Data protection
1. Data controller
The responsible party pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is
C&P Immobilien AG
Brauquartier 2
8055 Graz
Tel: +43 5 0316 100
E-Mail: datenschutz@cp-ag.at
2. Processing of personal data of interested parties, customers, suppliers and business partners
We store the data that interested parties, customers, suppliers or business partners provide to us themselves, for example as part of an enquiry by e-mail or to conclude a contract or business relationship. This can include their first name and surname, address and email address, telephone number, bank details and contract details.
We only forward personal data to third parties if this is necessary for the purpose of contract fulfilment or due to legal regulations or – in addition – only on the basis of the consent of the data subject. Where necessary, we have concluded data processor contracts in conformity with the law with all third parties.
We erase the data as soon as storage is no longer required or when legal obligations to preserve records, such as those pertaining to the law on value added tax, have expired. If the basis of the processing is consent, we erase the data if the consent is withdrawn – unless it goes against legal obligations.
The legal bases of data processing are
- contract initiation and fulfilment in accordance with Art. 6 para.1 lit. b of the GDPR, to be able to process your enquiries to your full satisfaction.
- legal obligations in accordance with Art. 6 para. 1 lit. c of the GDPR, which we must meet, such as the legally prescribed preserving of records or documentation duties.
- the legitimate interests of our company in line with Art. 6 para. 1 lit. f of the GDPR,
- Art. 6 para. 1 lit. a of the GDPR when securing consent.
3. Erhebung personenbezogener Daten bei Besuch unserer Webseite
- Making contact
When you contact us via the contact form and email, the data you provide will be stored by us to answer your questions. We erase the data gathered in this context after storage is no longer required or we restrict the processing if there are legal obligations to preserve records. If you have allowed us via our form to contact you, then we store your data that is required to make contact. This includes your name, your email address and your postcode. We delete the data as soon as storage is no longer required or if you object to the processing.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR - Informational use of the website
In case of a purely informational use of the website, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we only collect the data that is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Date and time of the enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the requirement (concrete page)
- Access status / HTTP status code
- Website from which the enquiry is made
- Browser
- Operating system and its interface
- Language and version of the browser software.
Legal basis: Art. 6 para. 1 lit. f of the GDPR - Newsletter
You have the option to subscribe to our newsletter. We need your email address for this. You may unsubscribe from the newsletter at any time. After unsubscribing, we will no longer use your data for the newsletter mailing. If we have no form of business relationship with you and we are not subject to legal obligations to preserve records, your data is erased after unsubscribing from the newsletter.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
4. Cookies
In addition to the aforementioned data, cookies are saved on your device when you use our website. Cookies are small text files that are saved on your hard drive by your browser and through which certain information flows to the party placing the cookie (in this case us). Cookies cannot carry out programmes or transmit viruses to your computer.
Through the cookie, you can be identified when revisiting the website without data that you previously entered needing to be entered again.
The information contained in the cookies is used, for example, to establish whether you are logged in, or what data you have already entered or to recognise you as a user when a connection is established between our web server and your browser. Cookies are automatically accepted by most web browsers.
By using our webpages you agree to the use of these cookies, insofar as cookies are accepted according to your browser settings.
- Transiente cookies
Transient cookies are deleted automatically when you close the browser. These include session cookies in particular. These store a so-called session ID with which various enquiries by your browser can be assigned to the same session. This allows your device to be recognised if you return to our website. The session cookies are deleted when you log out or close the browser. - Persistente Cookies
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser. - Third-party cookies
These come from providers other than the operator of the website. These can be used, for example, to collect information for advertising, user-defined content and web statistics. - Browser
Most browsers are set as standard to accept all cookies. You can set your browser so that you are informed about the saving of cookies and can only allow cookies in individual cases, accept cookies for specific cases or generally refuse them, or activate the automatic deletion of cookies when closing the browser. Deactivation of cookies can limit the functionality of our website.
You can remove cookies stored on your PC yourself at any time by deleting the temporary Internet data.
Legal basis: Art. 6 para. 1 lit. f of the GDPR (for technical cookies), Art. 6 para. 1 lit. a (for all other cookies)
5. Server logfiles
To optimise this website in relation to its system performance, user friendliness and the provision of useful information about our services, the provider of the website automatically collects and stores information in so-called server logfiles that your browser automatically transmits to us. This comprises the Internet Protocol address (IP address) of the accessing computer (including mobile devices), browser and language setting, operating system, referrer URL, your Internet service provider and the date/time.
