Privacy policy

 

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the EU General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and all other relevant data protection regulations as well as this privacy policy.
The use of our website is usually possible without providing personal data. Insofar as personal data (for example name, address or e-mail addresses) is collected on our pages, this is done on a voluntary basis. This data will not be disclosed to third parties without your express consent.

 

Person responsible, data protection officer
The responsible party for data processing within the meaning of the DSGVO, the BDSG and other data protection regulations is:

SCHLOSSPASSAGE GmbH & CO. KG
Schlossstrasse 14 c
82031 Grünwald

Represented by:

Schlossstrasse 14 Real Estate Management Ltd.
Schlossstrasse 14 c, 82031 Grünwald
Register Court Munich, HRB 175326
Managing Director: Peter Hinderer

Contact:

Phone: 089 649455-59
Fax: 089 649455-31
E-mail: info@schlosspassage.com

According to § 38 BDSG n.F. SCHLOSSPASSAGE GmbH & CO. KG is not obliged to appoint a data protection officer.

 

 

Collection and storage of general data (server log files)
The provider of the website www.schlosspassage.com automatically collects and stores information in so-called server log files, which your browser automatically transmits to us and which are temporarily stored. These are:

• Browser type/ browser version of the accessing system
• Operating system and version used by the accessing system
• Client version
• Target domain or the sub-websites that are accessed via an accessing system on our Internet site.
• the website from which an accessing system arrives at our website (so-called referrer URL)
• Host name, IP address and Internet service provider of the accessing system
• Access method
• Date and time of the server request
• amount of data transferred and access status

This log data is stored in a log file to ensure data security, but cannot be assigned to specific individuals. This data is not merged with other data sources and no conclusions are drawn about the persons concerned. Rather, this data is required in order to (1) correctly deliver the content of my website, (2) optimize the content of my website and the advertising for it, (3) ensure the long-term functionality of my IT systems and the technology of my website, (4) be able to track unauthorized access attempts and accesses to the web server, and (5) to provide authorities and courts in the event of a cyber attack with the information necessary for criminal prosecution and to avert danger, as well as to pursue my legitimate interests and civil claims. This anonymously collected data and information is evaluated by us with the aim of increasing data protection and data security in my company. Any further use of the log data is exclusively for statistical purposes in anonymized form.
We reserve the right to check this data retrospectively and, if necessary, to process and store it further if I become aware of specific indications of unlawful use. Otherwise, the log data is deleted at regular intervals – after six months at the latest. The legal basis for the data processing, insofar as it concerns personal data at all, is in this case Art. 6 para. 1 f) GDPR.

Data sharing
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
You have provided us with your personal data in accordance with Art. 6 para. 1 p. 1 a) DSGVO have given express consent to this,
the disclosure according to Art. 6 para. 1 p. 1 f) DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
in the event that for the transfer according to Art. 6 para. 1 p. 1 c) DSGVO a legal obligation exists, as well as
this is legally permissible and in accordance with Art. 6 para. 1 p. 1 b) DSGVO is necessary for the processing of contractual relationships with you.

Routine deletion and blocking of personal data
The controller shall process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or if provided for by the GDPR or another data protection regulation to which the controller is subject.
If the purpose of storage no longer applies or if a storage period prescribed by the DSGVO or another applicable provision expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Integration of social media (“plugins”)
The activation of certain buttons (“share buttons”) on sub-pages of this website allows users to share, recommend or submit content from these pages to users of “social media” platforms (Facebook, Twitter, Google+, etc.). In this context, log data (including the user’s IP address and information about the pages visited on this website) is only transmitted to the operator of the respective platform when the user activates the relevant button by clicking on it and thereby declares his or her consent to communication with the respective operator (“two-click method” or “Shariff plugin”); if the user is already registered as a user with the platform in question, further data may also be transmitted that allows conclusions to be drawn about the person of the user. In this case, the data is collected and transmitted in order to establish a connection between the user’s browser and the servers of the respective platform and to enable the user’s registration with this platform as well as the provision of the respective “share” functions (integration or linking of the content of this website to be shared or recommended and assignment to or linking with the user’s user account). In this case, the data processing operations on our website are carried out on the basis of Art. 6 para. 1 f) GDPR.
If the user registers (logs in) with the respective platform or is already registered (logged in), this may result in the collection, processing and use of further data and the setting of cookies on the user’s computer. However, these processes are not carried out under the control of the providers of this website, but exclusively by the operator of the respective platform (e.g. Facebook Inc., Twitter Inc., Google Inc. etc.) and are therefore governed exclusively by their respective valid data protection declarations.
We, as the provider of this website, do not receive any knowledge of the content of the transmitted data or its use by the operators of the aforementioned platforms. We are not responsible for the collection, processing and use of personal data by the operators of the respective platform or for the content of and compliance with their privacy statements. The same applies insofar as users are directed through links to profiles of the operators of this website on such platforms.
In addition, the following data protection notices apply in relation to individual social media:

Facebook:
A plugin of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, is integrated on this website in the form of a “share button”. You can recognize the Facebook Share button by the Facebook logo (white “f” on a gray or blue background) and the word “share” on this website. When you activate this button, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook “Share Button” while logged into your Facebook account, you can link the content of this website on your Facebook profile. This allows Facebook to associate your visit to this website with your user account. For more information, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy . If you do not want Facebook to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.

