Privacy Policy

1. Scope of the Privacy Policy

This Privacy Policy applies to all Propertybase websites that refer to this Privacy Policy, including http://www.propertybase.com and https://help.propertybase.com (individually referred to as the "Website" and collectively as the "Websites").

Propertybase Websites may contain links to other websites. The data protection practices and contents of such websites are subject to the privacy policies of these other websites. We recommend that you read the privacy policies of the other websites carefully in order to inform yourself about their manner of dealing with personal data.

2. Principles and Terms

The processing of personal data within the framework of the Websites is carried out in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This Privacy Policy informs users about the collection and processing of personal data. The definitions of terms in Art. 4 GDPR apply to this Privacy Policy.

3. Name and Contact Details of the Party Responsible (Controller)

Propertybase GmbH, Landwehrstr. 63, 80336 Munich, Germany E-mail: support@propertybase.com

4. Contact Details of the Data Protection Officer

E-mail for data protection inquiries: support@propertybase.com E-mail: dataprivacy@propertybase.com

5. Rights of the Persons Concerned (Data Subjects)

As the Data Subject, you have the following rights:

  • Right to information about the personal data concerned (Art. 15 GDPR);
  • Right to rectification (Article 16 GDPR);
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right of objection to the processing if the data processing is carried out on the basis of Art. 6, para. 1, sentence 1, clause e or f GDPR (Art. 21 GDPR); see also the reference in Section 15 of this Privacy Policy to the right of objection according to Art. 21 GDPR;
  • Right to data portability (Art. 20 GDPR);
  • Right to withdraw consent that has been given at any time without prejudice to the legality of the processing carried out on the basis of the consent until its withdrawal if the data processing is based on consent pursuant to Article 6, para. 1, sentence 1, clause a or Article 9, para. 2, clause a GDPR;
  • Right of complaint to a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for the provider is the Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach, Germany, phone: +49 (0) 981 53 1300, fax: +49 (0) 981 53 98 1300, E-mail: poststelle@lda.bayern.de .

6. Purposes and Legal Bases for the Processing of Personal Data

6.1 Information transmitted by the Browser

As part of a visit to a Website which is only informational (i.e. use without any registration, login or communication with us via the Website), information is automatically sent to our systems by your browser and temporarily stored there in a so-called log file. Within this context, we collect and process the following information and personal data in particular:

  • date and time when the Website was accessed;
  • browser type and browser settings;
  • operating system used;
  • the last page visited by the user;
  • the amount of data transferred and the access status;
  • the IP address.

This information and personal data is required for the purpose of correctly delivering and optimising the contents of the Website, as well as ensuring the security of the network and information and protecting the Website against attacks, disruptions and damage. The personal data and information collected in this way is evaluated by us statistically and for the purposes of increasing data protection and data security in order to guarantee a level of protection which is appropriate to the risk for the personal data processed by us. The personal data collected when the website is accessed, in particular the user’s IP address, is deleted at the latest 30 days after its collection, unless an attack or threat by the user has been detected. Insofar as we collect and process your personal data, in particular the IP address of your device when you access and visit the Website, the legal basis for this is Art. 6, para. 1, sentence 1, clause f of the GDPR, as this processing is necessary to safeguard our legitimate interests. With this we are pursuing the legitimate interests of increasing data protection and data security in order to guarantee a level of protection which is appropriate to the risk for the personal data processed by us, to guarantee network and information security, as well as to optimise the Website and protect it from attacks, disruptions and damage.

6.2 Use of Cookies

(1) During your use of the Website, cookies are used after you have given your consent. Cookies have the purpose of personalising the Website for the user's visit and facilitating the use of the Website. Cookies are small text files that the Website transfers to the cookie file of the Internet browser on the user's device and stores there for subsequent retrieval so that the user is recognised when the Website is visited again. A cookie typically contains the name of the domain from which the cookie originates, the "lifetime" of the cookie and a unique identifier.