This data is not merged with personal data sources. We reserve the right to check this data retrospectively if concrete indications of illegitimate use come to our knowledge and to pass on the data – if there has been a hacker attack – to law enforcement authorities. There is no passing on to third parties beyond this.
Legal basis: Art. 6 para. 1 lit. f of the GDPR
6. Data usage for Google services
Google Ireland Limited (“Google”), a company registered and operated according to Irish law (registry number: 368047), with its place of business in Gordon House, Barrow Street, Dublin 4, Ireland, has agreed to comply with the Privacy Shield Agreement published by the US Department of Commerce between the EU and the United States on the collection, use and storage of personal data from the Member States of the EU. Google, including its wholly owned subsidiaries in the US, has declared by means of certification that it complies with the relevant principles of the Privacy Shield. You can view Google’s Privacy Shield certification here. This applies to all Google services listed below. All cookies on this website are integrated via the Google Tag Manager.- Google Analytics
This website uses the function “Activation of IP anonymisation” (i.e. that Google Analytics has been extended by the code “gat._anonymizeIp();”, in order to ensure an anonymised collection of IP addresses, so-called IP masking). This means that your IP address will be stored by Google in shortened form within Member States of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases.
According to Google, Google will use the information collected to evaluate your use of the website, to compile reports about website activity and to provide further services to us relating to website usage and Internet usage. The IP address transmitted from your browser as part of Google Analytics is not merged with other Google data. Google may, however, transmit this information to third parties, insofar as this is legally mandatory or third parties are processing this data on behalf of Google. You can disable cookies using the relevant settings in your browser. We would like to point out, however, that you may not be able to use all the functions of the websites to the full extent in this case. Furthermore, you can prevent the collection of the data generated by the cookie relating to your website use (including your anonymised IP address), as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link (https://tools.google.com/dlpage/gaoptout?hl=de).
Further information on terms of use and data protection is available at https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de. - Google Maps
On this website we use the services of Google Maps. This allows us to show you interactive maps directly on the website and offer you a convenient use of the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data already stated under the point “Informational use of the website” is transmitted. This is done regardless of whether Google provides a user account that you are logged in to or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as a user profile and uses it for the purposes of advertising, market research and/or designing its website according to requirements. Such an evaluation takes place in particular (even for users who are not logged in) to carry out targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and you must contact Google to exercise this right.
For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights and settings options with regard to the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal information in the US and has agreed to abide by the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. - Use of Google Fonts
We use Google Fonts. The use of Google Fonts is without authentication and no cookies are sent to the Google Fonts API. If you have a Google account, none of your Google account details are transmitted to Google during the use of Google Fonts. Google only establishes the use of CSS and the used fonts and stores this data securely. You can find out more about these and other questions at https://developers.google.com/fonts/faq.
You can read which data is collected by Google and for what purpose this data is used at https://www.google.com/intl/de/policies/privacy/.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
7. Mailchimp
This website uses the external newsletter service Mailchimp from the operator The Rocket Science Group (LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA). The use of Mailchimp results in the transmission of personal data. The operator as well as the IT systems used by the operator are located in the USA. Consequently, the data will be transferred to a third country. However, an adequate level of data protection has been ensured with the “Privacy Shield” certification. To this end, the EU Commission has ruled that companies on the Privacy Shield list can be presumed to have an adequate level of data protection when the processing of personal data takes place in these companies.
Legal basis: Art. 6 para. 1 lit. f of the GDPR
8. Use of data in respect of Facebook services
Our offer uses social plug-ins (“plug-ins”) from Facebook (Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland). These plug-ins can be recognised by one of the Facebook logos (a dark grey or black “f” on a light grey circle or a white “f” on blue tile, or the term “Like” or the “Thumbs up” symbol) or are designated with the suffix “Facebook Social Plug-in”. The list and appearance of the Facebook social plug-ins can be viewed here: https://developers.facebook.com/docs/plugins/.
