Data protection information for the use of our website www.value.ag

We take the protection of your data very seriously. The collection, processing and use of your personal data that has been disclosed to us is carried out in accordance with statutory provisions and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) of the European Union. The following information regarding data processing provides you with an overview of how we ensure the protection of your personal data and which data is collected for which purpose. Personal data is information that relates to an identified or identifiable individual. This particularly includes information that allows conclusions to be drawn about your identity – for example, your name, your telephone number, your address or your email address. Statistical data that we collect, for example, when you visit our website and that cannot be linked to you personally, does not fall under the definition of personal data.

The data controller responsible for data processing: Value AG, Einsteinufer 63 a, 10587 Berlin, Germany

The data protection officer from Value AG can be reached at: Günter Harke, Laehr’scher Jagdweg 14, 14167 Berlin, Germany,
datenschutz@value-ag.de

1. Data processing on our website

Visiting our website for information purposes

Each time you use our website, we collect the access data that your browser automatically transfers to enable you to visit the website. The access data includes:

• IP address of the requesting device
• Date and time of the request
• Address of the accessed website and the requesting website
• Information about the browser and operating system used
• Online identifiers (e.g., device identifiers, session IDs)

The processing of this access data is necessary to enable you to visit the website and to ensure the continued operability and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above, in order to compile statistical information on the use of our website, to further develop our website with regard to the usage patterns of our visitors (e.g., if the proportion of mobile devices used to access the pages increases) and for general administrative maintenance purposes of our website. The legal basis for this data processing is Article 6, Paragraph 1, Sentence 1, lit. f of the GDPR, based on our legitimate interest in the appropriate optimisation of our website.
The information stored in the log files does not allow any direct conclusions to be drawn about your person – in particular, we only store the IP addresses in shortened, anonymised form after 7 days. The log files are stored for 30 days and archived after they have been subsequently anonymised.

2. Cookies and web analytics

For some of our services it is necessary that we use what are known as cookies. A cookie is a small text file that is stored on your device by the browser. Cookies are not used to run programs or download viruses onto your computer. The main purpose of our own cookies is to provide a service tailored specifically to you and to make the use of our services as time-saving as possible.

We use our own cookies:

• to distribute the load;
• to indicate that you have been shown information placed on our website, and so that it is not shown again the next time you visit the website;
• to temporarily store entries you have made on our website in case you reload the page.

In this way, we want you to be able to use our website more conveniently and in a more personalised way.

You can prevent the storage of cookies by preventing the acceptance of cookies via this website in your browser settings. However, if you do not accept cookies, this may lead to considerable functional restrictions of our website in individual cases.

Insofar as we use cookies that are necessary for the use of our website (hereinafter also referred to as „essential cookies“), this is done on the basis of our legitimate interest pursuant to Article 6, Paragraph 1. Sentence 1, lit. f of the GDPR to make the website available to you.
We also use cookies and similar technologies (e.g., web beacons) from partners for analysis and marketing purposes. The legal basis for this is your consent pursuant to Article 6, Paragraph 1, Sentence 1, lit. a of the GDPR. We use the WordPress plug-in „Borlabs“ to obtain your consent for the use of optional cookies or similar technologies for marketing or analysis purposes via cookie consent banners. Borlabs sets a necessary (or essential) cookie („borlabs-cookie“) when you visit our website to store your individual consents to the use of optional cookies or similar technologies. This cookie, which is set to obtain and document your consent, is necessary and is set by us on the basis of our interest in documenting consent pursuant to Article 6, Paragraph 1, lit. f of the GDPR. You can view and adjust the settings you have made for our website regarding the use of cookies or similar technologies at any time here . Alternatively, you can also delete the borlabs-cookie in your browser. In this case, you will be asked again for your consent to optional cookies and similar technologies the next time you visit the website.

3. Links to other websites and online services

Our website may contain links to the websites and online services of other providers not affiliated with us. When you click on these links, we no longer have any influence on what data is collected by the respective providers and what data is collected by them. Detailed information regarding data collection and use can be found in the data protection statement of the respective provider. As the collection and processing of data by third parties is beyond our control, we cannot accept any responsibility for this.

4. Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this has been requested; the consent can be revoked at any time. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

5. Data subject rights

a) Your rights

You have the right to request information about the processing of your personal data by us at any time. We will explain to you how the data is processed, and provide you with an overview of the data stored about you as part of the information request process.
If any data we have stored is incorrect or no longer up to date, you have the right to have this data corrected.
You can also request the deletion of your data. If deletion is not possible by way of exception due to other legal provisions, the data will be blocked so that it is only available for this legal purpose.
You can also have the processing of your data restricted, for example if you believe that the data we hold is incorrect. You also have the right to data portability, which means that we will provide you with a digital copy of the personal data you have provided to us upon request.
To exercise your rights as described here, you can contact us at any time using the contact details above. This also applies if you wish to receive copies of guarantees demonstrating an adequate level of data protection.
In addition, you have the right to object to data processing based on Article 6, Paragraph 1, lit. e or f of the GDPR. Finally, you have the right to complain to the data protection supervisory authority to which we are accountable. You may exercise this right before a supervisory authority in the Member State of your residence, place of work or the place of the alleged infringement. In Berlin, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany.

b) Right of withdrawal and objection

In accordance with Article 7, Paragraph 3 of the GDPR, you have the right to withdraw your consent at any time. This has the effect that we no longer continue the processing of data based on this consent for the future. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Insofar as we process your data on the basis of legitimate interests pursuant to Article 6, Paragraph 1, Sentence 1, lit. f of the GDPR, you have the right to object to the processing of your data pursuant to Article 21 of the GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will also implement without giving reasons.
If you wish to exercise your right of revocation or objection, it is sufficient to send an informal message to the contact details above.

6. Data security and changes

a) Data security

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmissions and from third parties gaining knowledge. These are adapted to the current state of the art in each case. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

b) Changes to this data protection statement

From time to time, we may update this data protection statement, for example if we modify our website or if the legal or regulatory requirements change.

c) Contact

If you have any questions, complaints, suggestions or doubts about this data protection statement, would like information about the use or disclosure of your personal data, would like your personal data to be corrected, supplemented or deleted or would like to withdraw your consent to the processing of your personal data, please send us an e-mail at: datenschutz@value-ag.de.

7. Sharing of data

The data we collect will only be shared with third parties if:

• You have given your express consent to this in accordance with Article 6, Paragraph 1, Sentence 1, lit. a of the GDPR;
• it is necessary in accordance with Article 6, Paragraph 1, Sentence 1, lit. b of the GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request. This includes, in particular, the transfer of your data to advisors who provide you with advice on the requested products.
• we are legally obliged to share data in accordance with Article 6, Paragraph 1, Sentence 1, lit. c of the GDPR, or
• Disclosure is necessary in accordance with Article 6, Paragraph 1, Sentence 1, lit. f of the GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest meriting protection in not having your data disclosed;

Part of the data processing can be carried out by our service providers. In addition to the service providers mentioned in this data protection statement, this may include, in particular, data centres that store our website and databases, IT service providers that maintain our system, and consulting companies. If we share data with our service providers, they may only use the data for the fulfilment of their tasks. These service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects and are regularly monitored by us.

In addition, sharing may take place in connection with official enquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.

8. Data protection information on the use of our appointment portal (termin.value.ag)

On our website, we provide a web service for scheduling property inspections (hereinafter „appointment portal“) as a processor for various banks (hereinafter „partners“). With the appointment portal, you have the ability to arrange and set appointments with us to view a property, insofar as you have been named or otherwise made known to us in this regard by our partners as a contact person (e.g., as a customer of our partners, estate agent, property management company of the property, caretaker of the property, owner or tenant of the property, hereinafter „contact person“).
The prerequisite for using our appointment portal is therefore that one of our partners has commissioned us to view a property and you have been made known to us as the contact person for scheduling a viewing appointment. We will then send you an invitation link to the appointment portal along with an alphanumeric verification code, which you can use to register with the appointment portal in order to arrange an online viewing appointment with us.
When operating the appointment portal, we process the object data of the inspection objects (address, object type, etc.) as well as the names and contact data (in particular telephone number and email address) of the contact persons as a processor for our partners. This personal data is processed for the purpose of making the process of finding an appointment to view a property as simple and convenient as possible for all parties involved via the appointment portal.
The legal basis for the processing of this personal data required for the use of the appointment portal lies in the provision of the appointment portal for the above-mentioned purpose (fulfilment of contract pursuant to Article 6, Paragraph 1, lit. b of the GDPR).
The entire „appointment portal“ feature is protected by a login and end-to-end SSL encryption.

9. HOSTING

a) External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Article 6, Paragraph 1, lit. b of the GDPR) and in the interest of a secure, fast and efficient provision of our online service by a professional provider (Article 6, Paragraph 1, lit. f of the GDPR).
Our hoster will only process your data to the extent that this is necessary for the fulfilment of its service obligations, and will follow our instructions with regard to this data.

b) We use the following hoster:

Hetzner online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

c) Conclusion of a contract on commissioned processing

In order to ensure data protection-compliant processing, we have concluded a contract on
commissioned processing with our hoster.

Newsletter