Controller according to the General Data Protection Regulation (GDPR) and other national data privacy laws of member states, as well as other data privacy regulations is
You can contact our data protection officer at firstname.lastname@example.org.
General Information on Data Privacy
Categorically, we collect and use our users‘ personal data only as far as it is necessary to operate a functional website as well as to provide our contents and services. The collection and use of personal data are carried out periodically only after obtaining the user’s consent. There is an exception to this in such cases where obtaining consent ahead of time is not possible for practical reasons and the processing of data is permitted per legal provisions.
Where we obtain the data subject’s consent for processing operations for personal data, Article 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data. When processing personal data as part of fulfilling a contract of which the data subject is a contracting party, Article 6(1) lit. b GDPR serves as legal basis. This also applies to processing operations essential to the implementation of precontractual measures. Where the processing of personal data is necessary for compliance with a legal obligation which our business is subject to, Article 6(1) lit. c GDPR serves as legal basis.
If the processing is necessary to the preservation of a legitimate interest held by our business or a third party and the data subject’s interests, constitutional rights and fundamental freedoms do not outweigh this, Article 6(1) lit. f GDPR serves as legal basis for the processing.
The data subject’s personal data will be deleted or made unavailable as soon as they are no longer necessary for fulfilling the purpose of their collection. The recording of data can also occur when it is provided for by European or national legislature in Union law regulations, laws, or other provisions which the data subject is subject to (e.g. in accordance with German Tax Code in certain cases for up to 10 years). Data blocking or deletion will also occur if a storage period required by the mentioned standards expires unless there is a necessity for the continued storage of the data for the conclusion or the fulfilment of a contract.
Operating the Website
With every visit to our website, our system will automatically collect data and information from the visiting computer’s operating system.
The following data will be collected:
Article 6(1) lit. f GDPR serves as legal basis for the temporary storage of data. Temporarily storing the IP address is necessary to ensure the website is delivered to the user’s computer. Therefore, the user’s IP address needs to be stored for the duration of the session. The data is deleted as soon as it no longer needed to achieve the purpose of its storage. In the case of the data recorded for the delivery of the website, this will occur when the respective session has ended.
We use session cookies to make our website more user-friendly. Some elements of our website require for the visiting browser to also be identifiable after changing pages (e.g. for saving a user’s language settings).
In addition, the website uses the third-party cookies described below. These are cookies from other businesses that we have allowed to be used on our website to improve the usability of our services. When accessing the website, the user will be informed about the cookies’ use for analytics purposes, among other things, and their consent to the processing of the personal data used in this context will be obtained.
Here you can find the whole list of cookies we are using: https://www.the-urbanclub.com/cookie-policy-eu/
“Book now” function
On our website we offer you the option to apply for our apartments via a “Book Now” contact form. For this purpose, we use the service provider REOS GmbH, Amsinckstraße 28, 20097 Hamburg, Germany, website: https://www.reos-software.com/ (in the following: “REOS”). This makes it easier for you to contact us in order to conclude a contract. If the “Book Now” contact form is used, the following data will be transmitted to us and stored:
The processing of the personal data from the contact form serves us only to process the contact. For this purpose, the data will be transmitted to REOS and processed there.
REOS needs the personal data to prepare the initial housing application, so that it can then be evaluated by the landlord. A copy of the identity card and other personal documents are automatically deleted by the system as soon as the rental agreement is signed by both parties and is therefore binding. All other information that is important for the contact is of course stored in the system, such as the email address. When a tenant moves out, this information is also removed after a short retention period.
The legal basis for the use of the “Book now” contact form and the associated data processing is Art. 6(1) lit. b GDPR. The processing of personal data from the contact form serves us solely to process your request. The other personal data processed during the sending process serves to prevent misuse of the form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected.
We have concluded a contract for data processing with REOS. This is a data protection contract which guarantees that REOS processes the personal data of our website users only in accordance with our instructions and in compliance with the DSGVO.
Service Contact Forms and Email Communications
You can fill out a contact form on our website. We use such contact forms in order to simplify communications. If a user chooses this option, the following data is transmitted to us and stored:
Alternatively, you can contact us at the provided email address. In that case the user’s personal data transmitted via the email will be stored. In this context, no data will be disclosed to third parties. The data will be exclusively used for processing the conversation.
Article 6(1) lit. f GDPR serves as legal basis for the processing of data which has been transmitted as part of an email. If the email communications aim for the signing of a contract, Article 6(1) lit. b GDPR serves as additional legal basis for the processing.
The processing of personal data from the input screen is solely used to facilitate communications. In the case of email communications, this also includes the necessary legitimate interest in the processing of data. Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary for fulfilling the purpose of their collection.
Rights of Data Subjects
If your personal data is being processed, you are the data subject in accordance with the GDPR and you have the following rights against the controller:
If you want to assert any of your rights, you can contact us at email@example.com or via the contact persons stated in the legal notice.
0800 84 32 58 2