The objection can be made informally and should be addressed to

Berlin Hyp AG
Corneliusstr. 7
10787 Berlin

or to

unsubscribe@berlinhyp.de.

Right to lodge a complaint

With regard to the protection of personal data, you also have the right to lodge a complaint in connection with the processing of your personal data at the following supervisory authority responsible for us:

Berliner Beauftragte für Datenschutz und Informa­tions­freiheit
(Berlin Commis­sioner for Data Protection and Freedom of Information)
Friedrich­strasse 219
D-10969 Berlin
Germany

Processing of personal data on our homepage

You can find information on the processing of personal data on our website in our Data Protection Declaration.

Information on data protection - Our handling of your data and your rights

Information according to Arts. 13, 14 and 21 General Data Protection Regulation - GDPR

We also process personal data as part of our business relationship beyond the website and Microsite. Information on this data processing and your claims and rights concerning data protection, some of which also affect data processing on our website, can be found in our Information on Data Protection.

You will find there the answers to the following questions:

1. Who is responsible for data processing and who can I contact?
2. What sources and data do we use?
3. What do we process your data for (purpose of processing) and on what legal basis?
   
   1. For the fulfilment of contractual obligations (Art. 6 Para 1 (b) GDPR)
   2. Within the balancing of interests (Art. 6 Para. 1 (f) GDPR)
   3. On the basis of your consent (Art. 6 Para. 1 (a) GDPR)
   4. On the basis of legal requirements (Art. 6 Para. 1 (c) GDPR)
4. Who receives my data?
5. How long will my data be stored?
6. Will my data be transferred to a third country or to an international organisation?
7. What rights do I have in data protection?
8. Is there an obligation for me to provide data?
9. To what extent is automated decision-making used in individual cases?
10. To what extent is my data used for profiling (scoring)?