(2) The following types of cookies are used on the Websites:

  • Session cookies: These are cookies which are set temporarily and remain in the browser's cookie file until the user leaves the Website. Session cookies are required above all to enable the user to use the Website and, if necessary, to register, log in or place orders. Session cookies are deleted at the end of the browser session.
  • Persistent cookies: These remain in the browser's cookie file for longer. The duration depends on the lifetime of the specific cookie. This can be unlimited or remain until it is deleted. Persistent cookies enable the Website to remember the choices made by the user (e.g. the user's registration data, the language chosen by the user or the region in which he or she is located). Persistent cookies from third parties may be used to display advertisements and information that are relevant and of interest to the user. They are also used to determine how often an advertisement is displayed and to assess the effectiveness of an advertising campaign. Persistent cookies are usually used by advertising networks, provided that the user has not objected to the use of cookies (opt-out). These cookies remember if the user has visited a Website and then pass this information on to other companies within the advertising network such as advertisers.
  • Web beacons: These are electronic identifiers (also called "clear GIFs" or "web bugs") that allow the provider to count the number of users who have visited the Website. Cookies can also be categorised as follows:
    • Strictly necessary cookies: These cookies are necessary for the effective use of the Website. Therefore, they cannot be disabled. Without these cookies we cannot provide the functions that we offer via our Website. These cookies do not collect any information about you that could be used for advertising purposes or that would identify which websites you have visited.
    • Performance cookies: These cookies can be used to monitor and improve the performance of our Websites. For example, we can use them to count visits and identify which parts of the Website are particularly popular. 
    • Functionality cookies: These cookies enable Websites to remember which options you have selected (e.g. your user name, language or the region in which you are located) and provide advanced features. For example, we can provide you with news or updates about the services you use. These cookies can be used to save changes which you have made to the text size, font or other parts of the Website that you can customise. They may also be used to provide services that you have requested. The information collected by these cookies is usually made anonymous. 

(3) If you do not wish to accept cookies or web beacons, you can refuse them and object to access to previously stored information by setting your Internet browser accordingly. The settings within the browser for this differ from browser to browser. They can usually be found under "Privacy" or "Cookies" in the browser's "Internet Options" or "Settings" menu. If you need help to disable or delete cookies, you can access the "Help" menu within the browser. Information about the administration and deletion of cookies as well as corresponding instructions on this for the common browsers can be called up e.g. on the www.meine-cookies.org . However, it should be noted that if cookies and/or web beacons are blocked or deleted, it is possible that not all of the interactive features and functions of the Website can be used. If we use cookies with your consent when accessing and visiting the Website and thereby collect and process personal data of the user, the legal basis for this is Art. 6, para. 1, sentence 1, clause a GDPR. In all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. We are pursuing our legitimate interest in personalising the Website for the user's visit and facilitating the use of the Website.

6.3 Web Analysis Services

Web analysis services or web analysis software may be used on the Websites with your consent.

6.3.1 Google Analytics

(1) We have integrated Google Analytics into our Websites. Google Analytics is a web analysis service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereafter referred to as "Google"). The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyse a user's activities across devices.

(2) Google Analytics uses so-called "cookies", text files that are stored on the user's computer and serve the purpose of enabling an analysis of the use of the Internet pages. As a rule, the information generated by the cookie about the use of this Website by the user is transmitted to a Google server in the USA and stored there. IP anonymisation is activated on the provider's Website so that the IP addresses of Google users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area are shortened beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there so that data processing can take place outside the European Union. In this case, the personal data collected by Google Analytics is transmitted to the USA. Google has completed certification in accordance with the EU-US Privacy Shield (see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and therefore created the legal requirements for the appropriateness of the data protection level for the provision of the Google Analytics service by way of order processing.

(3) On behalf of the operator of the Website, Google will use this information to evaluate the use of the Website, to compile reports on Website activity and to provide the Website operator with other services related to website and Internet use.

(4) The user can object to the use of Google Analytics and prevent the storage of the cookies by means of a corresponding setting in the Internet browser, as shown in Section 6.2 (3) above. In addition, the user can prevent the collection of the data generated by the cookie and relating to his or

her use of the Website (including his or her IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on available under the following link to deactivate Google Analytics JavaScript (ga.js, analytics.js, dc.js): http://tools.google.com/dlpage/gaoptout?hl=de.

