Privacy Policy

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

Our privacy policy is structured as follows:

I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing

I. Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

Grundstücksgesellschaft Hengstermann GbR
Campus Living Düsseldorf
Haus Meer 2
40667 Meerbusch
Deutschland

E-Mail: verwaltung@campus-living-dus.de

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Subscription to the “Infoticker” (newsletter)

On the “Campus Living” website, users are given the opportunity to subscribe to an “Infoticker” (newsletter). The input mask used for this purpose determines what personal data is transmitted to the controller when the newsletter is ordered. Further information on the subscription, such as frequency, content, revocation options, statistics and performance measurement or unsubscriptions by the provider are also provided directly in the input mask.

It goes without saying that the personal data collected as part of the “Infoticker” will not be passed on to third parties. The subscription to our “Infoticker” can be terminated by you at any time. The consent to the storage of personal data that you have given us for the “Infoticker” mailing can be revoked at any time. There is a corresponding link in every “Infoticker” for the purpose of withdrawing consent. It is also possible to unsubscribe from the “Infoticker” mailing list at any time directly by sending an Email to the controller or to inform the controller of this in another way. We will unsubscribe inactive subscribers after one year at the latest and delete their data. After 2 years, we will automatically unsubscribe subscribers and delete all data.

Apartment Inquiry / Rental Inquiry / Renting

Your transmitted data in the context of an inquiry for renting a furnished apartment (in particular name, email, mobile number, self-disclosure, certificate of study, proof of income & ID) will be processed by us for the purpose of rental initiation or renting an apartment and are insofar necessary to fulfill the contractual and pre-contractual obligations. A rental initiation and rental are not possible without providing your data.

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

If a rental initiation or rental of an apartment is no longer desired or necessary, you can delete your data independently by deleting your registered account (see below) without delay. The data will also be deleted if it is no longer required for the purpose of its processing (e.g., if no rental agreement is concluded or no eligibilty for renting an apartment exists). However, we must observe any retention periods required under tax and commercial law.

In the context of rent initiation and letting, we pass on your data to the property management company (Hengstermann Immobilienmanagement II GmbH, Haus Meer 2, 40667 Meerbusch) commissioned with some parts of the management of the “Campus Living” property, without which letting is not possible and is therefore necessary.

The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.

Registration Function / Account Applicants Portal

For the rental application and the rental of a furnished apartment, it is necessary for users to create an account. We will collect and store the data you enter during registration (e.g., your user name, name or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of communication (e.g. viewing confirmations & reminders, rental commitments & refusals). At the same time, we then store the IP address and the date of your registration along with the time. Of course, this data will not be passed on to third parties.

As part of the registration process, your consent to the terms of use of the applicants portal is obtained, your consent to this processing is obtained and reference is made to this privacy policy. The data collected by us in this process will be used exclusively for the provision of the account, for pre-contractual services, for the performance of the contract or for the purpose of communication.

Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing. If the opening of the customer account additionally also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 (1) (b) GDPR.

In accordance with Art. 7 (3) GDPR, you may revoke the consent given to us for the opening and maintenance of the account at any time with effect for the future. To do so, you only need to inform us of your revocation. The data of your account can be exported or removed at your express request via the existing data exporter or deletor.

The data of registered users collected in this respect will remain stored indefinitely. The data will be deleted if you delete the account independently via the “My account” function. The data will also be deleted or the account will be deleted if it is no longer necessary for the purpose of its processing (e.g., if no rental agreement is concluded or no eligibilty for renting an apartment exists). However, we must observe any retention periods required under tax and commercial law.

Tenants portal account

A protected tenants portal is available to tenants during the lease term. The following data is stored in the respective account:

– Name
– Your address
– Email address
– Rental contract number

We will collect and store this data exclusively for the performance of the contract or for the purpose of fulfilling the obligations arising from the tenancy.

As part of the rental agreement, your consent to the terms of use of the tenants portal will be obtained, your consent to this processing will be obtained and reference will be made to this privacy policy.

Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.

If the use of the account additionally serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 (1) (b) DSGVO.

In the context of the tenants portal, you can send the internet service provider of “Campus Living” a support request by email. In this request, the name and rental contract number of the account will be transmitted to the service provider to fulfill the request. Of course, the data will not be passed on to third parties in any other way.

In accordance with Art. 7 (3) DSGVO, you can revoke the consent given to us for the opening and maintenance of the account at any time with effect for the future. To do so, you only need to inform us of your revocation. The data of your account can be exported or removed at your express request via the existing data exporter or deletor.

The data collected in this respect will be deleted as soon as the lease ends. However, we must observe any retention periods required under tax and commercial law.

Payment function in the tenants portal

Within the framework of the tenants portal, users can pay other costs related to the rental relationship online. In this context, further data is collected during the payment process on our website. This data may include, but is not limited to, your name, email address, address, IP address and any other information that may be requested for the purpose of processing your payment and retaining your billing details.

Processing this data also allows us to:

Send you important account, billing and service information.
Respond to your questions or complaints.
Process payments and prevent fraudulent payments.
Retain payment and billing history.
Maintain historical payment and billing history.

Stripe

We also offer the option of processing the above payment function in the tenants portal via the payment service provider Stripe, ℅ Legal Process, 510 Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Stripe insofar as it is necessary for the fulfillment of the contract (Art. 6 para. 1 lit. b. GDPR).

Name of the cardholder
e-mail address
Customer number
Order number
Bank details
Credit card details
Credit card expiry date
Credit card verification number (CVC)
Date and time of the transaction
Transaction amount
Name of the provider
Location

The processing of the data provided in this section is not required by law or contract. Without the transmission of your personal data, we cannot process a payment via Stripe. You have the option of choosing a different payment method.

Stripe assumes a dual role as controller and processor for data processing activities. As the controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe’s legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence on this process.

Stripe acts as a processor in order to complete transactions within the payment networks. Within the framework of the order processing relationship, Stripe acts exclusively in accordance with our instructions and has been contractually obliged to comply with the data protection regulations within the meaning of Art. 28 GDPR.

Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

You can find further information on objection and removal options vis-à-vis Stripe at: https://stripe.com/privacy-center/legal

Your data will be stored by us until payment processing is completed. This also includes the period required for the processing of refunds, receivables management and fraud prevention.

Matomo (formerly: PIWIK)

Our website uses Matomo (formerly: PIWIK). This is open-source software with which we can analyze the use of our site. Data such as your IP address, the pages you visit, the website from which you came (referrer URL), the duration of your visit, and the frequency of your visits is processed.

Matomo stores a cookie on your device via your browser in order to collect this data. This cookie is valid for one week.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.

We use Matomo with the “Automatically Anonymize Visitor IPs” function. This anonymization function truncates your IP address by two bytes so that it is impossible to assign it to you or to the internet connection you are using.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

In addition, you have the option of terminating the analysis of your usage behavior by opting out. By confirming the link

[matomo_opt_out]

a cookie is stored on your device via your browser to prevent any further analysis. Please note, however, that you must click the above link again if you delete the cookies stored on your end device.

OpenStreetMap

For directions on our site, we use OpenStreetMap, a service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, hereinafter referred to as “OpenStreetMap”.

When you access one of our Internet pages that includes the OpenStreetMap service, OpenStreetMap stores a cookie on your terminal device via your browser. This processes your user settings and user data for the purpose of displaying the page or guaranteeing the functionality of the OpenStreetMap service. Through this processing, OpenStreetMap can recognize the website from which your request has been sent and to which IP address the directions should be transmitted.

The legal basis for collecting and processing this information is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our site.

OpenStreetMap offers further information about its data collection and processing as well your rights and your options for protecting your privacy at this link:

https://wiki.osmfoundation.org/wiki/Privacy_Policy.