Data Protection
Data Protection
As HIH Real Estate GmbH (hereinafter “HIH”), we warmly welcome you to our Internet site. We are glad to see you take an interest in our company and would like to make your visit to our web pages as pleasant an experience as possible. Of course, we will handle your data responsibly and will in every way adhere to the statutory requirements under German law. The sections below elaborate how we will process your personal data and provide other information of relevance in this context.
Who is the Controller Responsible for Processing Your Data?
The controller within the meaning of the EU Data Protection Regulation (GDPR) is HIH Real Estate GmbH, Ericusspitze 1, 20457 Hamburg, Germany (hereinafter “we” or “HIH”).
Data Protection Officer
For any questions relating to the processing of your personal data and the exercise of your rights under the GDPR, please get in touch with our Data Protection Officer, Ben R. Hansen, by writing to bhansen@hih.de or else contact our data protection team at datenschutz@hih.de.
When and on what legal basis do we collect data about you?
We only process your data if one of the following legal bases applies:
- You have given us your consent to data processing in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.
- We are authorised to process your data for the establishment, fulfilment or termination of the contract within the framework of contractual or pre-contractual measures required in accordance with Art. 6 para. 1 lit. b) GDPR.
- We are obliged to process data in order to fulfil legal obligations, e.g. statutory retention obligations with regard to business documents in accordance with Art. 6 para. 1 lit. c) GDPR.
- We may process your data within the framework of the balancing of interests in accordance with Art. 6 para. 1 lit. f) to protect our legitimate interests.
Specifically, we process your data in the following cases:
When accessing our website/server log files
Each time you access our website, your web browser transmits usage data. This includes your IP address and a description of the content accessed (URL). Without the collection and temporary storage of this data for the duration of the session, it is not possible to establish a connection to our server and thus use the website.
Depending on the web browser configuration, further data may be transmitted to us, such as browser type, browser version, operating system, referrer URL, host name of the accessing computer, time of the server request100, IP address.
In addition, we store technical access data (non-personal data) in so-called server log files after the end of use, such as the name of the requested file, date and time of access, amount of data transferred and the requesting provider.
This data is used exclusively to ensure trouble-free operation and to improve the usability of the site, which constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.
Contact and communication
On some pages you can enter personal data in input fields for the purpose of corresponding with us. This data is only processed for the purpose for which you have provided us with the data, e.g. to process your enquiry or to contact you at your request. Our legitimate interest is to process your enquiry or request completely and correctly and, for example, to contact you. The processing of personal data is therefore carried out in accordance with Art. 6 para. 1 letter f) GDPR. If your enquiry is aimed at concluding a contract or an existing contract, Art. 6 (1) (b) GDPR is the legal basis for processing.
Inquiries by E-Mail, Phone or Fax
If you contact us via e-mail, telephone or facsimile, your inquiry including all the personal data it generates (name, request for information) will be saved and processed by us for the purpose of responding to your request. We will not disclose these data without your consent.
These data are processed on the lawful basis of Art. 6, Sec. 1, Lit. b, GDPR, if your inquiry relates to the fulfilment of a contract or is required for executing pre-contractual measures. In all other cases, the data processing is based on our legitimate interest to process inquiries submitted to us in an effective manner (Art. 6, Sec. 1, Lit. f, GDPR) or else is based on your consent (Art. 6, Sec. 1, Lit. a, GDPR) if your consent was requested.
The data you submit via our contact form will be retained until you request that we delete it, revoke your consent to the data storage, or whenever the purpose for which the data were retained has lapsed (e. g. once the subject of your inquiry has been processed). Mandatory legal provisions—especially statutory retention periods—remain unaffected.
These data are processed on the lawful basis of Art. 6, Sec. 1, Lit. b, GDPR, if your inquiry relates to the fulfilment of a contract or is required for executing pre-contractual measures. In all other cases, the data processing is based on our legitimate interest to process inquiries submitted to us in an effective manner (Art. 6, Sec. 1, Lit. f, GDPR) or else is based on your consent (Art. 6, Sec. 1, Lit. a, GDPR) if your consent was requested.
The data you submit via our contact form will be retained until you request that we delete it, revoke your consent to the data storage, or whenever the purpose for which the data were retained has lapsed (e. g. once the subject of your inquiry has been processed). Mandatory legal provisions—especially statutory retention periods—remain unaffected.
Which Categories of Recipients Exist?
If you make a contact inquiry, your personal data may be transmitted to the companies listed below, which are affiliated with us, to the extent permitted within the scope of the purposes and legal bases set out in Sec. 4, above:
- HIH Real Estate GmbH
- HIH Institutional Advisory GmbH
- HIH Business Development GmbH
- HIH Projektentwicklung GmbH
- IntReal International Real Estate Kapitalverwaltungsgesellschaft mbH
- IntReal Solutions GmbH
- IntReal Legal Advisory GmbH
- IntReal Luxemburg S.A
- Real Exchange AG
- REAX Advisory GmbH
- Eternigy GmbH
- HIH Invest Real Estate GmbH
- HIH Center und Projektmanagement GmbH
Use of cookies on our website
Our website uses cookies. These are small text files that your web browser stores on your end device. Cookies help us to make our website more user-friendly, effective and secure.
