Data privacy notice

Commerz Real Investmentgesellschaft mbH is fully committed to protecting your personal data, and complies with all applicable privacy legislation and standards. Personal data collection on this website only takes place within the necessary scope. Under no circumstances do we forward the data we collect to third parties without your knowledge or without a lawful basis. This notice gives you an overview of what data Commerz Real Investmentgesellschaft mbH collects when you visit our website, to what purpose, and how we use the data.

I. General information on data processing

1. Scope of personal data processing

We only collect and use personal data from our users where this is necessary to provision a fully operational website and related content and services. Personal data from our users are generally only collected and used after the user has given consent. The only exception is in cases where the user’s prior consent cannot be obtained for reasons of fact and there is a lawful basis for processing the data.

2. Lawful basis for personal data processing

Insofar as we obtain the data subject’s consent to the processing of personal data, the lawful basis for personal data processing is Article 6 (1) a) of the EU General Data Protection Regulation (GDPR).

In the case of personal data processing that is necessary for the performance of a contract to which the data subject is party, the lawful basis is Article 6 (1) b) GDPR. The same applies in the case of processing operations required to perform pre-contractual tasks.

Insofar as personal data processing is necessary for compliance with a legal obligation to which our company is subject, the lawful basis is Article 6 (1) c) GDPR.

Where personal data processing is necessary in order to protect the vital interests of the data subject or of another natural person, the lawful basis is Article 6 (1) d) GDPR.

Where processing is necessary to protect the legitimate interests of Commerz Real Investmentgesellschaft mbH or a third party, and where such interests are not overridden by the interests, fundamental rights and fundamental freedoms of the data subject, the lawful basis is Article 6 (1) f) GDPR.

3. Data erasure and retention period

Personal data of the data subject are erased or blocked as soon as the purpose for which the data were stored no longer exists. Data can be retained for a longer period in accordance with European Union or national legislation, regulations, or other requirements to which the controller is subject. Data will also be erased or blocked upon expiration of a retention period specified by legislation or regulations mentioned above, unless continued retention of the data is necessary for the conclusion or performance of a contract.

II. Provisioning of the website and generation of log files

1. Description and scope of data processing

When our website is accessed, our system automatically collects data and information from the device accessing the site.

The following data are collected:

(1) Browser type/version,
(2) Operating system used,
(3) Name and URL of the file accessed,
(4) Referrer URL (the website previously visited),
(5) Host name of the computer accessing the site (IP address),
(6) Date and time of the server query.

The data are also stored in our system’s log files. The data are not stored together with other personal data from the user.

2. Lawful basis for data processing

The lawful basis for the temporary storage of data and log files is Article 6 (1) f) GDPR.

3. Purpose of data processing

The system needs to temporarily store the IP address to allow provisioning of the website to the user’s device. For this purpose, the user’s IP address must be retained for the duration of the session. Data are stored in log files to enable the website to operate correctly. In addition, we use the data to improve the website and to safeguard the security of our IT systems. The data are not analysed for marketing purposes.

Data processing for these purposes is in our legitimate interests in accordance with Article 6 (1) f) GDPR.

4. Data storage period

Data are erased as soon as their storage is no longer necessary to achieve the purpose for which they were collected. With respect to data collected in order to provision the website, this is the case when the corresponding session ends. With respect to data storage in log files, this is the case after seven days at the latest. Data in log files may be stored for a longer period. In this case, users’ IP addresses are erased or anonymised so that data can no longer be associated with the client accessing the website.

5. Objection and prevention

The collection of data in order to provision the website and the storage of data in log files are absolutely necessary to operate the website correctly. For this reason, it is not possible for users to object hereto.

III. Contact

1. Description and scope of data processing

Commerz Real Investmentgesellschaft mbH offers you the opportunity to use the website to obtain information on various topics or to make contact with us. You can contact Commerz Real Investmentgesellschaft mbH using the contact form or by telephone. When you make contact with us, we collect data such as your given and surname, your e-mail address or your phone number.

Users can also contact us using the e-mail address provided. In this case, the user’s personal data transferred via the e-mail are stored.

Data collected in this context are not generally forwarded to third parties. The data are used exclusively for the purpose of processing the conversation. If the inquiry relates to the activities of the Commerz Real Investmentgesellschaft mbH or our subsidiaries or affiliates or companies on whose behalf the Commerz Real Investmentgesellschaft mbH or affiliates is acting, and if necessary for the efficient processing of the inquiry, your data may be forwarded to the relevant company.

2. Lawful basis for data processing

Where the user’s consent has been obtained, the lawful basis for data processing is Article 6 (1) a) GDPR.

The lawful basis for the processing of data transferred via an e-mail is Article 6 (1) f) GDPR. If contact is made with the intention of concluding a contract, the lawful basis for data processing is additionally Article 6 (1) b) GDPR.

3. Purpose of data processing

The processing of data from entry fields is solely for the purpose of processing your initial contact. Where you initially contact us by e-mail or telephone, it is also in our legitimate interests to process your e-mail address or telephone number, respectively.

4. Data storage period

The data are erased as soon as they are no longer required for the purpose for which they were collected. For personal data entered via the fields of the contact form and data submitted to us via e-mail, this is when the conversation with the user is concluded. The conversation is deemed to have been concluded where it can be inferred from the circumstances that the issue in question has been fully resolved.

5. Objection and prevention

The user may at any time withdraw consent to the processing of their personal data. If a user initially contacts us via e-mail, they can object to the storage of his or her personal data at any time. In this instance, the conversation cannot be continued and all personal data stored within the scope of the conversation are erased.

IV. Security

Commerz Real Investmentgesellschaft mbH cannot accept responsibility for the security of data transferred via the Internet. E-mail messages are not encrypted. As a result, it is not possible to rule out third parties becoming aware of them. We therefore recommend sending confidential information by conventional post only.

V. Your rights and how to lodge a complaint

You have the following rights with respect to our collecting and processing your personal data:

• Right of access,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to withdraw consent,
• Right to object to processing,
• Right to data portability.

To exercise your rights, please contact the data protection officer at Commerz Real Investmentgesellschaft mbH at datenschutzbeauftragter(at)commerzreal.com.

In addition, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

VI. Responsibility (data controller)

The data controller under GDPR and other national data-protection legislation of member states and other related regulations is:

Commerz Real AG
Friedrichstrasse 25
65185 Wiesbaden, Germany
E-mail: cr@commerzreal.com

VII. Data protection officer

Commerz Real Investmentgesellschaft mbH
Data Protection Officer
Friedrichstrasse 25
65185 Wiesbaden, Germany
E-mail: datenschutzbeauftragter@commerzreal.com

← Back to the page