(5) The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

(6) Further information and the applicable data protection provisions of Google can be accessed at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html.

(7) Insofar as the user submits his or her consent to this, the legal basis for the use of Google Analytics is Art. 6, para. 1, sentence 1, clause a of the GDPR, as well as Art. 6, para. 1, sentence 1, clause f of the GDPR, as the use of Google Analytics is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in the analysis of the use of the Website in order to improve the internet presence and the offers and to render them more interesting for the user.

6.3.2 Google AdWords

(1) We use the services of Google AdWords to draw attention to our offers with the help of advertising materials (so-called Google AdWords) on external websites. Google AdWords is a service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereafter referred to as "Google"). We can determine on the basis of the data of the advertising campaigns how successful the individual advertising measures are. With this we are pursuing our interests in showing you advertisements that are of interest to you, making our Website more interesting for you and achieving a fair calculation of advertising costs.

(2) These advertising media are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of advertisements or clicks by users, can be measured. If you access our Website via a Google advertisement, Google AdWords stores a cookie on your device. These cookies usually expire after 30 days and are not intended to personally identify you. As a rule, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt- out information (a mark indicating that the user no longer wishes to be addressed) are stored as analysis values for this cookie.

(3) These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the advertisement and has been forwarded to this Website. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. We do not process any personal data ourselves in the aforementioned advertising measures. We are only provided with statistical evaluations by Google. We are able to recognise which of the advertising measures are particularly effective on the basis of these evaluations. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify the users on the basis of this information.

(4) On the basis of the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement of ours. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may learn of and store your IP address.

(5) You can take various measures to prevent participation in this tracking procedure: (a) by carrying out a corresponding adjustment to your browser software – in particular, suppressing third-party cookies means that you will not receive any advertisements from third parties; (b) by disabling the cookies for conversion tracking by adjusting your browser to block cookies from the "www.googleadservices.com" domain, https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies; (c) by deactivating the interest-based advertisements of the providers which form part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; (d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.

(6) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 clause f of the GDPR, as the use of Google AdWords is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in showing you advertisements that are of interest to you, making our Website more interesting for you and achieving a fair calculation of advertising costs.

(7) Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org Google has committed itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

6.3.3 Hotjar Analytics

(1) The websites use Hotjar, an analysis software program of Hotjar Ltd ("Hotjar") (http://www.hotjar.com , 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). With Hotjar it is possible to measure and evaluate the usage behaviour (clicks, mouse movements, scroll heights, etc.) on our Websites. The information generated by the "tracking code" and "cookies" about your visit to our Website is transmitted to and stored on the Hotjar servers in Ireland.

(2) The tracking code collects the following information: Device-dependent data: The following information can be recorded by your device and browser:

  • The IP address of your device (collected and stored in an anonymized format);
  • Your E-mail address, including your first and last name if you have made these available to us via our website;
  • Screen size of your device;
  • Device type and browser information;
  • Geographical location (only the country);
  • The preferred language for the display of our website. Log data: The following data is automatically generated by our servers when Hotjar is used:
  • Referring domain;
  • Pages visited;
  • Geographical location (only the country);
  • The preferred language for the display of our Website;
  • Date and time when the Website was accessed.

(3) Hotjar will use this information to evaluate your use of our Websites, create reports on such use and provide other services relating to this Website use and the Internet evaluation of the Website. Hotjar also uses third-party services such as Google Analytics and Optimizely for such service provision. These third-party companies may store information that your browser sends when you visit the site, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy policies. The cookies which Hotjar uses have a different "lifetime"; some remain valid for up to 365 days, some only during the current visit.

(4) Insofar as the user submits his or her consent to this, the legal basis for the use of Hotjar Analytics is Art. 6, para. 1, sentence 1, clause a of the GDPR, as well as Art. 6, para. 1, sentence 1, clause f of the GDPR, as the use of Google Hotjar is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in obtaining information on the use of our Websites in order to be able to optimise the Websites and our offers. (5) You can prevent Hotjar from collecting your information by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.