Some cookies are ‘session cookies’. Such cookies are deleted automatically at the end of your browser session. Other cookies, on the other hand, remain on your device until you delete them yourself. Such cookies help us to recognise you when you return to our website.
Essential cookies
We use so-called essential cookies on our website. These are cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. language settings). The legal basis, insofar as personal data is processed, is Art. 6 para. 1 lit. f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services and, moreover, Section 25 (2) no. 2 TDDSG.
We use the following essential cookies on our website:
Borlabs
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent.
Borlabs Cookie does not process any personal data. The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.
- Name of the tool/tag type: borlabs-cookie
- Cookie name: Borlabs Cookie
- Purpose: Saves the settings of the visitors selected in the cookie box.
- Duration: One year
- Business address and further data protection information: Borlabs GmbH, Hamburger Str. 22, 22083 Hamburg, https://de.borlabs.io/datenschutz/
External media
Content from video platforms and social media platforms is blocked by default.
If you have consented to the use of external media in accordance with Art. 6 para. 1 lit. a) GDPR, you have the option of accessing this media and access to this content no longer requires manual consent.
Under the link ‘Cookie settings’ at the bottom left of the website, you can also agree to the use of only individual external media or revoke your consent.
You can also prevent the storage of cookies by selecting the appropriate settings in your browser software.
We have integrated the following external media into our website:
Google Maps
Our website uses the map service Google Maps. In order for the Google map material used by us to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server, which may also be located in the USA, when you access the contact page. Google thereby receives the information that the contact page of our website has been accessed from the IP address of your device. If you access the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our contact page. Google stores your data and uses it for the purposes of advertising, market research and personalised presentation of Google Maps.
- Name of the tool/tag type: Google Maps
- Cookie name: Google Maps
- Purpose: Is used to unlock Google Maps content.
- Duration: six months
- Business address and further data protection information: Google Ireland Limited, Gordon House, Borrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=de
- Withdrawal You can also object to this data collection via Google. You can find more information on this in Google’s privacy policy and the additional terms of use for Google Maps.
Statistics
If you have consented to the setting of optional statistics cookies, the cookies listed below are collected, stored and analysed on the basis of Art. 6 para. 1 lit. a) GDPR. We use statistics cookies to analyse the use of our website.
We only set the following statistics cookies with your consent:
Google Analytics
This website uses Google (Universal) Analytics. The information generated about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
- Name of the Tool-/Tag-Typs: _ga,_gat, _gid
- Cookie name: Google Analytics
- Purpose Cookie from Google for website analyses. Generates statistical data on how the visitor uses the website.
- Duration: 14 months
- Business address and further data protection information: Google Ireland Limited, Gordon House, Borrow Street, Dublin 4, Ireland; https://policies.google.com/privacy?hl=de
- Withdrawal: You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent or by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.
Fonts
Adobe Fonts
To ensure that certain fonts are uniformly displayed, this website uses Web Fonts by Adobe. These are provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”).
When accessing this website, your browser will load the required fonts directly from Adobe in order to display them correctly on your endpoint. Your browser will connect to Adobe servers in the United States when doing so. This will let Adobe know that your IP address was used to access this website. According to Adobe, no cookies are stored in the process of providing the fonts.
Adobe relies on standard contractual clauses or adequacy decisions by the European Commission that concern certain countries. The data processing agreement drafted by Adobe contains the standard contractual clauses. Source: https://www.adobe.com/de/privacy/eudatatransfers.html.
For more information on Adobe Fonts, go to: https://www.adobe.com/de/privacy/policies/adobe-fonts.html. For the data protection statement of Adobe, go to: https://www.adobe.com/de/privacy/policy.html The company is certified in accordance with the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. The data is stored and analysed on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.
How long will your data be stored?
We only store your data for as long as is necessary to fulfil the purposes of data processing or for the various storage periods stipulated by law. If the respective purpose no longer applies or after expiry of the corresponding periods, your data will be blocked or deleted. We delete your data that we process in the context of use,
- if the data processing is based on Art. 6 para. 1 lit. f) GDPR, you object to the data processing (Art. 17 para. 1 lit. c) GDPR and there are no overriding legitimate reasons for storing your data;
- if the data processing is based on Art. 6 para. 1 lit. b) GDPR and the contractual relationship between us ends, as long as no statutory retention periods prevent deletion.
Browsing our website
‘Session cookies’ are deleted automatically at the end of your browser session. Other cookies, on the other hand, remain on your end device for longer (see above).
Data transmission security
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
What Are Your Rights?
