We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data when using our website is an important concern for us.

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address.

Data for which no reference to your person can be established, such as anonymized information, is not personal data. Processing (e.g. collection, storage, retrieval, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 GDPR always requires your consent or another legal basis. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally prescribed retention obligations to fulfil.

Here you can find information about the handling of your personal data when visiting our website. To provide the functions and services of our website, it is necessary that we collect personal data about you.

Below you will find the contact details of the responsible entity and the data protection officer.

Below you will also find information on the type and scope of the respective data processing, the purpose and the corresponding legal basis as well as the respective storage period.

This privacy policy only applies to this website. It does not apply to third-party websites to which we merely refer by means of a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether they comply with the statutory data protection provisions. Please inform yourself about the handling of your personal data by third parties directly on their websites.

Information on data protection

Responsible for the processing of personal data on this website is (see imprint):

Real I.S. AG
Gesellschaft für Immobilien Assetmanagement
Innere Wiener Straße 17
81667 München
Phone: +49 89 489082 0
Fax: +49 89 489 082 - 295
E-mail: info(at)realisag.de

Represented by the Board: Dr. Christine Bernhofer (Chair), Bernd Lönner (Deputy Chair), Franz Krewel

You can also contact our data protection officer at any time with questions about data protection:

Dr. Georg F. Schröder, LL.M. 
legal data Schröder Rechtsanwaltsgesellschaft mbH
Prannerstr. 1
80333 Munich, Germany

Phone: +49 89  954 597 520
Fax: +49 89  954 597 522
E-mail: georg.schroeder(at)legaldata.law

a) Type and scope of data processing

If you use this website without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect technically necessary data in the form of log data (so-called log files), which are automatically transmitted to our server by your device, including:

• IP address

• Date and time of the request

• URL of the retrieved subpage

• URL of the page from which the forwarding to our page took place (so-called referrer URL)

• Access status/HTTP status code

• Browser software type, language and version

• Operating system

b) Purpose and legal basis of the data processing

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of our website and thus serves to protect a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personal data is no longer required to display the website, it is deleted. This is the case at the latest seven days after visiting our website. The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.

a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that we send to the browser of your end device and store there when you visit our website.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to perform various analyses. For example, some cookies can recognise the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Cookies enable us, among other things, to make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programmes or contain viruses. Various types of cookies are used on our website, the nature and function of which are explained below.

Transient cookies

Our website uses transient cookies, which are automatically deleted when you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognise your device during subsequent visits to the website.

Persistent cookies

Our website uses so-called persistent cookies. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period varies depending on the cookie. You can delete persistent cookies yourself via your browser settings.

Third-party marketing and social media cookies

Third-party marketing and social media cookies from third-party providers enable us to show you various offers that match your interests. These cookies can be used to track users' web activities over a longer period of time. The following third-party providers receive personal data cookies integrated via our website: Matomo Furthermore, certain cookies enable us to connect to your social networks and share content from our website within your networks.

Configuring your browser settings

Most web browsers are preset to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. Please note, however, that you may then no longer be able to use all the functions of our website. You can also use your browser settings to delete cookies already stored in your browser. Furthermore, it is possible to set your browser to notify you before cookies are stored. As different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options. Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate it again.

b) Legal basis

Based on the purposes described above, the legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legal basis is additionally Art. 6 (1) lit. a) GDPR.

c) Storage period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

Data protection settings

Our website uses cookies. A cookie is a small text file that a web portal leaves on the user's computer system (computer, tablet computer or smartphone) when they visit it. Personal data can be stored in cookies. In your browser settings, you can prevent tracking by cookies (do-not-track, tracking protection list) or prohibit the storage of third-party cookies. We only use cookies that are necessary for operation. These cookies are only necessary for the technical operation of the site. They are not passed on to third parties or used for tracking for marketing purposes.

a) Type and scope of data processing

In the pre-contractual period and upon conclusion of the contract, we collect personal data about you. This concerns, for example, first and last name, address, e-mail address, telephone number or bank details.

b) Purpose and legal basis of the data processing

We collect and process this data exclusively for the purpose of fulfilling the contract with you or fulfilling pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage period

The data is deleted as soon as it is no longer required for the purpose of its processing. In addition, there may be legal obligations to retain data for up to 10 years, for example, obligations to retain data under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data upon expiration of these legal retention periods.

