Privacy notice for the website www.cubus130.de

Thank you for visiting our website www.cubus130.de ("website") and for your interest in our company and our products. We process your personal data in the sense of Art. 4 No. 1 GDPR ("Data") while you are visiting our website. We are aware of the importance of the data en-trusted to us.  Safeguarding your personal data while processing them is an important matter to us and we respect your privacy while performing our business processes. Your data will be han-dled in accordance with all legal requirements for data protection.

According to Art. 4 No. 7 GDPR the body responsible for processing your data in connection with our website is:

Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH ("NH" or "we")

Schaumainkai 47
60596 Frankfurt am Main
Germany
Tel.: 069/678674-0
E-Mail: datenschutz[at]​naheimst.de

Please use the contact information listed below to reach our Data Protection Officer:

Dr. Dennis Voigt
UBG mbH
Im Breitspiel 21
69126 Heidelberg
Germany
Tel.: 069/6530006-23
E-mail: info[at]​ubg-datenschutz.de

Your data are processed on our website for various purposes. Depending on the purpose of processing, the legal basis on which we act, may therefore also vary. When operating our website, we are sometimes assisted by contract processors within the meaning of Art. 28 GDPR, who process your data on our behalf and on our instructions and are thus recipients of your data ("service providers"). Under certain circumstances, your data may also be dis-closed to other companies that are not service providers ("third party companies").

Hereinafter, we specify the different purposes for which your data are processed on our website, stating the relevant legal basis and the possible recipients, as well the storage pe-riod of your data. We will also inform you whether during processing your data may be transferred to a third country outside the European Economic Area ("EEA") and specify the conditions for such a transfer.

a) Accessing our website and server log file

In order to display our website on your end device, it is technically necessary for our web server, on which our website is hosted, to process data from you. For this purpose, we pro-cess your IP address together with the date and time of the access, the name and the URL of the accessed file, the referring URL (website from which the access is made), the trans-ferred file quantity, and the loading time, and store this into a so-called server log file.

The legal basis for this processing of your data is Art. 6 para. 1 letter f) GDPR. The pro-cessing of your data is necessary to protect our legitimate interests in the accessibility and the correct presentation of our website. The additional storage of your data in a log file serves to safeguard our legitimate interests in operating our website securely and more er-ror-free and to detect, limit and eliminate faults and errors.

Your data in our server log file are automatically deleted 30 days after visiting our site. We use a service provider for the hosting of our website. This service provider is based in the EEA.

b) Contact

Through our website, we give you the opportunity to contact us on various topics.
In case you contact us via our contact form, the obligatory details to be provided by you are marked as such. This information is required in order to process your request. All other details are voluntary and only serve to answer your enquiry more accurately.  A separate  "Privacy notice for the rental of Micro Apartments" applies to the flats´ rental process.

You can also contact us via telephone, e-mail, post and fax. Your personal data to be pro-cessed in this context may vary depending on the communication channel, but will regular-ly include your first and last name, address, telephone number, e-mail address and fax number.

In case your contact concerns a contract matter, such as the pre-award-stage of a contract, we process your data on the basis of Art. 6 Para. 1 lit. b) GDPR. If your enquiry is of a gen-eral nature, we process your data in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in answering your enquiry about our company and/or our prod-ucts individually and in the best possible way.

In case your data are related to a contractual relationship, we delete them, when neces-sary, only after the expiry of the commercial or tax law retention obligations, which can be up to 6 years from the end of the year in which you contacted us. We delete all other data when your request has been finally clarified and we are not subject to any legal obligation to retain the corresponding data.

We use a service provider in order to make available for you a contact form. This service provider is based in the EEA.

c) Contact by mail

If a contact is aimed at the stipulation of a contract or is in connection with a contract, we can use your data to contact you by post.

The processing of your data is based on Art. 6 Para. 1 letter b) GDPR.

We may delete your data only after the expiry of the commercial or tax law obligatory re-tention periods, which can be up to 6 years from the end of the year in which you con-tacted us.

d) Essentially necessary cookies

Cookies are small files that are sent by us to the browser of your end device when you visit our website and stored there. On our website, we use technically strictly necessary cookies to guarantee its basic functions.

The cookies contain a so-called “session ID” which enables the assignment of various re-quests to your terminal device during your visit to our website.

The legal basis for the processing of your data is Art. 6 para. 1 letter f) GDPR. The use of technically essentially necessary cookies is essential to protect our legitimate interests and to guarantee the retrieval, the correct displaying and the full functionality of our website.

