Privacy notice for the rental of the Micro Apartments

Thank you for visiting our website www.cubus130.de ("website") and for your interest in renting a micro flat. We process your personal data in the sense of Art. 4 No. 1 GDPR ("Data") for the aims of initiation, implementation and termination of the rental relationship. We are aware of the importance of the data entrusted to us. Safeguarding your personal data while processing them is an important matter to us and we respect your privacy while performing our business processes. Your data will be handled in accordance with all legal requirements for data protec-tion.

According to Art. 4 No. 7 GDPR the body responsible for processing your data in connection with our website is:

Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH ("NH" or "we")
Schaumainkai 47
60596 Frankfurt am Main
Germany
Tel.: 069/678674-0
E-Mail: datenschutz[at]​naheimst.de

Please use the contact information listed below to reach our Data Protection Officer:

Dr. Dennis Voigt
UBG mbH
Im Breitspiel 21
69126 Heidelberg
Germany
Tel.: 069/6530006-23
E-mail: info[at]​ubg-datenschutz.de

Your data are processed on our website for various purposes. Depending on the purpose of processing, the legal basis on which we act, may therefore also vary. In some cases, we are assisted by contract processors within the meaning of Art. 28 GDPR who process your data on our behalf and on our instructions and are thus recipients of your data ("service provid-ers")

Here in after, we specify the different purposes for which your data are processed on our website, stating the relevant legal basis and the possible recipients, as well the storage pe-riod of your data. We will also inform you whether during processing your data may be transferred to a third country outside the European Economic Area ("EEA") and specify the conditions for such a transfer.

a) Initiation of the tenancy

On our website you can contact us to apply for a short term rental in one of our Micro Flats. You can find the obligatory information to be provided by you in the input mask. You are neither legally nor contractually obliged to provide this information. However, these data are required for the conclusion of a contract. Without providing the data we cannot stipulate the contract.

Once you have entered the required data and sent your details, you will receive a confir-mation e-mail. Through clicking on the confirmation link contained in this e-mail you verify that you are authorised to dispose of the e-mail address you have entered and that you are actually interested in receiving a rental agreement. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

If you do not click the confirmation link, we will delete your data within 72 hours. A ser-vice provider based in the EEA assists us in storing your data and sending the confirmation link.

If you click on the confirmation link, we will process your enquiry and, if necessary, make you an offer for the conclusion of a rental agreement and, in this case, send you your rental agreement. We will delete the identity card or comparable document provided by you or your passport, as well as any invoice with your name and address ("proof of identity"), im-mediately after we have compared the information you have entered in the input mask with the proof of identity.

If you do not accept the offer or if we do not make you an offer, we will delete your data after 2 months. The legal basis for the storage of your data without the conclusion of a con-tract is the protection of our legitimate interests according to Art. 6 para. 1 lit. f) GDPR which consist in defending us against legal actions according to the General Equal Opportu-nities Act (Allgemeine Gleichbehandlungsgesetz, AGG).

b) Implementation of the lease

If you have concluded a rental agreement with us, we will process your data for the pur-pose of implementing the rental agreement in accordance with Art. 6 Para. 1 letter b) GDPR.

Service providers who are based in the EEA can assist us in the implementation of the lease.

c) Termination of the lease

If the rental relationship ends, we will delete your data at the earliest after the expiry of the periods of limitation which are connected with the rental of a Mirco Apartment by you, but not before the expiry of the commercial or tax law storage obligations, which can be up to 6 years from the end of the calendar year in which the rental ended.

The legal basis for the storage of your data is Art. 6 para. 1 lit. f) GDPR. We have a legiti-mate interest in the assertion, enforcement and defence of legal claims. If the data is stored in order to comply with commercial or tax law obligations to retain data, the data processing is based on Art. 6 para. 1 lit. c) GDPR.

We reserve the right to use your data for statistical evaluations on the basis of our legiti-mate interests in accordance with Art. 6 para. 1 letter f) GDPR. Our legitimate interests consist in making the best possible use of our Mirco Apartments and marketing them. As far as possible, we will aggregate your data to the extent that they are no longer personally identifiable.

Recipients of your data are first of all the service providers who support us in the initiation, implementation and termination of the lease and who process your data only on our in-structions and on our behalf. Further transmission of you data to third parties take place only in case we are legally obliged to do so, for example to public authorities or in order to shield, assert, exercise or defend against legal claims.

In accordance with the provisions of the GDPR, you can claim the following rights against us:

• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to cancellation (Art. 17 GDPR)
• Right to limit the processing (Art. 18 GDPR)
• Right to data transferability (Art. 20 GDPR)

In addition, you can object to the processing of your data described here for the purpose of safeguarding legitimate interests at any time with effect for the future in accordance with Art. 21 GDPR. If the processing is not carried out for the purposes of direct advertis-ing, the right to objection exists only for reasons arising from your particular situation. 

In addition, you may lodge a complaint with a supervisory authority at any time. The super-visory authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

We are always open to listen to you. We would be glad to answer any question you may have. This is the fastest way to clarify your queries.