Here, we would like to inform you about the processing of your personal data in relation with your visit to the website ‘beyoo-living.at’ (the ‘website’). The protection of privacy and your personal data is an important concern for us.

1. Responsibilities

Responsible, in terms of the General Data Protection Regulation (GDPR) concerning the processing of personal data related to this website is:

URBAN MICRO ESTATE Immobilienverwaltungs GmbH

Schnirchgasse 13

A-1030 Wien

Telefon: +49 664 88 10 81 87

E-Mail: lumisgraz@beyoo-living.at

2. Data protection officer

Our data protection officer is available using the following contact details:

Richard Laqua
c/o eyeDsec Information Security GmbH
Friedrichstraße 25
95444 Bayreuth
E-Mail: r.laqua@eyeDsec.de
Telephone: +49 (921) 23059035

Any affected person may feel free to contact our data protection officer directly, concerning any questions and suggestions.

3. Processing of your data
(I) processing of data purely for informative use of the website

When using this website for informational purpose only, as long as do not actively transmit information to us, we do not collect any personal data (subject to further information within this data protection declaration), except for those that are automatically sent by your browser to enable your visit on this website, including i.e.

IP-address of the request

Date and time of access

Amount of data transmitted

Browser type and version

Operating system in use

Referrer URL

The processing of personal data serves the purpose to enable usage of the website (establishing connection) or to improve site stickiness & usability of the website and early identification of problems and technical difficulties.

In individual cases particular data (information concerning the browser; see above) is stored for a maximum of four weeks. If the aforementioned data is personal data, the correlating processing is based on art. 6 para. 1 s. lit. f GDPR (legitimate interest; the legitimate interest follows from the above mentioned purposes).

 (ii) Contact forms

If you contact us via the contact forms provided on the website, the personal data you provide in this context (such as your name, e-mail address and telephone number) will be processed in order to respond to your request.

The legal basis for processing of the above-mentioned personal data is art. 6 para. 1 s. 1 lit. f GPDR (legitimate interests; the legitimate interest arises from the fact that the user requested action can only be executed by using appropriate data (e.g. answering an enquiry)). If the contact aims at the conclusion of a contract, the legal basis for processing is (additionally) Art. 6 para. 1 sentence 1 lit. b GPDR (fulfilment of contract or pre-contractual measures).

Please note that with regard to individual contact forms on the Website, not only Upartments Real Estate GmbH processes the corresponding personal data, but also, if applicable, technical service providers of Upartments Real Estate GmbH, service providers commissioned with the administration of the Website (commissioned processors) (see 4. Of this privacy policy) and the affiliated CRM Students Ltd. residing in Great Britain. To make sure our level of data protection is met we signed a processor contract to define corresponding safety measures.

 (IV) Cookies

Information on how this website uses cookies and respective settings can be found in our cookie policy.

 (V) iThemes Security

This website uses the tool “iThemes Security”. In this context, especially the IP addresses of website visitors are processed in order to detect malicious activities and to protect the website from certain types of attacks. The IP addresses are only stored in one of our local databases and are not transmitted to third parties. The legal basis for the corresponding processing of personal data is Art. 6 para. 1 sentence 1 letter f GPDR (legitimate interest; the legitimate interest is that we need to protect the website against third party attacks).

 (VI) Google Tools
Google Analytics

The website uses – (with regard to your visit to the website) under the prerequisite of your consent on your (first) visit of the website – Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on the website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.

This website uses IP-anonymisation in the aforementioned context.

You may prevent storage of cookies in your browser (even after consenting) by selecting the appropriate browser settings. However, please note, that if you do this you may not be able to use the website with its full functionality. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

Further information about Google Analytics can be found here:

http://www.google.com/analytics/terms/de.html,  http://www.google.de/intl/de/policies/privacy/
and at Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. We have concluded an agreement with Google on order data processing (see section 4 below).

Google Maps

On this website you may be able to use contents of the service “Google Maps” from Google. Each time you call up “Google Maps”, Google sets a cookie to process user settings and data when displaying the page on which “Google Maps” is integrated. This cookie is usually not deleted when the browser is closed, but only expires after a certain time, unless you delete it manually beforehand. If you do not agree with this processing of your data, it is possible to deactivate the service of “Google Maps” and thus prevent the transmission of data to Google. To do this, you must deactivate the Java-Script function in your browser. We would like to point out, however, that in this case you will not be able to use “Google Maps”, or only to a limited extent. However, the data processing described above will only be carried out (with regard to your visit to the website) if you give us the appropriate consent when you (first) visit the website (if you do not give such consent, the contents of Google Maps will not be available on the website or will only be available to a limited extent). If you have given such consent, you may also share certain Google Maps content on the Website via Facebook and Twitter.