6.3.4 Facebook Tracking/Conversion Pixels

We use tracking/conversion pixels and visitor action pixels from Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook can tell if a Facebook advertisement was successful by viewing this pixel from your browser. We only receive statistical data from Facebook for this purpose without reference to a specific data subject. This allows us to track the effectiveness of Facebook ads for statistical purposes and market research purposes. If users give their consent, the legal basis for the processing of your data is Art. 6, para. 1, sentence 1, clause a of the GDPR, and in all other respects, the legal basis for the processing is Art. 6, para. 1, sentence 1, clause f of the GDPR, as the use of Facebook tracking/conversion pixels is necessary to protect our legitimate interests. The legitimate interests which we pursue consist in measuring the success of our advertisements on Facebook. Further information on data protection at Facebook can be found here: www.facebook.com/about/privacy/.

6.3.5 Capterra Conversion Tracking

We use the Capterra analysis application on our Websites for our online marketing activities. The provider is Capterra Inc., 901 North Glebe Road, Suite 1010, Arlington, VA 22203, USA. If you trigger a so-called conversion event on one of our Websites (e.g. registration for a free product test), Capterra places cookies on your device. These cookies are needed for marketing and analysis purposes and send the information that a conversion event has taken place to Capterra's systems. Insofar as the user submits his or her consent to this, the legal basis for the use of Capterra Conversion Tracking is Art. 6, para. 1, sentence 1, clause a of the GDPR, in all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR, as such use is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in obtaining information on the use of our Websites in order to be able to optimise our offers. Further information on data protection at Capterra can be found here: https://www.capterra.com/legal/privacy-policy.

6.3.6 LinkedIn Conversion Tracking, LinkedIn Insight Tag

(1) Our Websites use LinkedIn Conversion Tracking, a web analysis function of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn Conversion Tracking is an analysis function which is supported by the LinkedIn Insight tag. The LinkedIn Insight tag is a simple Javascript code that is placed on our Websites. This tag stores a cookie in your web browser when you visit our Websites. The cookie provides LinkedIn with information about whether our advertising measures on LinkedIn results in conversions on our Websites. An example of a conversion is when you register for a free product test. LinkedIn members can change the settings for LinkedIn Conversion Tracking in their account.

(2) Through the use of LinkedIn Conversion Tracking, data is transmitted to LinkedIn in the USA. LinkedIn is committed to the principles of the EU-US Privacy Shield. This ensures that the requirements of the GDPR are complied with. For more information on this, see:  https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active. What information LinkedIn receives and how it is used is generally described in the Data Policies: http://www.linkedin.com/legal/privacy-policy.

(3) Insofar as the user submits his or her consent to this, the legal basis for the use of LinkedIn Conversion Tracking is Art. 6, para. 1, sentence 1, clause a of the GDPR, in all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR, as such use is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in obtaining information on the efficiency of advertising measures in the social network of LinkedIn and optimising the offers on our Website.

6.4 Use of Social Media Plug-Ins

We use social media plug-ins of social networks. These are small buttons that enable you to share content from our Websites in these social networks with other users without leaving our Websites. The legal basis for this processing in each case is Art. 6, para. 1, sentence 1, clause f of the GDPR because the use of plug-ins is based on our legitimate interests. These are the further processing of

information about our offers in social networks, as well as the optimisation and economic operation of the Websites.

6.4.1 Facebook Social Plug-Ins

(1) Our Websites use plug-ins of the social network facebook.com. The provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you call up a function of our Websites that includes a Facebook plug-in, your device establishes a direct connection with the Facebook systems. Data from your device and the information that you are visiting our Website is transmitted to Facebook. It is possible that Facebook will use the data in question to create a user profile. If you are a member of Facebook and you logged in to Facebook while visiting our Websites, the relevant information may be assigned to your user account. If you do not wish this to happen, you should log out of Facebook before visiting our Websites and delete the cookies on your device. We have no influence on the data collected by Facebook or the data processing operations, nor are we aware of the full extent of the data collection, the purposes of processing or the storage periods.

