Data protection.

Name and address of the controller

The responsible body within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Monvest Immobilien GmbH

Luise-Ullrich-Straße 6

82031 Grünwald Germany

Telephone: +49 (0) 89-9974 083-50

Email: info@monvest.de

Name and address of the data protection officer

The data protection officer of the controller is:

Jörg Hermann

Freibadstr. 30

81543 Munich

Telephone: +49 89 200 033 580

Email: info@jmh-datenschutz.de

Rechtsgrundlage für die Verarbeitung personenbezogener Daten

In accordance with Art. 13 GDPR, we hereby inform you of the legal basis for our data processing. If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, if special categories of data are processed in accordance with Article 9(1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) TTDSG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Datenlöschung und Speicherdauer

We adhere to the principles of data minimisation in accordance with Art. 5 (1) (c) GDPR and storage limitation in accordance with Art. 5 (1) (e) GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the retention periods stipulated by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as quickly as possible.

Externe Links

This website may contain links to third-party websites or other websites for which we are responsible. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own privacy policies. We accept no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with their privacy policies.

External links can be recognised either by the fact that they are slightly different in colour from the rest of the text or by the fact that they are underlined. Your cursor will indicate external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In doing so, the operator of the other website will receive, in particular, your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and other information that you will find in the privacy policy of the respective provider.

Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data. You may have no legal recourse against such access to your data. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.

Rechte der betroffenen Person

As a data subject within the meaning of the GDPR, you have the option of exercising various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of withdrawal:

Some data processing can only be carried out with your express consent. You have the option to withdraw your consent at any time. However, this does not affect the legality of the data processing until withdrawal.

Right to object:

If the processing is based on Art. 6(1)(e) or (f) GDPR, you, as the data subject, may object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4(4) GDPR. If we cannot demonstrate a legitimate interest in the processing that outweighs your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims, we will refrain from processing your data after you have objected.

If the processing of personal data serves the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling in connection with direct marketing. Here, too, we will no longer process personal data once you have objected.

Right to lodge a complaint with a supervisory authority:

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right to data portability:

If your data is processed automatically on the basis of consent or the performance of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.

Right to information, correction and deletion:

You have the right to obtain information about your processed personal data regarding the purpose of data processing, the categories, the recipients and the duration of storage. If you have any questions on this topic or other topics relating to personal data, you can of course contact us using the contact details provided in the legal notice.

Right to restriction of processing:

You may request the restriction of the processing of your personal data at any time. To do so, you must meet one of the following conditions:

• You dispute the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction on processing.
• If processing is unlawful, you may request restriction of use of the data as an alternative to erasure.
• If we no longer need your personal data for the purposes of processing, but you need the data for the establishment, exercise or defence of legal claims, you may request restriction of processing as an alternative to erasure.
• If you object to the processing pursuant to Art. 21 (1) GDPR, a balance will be struck between your interests and ours. Until this balance has been struck, you have the right to request the restriction of processing.

Restriction of processing means that, apart from storage, the personal data may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

Provision of the website (web host)

Our website is hosted by:

EDIS GmbH, Hauptplatz 3, 8010 Graz, Austria

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

This includes:

• IP address of the website visitor's device
• Device used
• Host name of the accessing computer
• Visitor's operating system
• Browser type and version
• Name of the file accessed
• Time of the server request
• Amount of data
• Information on whether the data was successfully retrieved

This data is not merged with other data sources.

Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company), which we have mentioned above in this case. The personal data collected by this website is then stored on the servers of the hosting company. In addition to the above-mentioned data, the web host also stores contact enquiries, contact details, names, website access data, meta and communication data, contract data and other data generated via a website for us.

The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free presentation and optimisation of this website. If the website is accessed in order to enter into contract negotiations with us or to conclude a contract, this serves as a further legal basis (Art. 6(1)(b) GDPR). In the event that we have commissioned a hosting company, a contract for order processing exists with this service provider.

Contact form

Our website offers the option of contacting us via a contact form. Your contact details are required in particular for contacting us via this form.

The legal basis for this is processing for the purpose of fulfilling a contract or taking pre-contractual measures in accordance with Art. 6(1)(b) GDPR. In addition, there may be a legitimate interest in maintaining business relationships or responding to your enquiry for other reasons.

In this case, the legal basis for the processing of your data would be Art. 6 (1) lit. f GDPR.

The data will be deleted once we have responded to your enquiry and there are no other retention obligations that prevent this.

Contact by telephone or email

In accordance with legal requirements, we have provided a telephone number and email address on our website. We automatically store the data transmitted via these channels so that we can process corresponding enquiries or contact the person making the enquiry. We do not pass this data on to third parties without consent.

If contact is made by telephone or via our email address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6 (1) lit. b GDPR. For all other contacts made by you, the processing of personal data by us is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.

