The following data protection declaration applies to the use of the website www.xlane.de (hereinafter referred to as "website").
We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU Data Protection Regulation (EU-DSGVO). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This declaration describes how and for what purpose your personal data is collected and used and what choices you have in connection with its use.
The responsible entity within the meaning of Article 4 No. 7 EU-DSGVO for the collection, processing and use of your personal data is NATULIS GROUP AG at Linienstrasse 40, 10119 Berlin. If you wish to object to the collection, processing, or use of your data by us in accordance with these data protection provisions, either in its entirety or for individual measures, you can address your objection to the above-mentioned responsible entity.
2.1 E-mail contact/contact form
If you contact us (e.g., by contact form or e-mail), we store your data for processing the request and in case follow-up questions arise. We only store and use further personal data if you consent to this or if this is legally permissible without special consent. We receive your sent contact form without intermediate storage by e-mail. The contact data contained in your message will be stored in the OnOffice real estate software used by us.
2.2 Google Analytics
2.3 Use of social media plugins
Except for voluntary sharing of the website, no social media plugins are used. Unlike the sharing buttons offered by the operators, which already transmit data to the operators when a page is loaded, we initially offer a deactivated button, i.e., the social plugin is only activated when you click on the link. Through the active use of social plugins, the social network receives the information that you have visited our site with your IP address. If you are logged into the social network and use social plugins, the visit to our website and websites of other providers can be assigned to your respective profile by cookies of the social network; the social network can therefore analyze your reading behavior and use it for the design of individual advertising directed at you. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Facebook and Twitter and no influence on the extent to which Facebook and Twitter comply with the data protection provisions applicable to them.
2.4 Google reCAPTCHA
2.6 Legal basis and storage period
The legal basis for data processing in accordance with the above paragraphs is Article 6 (1) (f) EU-DSGVO. Our interests in data processing are in particular to ensure the operation and security of the website, to study the way visitors use the website, and to simplify the use of the website. Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.
According to the applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address mentioned in point 1. Below is an overview of your rights.
3.1 Right to confirmation and information
You have the right to obtain confirmation from us at any time as to whether personal data relating to you is being processed. If this is the case, you have the right to obtain from us, free of charge, information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:
The purposes of the processing;
3.2 Right to rectification
You have the right to request that we rectify inaccurate personal data relating to you without undue delay.3 .3 Right to erasure ("right to be forgotten")You have the right to request that we erase personal data relating to you without undue delay, and we are obliged to do so, provided that we have the right to erase personal data relating to you without undue delay.
3.3 Right to erasure ("right to be forgotten")
You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay, if one of the following reasons applies:
3. 4 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that
3.5 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the EU GDPR. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If personal data is processed by us for the purpose of direct advertising in the context of our business activities as a brokerage firm, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
3.6 Right to revoke a data protection consent
You have the right to revoke a consent to the processing of personal data at any time.
3.7 Right to complain to a supervisory authority
You have the right to complain to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.
We are concerned about the security of your data within the framework of the applicable data protection laws and technical possibilities to the maximum. Your personal data will be transmitted encrypted. We use the coding system SSL (Secure Socket Layer), but point out that data transmission over the Internet (e.g. when communicating by e-mail) security vulnerabilities.
To protect your data, we maintain technical and organizational security measures, which we constantly adapt to the state of the art. We also do not guarantee that our offer is available at certain times; disturbances, interruptions or failures cannot be excluded. The servers we use are backed up carefully on a regular basis.
Automated decision-making based on the personal data collected does not take place.
As a matter of principle, we only use your personal data within our company. If and to the extent that we involve third parties in the performance of contracts (such as the seller(s), notaries, property management companies, cooperating brokerage firms in the context of a partition transaction), they only receive personal data to the extent that the transfer is necessary for the corresponding service.
If we outsource certain parts of the data processing ("commissioned processing"), we contractually obligate contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
A data transfer to entities or persons outside the EU outside the cases mentioned in this statement in point 2.3 does not take place and is not planned.