Privacy Policy

The following data protection declaration applies to the use of the website www.xlane.de (hereinafter referred to as "website").

We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU Data Protection Regulation (EU-DSGVO). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This declaration describes how and for what purpose your personal data is collected and used and what choices you have in connection with its use.

By using this website, you consent to the collection, use and transfer of your data in accordance with this privacy policy.

1 Responsible entity

The responsible entity within the meaning of Article 4 No. 7 EU-DSGVO for the collection, processing and use of your personal data is NATULIS GROUP AG at Linienstrasse 40, 10119 Berlin. If you wish to object to the collection, processing, or use of your data by us in accordance with these data protection provisions, either in its entirety or for individual measures, you can address your objection to the above-mentioned responsible entity.

2 General use of the website

2.1 E-mail contact/contact form
If you contact us (e.g., by contact form or e-mail), we store your data for processing the request and in case follow-up questions arise. We only store and use further personal data if you consent to this or if this is legally permissible without special consent. We receive your sent contact form without intermediate storage by e-mail. The contact data contained in your message will be stored in the OnOffice real estate software used by us.

2.2 Google Analytics
Statistical web analysis. This website uses Google Analytics, a web analysis service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Google will not associate your IP address with any other data held by Google. You can prevent the storage of cookies on your hard drive and the display of web bacons. To do this, you must select "do not accept cookies" in your browser settings.

2.3 Use of social media plugins
Except for voluntary sharing of the website, no social media plugins are used. Unlike the sharing buttons offered by the operators, which already transmit data to the operators when a page is loaded, we initially offer a deactivated button, i.e., the social plugin is only activated when you click on the link. Through the active use of social plugins, the social network receives the information that you have visited our site with your IP address. If you are logged into the social network and use social plugins, the visit to our website and websites of other providers can be assigned to your respective profile by cookies of the social network; the social network can therefore analyze your reading behavior and use it for the design of individual advertising directed at you. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Facebook and Twitter and no influence on the extent to which Facebook and Twitter comply with the data protection provisions applicable to them.

2.4 Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 AmphitheatreParkway, Mountain View, CA 94043, USA ("Google"). reCAPTCHA is intended to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. ReCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place. Data processing is based on Art. 6 para. 1 lit. fDSGVO. The website operator has a legitimate interest in protecting its websites from automated spying and SPAM. For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

2.6 Legal basis and storage period
The legal basis for data processing in accordance with the above paragraphs is Article 6 (1) (f) EU-DSGVO. Our interests in data processing are in particular to ensure the operation and security of the website, to study the way visitors use the website, and to simplify the use of the website. Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.

3. Your rights as a person affected by data processing

According to the applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address mentioned in point 1. Below is an overview of your rights.

3.1 Right to confirmation and information
You have the right to obtain confirmation from us at any time as to whether personal data relating to you is being processed. If this is the case, you have the right to obtain from us, free of charge, information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:

The purposes of the processing;

  • - the categories of personal data processed
  • - the recipients or categories of recipients to whom the personal data have been or will be disclosed
  • - if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
  • - the existence of a right to rectify or erase the personal data concerning you or to have the processing restricted by the controller or to object to such processing
  • - the existence of a right of appeal to a supervisory authority
  • - if the personal data are not collected from you, any available information about the origin of the data.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

3.2 Right to rectification
You have the right to request that we rectify inaccurate personal data relating to you without undue delay.3 .3 Right to erasure ("right to be forgotten")You have the right to request that we erase personal data relating to you without undue delay, and we are obliged to do so, provided that we have the right to erase personal data relating to you without undue delay.

3.3 Right to erasure ("right to be forgotten")
You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay, if one of the following reasons applies:

  • - The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • - You withdraw your consent on which the processing was based in accordance with Article 6(1) EU GDPR(a) or Article 9(2)(a) EU GDPR and there is no other legal basis for the processing.
  • - You object to the processing in accordance with Article 21(1) EU GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21(2) EU GDPR.
  • - The personal data have been processed unlawfully.
  • - The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject - the personal data was collected in relation to information society services offered in accordance with Article 8(1) of the EU GDPR.

3. 4 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that

  • - the processing is based on consent pursuant to Article 6(1)(a) EU GDPR or Article 9(2)(a) EU GDPR or on a contract pursuant to Article 6(1)(b) EU GDPR and
  • - the processing is carried out with the aid of automated procedures.

When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transferred directly from us to another controller, to the extent technically feasible.

3.5 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the EU GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.

If personal data is processed by us for the purpose of direct advertising in the context of our business activities as a brokerage firm, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

3.6 Right to revoke a data protection consent
You have the right to revoke a consent to the processing of personal data at any time.

3.7 Right to complain to a supervisory authority
You have the right to complain to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.

4. data security

We are concerned about the security of your data within the framework of the applicable data protection laws and technical possibilities to the maximum. Your personal data will be transmitted encrypted. We use the coding system SSL (Secure Socket Layer), but point out that data transmission over the Internet (e.g. when communicating by e-mail) security vulnerabilities.

To protect your data, we maintain technical and organizational security measures, which we constantly adapt to the state of the art. We also do not guarantee that our offer is available at certain times; disturbances, interruptions or failures cannot be excluded. The servers we use are backed up carefully on a regular basis.

5. automated decision-making

Automated decision-making based on the personal data collected does not take place.

6. transfer of data to third parties; no data transfer to non-EU countries

As a matter of principle, we only use your personal data within our company. If and to the extent that we involve third parties in the performance of contracts (such as the seller(s), notaries, property management companies, cooperating brokerage firms in the context of a partition transaction), they only receive personal data to the extent that the transfer is necessary for the corresponding service.

If we outsource certain parts of the data processing ("commissioned processing"), we contractually obligate contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

A data transfer to entities or persons outside the EU outside the cases mentioned in this statement in point 2.3 does not take place and is not planned.