Handling of applicant data

It is possible to send us an application (e.g. by post, online application form or email). The personal data received in this way will be stored and processed by us for the application process.

The basis for processing is Art. 6 (1) (b) GDPR and Art. 6 (1) (a) GDPR, provided that consent has been given. Insofar as German law is applicable, § 26 BDSG (Federal Data Protection Act) in particular is used as the legal basis for processing. You can revoke your consent at any time. The lawfulness of the processing carried out until revocation remains unaffected.

If the application results in an employment relationship, the data collected will be stored for the purpose of processing the employment relationship on the basis of Art. 6 (1) lit. b GDPR. If no employment relationship is established, the data will be stored on the basis of Art. 6 (1) lit. f GDPR for the duration of the statutory claims, in particular due to discrimination in the application process. This is necessary for the defence against any lawsuits or allegations. If consent has been given, the data will be stored for a longer period on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time. The lawfulness of the processing carried out until revocation remains unaffected.

If no employment relationship is established, the applicant may be included in our applicant pool. All information provided in the application will be stored so that the applicant can be contacted when suitable job vacancies arise.

Data will only be stored in the applicant pool with the applicant's consent on the basis of Art. 6(1)(a) GDPR. This consent can be revoked at any time, whereupon the relevant data will be deleted, provided there are no legal reasons for retention. Data will be deleted automatically no later than two years after consent has been given. The lawfulness of the processing carried out until revocation remains unaffected.

Use of cookies

Our website uses cookies. Cookies are pieces of information that a web server (server that provides web content) stores on your device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website, or stored permanently (permanent cookies) on your device until you delete them yourself or your web browser automatically deletes them.

Cookies may also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to use certain third-party services installed on this website. Examples of this are cookies for processing payment services or cookies for displaying videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website use, and perform analyses of visitor flows and behaviour. Depending on their individual functions, cookies are classified under data protection law. If they are necessary for the operation of the website and for the provision of certain functions (shopping basket function) or serve to optimise the website (e.g. cookies for measuring visitor behaviour), their use is based on Art. 6 (1) lit. f GDPR. As a website operator, we have a legitimate interest in storing cookies for the technically error-free and optimised provision of our services. In all other cases, cookies are only stored with your express consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG).

If cookies are used by third-party companies or for analysis purposes, we will inform you separately in this privacy policy. Your required consent will be requested and can be revoked at any time.

Use of external services

External services are used on our website. External services are services provided by third parties that are used on our website. This may be done for various reasons, for example to embed videos or for website security. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website, which you can revoke at any time, before using them (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG).

We process personal data from website visitors in order to analyse user behaviour. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This enables us to increase the user-friendliness of our website. Using the analysis tools employed, it is possible, for example, to create user profiles for the display of targeted or interest-based advertising messages, to recognise our website visitors the next time they visit our website, to measure their click/scroll behaviour and downloads, to create heat maps, recognise page views, measure the duration of visits or bounce rates, and trace the origin of website visitors (city, country, which page the visitor came from). The analysis tools help us to improve our market research and marketing activities.

The processing of data is based on the legal basis of consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG). As a website visitor, you have consented to the processing of your personal data with your voluntary, express and prior consent. Without separate consent, we will not process personal data in the manner described above, provided that there is no other legal basis within the meaning of Art. 6(1) GDPR on which we base the processing. We will proceed in the same manner if you revoke your consent. The lawfulness of the processing carried out until revocation remains unaffected.

Google Analytics

We use the Google Analytics service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Consent Management

In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for setting cookies or using external services. The consents are stored.

The processing is necessary for the fulfilment of a legal obligation to which the controller (website operator) is subject. The legal basis for the processing is therefore Art. 6(1)(c) GDPR.

Cookiebot

We use the Cookiebot service on our website. The provider of this service is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Further information can be found in the provider's privacy policy at the following URL: https://www.cookiebot.com/de/privacy-policy/.

Content Management System

A content management system enables the creation, editing, organisation and presentation of digital content. We use a content management system to create content for our website. This enables us to design a more appealing website.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in the technically flawless presentation and optimisation of the website.

Typo3 CMS

We use the Typo3 CMS service on our website. The provider of this service is the TYPO3 Association, Sihlbruggstrasse 105, 6340 Baar, Switzerland.

As this service is hosted locally on the web server, no data is transferred to third parties.

Map service

We use a map service on this website. In order for the map to be used and displayed on the website, it must be loaded from the provider's server. This involves the transfer of your IP address to the provider's server. Depending on the provider, cookies and other technologies, including fonts, may be loaded. For more information, please refer to the provider's privacy policy.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing will not take place in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.

