Privacy Policy
In this Privacy Declaration, we explain the type, scope and purpose of processing your personal data (in short „data“) on our website https://whu-realestate.de/ and when using our platform. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
1. Controller and Data Protection Officer
Controller:
WHU Real Estate Club e.V. i.G.
c/o WHU – Otto Beisheim School of Management
Burgplatz 2
56179 Vallendar
E-Mail: realestate@whu.edu
Telefon: +49 1577 51991862.
Information on the processing operations, purposes and legal basis
2.1. Collection of personal data when visiting our website
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server. This information is temporarily stored in a so-called server log file. The following information, which is technically necessary for us, is recorded without your intervention and stored until it is automatically deleted:
* Name of the retrieved file
* Date and time of retrieval
* transferred data volume
* Message whether the retrieval was successful
* Description of the type of web browser used
* Operating system used
* the previously visited page
* Provider
* Your IP address
We process the data mentioned above for the following purposes:
* To ensure a smooth connection of the website
* Evaluation of the system security and stability of the website
The legal basis for the data processing is Art. 6 para. 1 letter f GDPR. Our legitimate interest is based on the aforementioned purposes and the technical necessity of processing the collected data in order to display our website. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.Furthermore, we use cookies as well as analysis and marketing services when you visit our website. You will find more detailed explanations on this under points 3 to 5 of this Privacy Declaration.
2.2. Responding to inquiries
Personal data is collected when contacting us (e.g. via contact form or e-mail). Thereby the indication of your contact data and a message is necessary to answer your request. Further information can be provided voluntarily.The collected data will be stored and processed exclusively for the purpose of answering your request or for contacting you and the related technical administration.The data processing for the purpose of answering your inquiry by us is based on Art. 6 para. 1 letter f GDPR. If you contact us in order to conclude a contract with us, the legal basis for processing is Art. 6 Para. 1 letter b GDPR.The personal data collected by us for the purpose of answering your inquiry will be automatically deleted after completion of the inquiry you have made if it is clear from the circumstances that the matter in question has been conclusively clarified and there is no legal obligation to retain it.
2.3. When creating a user account
On our website we offer you the possibility to register as a user in order to use the functions of our platform.In order to create a user account, your name and e-mail address are required.The data processing is carried out for the purpose of contract implementation in accordance with Art. 6 Para. 1 letter. b GDPR, in order to be able to fulfil the user contract concluded with you.After deletion of your user account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data (e.g. within the scope of e-mail marketing) or further use of data is required which is permitted by law.
2.4. Participation in digital events
If you book and visit our digital events, we are responsible for processing your personal data.
If you participate in one of the virtual events offered on our platform, we process your data (first name, last name, e-mail, position/function, company) in order to carry out the event and to enable you to participate. In addition, we use this data to send you event-related materials (e.g. white papers) created after the event. Furthermore, we may pass on your data to the partners identified at the event if this is necessary to conduct the event and enable your participation, e.g. external guest management. The legal basis for this data processing is Art. 6 para. 1 letter b GDPR.
In order to offer our service free of charge, we work together with selected partners. If you register for one of these free events in the future, you thereby declare your voluntary consent that we may pass on your data (first name, last name, e-mail, position/function, company) to the partner identified at this event and that this partner may subsequently contact you via e-mail or send you further information about its services in the future. You can revoke your consent at any time by clicking on the unsubscribe link at the end of the respective e-mail or by informing us or the respective partner of your revocation by mail or e-mail.
2.5. Use of your data for direct advertising and newsletter tracking
We send e-mails and other notifications containing advertising information about our offers and services (hereinafter referred to as „Newsletter“) only with the consent of the recipients or a legal permission.
The newsletter contains content as specified in the registration form, otherwise information about our services, other events and our company. If you wish to receive the newsletter offered on the website, we require a valid e-mail address from you.
We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after 24 hours. In addition, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The legal basis for this processing is Art. 6 para. 1 letter c GDPR, as we are legally obliged to prove registrations.
