We have made this privacy statement (version 29.09.2018-211074416) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and the Austrian data protection act (DSG), what kind of information we collect, how we use the data, and what options you have as a visitor of this website. Unfortunately, it’s in the nature of this topic that these explanations sound very technical, but we have tried be as simple and clear as possible in describing the most important things.

Automatic data storage

When you visit any websites today, certain information will automatically be created and stored; it’s the same on this website.

When you visit our website, as you are doing right now, our web server (the computer hosting this website) will automatically store data such as

• • the address (URL) of the website called up
• • the browser and browser version
• • the operating system used
• • the address (URL) of the website visited before that (referrer URL)
• • the host name and the IP address of the terminal device that the website is accessed from
• • the date and time

in files (web server log files).

Usually, web server log files will be saved for two weeks and then deleted automatically. We do not pass on this data, but we cannot exclude that it will be accessed through illegal conduct.
Under Article 6 paragraph 1 f GDPR (lawfulness of processing), the legal basis for such data processing is the legitimate interest in facilitating error-free operation of this website by recording said web server log files.

Storage of personal data

Personal data that you transmit to us electronically on this website, such as name, email address, postal address or other personal information within the scope of transmitting a form or some comment in the blog, will be used by us, together with the time and the IP address, exclusively for the purpose indicated in each case; the data will be stored safely and not passed on to any third parties.

Hence, we shall use your personal data only for the purpose of communicating with those visitors who explicitly wish to do so and for transactions involving the services and products offered on this website. We shall not pass on your personal data without your consent, but we cannot exclude that it will be accessed through illegal conduct.

Whenever you send us any personal data by email, and not through this website, we cannot guarantee secure transmission and the protection of your data. We recommend that you never transmit any confidential information unencrypted by email.

Under Article 6 paragraph 1 a GDPR (lawfulness of processing), the legal basis for such data processing is your consent to the processing of the data submitted by you. You can revoke this consent at any time, an informal email will suffice to do so; you will find our contact details in the legal notice.

Rights under the General Data Protection Regulation

Pursuant to the provisions of the GDPR and the Austrian data protection act (DSG), you are basically entitled to the following rights:

• • Right to rectification (Article 16 GDPR)
• • Right to erasure (right to be forgotten) (Article 17 GDPR)
• • Right to restriction of processing (Article 18 GDPR)
• • Right to be informed. Duty to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
• • Right to data portability (Article 20 GDPR)
• • Right to object (Article 21 GDPR)
• • Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR)

If you think that the processing of your data violates data protection legislation or that your rights under data protection legislation have otherwise been violated, you may lodge a complaint with the supervisory authority; in Austria this will be the data protection authority, with the following web address https://www.dsb.gv.at/.

TLS encryption using https

We use https to transmit data on the Internet in a tap-proof manner (data protection by design and by default Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for the safe transmission of data on the Internet, we can ensure the protection of confidential information. The use of this safe data transmission protocol is signified by the little icon in the form of a lock in the top left corner of your browser and the https (instead of http) formula as part of our Internet address.

Cookies

Our website uses HTTP cookies to store user-specific data.
A cookie is a short data packet that is exchanged between the web browser and web server, without being of any significance to them; it is only of significance to the web application, e.g. an online shop, such as with respect to the content of a virtual shopping basket.

There are two types of cookies: First-party cookies are generated by our website, third-party cookies are generated by other websites (e.g. Google Analytics).
There are three categories of cookies: cookies that are absolutely required to ensure basic functions of the website, functional cookies to ensure the performance of the website, and targeted cookies to improve user experience.

We use cookies in order to make our website more user-friendly. Some cookies will remain stored on your terminal until you delete them. They enable us to recognise your browser on the occasion of the next visit.

View cookie settings and delete cookies

If you want to find out which cookies were stored in your browser, if you want to change or delete cookies, you can do so in your browser settings:

Safari: Managing cookies and website data with Safari
Firefox: Deleting cookies to remove data that websites have filed on your computer
Chrome: Deleting, enabling and managing cookies in Chrome
Internet Explorer: Deleting and managing cookies
If you do not want any data to be stored in cookies, you can adjust your browser settings in such a way that you will be informed about the placing of cookies, allowing such cookies to be placed in individual instances only. You can delete or disable cookies that are already stored on your computer at any time. The relevant procedure varies with the browser used; the best thing to do is look for the instructions in Google by entering “deleting cookies Chrome” or “disabling cookies Chrome” if your browser is Chrome, or substitute the name of your browser, e.g. Edge, Firefox, Safari, for the word “Chrome”.
If you do not allow us to use cookies in general, i.e. disabling them in your browser settings, some functions and pages will not work as expected.

Newsletter privacy statement

By subscribing to our newsletter you submit the above-mentioned personal data, granting us the right to contact you by email. We shall exclusively use the data stored during your newsletter registration for our newsletter and will not pass said data on to anyone.

Should you want to unsubscribe from the newsletter, you will find the relevant link at the bottom of each newsletter; we will then delete all data stored upon registration for the newsletter.

MailChimp privacy statement

We dispatch our newsletters using MailChimp, and on this website we use functions of the newsletter service MailChimp of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA, for the purpose of recording newsletter registrations.

General information about MailChimp
The Rocket Science Group LLC (MailChimp) maintains online platforms allowing our users to stay in touch with their subscribers, primarily by email. They enable users to upload email addresses and other information pertaining to the subscriber profile, such as name, physical address and other demographic information, to the MailChimp database. This information is used to send emails and to enable the use of certain other MailChimp functions by these users. In accordance with the published data protection policies, MailChimp shares some information with third-party providers to provide and support the services that MailChimp offers to its users. MailChimp also shares some information with advertising partners of third-party providers in order to better understand the needs and interests of users, for more relevant content and targeted advertising to be provided to these and other users.