(2) Based on the use of the plug-ins, data is transmitted to Facebook in the USA. Facebook is committed to the principles of the EU-US Privacy Shield. This ensures that the requirements of the GDPR are complied with. For more information, see: https://www.facebook.com/about/privacyshield and https://www.privacyshield.gov/EU-US-Framework. What information Facebook receives and how it is used is generally described in the data policies: https://www.facebook.com/about/privacy/. If you have an account with Facebook, you can change the settings in your profile settings and the use of your data by Facebook.

6.4.2 Twitter Social Plug-Ins

(1) Our Websites use plug-ins of the short message service twitter.com. The provider is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using the plug-in, you can share the content of our Websites with other Twitter users. Data from your device and the information that you are visiting our Website is transmitted to Twitter and, if you are a Twitter member, assigned to your Twitter user profile. We have no influence on the data collected by Twitter or the data processing operations at Twitter, nor are we aware of the full extent of the data collection, the purposes of processing or the storage periods.

(2) Based on the use of the plug-ins, data is transmitted to Twitter in the USA. Twitter is committed to the principles of the EU-US Privacy Shield. This ensures that the requirements of the GDPR are complied with. For more information, see: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active What information Twitter receives and how it is used is generally described in the data policies: https://twitter.com/privacy

6.4.3 LinkedIn Social Plug-Ins

(1) Our websites use plug-ins of the social network linkedin.com. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. By using the plug-ins, you can share the content of our websites with other LinkedIn users. Data from your device and the information that you visit our website is transmitted to LinkedIn and, if you are a LinkedIn member, assigned to your LinkedIn user profile. We have no influence on the data collected by Twitter or the data processing operations at Twitter, nor are we aware of the full extent of the data collection, the purposes of processing or the storage periods.

(2) Based on the use of the plug-ins, data is transmitted to LinkedIn in the USA. LinkedIn is committed to the principles of the EU-US Privacy Shield. This ensures that the requirements of the GDPR are complied with. For more information, see: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active What information LinkedIn receives and how it is used is generally described in the Data Policies: http://www.linkedin.com/legal/privacy-policy.

6.5 YouTube

(1) We have integrated YouTube videos into our Websites, which are stored on http://www.YouTube.com and can be played directly from our Websites. YouTube is a service of YouTube LLC, which is headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC.

(2) When you play the videos, the data referred to in Section 6.1 is transmitted to YouTube. This is carried out regardless of whether you have a user account at YouTube that you are logged in with, or whether no user account exists. We have no influence on this data transmission. If you are logged in to YouTube or Google, your data is directly associated with your account there. If you do not want the assignment of your data to your profile on YouTube, you must log out before playing the videos. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research and the needs-based design of the service. ​Such evaluation is also carried out in particular for the purposes of providing needs-based advertising and in order to inform other users about your activities on our Websites. You have the right to object to the creation of these usage profiles; you have to contact YouTube in order to exercise this right.

(3) For more information on the purpose and scope of the data collection and its processing by YouTube, please refer to the privacy policy: https://policies.google.com/privacy?hl=de&gl=de YouTube and/or Google also process your personal data in the USA and have committed themselves to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

(4) The legal basis for the processing is Art. 6, para. 1, sentence 1, clause f of the GDPR, as the processing is necessary to protect our legitimate interests and the legitimate interests of YouTube. The processing is necessary for the analysis, optimisation and economic operation of the Website and the use of YouTube.

6.6 Wistia

(1) We have integrated the video hosting service Wistia into our Websites. The provider of Wistia is Wistia Inc., 17 Tudor Street Cambridge, Massachusetts, 02139, USA. Videos hosted on Wistia can be played directly on our Websites. When you play the videos, the data referred to in paragraph 6.1 is transmitted to Wistia. Additionally, cookies are placed on your device.