After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 letter a GDPR. You can revoke your consent to receive the newsletter at any time and unsubscribe. You can revoke your consent by clicking on the unsubscribe link provided in each newsletter e-mail, by e-mail to info@builtworld.com or by sending a message to the contact data provided under point 1. We may store the unsubscribed e-mail addresses together with the IP address you used and the time of registration and confirmation for up to three years on the basis of our legitimate interests in accordance with Art. 6 para. 1 letter f GDPR in a restricted manner in order to be able to prove a previously given consent before we delete this data. This data is processed for the purpose of a possible defense against claims.
If you have provided us with your e-mail address when purchasing our services, we reserve the right to send you regular offers by e-mail on similar services, such as those already purchased, from our range of products. In accordance with § 7 para. 3 UWG (law on unfair competition), we do not need to obtain your separate consent for this. In this respect, data processing is based solely on our justified interest in personalized direct advertising in accordance with Art. 6 Par. 1 letter f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you a newsletter. You are entitled to object to the use of your e-mail address for the above-mentioned advertising purpose at any time with effect for the future by notifying the above-mentioned responsible person. For this you will only incur transmission costs according to the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will be immediately discontinued.
3. Use of technically necessary cookies
We use so-called „cookies“ and comparable techniques on our website, by which your computer can be identified as a technical unit during your visit to the website, in order to enable you to use our offer.
A cookie is a small file that is sent to your computer or automatically stored on your computer or mobile device by the web browser used when you visit our website. If you visit this website again, we can recognize you in this way, even if we do not know who you are. In addition to cookies that are only used during a session and are deleted after your visit to the website („session cookies“), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) („permanent cookies“).
We use so-called technically necessary cookies in some areas of our website. Such file elements allow your computer to be identified as a technical unit during your visit to this website in order to enable you to use our services. Some functions of our website cannot be offered without the use of cookies. Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. The user data collected through technically necessary cookies is not used to create user profiles.
Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 letter b GDPR either for the execution of the contract or in accordance with Art. 6 Para. 1 letter f GDPR to protect our legitimate interests. The processing is carried out to enable the functioning of our website. It is therefore necessary to protect our legitimate interests.
However, you usually have the option of setting your Internet browser to inform you about the occurrence of cookies so that you can allow or exclude them or delete existing cookies. Most Internet browsers are preset to accept cookies.
Please use the help function of your Internet browser to obtain information on how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of technically necessary cookies.
Cookies do not allow a server to read private data from your computer or the data stored by another server. They do not damage your computer and do not contain viruses.
We also use cookies and other analysis tools to improve our offer and presentation of advertising offers that are of interest to you and, under certain circumstances, we work together with advertising partners who help us to make our Internet offer more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and analysis tools and the cooperation with advertising partners, the scope of the information collected in each case and the legal basis within the following paragraphs.
4. Use of additional and third-party tools
In addition, we use the following cookies and third-party tools to understand how you use our offerings and to provide you with other promotional offers that may be of interest to you. The services described below will only be used if you have given your prior consent in accordance with Art. 6 para. 1 letter a GDPR.
a) Use of Google Analytics
Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes. Logged are: Name of the retrieved file, date and time of the retrieval, transferred data volume, notification of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the inquiring computers are logged.
Furthermore, this website uses Google Analytics, a web analysis service of Ireland Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google Analytics uses „cookies“, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google. On the one hand, you can set a so-called opt-out cookie, which deactivates tracking by Google Analytics across all pages. This works on desktop computers and mobile devices alike.
The second option is a browser plugin, which you can install under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This plugin also disables tracking by Google Analytics, but is not available on mobile devices.
For more information on terms of use and data protection, please visit: http://www.google.com/analytics/terms/de.html or https://www.google.com/analytics/learn/privacy.html. We would like to point out that on this website Google Analytics has been extended by the code „gat._anonymizeIp();“ in order to guarantee an anonymous collection of IP addresses (so-called IP-Masking).
