Data Protection Information

Please note that the German version of the privacy policy is the original version and should be referred to for interpretation purposes.

The protection of your personal data is very important to us, which is why we would like to list all the information about the processing and storage of your data when you visit our website and in our company.

In order to be able to use all the functions and services of our website, it is necessary to collect your personal data. However, the processing and storage only takes place in accordance with the legal guidelines and requirements of the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG 2021).

Responsible Body

BR International Real Estate Services GmbH
Office Park 4, Top B.80
1300 Vienna Airport
Austria

Further information can be found in the imprint.

Collection and processing of personal data on this website

Note: In order to protect your data as comprehensively as possible from unwanted access, we take so-called technical and organisational measures and use an encryption process on our website. Your data is transmitted over the Internet from your computer to our computer and vice versa using what is known as TLS encryption. TLS stands for “Transport Layer Security” and is an encryption protocol for data transmission on the internet. You can usually recognise “TLS” by the fact that the lock symbol in the status bar of your browser is closed and the address begins with https://.

Collection of access and log data

When you visit my website, information is automatically stored.

These are

  • the browser type and version used (if transmitted by the user!),
  • the operating system,
  • Date and time of the server request,
  • the time spent on the website,
  • the previously visited website (if transmitted by the user!),
  • the IP address of the user.

The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest lies in being able to identify indications of unlawful use of our website (e.g. defence against hacker attacks) and to ensure a smooth connection setup.

We have concluded an order processing contract with the provider of this website, trinet e. U., based in Austria, in accordance with Art. 28 GDPR. This is a contract required by data protection law, which ensures that trinet processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Trinet hosts the website on rented servers of Hetzner Online GmbH based in Germany.

The data collected is stored for a maximum of 6 months. We only store the server log files in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR and serves only to preserve evidence.

Enquiries via the contact form, email and telephone

Any personal data that you provide to us on a voluntary basis will of course be treated confidentially. We use the personal data you provide exclusively to process and respond to your enquiry. The legal basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. This arises from our interest in responding to enquiries from our customers, business partners and interested parties and in promoting and maintaining customer satisfaction. Another legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.

All personal data that you send to us with your enquiry will be deleted or anonymised by us no later than 9 months after the final response has been given, unless a contract is concluded. The retention period of 9 months is due to the fact that you may occasionally contact us again about the same matter after a reply and refer to the previous correspondence. In our experience, we have found that after 9 months there are no more queries in response to our replies.

Web analysis with matomo without cookies

We use the web analysis service Matomo and also host it on our own web server, which means that no data is transferred to third parties. The IP address is anonymised before storage and no user profile is created so that we do not recognise returning visitors. We have taken measures to ensure that no cookies or similar technologies are stored on your end device. The use of the web analysis service is based on the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The interest lies in obtaining an anonymised analysis of user behaviour in order to be able to adapt the website accordingly.

You can object to this data processing at any time by sending us an e-mail.

You also have the option of selecting your browser settings so that the acceptance of cookies or similar technologies is generally blocked. As an alternative, the so-called “do-not-track option” can be set in the browser; this is also supported by Matomo.

Instructions for the most common browsers can be found here:

Chrome: https://support.google.com/accounts/answer/61416

Mozilla Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop?redirectslug=cookies-erlauben-und-ablehnen&redirectlocale

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Data processing of business partners and customers

1. Fulfilment of contractual obligations (Art. 6 para. 1 lit. b) GDPR)

The purposes of data processing arise from the implementation of pre-contractual measures and the fulfilment of obligations arising from the concluded contract.
We process master data such as first and last name, billing address, e-mail address, billing and payment data for contract processing.

1. For the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR)

The purposes of data processing arise in individual cases from legal requirements. These legal obligations include, for example, the fulfilment of retention and identification obligations, e.g. in the context of requirements for tax control and reporting obligations and data processing in the context of enquiries from authorities.

1. For the fulfilment of our legitimate interests (Art. 6 para. 1 lit. f GDPR)

We process the contact details of contact persons at customers, interested parties, suppliers and other business partners for communication by email, telephone and post. The legal basis for data processing is the legitimate interest pursuant to Art. 6 para. 1 f) GDPR. The legitimate interest arises from the interest in conducting or initiating the business relationship with customers, interested parties, suppliers and other business partners as well as personal contact with contact persons.

As a matter of principle, we do not pass on data to third parties.