Newsletter registration

If you subscribe to our newsletter on our website, the data you enter will be stored by MailChimp.

Erasure of your data

You can withdraw your consent to receiving our newsletter at any time within the email received by clicking on the link in the bottom part of the newsletter. When you have deregistered by clicking on the unsubscribe link, your data will be deleted from the MailChimp database.

Newsletter analysis

When you receive a newsletter via MailChimp, information like IP address, browser type and email application will be stored to provide us with information about the performance of our newsletter. Using images integrated in the HTML emails, so-called web beacons (for details go to https://kb.mailchimp.com/reports/about-open-tracking), MailChimp can ascertain whether the email has arrived, whether it was opened, and if any links were clicked on. All this information is stored on the MailChimp servers, not on this website.

MailChimp is an active participant in the EU-U.S. Privacy Shield Framework, which regulates the correct and secure transfer of personal data. For more information, please go to https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG. You will find more information about the use of cookies by MailChimp on https://mailchimp.com/legal/cookies/, information on data protection at MailChimp (privacy) is available at https://mailchimp.com/legal/privacy/.

MailChimp data processing contract

We have concluded a contract on data processing (Data Processing Addendum) with MailChimp. This contract serves to safeguard your personal data, ensuring that MailChimp will comply with applicable data protection legislation and will not pass on your personal data to any third party.

For more information on this contract, please go to http://mailchimp.com/legal/forms/data-processing-agreement/.

Google Maps privacy statement

We use Google Maps of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.

Whenever the functions of this map are used, data will be transmitted to Google. Information as to which data are collected by Google, and what these data are used for is available at https://www.google.com/intl/de/policies/privacy/.

Google Analytics privacy statement

On this website, we use Google Analytics by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to statistically analyse visitor data. Google Analytics uses targeted cookies for that purpose.

Cookies by Google Analytics

• _ga
• • Expiration: 2 years
• • Use: Distinction of website users
• • Sample value: GA1.2.1326744211.152211074416

• _gid
• • Expiration: 24 hours
• • Use: Distinction of website users
• • Sample value: GA1.2.1687193234.152211074416

• _gat_gtag_UA_
• • Expiration: 1 minute
• • Use: Is used to limit the request rate. When Google Analytics is provided via Google Tag Manager, this cookie will be designated _dc_gtm_ .
• • Sample value: 1

For more information on the terms of use and on data privacy, please go to http://www.google.com/analytics/terms/de.html or to https://support.google.com/analytics/answer/6004245?hl=de.

Pseudonymisation

Within the meaning of the GDPR, our main concern is to improve our offer and our web presence. As we consider the privacy of our users very important, user data will be pseudonymised. Data processing will be based on the legal provisions of Section 96 (3) TKG as well as Art 6 (1) (a) (consent) and/or (f) (legitimate interest) of the EU-GDPR.

Disabling of data collection by Google Analytics

Using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), website users can prevent Google Analytics from using their data.

You can prevent Google from collecting and processing the data relating to your use of the website and generated by the cookie by simply downloading and installing the following browser plug-in by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics Addendum regarding data processing

We have concluded a direct customer contract with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in Google Analytics.

Find out more about data processing for Google Analytics: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad

Google Analytics IP anonymisation

On this website, we have implemented IP address anonymisation by Google Analytics. This function was developed by Google to enable this website to comply with applicable data protection legislation and the recommendations of local data protection authorities, if they prohibit the storage of full IP addresses. The anonymisation or masking of IP addresses takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place.

For more information about IP anonymisation go to https://support.google.com/analytics/answer/2763052?hl=de.

Google Analytics reports on demographic features and interests

We have activated the functions for advertising reports in Google Analytics. The reports on demographic features and interests include information about age, gender and interests. This allows us to better understand our users, without being able to allocate this data to individual persons. For more information about the advertising functions, please go to https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.

You can terminate the use of the activities and information of your Google account by ticking the relevant box under “Settings for advertising” on https://adssettings.google.com/authenticated.

Google Analytics disabling link

If you click on the following disabling link, you can prevent Google from recording any further visits to this website. Please note: Deleting cookies, using the incognito/private mode of your browser or using any other browser will cause data to be collected again.

Facebook Pixel privacy statement

On our website, we use the functions of Facebook Pixel by Facebook, a social media network of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The code implemented on this site can evaluate the behaviour of visitors who have come to this website from a Facebook advertisement. This can be used to improve Facebook ads, and this data is collected and stored by Facebook. The data collected cannot be viewed by us, but will only be used within the framework of advertising placements. Additionally, cookies are set by using the Facebook Pixel code.

By using Facebook Pixel, the visit to this website is communicated to Facebook so that visitors to Facebook can see matching ads. If you have a Facebook account and are signed in, your visit to this website will be associated with your Facebook user account.

To find out how Facebook Pixel is used for advertising campaigns, visit https://www.facebook.com/business/learn/facebook-ads-pixel.

You can change your ad settings in Facebook at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen if you are logged in to Facebook. At http://www.youronlinechoices.com/de/praferenzmanagement/, you can manage your preferences for usage-based online advertising. You can deactivate or activate many providers at once or change the settings for individual providers.

For more information about Facebook’s data policy, please visit https://www.facebook.com/policy.php.

 

Contact: Felix Windisch

Email address: datenschutz@roma.at

Source: Prepared using the Datenschutz Generator (data privacy generator) of firmenwebseiten.at in cooperation with hashtagimmo.at