(2) Wistia stores data and uses it for the purposes of the needs-based design of the service. Wistia provides us with information about the number of times the videos are viewed etc. Further information on the purpose and scope of the data collection and its processing by Wistia can be found in the privacy policy: wistia.com/privacy Wistia also processes your personal data in the USA and has committed itself to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TSBFAA4&status=Active

(3) The legal basis for the processing is Art. 6, para. 1, sentence 1, clause f of the GDPR, as the processing is necessary to protect our legitimate interests and the legitimate interests of Wistia. The processing is necessary for the analysis, optimisation and economic operation of the website and the use of Wistia.

6.7 Profiling

We process your data automatically in part with the aim of evaluating certain personal aspects (profiling). The profiling is carried out for the purposes of enabling needs-based communication and advertising, including market and opinion research, as well as the needs-based design of the Website, unless you have objected to such profiling. Provided that you have given your consent, the legal basis for this is Art. 6, para. 1, sentence 1, clause a of the GDPR, in all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. Profiling is necessary to protect our legitimate interests. The legitimate interests pursued by us consist in enabling advertising, market and opinion research, as well as in designing the Website in accordance with the requirements of the user. With respect to the user's right of objection, reference is made to the information in section 15.

6.8 Test Use and Registration

The test use of our products is possible if you register for this purpose on our Websites. Only mandatory information is required for successful registration. All other information is voluntary. Mandatory fields:

  • First name,
  • Surname,
  • E-mail address. Voluntary information:
  • Telephone number,
  • Company,
  • Number of probable users of the product. Furthermore, the data referred to under Article 6.1 is processed. We use this personal data to identify you as a potential customer, to be able to release the product for you for test use, to advise and support you with regard to this test use and to prevent misuse of the product through multiple test uses. The legal basis for such processing is Art. 6, para. 1, sentence, 1, clause b of the GDPR, since processing is necessary for the implementation of pre-contractual measures with regard to the test use contract which are carried out at the request of the data subject. Furthermore, the processing is necessary for the execution of the test use contract. You can agree to receive our product information as part of the registration process for test use. Section 6.11 applies in this case.

6.9 Help Centre

You have the option of contacting our Help Centre via our Websites, where you can also submit enquiries. Access to the Help Centre generally requires prior registration and user registration for the specific enquiry. For the registration, the following data must be entered in the corresponding on- screen form:

  • Surname and first name,
  • E-mail address. After entering this data, you will receive an E-mail from us sent to the E-mail address provided with a link, after the activation of which you can set a personal password. After this, your registration is complete. For specific inquiries to the Help Centre, you can log on to our Website with your access data (E-mail address and password). You can also log on via your Twitter, Facebook or Google account. For a successful logon, it is necessary that your browser allows the setting of cookies. In the Help Centre you can submit support requests and select various Help Centre options under the "My Settings" menu. Your access data and the information that you provide us with within the context of the enquiry will then be processed. Furthermore, the data referred to under Article 6.1 is processed. We need this data so that we can answer your enquiries in the Help Centre and optimise the use of the Help Centre.

We use the services of Zendesk, Inc, 1019 Market Street, San Francisco, California 94103, San Francisco, USA to operate the Help Centre. Data protection information of Zendesk Inc. is available at https://www.zendesk.de/company/customers-partners/privacy-policy/. Zendesk has committed itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing is Art. 6, para. 1, sentence 1, clause b of the GDPR, as the processing is necessary for the execution of the use or support contract which you may have concluded with us.

6.10 Contact Form

You have the option of sending us a message via the contact form on our Websites. Only a few mandatory details are required for this. All other information is voluntary. Mandatory fields:

  • First name,
  • Surname,
  • E-mail address. Voluntary information:
  • Telephone number,
  • Company name. Furthermore, the data referred to under Article 6.1 is processed. This personal data is used by us to identify you as a potential or existing customer and to answer to your message. The legal basis for the processing is Article 6, para. 1, first sentence, clause b of the GDPR, since processing is necessary for the implementation of pre-contractual measures taken at the request of the data subject. Furthermore, the processing may be necessary for the execution of a contract concluded between you and us. You can agree to receive our product information by contacting us via the contact form. Section 6.11 applies in this case.

