join the club
Data privacy

Data privacy notice

We are fully committed to protecting your personal data, and complies with all applicable privacy legislation and standards. Personal data collection on this website only takes place within the necessary scope. Under no circumstances do we forward the data we collect to third parties without your knowledge or without a lawful basis. This notice gives you an overview of what data we collect when you visit our website, to what purpose, and how we use the data.

General information on data processing

1. Scope of personal data processing
We only collect and use personal data from our users where this is necessary to provision a fully operational website and related content and services. Personal data from our users are generally only collected and used after the user has given consent. The only exception is in cases where the user’s prior consent cannot be obtained for reasons of fact and there is a lawful basis for processing the data.

2. Lawful basis for personal data processing
Insofar as we obtain the data subject’s consent to the processing of personal data, the lawful basis for personal data processing is Article 6 (1) a) of the EU General Data Protection Regulation (GDPR).

In the case of personal data processing that is necessary for the performance of a contract to which the data subject is party, the lawful basis is Article 6 (1) b) GDPR. The same applies in the case of processing operations required to perform pre-contractual tasks.

Insofar as personal data processing is necessary for compliance with a legal obligation to which our company is subject, the lawful basis is Article 6 (1) c) GDPR.

Where personal data processing is necessary in order to protect the vital interests of the data subject or of another natural person, the lawful basis is Article 6 (1) d) GDPR.

Where processing is necessary to protect the legitimate interests of Commerz Real AG or a third party, and where such interests are not overridden by the interests, fundamental rights and fundamental freedoms of the data subject, the lawful basis is Article 6 (1) f) GDPR.

3. Data erasure and retention period
Personal data of the data subject are erased or blocked as soon as the purpose for which the data were stored no longer exists. Data can be retained for a longer period in accordance with European Union or national legislation, regulations, or other requirements to which the controller is subject. Data will also be erased or blocked upon expiration of a retention period specified by legislation or regulations mentioned above, unless continued retention of the data is necessary for the conclusion or performance of a contract.

Provisioning of the website and generation of log files

1. Description and scope of data processing
When our website is accessed, our system automatically collects data and information from the device accessing the site.

The following data are collected:

(1) Browser type/version,
(2) Operating system used,
(3) Name and URL of the file accessed,
(4) Referrer URL (the website previously visited),
(5) Host name of the computer accessing the site (IP address),
(6) Date and time of the server query.

The data are also stored in our system’s log files. The data are not stored together with other personal data from the user.

2. Lawful basis for data processing
The lawful basis for the temporary storage of data and log files is Article 6 (1) f) GDPR.

3. Purpose of data processing
The system needs to temporarily store the IP address to allow provisioning of the website to the user’s device. For this purpose, the user’s IP address must be retained for the duration of the session. Data are stored in log files to enable the website to operate correctly. In addition, we use the data to improve the website and to safeguard the security of our IT systems. The data are not analysed for marketing purposes.

Data processing for these purposes is in our legitimate interests in accordance with Article 6 (1) f) GDPR.

4. Data storage period
Data are erased as soon as their storage is no longer necessary to achieve the purpose for which they were collected. With respect to data collected in order to provision the website, this is the case when the corresponding session ends. With respect to data storage in log files, this is the case after seven days at the latest. Data in log files may be stored for a longer period. In this case, users’ IP addresses are erased or anonymised so that data can no longer be associated with the client accessing the website.

5. Objection and prevention
The collection of data in order to provision the website and the storage of data in log files are absolutely necessary to operate the website correctly. For this reason, it is not possible for users to object hereto.

Contact

1. Description and scope of data processing
Personal or business data (name, address, email address, telephone number) is submitted by the user voluntarily on contact and registration forms, for example. The aforementioned data is transmitted to Engel & Völkers Frankfurt – GDA-Immobilien GmbH Lizenzpartner der Engel & Völkers Residential GmbH, Bockenheimer Landstrasse 1, 60325 Frankfurt for contact purposes. Your data is generally not transmitted to third parties unless we are legally obliged to do so, or if data has to be transmitted to execute the contractual relationship or you have expressly consented to the transfer of your data in advance. We ensure that our service providers comply with the provisions of data protection laws accordingly to the extent that they come into contact with your personal data. Please also note the data protection notices issued by Engel & Völkers. Although we make reasonable efforts to review third-party services for compliance with legal requirements, the relevant service provider is responsible for the content of such services.

We offer you the opportunity to use the website to obtain information on various topics or to make contact with us. You can contact Commerz Real AG using the contact form or by telephone. When you make contact with us, we collect data such as your given and surname, your e-mail address or your phone number.

Users can also contact us using the e-mail address provided. In this case, the user’s personal data transferred via the e-mail are stored.

Data collected in this context are not generally forwarded to third parties. The data are used exclusively for the purpose of processing the conversation. If the inquiry relates to the activities of us or our subsidiaries or affiliates or companies on whose behalf we or affiliates are acting, and if necessary for the efficient processing of the inquiry, your data may be forwarded to the relevant company.

2. Lawful basis for data processing
Where the user’s consent has been obtained, the lawful basis for data processing is Article 6 (1) a) GDPR.

The lawful basis for the processing of data transferred via an e-mail is Article 6 (1) f) GDPR. If contact is made with the intention of concluding a contract, the lawful basis for data processing is additionally Article 6 (1) b) GDPR.

3. Purpose of data processing
The processing of data from entry fields is solely for the purpose of processing your initial contact. Where you initially contact us by e-mail or telephone, it is also in our legitimate interests to process your e-mail address or telephone number, respectively.