We will only share your personal information with third parties if:

1. you have given your express consent for this in individual cases in accordance with Art. 6 para. 1 lit. a) GDPR;

2. this is legally permissible and necessary according to Art. 6 para. 1 lit. b) GDPR for the fulfillment of a contractual relationship with you or the implementation of pre-contractual measures (e.g. to payment, shipping, delivery or collection service providers);

3. in accordance with Art. 6 para. 1 lit. c) GDPR, there is a legal obligation for the disclosure (e.g. to authorities, social insurance carriers, health insurance companies, supervisory authorities and law enforcement agencies);

4. the disclosure is necessary in accordance with Art. 6 para. 1 lit. f) GDPR for the protection of legitimate business interests, as well as for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest in the non-disclosure of your data (e.g. to debt collection service providers);

5. we use external service providers (so-called order processors) for processing in accordance with Art. 28 GDPR, who process data according to our instructions and are obliged to handle your data with care (e.g. in the areas of IT or marketing).

We use such service providers in the areas of IT, telecommunications, debt collection, sales and marketing.

When transferring data to external recipients in third countries, i.e. outside the European Union (EU) or the contracting states to the Agreement on the European Economic Area (EEA), we ensure that these recipients treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an adequate level of protection or if we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

We have obligated our subsidiary Real I.S. Australia to maintain an adequate level of data protection comparable to the level of data protection within the European Union through standard contractual clauses. These standard contractual clauses have been reviewed and approved by the European Commission. You can view the standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?eliuri=eli%3Adec_impl%3A2021%3A914%3Aoj&locale=en

a) Type and scope of data processing

You can apply on our website or via an application portal. 

We collect the data you enter or upload (photo, application documents) in the application form. Further information can be found in our information sheet for applicants.

b) Purpose and legal basis of the data processing

We use your data only for the purpose of processing your application. Your data will not be passed on to third parties. The legal basis for the processing is Art. 88 Para. 1 GDPR in conjunction with Section 26 BDSG and additionally Art. 6 Para. 1 lit. b GDPR.

If you give us your consent to be included in our applicant pool (consent to extended use), the legal basis is Art. 6 (1) (a) GDPR.

c) Storage period

If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account § 61b para. 1 of the German Labour Courts Act (ArbGG) in conjunction with § 15 of the German General Act on Equal Treatment (AGG). The start of the period is the receipt of the rejection letter.

If you have given us consent to include you in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer

Your data will only be disclosed to the departments involved in the decision-making process (responsible HR or specialist departments, management).

In addition, we may be obliged by law, administrative or court order to disclose your data to public authorities (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

Other data recipients may be those entities for which you have given us your consent to transfer data.

You can contact us via email on our website.

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us, the metadata (time stamp, additional recipients) and the personal data you provide as you wish when contacting us..

b) Purpose and legal basis of the data processing

The purpose of the data processing is responding to your request. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in processing the above-mentioned personal data to handle your request.

c) Storage period

The duration of the storage of the above data depends on the background of your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer required due to legal retention obligations. This may be the case if we have completed processing your request.

a) Type and scope of data processing

On our website, you can subscribe to a free regular e-mail newsletter. In order to send you the newsletter, we require your e-mail address.