6.11 Product Information

(1) With your consent, you will receive information from us by E-mail, telephone and SMS about our company, our products and services, as well as innovations and offers. You give us your consent by ticking the relevant box when ordering (opt-in). Your consent is recorded by us in order that we can provide evidence of the order process in accordance with the legal requirements. For this purpose, the login time and the IP address are stored, among other things. Subsequent changes to the notified data are also recorded.

(2) Only your E-mail address is mandatory for sending the product information. The provision of further, separately marked information and data is voluntary; this data may be used for the purpose of being able to contact you personally. We store your E-mail address and any other information that you may have provided for the purpose of sending you the product information.

(3) You can revoke your consent to receive the product information at any time and cancel the request for product information. The revocation can be declared by clicking on the link provided in every product information E-mail or by E-mail to support@propertybase, or by sending a message to the contact details provided in the legal notice of the website.

(4) The legal basis for the transmission of the product information is your consent in accordance with Art. 6, para. 1, sentence 1, clause a and Art. 7 GDPR in conjunction with Section 107, para. 2 of the German Telecommunications Act (TKG). In all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR in conjunction with Section 107, para. 2 and (3) TKG. We have a legitimate interest in customer acquisition and customer retention through direct marketing. The legal basis for recording the order is Art. 6, para. 1, sentence 1, clause f of the GDPR. Our legitimate interest consists in the use of a user-friendly and secure system, which allows us in particular to provide proof of consent.

(5) If you give us your consent to do so, we will evaluate your user behaviour on our Websites and within the product information sent by us by E-mail and assign it to your E-mail address / user profile within our database. We also store information about the browser you are using and the settings you have made in your operating system, as well as information about the Internet connection with which you can reach our Websites. From the product information sent to you, we receive confirmations that you have received and read the information, as well as information about the links you have clicked on in our product information. We also store which areas of our website you have visited. By creating a personal user profile, we would like to align our advertising approach to your interests and optimise our offers on our Websites for you. You can revoke your consent to this evaluation of your user behaviour at any time. The revocation can be declared by clicking on the link provided in every product information E-mail or by E-mail to support@propertybase, or by sending a message to the contact details provided in the legal notice of the website. The legal basis for the processing is Art. 6 para. 1 sentence 1 clause a of the GDPR. In all other respects, the legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. Profiling is necessary to protect our legitimate interests of the provider. The legitimate interests pursued by us consist in enabling customer-specific information and optimising customer acquisition and customer retention. With regard to your right of objection in the case of direct advertising and profiling, please refer to Section 15.

6.12 Hosting

Our Websites are hosted on our behalf by the firm Heroku, Inc, The Landmark @ 1 Market St., Suite 300, San Francisco, CA 94105, USA. We use infrastructure and platform services, computing capacity, storage space and databases, E-mail dispatch, security precautions and technical maintenance. In this context, we and Heroku, Inc. process inventory data, contact data, content data, contract data, usage data, as well as meta and communication data of the users of the Websites. The legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. We pursue the legitimate interest of making the Websites available in an efficient and securely manner. The data protection information of Heroku, Inc. is available at https://www.heroku.com/policy/privacy. Heroku, Inc. is committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

6.13 Content Delivery Network Amazon CloudFront

We use the Content Delivery Network (CDN) of Amazon CloudFront. This service is provided by Amazon Web Services, Inc., 410 Terry Avenue, North Seattle, WA 98109, USA. A CDN is a network of regionally distributed servers connected via the Internet. This network delivers content – especially large amounts of data or media files – efficiently and quickly to users. The legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. We pursue the legitimate interest of making the Websites available in an efficient and securely manner. Amazon CloudFront's privacy information can be found at https://aws.amazon.com/de/privacy/?nc1=f_pr. Amazon Web Services, Inc, is committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

6.14 CRM System

We use the Customer Relations Management System (CRM System) of Salesforce.com, Inc., The Landmark @ One Market St., Suite 300 San Francisco, California 94105, USA. The CRM System records the data of users who contact us with inquiries or who register for test use. Among other things, the CRM System supports us in efficiently and quickly processing and responding to inquiries from users. The legal basis is Art. 6, para. 1, sentence 1, clause f of the GDPR. We pursue the legitimate interest of optimising our communication with users and interested parties.