Personal data is stored for the purpose of conducting business relationships for as long as there is a legitimate interest in doing so. It may be necessary to process the personal data provided by you beyond the actual fulfilment of the contract with business partners. The legitimate interests here are in particular the fulfilment of compliance measures, assertion of legal claims, defence against liability claims, prevention of criminal offences and the settlement of damages resulting from the business relationship.

4. Who receives the personal data you provide?

As part of the contractual relationship, we may also commission processors or service providers who may have access to your personal data. Compliance with data protection regulations is ensured by contract.
Specifically, we use the following processors and other service providers:

  • Authorised planners, estate agents, lawyers, notaries, consultants, …
  • Public bodies and institutions in the event of a legal or official obligation according to which we are obliged to provide information, report or pass on data or the passing on of data is in the public interest.
  • Property platforms for advertising properties and viewing the land register (Immounited GmbH based in Austria).
  • bodies and institutions on the basis of our legitimate interest or the legitimate interest of the third party (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, experts, insurance companies).
  • Cloud storage from Alasco GmbH, based in Munich.
  • Use of specific drawing programmes such as AutoCad, Rabbit, SketchUp.
  • Other bodies for which you have given us your separate consent to data transfer

Intercompany order processing (Art. 28 GDPR)

Within the BR Group, certain services are provided centrally by BR International Service GmbH. Specifically, the following data processing is affected by this:

  • Provision of IT applications and Saas products such as Microsoft, BMD, …
  • Branding measures
  • Event management
  • Accounting and payroll accounting

Here it is contractually regulated internally that the data processing may only take place for the commissioned services and that no own processing of data may take place.

Storage period

Where necessary, we process your personal data for the duration of your contractual relationship with us. One reason for longer storage of your data may be that we need it as evidence for proceedings that have not yet been concluded.

In addition, we are subject to various retention and documentation obligations arising from the legal framework, among other things. The retention and documentation periods specified there are generally 7 years. Under certain circumstances, these periods can be extended to up to 30 years.

Processing in connection with the assertion of data protection rights

Insofar as your data has been processed on the basis of consent in accordance with Art. 6 para. 1 lit. a), Art. 9 para. 2 lit. a) or Art. 49 para. 1 lit. a) GDPR, we will process your data exclusively for a specific purpose and after separate information in order to be able to prove that you have consented to the data processing in question within the framework of the accountability obligation incumbent upon us in accordance with Art. 5 para. 2 GDPR. If you revoke your consent, your data will be deleted within the legally prescribed period – please note, however, that data that falls under tax or other retention obligations must be stored for at least seven years and, if necessary, extended by the duration of proceedings by the (tax) authority. The legal basis for data processing is Art. 6 para. 1 lit. c) GDPR.

If you assert data subject rights against us in accordance with Art. 15 to 21 GDPR, we will also process and store your data in order to be able to prove that we have complied with the GDPR when processing your enquiry as part of our accountability obligations in accordance with Art. 5 para. 2 GDPR. The legal basis for this processing is Art. 6 para. 1 lit. c) GDPR in conjunction with the respective data subject right(s) asserted.

Rights of data subjects

Your rights as a data subject

You have the right to receive information about the personal data stored about you free of charge upon request in accordance with Art. 15 para. 1 GDPR. Furthermore, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data. If you have provided the processed data yourself, you have the right to data portability in accordance with Art. 20 GDPR.

If the data processing is based on Art. 6 para. 1 1 e) or f) GDPR, you have the right to object in accordance with Art. 21 GDPR. If you object to data processing, this will not take place in the future unless the controller can demonstrate compelling legitimate grounds for further processing which override the data subject’s interest in objecting.

If the data processing is based on consent in accordance with Art. 6 para. 1 lit. a), Art. 9 para. 2 lit. a) or Art. 49 para. 1 lit. a) GDPR, you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing.

You also have the right to lodge a complaint with a data protection supervisory authority. The complaint may in particular be lodged with a supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Contact details of the responsible data protection authority: Wickenburggasse 8, 1080 Vienna, dsb@dsb.gv.at

No automated decision-making

We do not carry out automated decision-making or profiling.

Provision

Unless otherwise stated in the previous chapters, the provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. Failure to provide your personal data may mean that we are unable to respond to your enquiries, for example.

This data protection information was created in cooperation with the consulting firm SCALELINE. The legal texts are subject to copyright.