We use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you consent to the sending of the newsletter. For this purpose, we will send you a confirmation e-mail in which you will be asked to confirm that you would like to receive future newsletters from us by clicking on a corresponding link.This ensures that only you, as the owner of the specified email address, can subscribe to the newsletter. Your confirmation must be made promptly after receiving the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input form (e.g., last name, first name, email address). This data will not be shared with third parties. Subscription to the newsletter is only possible with your consent.

b) Purpose and legal basis of the data processing

The purpose of the processing is to send you our newsletter to your email address. We use the data exclusively for sending newsletters. Pursuant to Art. 6 (1) (a) GDPR, the processing of your email address for sending the newsletter is based on the declaration of consent you voluntarily provide below, which can be revoked at any time in the future:

By entering my data and clicking the "Subscribe" button, I consent to the processing of my email address for regular newsletter distribution. I can unsubscribe from the newsletter service at any time by clicking the corresponding link at the end of the newsletter. I have read and accept the current privacy policy. I can revoke this consent at any time with future effect by contacting datenschutz.geschaeftspartner@realisag.de or the data protection officer.

c) Storage period

Your e-mail address will be stored as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address will be deleted unless you have consented to further use of your data or there is another legal basis for processing.

You can register on our website. When you register, we collect and store the data you enter in the input form (e.g., last name, first name, email address). This data will not be passed on to third parties.

In the case of consent, the legal basis for processing is Art. 6 (1) (a) GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 (1) (b) GDPR serves as an additional legal basis.

Your registration is required for the use of certain content and services on our website, or for the fulfillment of a contract or to carry out pre-contractual measures.

We use external fonts from Google on this website. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

These web fonts are integrated via a server call. This may also be a Google server in the USA. The server is informed which of our web pages you have visited. The IP address of your device is also processed by Google.

The purpose of using Google Fonts is to ensure the uniform display of fonts. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.

We do not process the data collected by Google through the use of Google Fonts.

You have the right to object to the creation of these user profiles. This must be addressed to Google.

Further information can be found in Google's privacy policy, which you can access here: https://www.google.com/policies/privacy/

Our website uses the placeholder.com service to provide placeholder images. The provider is Placeholder.com LLC, based in Florida, USA. 

When images are retrieved from the placeholder.com servers, your IP address and, if applicable, other technical data (e.g. browser type, operating system, time of access ) are transmitted to the provider in the USA. This is technically necessary in order to deliver the content to your browser.

The data transfer is based on Art. 6 (1) lit. f GDPR (legitimate interest in an appealing and functional design of our website). 

Further information on data processing by placeholder.com can be found in their privacy policy:

https://placeholder.com/privacy.

Our website uses cookie consent technology from sgalinski Internet Services to obtain your consent to store certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is Stefan Galinski Internetdienstleistungen, Schramelweg 2, 85774 Unterföhring (hereinafter referred to as sgalinski).

When you visit our website, a sgalinski Cookie Opt In is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of sgalinski Cookie Opt In.

The data collected is stored until you request us to delete it, delete the sgalinski cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected.

The sgalinski Cookie Opt In is used to obtain the legally required consent for the use of cookies. The legal basis for its use is Art. 6 (1) lit. c GDPR in conjunction with § 25 (2) No. 2 TDDDG (fulfilment of a legal obligation to provide evidence of consent).

The consent data is stored for as long as is necessary to fulfil our verification obligations and is then automatically deleted, provided that there is no legal obligation to retain it.

We use tracking and analysis tools to ensure the continuous optimisation and needs-based design of our website. The use of tracking and analysis measures also enables us to statistically record the use of our website by visitors and to further develop our online presence for you based on the insights gained.

We have a legitimate interest in this, which justifies the use of the tracking and analysis tools described below in accordance with Art. 6 (1) lit. f) GDPR.

If you have given us your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the lawfulness of the use is additionally based on Art. 6 para. 1 lit. a) GDPR.

The following description of the tracking and analysis tools provides information on the type, scope and respective processing purposes.

Matomo

We use Matomo to analyse and improve the use of our website.

Matomo is a web analytics service. Cookies are stored on your computer to enable an analysis of your use of the website. We store the information collected in this way exclusively on our servers in Germany.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

We use Matomo with the "AnonymizeIP" extension. This shortens IP addresses (known as IP masking). This means that a connection to specific individuals can be ruled out. The legal basis for processing data using Matomo is your consent in accordance with Art. 6(1)(a) GDPR.