Technically essential cookies are regularly deleted after you have closed the browser you had used.

If you do not wish cookies to be set on your terminal device, you can control this centrally through the web browser you use. However, blocking or deleting cookies can lead to a sig-nificant reduction in the usability of our website for you. You can also delete cookies that have already been set through your browser.

e) Consent management

On our website we also use technically not essential cookies and other technologies for dif-ferent purposes, which we will state bellow.

If you are visiting our website for the first time, we will therefore ask you for your consent to use such services, which involve the use of technically not necessary cookies. In order to manage your consent, i.e. whether you have given your consent or not, we store corre-sponding data in your Local Storage in order to recognise you when you visit our website again. For this purpose, we process your IP address, the exact moment of your visit to our website, information about your browser and information about your terminal device.

The related processing of your data is based on Art. 6 para. 1 lit. f) GDPR and serves our le-gitimate interest in enabling you to use our website as pleasantly as possible and as protec-tion against legal claims in connection with the use of such services that utilise essentially necessary cookies and other technologies.

The data in your Local Storage has a lifetime of 360 days, unless you delete it in your browser before.

f) Google Analytics

We use the Google Analytics tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, ("Google") on our website.

Google Analytics enables us to analyse and evaluate the use of our website in order to gather reports on the website activities of our visitors on the basis of this information. Google Analytics is also used to create pseudonymised user profiles of website visitors. By using Google Analytics, technically not essential cookies as well as online identifiers (in-cluding cookie identifiers), IP addresses and your device identifiers are used. We only use Google Analytics with the extension "Anonymize-IP", which means that part of your IP ad-dress is deleted before it is transmitted to Google.

The use of Google Analytics is based on your consent declared to us in accordance with Art. 6 Para. 1 lit. a) GDPR.

The information collected through the use of Google Analytics is deleted after 9 or 18 months (https://policies.google.com/technologies/ads.) When using Google Analytics, Google acts as a service provider. The contract for processing of orders, which also applies to Google Analytics, can be accessed via the following link: https://privacy.google.com/businesses/processorterms/

As a result of the use of Google Analytics your data are transferred to the USA. There is no adequacy decision of the European Commission for data transfers to the USA. The data transfer to the USA is therefore based on your declared consent according to Art. 49 para. 1 lit. a) GDPR.

You can also prevent a transfer of data to Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Recipients of your data are first of all the previously named service providers. In addition, we use service providers, we have engaged, for the maintenance, care and further devel-opment of our website, who process your data only on our instructions and on our behalf. Further transmission of you data to third parties take place only in case we are legally obliged to do so, for example to public authorities or in order to defend, assert, exercise or defend legal claims.

The use of the employed company stated in 2. f) results in a transfer of your data to third countries and thus outside the EEA.

If your data is transferred to the USA, we would like to point out that the European Com-mission has not adopted an adequacy decision for a transfer of your data in the USA. Alt-hough the companies used occasionally offer the conclusion of so-called “standard contrac-tual clauses” for certain services, which are intended to guarantee a level of protection that does not deviate significantly from the requirements of the GDPR, particularly with regard to compliance with data protection regulations and the rights of the data subjects. However, there is no level of data protection in the USA that is equivalent to that in the European Union.

American authorities may access and use your data. Neither the access nor the use of your data is regulated by US law in a way that is equivalent to the European law. Neither do these laws contain restrictions on the access or use of your data, nor, un-less you are a US citizen, there is effective legal protection available to you against the ac-cess and use of your data.

In accordance with the provisions of the GDPR, you can claim the following rights against us:

• Right to information (Art. 15 GDPR),
• Right of rectification (Art. 16 GDPR),
• Right of cancellation (Art. 17 GDPR),
• Right to limit the processing (Art. 18 GDPR),
• Right to data transferability (Art. 20 GDPR).

You have the right to revoke any consent you have given us at any time with future effect, including data transfer outside the EEA in accordance with Art. 49 para. 1 lit.

a) GDPR. In addition, in accordance with Art.21 GDPR you can object to the processing of your data de-scribed here for the purpose of safeguarding legitimate interests at any time for the future. If the processing is not carried out for the purposes of direct advertising, the right to ob-ject exists only for reasons arising from your particular situation.

In addition, you may complain to a supervisory authority at any time. The supervisory au-thority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information,
Gustav-Stresemann-Ring 1,
65189 Wiesbaden,
Germany

We are always open to listen to you. We would be glad to answer any question you may have. This is the fastest way to clarify your queries.