Data protection notice
§ 1 Information on the collection of personal data
(1) In the following, we provide information about the collection of personal data when using our website dred.lu (hereinafter ‘Website’). Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is DRED SICAV-FIS, 31-33 Rue de Hollerich, L-1741 Luxembourg, legally represented by its general partner DRED-Real Estate Deutschland GP S.à r.l., 31-33 Rue de Hollerich, L-1741 Luxembourg. Data Protection Officer Telephone: +352 264 364-1, Fax: +352 264 364-64, e-mail: dred@dred.lu
(3) When you contact us by e-mail or via a contact form, the data you provide (if applicable, first name, surname, company, street, house number, telephone number, postal code, city, country, your message) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
§ 2 Rights of data subjects
The user and other data subjects have the following rights vis-à-vis us with regard to their personal data:
- Right of access to the personal data concerned (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to object to processing if the data processing is based on Art. 6 para. 1 lit. e) or lit. f) GDPR (Art. 21 GDPR); see also the following reference to the right to object under Art. 21 GDPR
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent at any time without affecting the lawfulness of processing based on the consent before its withdrawal if the data processing is based on consent pursuant to Art. 6 para. 1 lit.
a) or Art. 9 para. 2 lit. a) GDPR
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR).
§ 3 Collection of personal data when visiting our website
(1) If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR):
- IP address
- Date and time of the enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and function of which are explained below:
- Transient cookies (see b) and
- Persistent cookies (see c)
- Cookies in connection with third-party services, as described below
b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Information on the management and deletion of cookies and corresponding instructions for the most common browsers can also be found at www.doh-group.com. However, we would like to point out that you may not be able to use all the functions of this website if you do so.
e) This stored information is stored separately from any other data provided to us. In particular, the cookie data is not linked to your other data, if such data is transmitted.
§ 4 Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(3) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
(4) We do not use automated decision-making or profiling.
§ 5 Objection or revocation against the processing of your data
A. Right to object on grounds relating to your particular situation
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para 1 lit (e) (public security) or (f) (data processing on the basis of a balancing of interests) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
B. Right to object to direct marketing
If we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
C. Exercising the right of objection
The right of objection can be exercised informally, for example by post to DRED SICAV-FIS, 31-33 Rue de Hollerich, L-1741 Luxembourg.
§ 6 Third-party services
(1) Use of Google Maps
To make it easier for you to find us, we have integrated map material from the Google Maps service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’) into our website via an API. In order to display the content in your browser, Google must receive your IP address, otherwise Google would not be able to provide you with this integrated content. The legal basis for this data processing is Art. 6 para. 1 lit. (b) GDPR, as the IP address is required to be able to deliver the content to you. In this processing, our cooperation with Google is based on a joint controllership agreement pursuant to Art. 26 GDPR, which can be accessed here
https://privacy.google.com/intl/de/businesses/mapscontrollerterms/
Further information on data processing by Google can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/.
(2) Use of Google Web Fonts
To display our content correctly and graphically appealing across browsers, we use font libraries from Google Web Fonts (https://www.google.com/webfonts/) from the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’) on this website. Google Web Fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google Web Fonts or prevents access, content is displayed in a standard font. Calling up font libraries automatically triggers a connection to the operator of the libraries. It is theoretically possible - although it is currently unclear whether and for what purposes - that operators of such libraries collect data. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/.The legal basis for this is Art. 6 para. 1 lit. f) GDPR.
§ 7 Subcontractors and recipients of personal data
(1) We use subcontractors for the processing of personal data and conclude a contract with these processors in accordance with the requirements of Art. 28 GDPR. ALL-INKL.COM is used as a subcontractor for hosting the website.
(2) Your personal data will not be transferred to companies other than those already mentioned.
§ 8 Protection of personal data
(1) We take technical and organizational measures in accordance with the requirements of Art. 32 GDPR to protect the user's personal data.
(2) All our employees who are involved in the processing of personal data are obliged to maintain data secrecy.
(3) The user's personal data is encrypted using HTTPS when it is transmitted to the website.
(4) To prevent use by machines, so-called CAPTCHAS may be used in accordance with Art. 32 para. 1 lit. b) GDPR, which contain images or tasks that cannot be processed by computer scripts.
§ 9 Legal bases
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing.
- Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis.
- For the processing of personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
- Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c) GDPR serves as the legal basis.
- The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f) GDPR.
- The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. f) GDPR.
- If the processing is necessary to safeguard a legitimate interest of us or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f) GDPR serves as the legal basis for the processing.
§ 10 Data protection supervisory authority and right to lodge a complaint
The data protection supervisory authority responsible for us, to which (among others) a complaint about a violation of data protection law can also be submitted, is
Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
Tel. +352 26 10 60 -1
Fax. +352 26 10 60 29
E-Mail: info@cnpd.lu
§ 11 Updating this data protection notice
From time to time, it is necessary to adapt the content of this data protection notice. We therefore reserve the right to amend it at any time. We will send the amended version of the data protection notice to registered users by e-mail before it comes into force and publish it in the same place as this data protection notice.