Further information on data protection can be found at: matomo.org/privacy-policy/

Tracking is currently not active for you because your browser has informed us that you do not want tracking. This is a browser setting. To reactivate tracking, you must deactivate the so-called "Do Not Track" setting in your browser settings. 

Integration of Vimeo videos

We have integrated Vimeo videos into our online offering, which are stored on http://www.vimeo.com and can be played directly from our website.

When you visit the website, Vimeo receives information that you have accessed the corresponding subpage of our website. Log files are also transmitted. This occurs regardless of whether Vimeo provides a user account that you are logged into or whether no user account exists. If you are logged into Vimeo, your data will be directly associated with your account. If you do not want your data to be assigned to your Vimeo profile, you must log out before activating the button. Vimeo stores your data as usage profiles and uses it for advertising, market research and/or the design of its website in line with current needs. Such evaluation is carried out in particular (even for users who are not logged in to ) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Vimeo to exercise this right.

Further information on the purpose and scope of data collection and its processing by Vimeo can be found in the privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: https://vimeo.com/privacy. Vimeo also processes your personal data in the USA.

Further information about Vimeo: Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA

Content Delivery Networks (CDN)

Our website uses content delivery networks (CDNs). A CDN is a network of powerful servers that cache content in various locations around the world. A CDN essentially has two tasks: firstly, it should provide content in the shortest possible time and, secondly, it should relieve the web host by distributing data traffic. CDNs transmit two types of content: static and dynamic content. All website visitors receive static content in the same form, such as video content from streaming services or code frameworks (e.g. JavaScript, jQuery). Dynamic content is first adapted to the user and only created at the moment of the request. This includes content that is delivered via web applications, email or online shops and is personalised. In order to use the latter, information about the website visitor must first be transmitted to the CDN. The legal basis for the use of a CDN and the transmission of your data to it is Art. 6 (1) (f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless and fast display of our website and to relieve our IT infrastructure. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the imprint. Specifically, we use:

We use the CDN service "CDNJS" provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Further information on data protection at Cloudflare: https://www.cloudflare.com/de-de/privacypolicy/

YouTube NoCookie

We have integrated YouTube NoCookie into our website. YouTube NoCookie is a component of the video platform YouTube, LLC, where users can upload content, share it via the Internet and receive detailed statistics.

YouTube NoCookie enables us to integrate content from the platform into our website. YouTube NoCookie uses cookies and other browser technologies to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube NoCookie can assign the videos played to the profile.

When you access this content, you connect to servers belonging to YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.

The use of the service is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and § 25 (1) TTDSG.

We have no influence on the specific storage period of the processed data; this is determined by YouTube, LLC. 

Further information can be found in the privacy policy for YouTube NoCookie: https://policies.google.com/privacy.

a) Type and scope of data processing

We link on this website to our presences in social networks. We provide information about our products and current special offers there.

No data is transmitted to the operators of the social networks when you load our website, but only when you actively follow the link to our profile on the respective social network. When you access our profile page on a social network, the operator of the social network may set cookies on your end device, regardless of whether you have an account with the network or whether you are logged in there. Cookies are data packets that mark the user's end devices with a specific identifier. Cookies are primarily set in order to be able to display personalized advertising to visitors to the social networks, including our profile pages.

This is done, for example, by displaying to the user on the pages of the social network advertisements from advertising partners of the social network whose websites the user has previously visited.

In addition, cookies make it possible to create statistics about the use of our profile page (e.g. number of page views, user categories). If we receive such statistical analyses from the operator of the social network, the data is anonymized by the operator beforehand, i.e. it is not possible for us to assign usage data to an individual user. If you are logged in to the social network, however, the operator of the social network may be able to assign the visit to our profile on the social network to your account there.