4. Data storage period
The data are erased as soon as they are no longer required for the purpose for which they were collected. For personal data entered via the fields of the contact form and data submitted to us via e-mail, this is when the conversation with the user is concluded. The conversation is deemed to have been concluded where it can be inferred from the circumstances that the issue in question has been fully resolved.

5. Objection and prevention
The user may at any time withdraw consent to the processing of their personal data. If a user initially contacts us via e-mail, they can object to the storage of his or her personal data at any time. In this instance, the conversation cannot be continued and all personal data stored within the scope of the conversation are erased.

Use of cookies

1. Description and scope of data processing
Our website makes use of cookies at multiple points. Cookies are small text files that your browser stores on your device. They are employed, for example, to determine how many users visit the website and how often it is used, in order to improve the website’s user-friendliness and effectiveness. Both session cookies, which are only stored temporarily while you are using the website, and persistent cookies are used. A persistent cookie is limited to an identification number in order to gain information on users who visit the website more than once, in order to recognise you as a user and possibly to offer you improved navigation features. Cookies do not cause any damage to your device and do not contain viruses. You can prevent the storage of cookies by choosing corresponding browser settings. If you do not accept cookies, this may limit the function/operation of the website.

2. Storage period, objection and prevention
Cookies are stored on the user’s device and from there they are transferred to our website. You as the user therefore have complete control over the use of these cookies. By changing your browser settings, you can disable or restrict the transfer of cookies. Cookies already saved on your device can be erased at any time. This can also be performed automatically. If cookies for our website are disabled, it may not be possible to use all functions of our website.

V. Web tracking

Web monitoring technologies are employed on our website to collect and store data in pseudonymised form exclusively for the purpose of improving our website and its content. These data are used to create pseudonymised usage profiles. To this end, cookies may be deployed, but these collect and store data exclusively in pseudonymised form. The data are not used to personally identify visitors to this website and are not combined with personal data on the person (orthonym) behind the pseudonym.

You can configure your browser to notify you when cookies are about to be placed on your device, enabling you to decline their use. Moreover, you can prevent the installation of cookies via a corresponding browser setting. However, in this case, you may not be able to use all functions of our website. No personal data are stored. The user’s IP address is masked and does not allow conclusions to be drawn regarding visitors to this website. The lawful basis for data processing is our legitimate interest in accordance with Article 6 (1) f) GDPR. Insofar as personal data are processed, the lawful basis is your consent in accordance with Article 6 (1) a) GDPR.

Website analytics with Webtrekk
We utilise Webtrekk services and cookies to collect statistical data on the usage of our website and to improve our online content. Webtrekk has been privacy-certified in the context of web analytics software by the independent testing and inspection association TÜV Saarland.

Every time our website is accessed, information transferred by your browser is collected and analysed for web analytics/monitoring purposes. Data are collected via a pixel which is on each page. The following data are collected:

  • Request (file name of the requested file)
  • Browser type and its version (for example, Mozilla Firefox 33.0, Internet Explorer 10, etc.)
  • Browser language (for example, English)
  • Operating system
  • Browser resolution
  • Screen resolution
  • JavaScript activated: ‘Yes’ or ‘No’
  • Java: ‘On’ or ‘Off’
  • Cookies: ‘On’ or ‘Off’
  • Colour depth
  • Referrer URL
  • Shortened IP address for geographical analysis down to the level of town/city
  • Timestamp
  • Clicks
  • Form content: free text fields such as Name, E-mail, Account Number and Phone Number are tracked as ‘completed’ or ‘empty’. The actual values are not tracked.


A more detailed list of the information transferred is available from https://www.webtrekk.com/en/index/opt-out-webtrekk/ . Webtrekk stores IP addresses exclusively in truncated form and only uses them for session recognition, for geo-localisation and for combatting cyber attacks. IP addresses are then immediately erased, which means the data collected are anonymous.

The following cookies are placed via Webtrekk:

  • Last click (used for session timeout; duration is a session)
  • Session cookie (used for session identification; duration is a session)
  • Ever cookie (used for recognition of new and returning visitors; duration is six months).

You can enable or disable the use of cookies via your browser settings. If you do not wish to be tracked when visiting commerzreal.com specifically, you can object to tracking by clicking this link: https://www.webtrekk.com/en/index/opt-out-webtrekk/opt-out-registered

To opt out of Webtrekk web analytics, the webtrekk.net domain places a cookie called “webtrekkOptOut” on your device. The opt-out is valid for as long as the user does not erase this cookie, or for the cookie’s maximum age of 60 months. The cookie is placed for the named domain, for each browser and each device. If you visit our website via multiple browsers or devices, you need to place the cookie separately for each device and browser.

Further information is available from the website of Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany, http://www.webtrekk.com.

Security
We cannot accept responsibility for the security of data transferred via the Internet. E-mail messages are not encrypted. As a result, it is not possible to rule out third parties becoming aware of them. We therefore recommend sending confidential information by conventional post only.

Your rights and how to lodge a complaint
You have the following rights with respect to our collecting and processing your personal data:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to withdraw consent,
  • Right to object to processing,
  • Right to data portability.

To exercise your rights, please contact the data protection officer at Commerz Real AG at datenschutz(at)hausinvest.de

In addition, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

VI. Responsibility (data controller)

The data controller under GDPR and other national data-protection legislation of member states and other related regulations is:

 T-Rex Verwaltungs GmbH 
Friedrichstrasse 25

65185 Wiesbaden, Germany