5. Integration of external content and functions
We embed content, software or functions (in short „content“) of other providers on our website (so-called „embedding“). The embedding is done to make our online offer more interesting for you or for legal reasons, e.g. to be able to present videos or social media contributions on our website at all. The embedding can also serve to improve the speed or security of the online offer, e.g. if software elements or fonts are obtained from other sources. In all cases, the processed data includes your usage and meta data and also the IP address necessarily transmitted to the provider for the integration of the content.
a) Use of Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google. This function is mainly used to differentiate whether an input is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 letter f GDPR on the basis of our legitimate interest in establishing individual responsibility on the Internet and avoiding abuse and spam. In the course of using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA.
Further information about Google reCAPTCHA as well as Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy.
b) Use of Vimeo
On this website we also use the video feature of Vimeo, LLC, 555 West 18th Street, New York, New York 10011.The videos are integrated via a so-called plugin. When you access the websites of our platform that are equipped with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our websites you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When you use the plug-in, such as when you click on the start button of a video, this information is also assigned to your user account. This data processing is carried out in accordance with Art. 6 Par. 1 letter f GDPR on the basis of our legitimate interest in designing our platform to meet the needs of our customers. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
Further information on data processing and notes on data protection by Vimeo can be found at
https://vimeo.com/privacy.
6. Transfer of data
Unless expressly stated below or in the previous sections, your data will not be disclosed to third parties or other recipients.
We also only pass on your personal data to third parties if:
you have given your express consent in accordance with Art. 6 para. letter a GDPR,
* the disclosure pursuant to Art. 6 para. 1 letter f GDPR is necessary for the assertion, exercise or defence of legal claims and * there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
* in the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 letter c GDPR, and
* this is legally permissible and, in accordance with Art. 6 para. 1 letter b GDPR, necessary for the processing of contractual relationships with you.
6.1. Hosting
We use Host Europe and Amazon AWS (EU) as external service providers for the provision and technical operation of our platform and the associated website (so-called hosting). The hosting services we use serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services. The service provider processes the personal data processed for these purposes only on our behalf in accordance with our instructions and we have concluded a contract with them for order processing in accordance with Art. 28 GDPR.
7. Storage period
The data processed by us will be deleted or limited in their processing in accordance with articles 17 and 18 GDPR.Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as you revoke any consent you may have given or if the data is no longer required for its intended purpose and no legitimate interests or statutory storage obligations stand in the way of deletion.
If the data are not deleted because they are required for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
In accordance with legal requirements, data is stored for 6 years in accordance with § 257 Paragraph 1 HGB (e.g. commercial letters, accounting records, etc.) and for 10 years in accordance with § 147 Paragraph 1 AO (e.g. commercial and business letters, tax-relevant documents).8. No automated decision making (including profiling)We do not intend to use personal data collected from you for any automated decision making process (including profiling).
9. Rights of the data subject
You are entitled to the following rights:
9.1. Right to access
You have the right to ask us to confirm whether personal data concerning you is being processed.
9.2. Right to rectification/erasure/restriction of processing
Furthermore, you have the right to demand that
* incorrect personal data concerning you are corrected without delay (right torectification)
* personal data concerning you are deleted without delay (right to erasure) and
* the processing is restricted (right to restriction of processing).
9.3. Right to data portability
You have the right to receive personal data concerning you, which you have provided us with, in a structured, commonly used and machine-readable format and to transfer this data to another controller.
9.4. Right to withdraw
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.
9.5. Right to object
If the processing of your personal data is necessary to protect our legitimate interests (Art. 6 para. 1 letter f GDPR), you have the right to object.
9.6. Right to lodge a complaint
If you believe that the processing of personal data relating to you is in breach of the GDPR, you have the right to lodge a complaint with the competent supervisory authority, without prejudice to other legal remedies.
10. Modification of our Privacy Declaration
We reserve the right to adapt this data protection declaration in the event of any changes to the legal situation, the services offered on the website and data processing. However, this only applies with regard to statements on data processing. If your consent is required or if parts of the data protection declaration contain regulations of the contractual relationship with you, the changes will only be made with your consent.
You can inform yourself regularly about any changes in this data protection declaration.
Status: 23. September 2020