Instagram:
Use of Instagram social plugins Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/ If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).

 

Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (hereafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

The purposes of data processing are to evaluate the use of the website and to compile reports about activities on the website. Based on the use of the website and the Internet, other related services shall then be provided. The processing is based on the legitimate interest of the website operator.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by selecting diesen Link anklicken. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

 

Other personal data
Otherwise, no personal data is collected, stored or processed when using this website. Cookies are not set on the user’s computer when using this website. No data is processed in countries outside the European Union, with the exception of the processes described in the previous section in connection with the integration of social media. Automated decision-making or profiling does not take place.
However, personal data is collected and stored and also processed and used in other ways for the respective purpose if and to the extent that you voluntarily provide it to us, e.g. by sending us an e-mail or by any other method of contact suggested on this website.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps and that we regularly do not offer encrypted communication. Complete protection of the data against access by third parties is not guaranteed.

 

 

Rights of the data subjects
Any person concerned by the processing of personal data (hereinafter “data subject”) has the following rights granted by the GDPR:

a) Right to confirmation
Any data subject shall have the right to obtain confirmation from the controller as to whether personal data concerned are being processed.

b) Right to information
Every data subject shall have the right to obtain from the controller, at any time and free of charge, information about the personal data stored about him or her, as well as a copy of such information. Furthermore, the data subject may request information on the following:

• the processing purposes
• the categories of personal data that are processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
• the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: All available information about the origin of the data
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

c) Right to rectification
Any data subject shall have the right to obtain the rectification without delay of inaccurate personal data concerning him or her. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data – also by means of a supplementary declaration.

d) Right to deletion
Any data subject shall have the right to obtain from the controller the erasure without delay of personal data concerning him or her, where one of the following grounds applies and insofar as the processing is not necessary:

• The personal data were collected or otherwise processed for such purposes for which they are no longer necessary.
• The data subject revokes the consent on which the processing is based pursuant to Art. 6 para. 1 a) DSGVO or Art. 9 para. 2 a) GDPR and there is no other legal basis for the processing.
• The data subject shall, pursuant to Art. 21 para. 1 DSGVO, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(1) DSGVO. 2 DSGVO to object to the processing.
• The personal data have been processed unlawfully.
• The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data was collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO collected.

If the personal data has been made public by me and my company is the responsible party pursuant to Art. 17 para. 1 DSGVO to erase personal data, we shall implement reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, in order to inform other data controllers which process the published personal data that the data subject has requested from those other data controllers to erase all links to or copies or replications of the personal data, unless the processing is necessary.

e) Right to restriction of processing
Any data subject shall have the right to obtain from the controller the restriction of processing where one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
• The controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the assertion, exercise or defense of legal claims.
• The data subject has objected to the processing pursuant to. Art. 21 par. 1 DSGVO and it is not yet clear whether the legitimate grounds of the controller outweigh those of the data subject.

f) Right to data portability
Every data subject shall have the right to receive personal data concerning him or her, which has been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance by the controller to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising his or her right to data portability pursuant to Art. 20 para. 1 GDPR the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.

g) Right of objection
Any data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is carried out on the basis of Art. 6 para. 1 e) or f) DSGVO is carried out.
We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.
The data subject shall have the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her which is carried out by me for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89 Para. 1 DSGVO, unless such processing is necessary for the performance of a task carried out in the public interest.
The data subject is free to exercise his/her right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

h) Right to revoke consent under data protection law
Every data subject has the right to revoke any consent given for the processing of personal data in whole or in part at any time without stating reasons with effect for the future.
The revocation shall not affect the lawfulness of the data processing carried out on the basis of the consent given prior to receipt of the revocation.
The revocation may be made in any manner permitted by law for the transmission of declarations, in particular by mail, fax or e-mail to the contact details of the responsible party indicated above.

Assertion of rights, supervisory authority
If the data subject wishes to exercise one or more of the aforementioned rights, he or she may, at any time, contact us. This may be done in any way permitted by law for the transmission of declarations, in particular by mail, fax or e-mail to the contact details of the responsible party indicated above.
Pursuant to Art. 77 of the GDPR, you also have the option of contacting a data protection supervisory authority with information or complaints. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. The data protection supervisory authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach.

Data security
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of my website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

 

 

Objection advertising mails

The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertising and information materials is hereby contradicted. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Source: Privacy policy: eRecht24

 

 

Video surveillance

“Video surveillance is conducted on the premises of SCHLOSSSTRASSE 14 A-C , 82031 GRÜNWALD. The person responsible for video surveillance is identical to the person responsible for this website. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR.

The processing purposes of video surveillance are defined as follows:

– Vandalism prevention
– Theft prevention
– Prevention of crimes against physical integrity
– House right
– Facilitation of law enforcement
– Preservation of evidence for criminal prosecution

With video surveillance are pursued the legitimate interests:

– Protection of life and limb
– Property protection
– Protection of business operations

The data is deleted immediately when it is no longer required to achieve the respective purpose. As a rule, the data is deleted within 48 hours, unless in individual cases the achievement of the specific purpose requires longer storage.

Also in the context of video surveillance, you are entitled to the rights as a data subject mentioned on this page (in particular, the right to confirmation, the right to information, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw consent under data protection law).”