Google Maps

We use the Google Maps service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Newsletter-Tools

As part of our marketing activities, we offer you the opportunity to subscribe to our newsletter via our website. To subscribe to the newsletter, you must complete a registration process during which we verify that you are the owner of the email address provided and that you agree to receive our newsletter. The data remains with us or with the newsletter service commissioned by us for the duration of your voluntary registration until you unsubscribe from the newsletter. If you unsubscribe from the newsletter, you will be removed from the distribution list. This list is not merged with other data. However, unsubscribing from the newsletter does not result in data stored for other purposes (e.g. customer accounts) also being deleted.

Data will only be processed if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). . Without your consent, data processing will not take place in the manner described above. If you revoke your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. The legality of the processing carried out until revocation remains unaffected.

Brevo

We use the Brevo service on our website. The provider of this service is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Further information can be found in the provider's privacy policy at the following URL: https://de.sendinblue.com/legal/privacypolicy/.

Interface software

Business processes run more cost-effectively, faster and with fewer errors when they are automated using software via interfaces. This allows them to be efficiently integrated into company processes via the company's own website or social networks. We use interface software on our website to link different applications and to transfer personal data securely from one application to another.

The processing of data is based on the legal basis of consent (Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG). As a website visitor, you have consented to the processing of your personal data with your voluntary, express and prior consent. Without separate consent, we will not process personal data in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 (1) GDPR on which we base the processing. We will proceed in the same manner if you revoke your consent. The lawfulness of the processing carried out until revocation remains unaffected.

Google Tag Manager

We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Social media

We use social media plugins to connect our website to our social media channels. The integration of plugins is intended to make it easier for visitors to our website to follow our channels on social networks, share content, like or comment on it. Some social media plugins enable the analysis of the user behaviour of website visitors with regard to their behaviour on social networks. The use of plugins is intended to increase the awareness and number of followers of our channels.

The plugins also process personal data and transfer data to these social networks. This transfer takes place as soon as the website is accessed. Processed data includes, for example: name, address, email address, telephone number, access time, device information, IP address.

Die Verarbeitung der Daten beruht auf der Rechtsgrundlage der Einwilligung (Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG). Als Webseitenbesucher haben Sie der Verarbeitung Ihrer personenbezogenen Daten mit Ihrer freiwilligen, ausdrücklichen und im Vorhinein abgegebenen Einwilligung zugestimmt. Ohne gesonderte Einwilligung werden die personenbezogenen Daten, unter der Bedingung, dass es keine andere Rechtsgrundlage im Sinne des Art. 6 Abs.1 DSGVO gibt, auf den wir die Verarbeitung stützen, von uns nicht in der oben beschriebenen Weise verarbeitet. Ebenso verfahren wir, wenn Sie Ihre Einwilligung widerrufen. Die Rechtmäßigkeit der bis zum Widerruf erfolgten Verarbeitung bleibt davon unberührt.

Facebook

We use the Facebook service on our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, D02x525, Ireland.

Using the service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://www.facebook.com/privacy/policy.

Facebook Connect

We use the Facebook Connect service on our website. The provider of this service is Meta Platforms Ireland Limited (Marketplace), 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://de- de.facebook.com/policy.php.

Video/music service

Audio and video files are integrated into our website. These are retrieved from our provider's server, the so-called audio or video platform. In order to play an audio or video file, your device connects to the audio or video platform and transmits personal data to it. This includes, in particular, the IP address, any location data or information about the user's browser and device.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.

YouTube

We use the YouTube service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Vimeo

We use the Vimeo service on our website. The provider of this service is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York 10001, USA.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://vimeo.com/privacy.

Webfonts

This site uses so-called web fonts for the uniform display of fonts, which are provided by an external provider and loaded by the browser when the website is accessed. In doing so, the provider of the web font becomes aware that our website has been accessed from your IP address, as your browser establishes a direct connection to the provider of the web font.

The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, express and prior consent. Without separate consent, we will not process your personal data in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 (1) GDPR on which we base the processing. We will proceed in the same manner if you revoke your consent. The lawfulness of the processing carried out until revocation remains unaffected.

Google Fonts

We use the Google Fonts service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Advertising

Our website uses tools that facilitate or enable the placement of advertisements and the evaluation of the success of placed advertisements. For this purpose, personal data is processed, in particular the IP address, access times and device information.

Processing only takes place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above will not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will stop processing your data. The lawfulness of the processing carried out until withdrawal remains unaffected.

Google Ads

We use the Google Ads service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Google AdSense

We use the Google AdSense service on our website. The provider of this service is Google Ireland Limited (GV), Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.

Google Double Click

We use the Google Double Click service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Using this service may result in data being transferred to a third country (the USA). The provider is certified under the EU-U.S. Data Privacy Framework and therefore offers an adequate level of data protection.

Further information can be found in the provider's privacy policy at the following URL: https://policies.google.com/privacy.