The browser establishes a direct connection with the servers of Facebook when a user accesses the website of the offer that contains a social plug-in. Facebook directly transmits the content of the plug-in to your browser, which integrates it in the website. We therefore have no influence on the scope of the data that Facebook collects with the help of this plug-in and thus inform users according to the best of our knowledge:
The data collected in this way is anonymous for us, i.e. we do not see the personal data of individual users. However, such data are stored and processed by Facebook, and we provide you with such information as is available to us on this point. Facebook can connect these data with your Facebook account and use them for its own advertising purposes in accordance with Facebook’s policy on data usage https://www.facebook.com/about/privacy/. You can enable Facebook and its affiliates to display ads on and away from Facebook. A cookie may also be placed on your computer for this purpose.
This consent may only be given by users who are older than 14 years of age. If you are younger than this, please ask your parent or guardian for advice. Please click here, if you wish to withdraw your consent: https://www.facebook.com/settings?tab=ads.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
9. Use of Facebook Pixel
This website uses the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). With the help of Facebook Pixel, it is possible for Facebook to determine the visitors to our offer as a target group for the display of advertisements, so-called “Facebook ads”. We use Facebook Pixel in order to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer. With the help of Facebook Pixel, we want to make sure that our Facebook-Ads correspond to the potential interest of the users and are not annoying. Facebook Pixel also allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.
Facebook Pixel is activated by Facebook immediately when you visit our website and can save a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected is anonymous to us, in other words, it does not provide any information on the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The processing of data by Facebook is carried out within the framework of Facebook’s data policy. Accordingly, for more information on how the Remarketing Pixel works, and how Facebook ads are displayed in general, please see Facebook’s Data Use Policy: https://www.facebook.com/policy.php.
You can object to the Facebook Pixel’s collection and use of your data to display Facebook ads. To do this, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or object via the US-American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices such as desktop computers or mobile devices.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
10. Use of Youtube
We have integrated YouTube videos into our website; these are saved on https://www.youtube.com/ and can be played directly on our website. This is a social media service provided by “Google”. These are all part of the “extended data protection mode”, which means that no data is transmitted to YouTube about you as a user if you do not view the videos. Only when you play the videos will the data mentioned below be transferred. We have no influence on the transmission of this data.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs independently of whether YouTube provides a user account through which you are logged in, or whether there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not want the attribution to your profile on YouTube, you must log off before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the design of its website according to requirements. Such an evaluation takes place in particular (even for users who are not logged in) to carry out targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the compiling of these user profiles. To exercise this you must contact YouTube.
Further information about the purpose and scope of data gathering and its processing by YouTube is available in the data protection declaration. It also provides further information about your rights and the available settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal information in the US and has agreed to abide by the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
11. Use of Vimeo
We use the provider Vimeo, among others, to integrate videos. Vimeo is operated by Vimeo, LLC, with its principal place of business at 555 West 18th Street, New York, New York 10011.
We use plug-ins from the provider Vimeo on some of our websites. If you access pages of our website that use such a plug-in, a connection to the Vimeo server is established and the plug-in shown. In this way, information about the pages you have visited will be sent to Vimeo. If you are logged in as a member of Vimeo, Vimeo will assign this information to your personal user account. When using the plug-in, such as clicking the start button of a video, this information will also be assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
For more information about data processing and privacy by Vimeo, see https://vimeo.com/privacy.
Legal basis: Art. 6 para. 1 lit. a. of the GDPR
12. Your rights
You have the following rights with respect to the personal data concerning you:
- Right to access, rectification and erasure
- Right to restriction of the processing
- Right to objection to the processing
- Right to data portability
Please direct your enquiries and concerns by e-mail to datenschutz@cp-ag.at or use the given contact details.
If you believe that we are contravening Austrian or European data protection law during the processing of data and have therefore infringed your rights, please contact us to clarify any questions.
You also have the right to complain to the supervisory authority, which is the Austrian data protection authority:
Österreichische Datenschutzbehörde, Barichgasse 40 – 42, 1030 Vienna; Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
13. Changes to this privacy policy
We reserve the right to make adjustments to our data privacy policy from time to time. We publish all changes to the privacy policy on this page. Please note the current version of our privacy policy.
14. Disclaimer of liability
C&P Immobilien AG assumes no responsibility for content on external websites referred to through links.