You have the following rights in regard to personal data concerning you:
Information and Access
You have the right to receive information about your personal data processed by us and to request access to your personal data and/or copies of these data. This includes information about the purpose of use, the category of data used, its recipients and authorised persons and, if possible, the planned length of the data retention period or, if this is impossible, the criteria for determining the length of that period;
Correction
You have the right to demand the prompt correction of incorrect personal data that concern you. You have the right to have incomplete personal data completed, including by means of providing a supplementary statement, with the processing purposes taken duly into account.
Right to Object
If your personal data is processed on the basis of Art. 6, Sec. 1, Lit. f, GDPR, you have the right to object to the processing of these data at any time on grounds arising from your specific circumstances. If you file such an objection, we will cease to process these personal data unless we can substantiate compelling legitimate grounds for processing your data which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims. For more information on your right to object with respect to our third-party providers, see Sec. 6, above.
Right to Erasure
You have the right to demand that we promptly erase any personal data concerning you, and we will be obliged to promptly erase personal data if one of the following reasons applies:
Right to Object to the Collection of Data in Special Cases and to Direct Advertising (Art. 21, GDPR)
If the processing is consensual, you have the right to revoke your consent any time, without affecting the legality of the processing done on the basis of the consent up to the revocation.
If data are processed on the basis of Art. 6, Sec. 1, Lit. f, GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your specific circumstances; the same being true for any profiling that is based on these provisions.
For the respective legal basis for the processing, please see this Data Protection Policy. If you file an objection, we will cease to process your personal data unless we can substantiate compelling reasons worthy of protection for processing your data which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims (objection pursuant to Art. 21, Sec. 1, GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this applies even to profiling if it is associable with direct marketing of this kind. In response to your objection, we will cease using your personal data for direct marketing purposes (objection pursuant to Art. 21, Sec. 2, GDPR).
If data are processed on the basis of Art. 6, Sec. 1, Lit. f, GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your specific circumstances; the same being true for any profiling that is based on these provisions.
For the respective legal basis for the processing, please see this Data Protection Policy. If you file an objection, we will cease to process your personal data unless we can substantiate compelling reasons worthy of protection for processing your data which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims (objection pursuant to Art. 21, Sec. 1, GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this applies even to profiling if it is associable with direct marketing of this kind. In response to your objection, we will cease using your personal data for direct marketing purposes (objection pursuant to Art. 21, Sec. 2, GDPR).
Right to Restriction of Processing
You have the right to demand that we restrict processing of your personal data if one of the following conditions applies:
The accuracy of the personal data is disputed by you, provided we are given enough time to verify the accuracy of your personal data; The professing is unlawful and you reject the erasure of your personal data, requesting instead that the use of the personal data be restricted; We no longer need the personal data for processing purposes but you require them for asserting, exercising or defending legal claims, or You objected to the processing pursuant to Sec. 8, Letter c, above, pending the verification whether our legitimate reasons override yours.
Once the processing has been restricted in accordance with the prerequisites outlined above, the personal data may—apart from being retained—be processed only with your consent or else may be processed only to assert, exercise or defend legal claims, or to protect the rights of another natural person or legal entity, or for reasons of important public interest of the European Union or of an EU member state.
If you obtained a processing restriction, we will notify you in time if the restriction is lifted.
The accuracy of the personal data is disputed by you, provided we are given enough time to verify the accuracy of your personal data; The professing is unlawful and you reject the erasure of your personal data, requesting instead that the use of the personal data be restricted; We no longer need the personal data for processing purposes but you require them for asserting, exercising or defending legal claims, or You objected to the processing pursuant to Sec. 8, Letter c, above, pending the verification whether our legitimate reasons override yours.
Once the processing has been restricted in accordance with the prerequisites outlined above, the personal data may—apart from being retained—be processed only with your consent or else may be processed only to assert, exercise or defend legal claims, or to protect the rights of another natural person or legal entity, or for reasons of important public interest of the European Union or of an EU member state.
If you obtained a processing restriction, we will notify you in time if the restriction is lifted.
Right to Data Portability
If the processing is based on your consent or a contract and if it is automated, you have the right to demand that we provide your personal data in a machine-readable format.
Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a regulator, especially in the EU member state of your place of residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR. For a list of data protection regulators including their data protection officers and their contact details, click the following link: https://www.bfdi.bund.de/DE/Infothek/Anschrifteninks-node.html.
Asserting these rights is free of charge for you.
Requirement of Providing Your Personal Data
Providing personal data is neither legally nor contractually required, nor are you under any obligation to provide your personal data. However, providing personal data is necessary if you wish to contact us. Moreover, it cannot be assured that you have unrestricted access to all features of this website if your browser accepts no cookies.
Updating this Data Protection Policy
It may be necessary to update this Data Protection Policy from time to time, e.g. due to new offers on our website or due to legal changes. You will always find the latest version right here. We generally recommend that you call up this Data Protection Policy regularly to check for possible changes. You will recognise a new version by the date of the latest update, which is stated at the end of this document.
Miscellaneous
You can directly print out and save this Data Protection Policy, e.g. by using your browser’s print or save function. This Data Protection Policy was created on 18 May 2018. It was last updated on 27 May 2024.