Privacy information of Salesforce.com, Inc. can be found at https://www.salesforce.com/de/company/privacy/. Saleforce.com, Inc. is committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

7. Recipients of Personal Data

(1) Within our company group, the internal departments or employees that receive your data are those that require it to fulfil our contractual and legal obligations or within the framework of the implementation of our legitimate interests.

(2) Your data will only be passed to other third parties in connection with the execution of the contract, for the purposes of fulfilling legal requirements according to which we are obliged to provide information, report or pass on data or if the forwarding of data is in the public interest, insofar as external service providers process data on our behalf as contract processors or function providers, on the basis of our legitimate interest or the legitimate interest of the third party or if you have given us your consent for such transfer to third parties.

8. Transfer to a Third Country

If personal data is transferred to a third country, the third country in question and the recipient of the data are described in Section 6 above.

9. Storage Duration and Deletion of Personal Data

We process and store your personal data for as long as the preconditions for the legality of such processing according to Art. 6 of the GDPR are fulfilled. We store the data in particular for the duration of any existing business relationship between you and us. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. Furthermore, we process and store your personal data if this is necessary on the basis of legal retention and documentation obligations. Such obligations are stipulated, inter alia, by the German Commercial Code (HGB) and the German Tax Code (AO). The periods for storage or documentation specified there are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship. Furthermore, other legal regulations may require a longer retention period, e.g. the preservation of evidence within the framework of the legal statute of limitations regulations. According to Sections 195 ff. of the German Civil Code (BGB), the standard limitation period is three years; in certain cases, however, limitation periods of up to 30 years may apply. If the data is no longer required for the fulfilment of contractual or statutory obligations and rights, it is regularly deleted, unless its further processing – for a limited period – is necessary for the fulfilment of purposes which are justified by an overriding legitimate interest within the meaning of Section 6, para. 1, sentence 1, clause f of the GDPR. Such a legitimate interest on our part exists, for example, if deletion is not possible or only possible with disproportionate effort due to the special type of storage, and processing for other purposes is excluded by appropriate technical and organisational measures.

10. Obligation of the User to Provide Personal Data and the Possible

Consequences of the Failure to do so For the test use of our products, as well as for the use of the Help Centre, registration and logging on is required in each case, with the provision of the data designated for this purpose. If you do not provide the data, you cannot use these offers.

11. No automated Decision-Making

We do not take any automated decisions.

12. Protection of Personal Data

We take technical and organisational measures in accordance with the requirements of Art. 32 of the GDPR for the protection of the personal data of the data subject/user. Our employees who are involved in the processing of personal data are bound by an obligation to maintain confidentiality.

13. Changes to the Privacy Policy

From case to case it is necessary to adapt and change the contents of this Privacy Policy. We therefore reserve the right to change this Privacy Policy . The updated Privacy Policy is provided on the Websites in each case.

14. Availability of the Privacy Policy

This Privacy Policy can be accessed and printed out from the footer of Propertybase Websites.

15. Reference to the Right of Objection under Art. 21 GDPR

15.1 Right of Objection based on the Specific Situation

You have the right to object at any time, for reasons arising from your specific situation, to the processing of personal data concerning you which is based on Art. 6, para. 1, sentence 1, clause e (public security) or f (data processing on the basis of a balance of interests) of the GDPR; this also applies to profiling based on these provisions. When an objection is submitted, we no longer process the personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

15.2 Right of Objection in the Case of Direct Advertising

If we process your personal data for direct advertising purposes, you have the right to object at any time to the processing of personal data relating to you for the purposes of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

15.3 Address for the Submission of the Objection

Please send your objection to the address stated in the Legal Notice of the website or to the following E-mail address: support@propertybase.com.