1. Who is responsible for data processing and who can I contact?
The responsible party is:
stayVision indiVision Immobilien GmbH
Buschgasse 55
D-50321 Brühl
office@stay-vision.de
2. What sources and data do we use?
We process the following information:
• Contact details (in particular name, address, email addresses, telephone numbers)
• Personal information (in particular date and place of birth, nationality, gender (if provided), information from a tenant's self-disclosure (if required))
• Consumption information (in particular electricity, heating, and water consumption)
• Payment information (in particular bank details)
• Information about the use of the Nuki electronic access system (access log)
• If available, information from an installed noise sensor (excluding information about exceeding a certain decibel limit)
• Information from correspondence between us.
We generally collect this data from you, unless it is provided to us by third parties (e.g., service providers such as the provider of the electronic access system).
3. What do we process the data for (purpose of processing) and on what legal basis?
We process your personal data for the purpose of fulfilling a contract for the (possibly temporary) use of residential property and to fulfill our legal obligations (e.g., under the registration law). The legal basis for this is Art. 6 (1) (b) GDPR, Art. 6 (1) (c) GDPR, as well as our legitimate interest in the proper management and maintenance of our rental properties pursuant to Art. 6 (1) (f) GDPR.
4. Who receives my data? We process your data internally for the purposes stated above. If we engage service providers to process the contract (in particular, banks and other payment service providers such as PayPal; providers of software solutions for managing our properties; cloud storage providers), your data will be transmitted to them. Furthermore, we may or must disclose data within the scope of our legal obligations, in particular to authorities.
5. Is data transferred to a third country or to an international organization? We work with data service providers, some of whom operate server locations outside the EU. In this case, we strictly adhere to appropriate safeguards to ensure an appropriate level of data protection. Unless the European Commission has issued an adequacy decision for the respective country, we conclude contracts with corresponding data protection regulations. If you have any questions about this, please feel free to contact us.
6. How long will my data be stored? We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations. As business documents, we are subject to statutory retention periods, particularly under tax and commercial law, so your booking-related data is generally retained by us for ten years. If the data is no longer required to fulfill contractual or legal obligations, it is regularly deleted, unless its temporary further processing is required for legal reasons.
7. What data protection rights do I have? Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR, and the right to data portability pursuant to Article 20 GDPR. The restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right to information and the right to erasure. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG). You can revoke your consent to the processing of personal data at any time by contacting the controller. Please note that the revocation only applies to the future. Processing that occurred before the revocation is therefore not affected.
8. Am I obliged to provide data? To carry out our contractual relationship, we need certain information from you. If you do not provide this information, we cannot perform the contract.
9. To what extent does automated decision-making (including profiling) occur? We do not engage in automated decision-making or profiling. Information about your right of objection under Article 21 of the EU General Data Protection Regulation (GDPR) 1. Case-specific right of objection. You have the right to object at any time to the processing of personal data concerning you which is based on Article 6 (1) (e) of the GDPR (Data Protection Regulation), for reasons arising from your particular situation.