We have no influence on which data is collected and transmitted by the operator of the social network, to which third-party recipients a transmission by the operator of the social network takes place and how long the data is stored by the operator of the social network. In this re-gard, we refer to the privacy policy of the respective social network.

We generally do not share the data collected on our profile page on the respective social network with third parties unless this is necessary based on your consent or to fulfill a contract with you. If we use external service providers (e.g., in the IT sector), this is done in the form of contract processing with the service provider, which obligates them to process the data in accordance with our instructions. Furthermore, data may be shared with courts and relevant law enforcement and supervisory authorities based on official orders and legal obligations.

You are not obliged to provide us with your data on our profile pages on social networks. If you do not want the operators of the social networks to collect data from you on our profile pages, you can prevent this by not accessing our profile pages. We delete private messages that you send to us via social networks within one year of the last communication with you. Public posts from you (e.g. in our timeline) we keep published per-manently until you explicitly request their deletion.

We reserve the right to delete illegal content published by users on our profile page on the respective social network, e.g. copyright infringements or criminally relevant statements. In addition, we store usernames and comments that are deleted due to violation of netiquette. These will only be kept for possible proof in case of legal disputes within the statute of limita-tions.

According to the case law of the European Court of Justice, we are jointly responsible with the operator of the respective social network for the operation of our profile page with regard to compliance with data protection regulations. In this context, the operator of the social network provides the associated IT infrastructure as well as the website of the social network and is basically the primary contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). With regard to data processing on social net-works, we therefore recommend that you contact the respective social network directly for information requests or other questions regarding user rights, such as a deletion request, as only the operators of the social networks have full access to your user data. If you no longer wish to have the data processing described here in the future, you can remove the connection of your user profile to our site by using the functions "I no longer like this page" and/or "Do not subscribe to this page". However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network.

b) Purpose and legal basis of the data processing

The purpose of processing your data on our profile page on the respective social network is to provide information about our offers and services and to respond to any inquiries on our profile page. The legal basis for this processing is Art. 6 (1) (f) GDPR. In this respect, public relations work is covered by our legitimate interests within the meaning of this regulation.

c) Social Networks used

Hereinafter you will find the contact details of the respective operators of the social networks we use, as well as links to the respective privacy policies for further information on data protection for the social networks:

Xing:
Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
https://privacy.xing.com/en

Kununu: 
Anbieter: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn:
Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland https://www.linkedin.com/legal/privacy-policy? 

Vimeo:
Provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA https://vimeo.com/privacy

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed in an unencrypted manner, for example by e-mail, may be read by third parties. We have no influence on this. It is the responsibility of the user to protect the data provided against misuse by using encryption or otherwise.

We reserve the right to update this statement accordingly at any time if necessary.

Below you can find your legal rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 of the GDPR. You can also contact us as the controller (No. 2) or our data protection officer (No. 3) in this regard.

Right to revoke your data protection consent pursuant to Art. 7 para. 3 s. 1 GDPR
You may revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out until the revocation is not affected by this.

Right to information according to Art. 15 GDPR
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to obtain information about this personal data as well as further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

Right to rectification and completion according to Art. 16 GDPR
You have the right to request the correction of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

Right to erasure ("right to be forgotten") according to Art. 17 GDPR
You have a right to erasure insofar as the processing is no longer necessary. This is the case, for example, if your data is no longer required for the original purposes, you have revoked your declaration of consent under data protection law or the data was processed unlawfully.

Right to restriction of processing according to Art. 18 GDPR
You have a right to restrict processing, e.g. if you believe that the personal data is incorrect.

Right to data portability according to Art. 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

Right of objection according to Art. 21 GDPR  
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
In the event of direct marketing, you as the data subject have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

Automated decision in individual cases including profiling according to Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing - including profiling - except in the exceptional circumstances mentioned in Article 22 of the GDPR.
Decision-making based exclusively on automated processing - including profiling - does not take place.

Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR
In addition, you can lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing does not comply with data protection regulations.

Competent supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de