For more information about the purpose and extent of data collection and processing by Google, please see the Google Privacy Policy. You can also find more information about your rights and privacy preferences there:

http://www.google.de/intl/de/policies/privacy

Google Ads

We use Google Ads by Google to draw attention to our attractive offers by means of advertising material (so-called Google Ads) on external websites. Using the data of the advertising campaigns, enables us to determine the success of the individual advertising measures. In this way, we pursue the interest in showing you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertising materials are delivered by Google via so-called “Ad Servers”. For this purpose, we use Ad Server Cookies, through which certain parameters can be measured to determine success, such as the display of the ads or clicks by users. If you reach our website via a Google ad, Google Ads will store a cookie in your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Google Ads client’s website and the cookie stored on their computer has not expired, Google and the client may recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each AdSense client. As a result, cookies can’t be tracked through the websites of Google Ads clients. We ourselves do not collect and process any personal data in connection with the advertising measures mentioned above. We only receive statistical evaluations from Google. By means of these evaluations we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, especially, we cannot identify the users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and therefore inform you according to our state of knowledge: Through the integration of ads, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and save it.

You may prevent participation in this procedure in various ways: a) by setting your browser software appropriately, in particular by suppressing third-party cookies display of third-party ads is disabled.; b) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; c) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

Google Webfonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. The Google web fonts are installed locally on our server (in this respect, data processing may take place as described above under point 3(II); see also 3(II) for the information concerning the relevant legal basis). There is no connection to Google’s servers related to Google Webfonts.

Embedding of YouTube-Videos

On this website we may embed YouTube videos from the online video platform “YouTube” of the operator YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are stored on servers of YouTube and can be played directly from our website (YouTube, LLC is a subsidiary of Google).

The videos are integrated in the so-called extended data protection mode, which means that personal data about you as a user is only transferred to YouTube when you play the videos. We have no influence on this data transfer. This data transfer is carried out regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google at the same time, your data will be directly associated with your account. If you don’t want your profile to be associated with YouTube, you must log out before playing the video (or refrain from consenting to the appropriate data processing when you visit the site (for the first time); see below). YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact YouTube in order to exercise this right.

In addition, when you access the website (for the first time), a notice window will open, including information about YouTube content on the Site. Only if you give your consent the above data processing will take place (if you do not give such consent, YouTube content on the Website will not be usable or will only be usable in retrievable form).

Further information on the purpose and scope of data collection and its processing by YouTube can be found in YouTubes privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

Further information about the tools mentioned in paragraph 3(VI)

The legal basis for the above-mentioned processing of your personal data in connection with Google Analytics, YouTube and Google Maps is Art. 6 para. 1 sentence 1 lit. a GPDR (consent; you can revoke the corresponding consent at any time with effect for the future).

The legal basis for the above-mentioned processing of data related to Google Ads is (insofar as personal data is processed by us at all in this relation) Art. 6 para. 1 sentence 1 lit. f GPDR (legitimate interests). The legitimate interest consists of our legitimate economic interest in understanding whether and how (often) the website is used or how we can successfully place advertising. The interests of the website users, on the other hand, are not affected or are only affected to a very limited extent in this context (since the data processed in this context makes an assignment difficult and no particularly critical data is processed). Considering the latter, our legitimate interests outweigh the interests of the user.

In Conjunction with the aforementioned tools, where appropriate, personal data may be processed in the USA (see above). Google has pledged to comply with the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use and storage of personal data from EU member states. Google has declared under certification that it will comply to respective privacy shield principles. The EU commission acts on the assumption that the United States warrants an adequate legal protection concerning personal data that is transmitted under the envelope of the Privacy Shield from the EU to self-certified organisations in the USA. Further information can be accessed under: https://www.privacyshield.gov/EU-US-Framework.

 (VII)   Usage of Social Media Plugins

Our websites use plugins from social networks (e.g. Facebook, Twitter, Instagram, XING, LinkedIn; further information on these tools can be found below).

You can recognize these plugins on the website by their respective social media logos. Some of the tools we use (Twitter, Facebook, Instagram, LinkedIn, Matterport) would without any reason (without the precautions we have taken) transmit certain personal data to the providers of these plugins directly when you visit the website. To prevent this, we use plugins from such providers only in connection with the so-called “Avada” solution. This application prevents the plug-ins integrated on the website from transmitting data to the respective provider of the corresponding plug-ins instantly on accessing the website.

Only when you activate the respective plugin by clicking on the corresponding button, a connection to the provider’s server is established, if necessary. As soon as you activate the plugin, the respective provider usually receives information, especially that you have visited the website with your IP address. In this case, if you are logged in to your social media account (e.g. Facebook) at the same time, the respective provider can assign your visit to the website to your user account if applicable.

Activating the plugin as described above constitutes consent to the processing of personal data (you give your consent by clicking the corresponding button; Art. 6 para. 1 sentence 1 lit. a GPDR; you will find further information right next to the corresponding buttons). You can revoke this consent at any time with effect for the future.

Facebook

The website uses share plugins of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can be recognized by one of the Facebook logos (e.g. white “f” on blue tile, the words “Like” or a “thumbs up” sign).

If a user activates a respective Facebook plugin by clicking on the corresponding button, his browser establishes a direct connection to the Facebook servers (see the details above under “Using Social Media Plugins”).

LinkedIn

Our website integrates a share-plugin from LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn is a social network that allows users to connect with existing and new business contacts.

When a user activates a LinkedIn plug-in by clicking on the corresponding button, his or her browser establishes a direct connection to LinkedIn’s servers (see “Usage of Social Media Plugins” above for details).

For privacy matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible. Further information on LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. LinkedIn’s current privacy policy is available at https://www.linkedin.com/legal/privacy-policy.

XING

The website uses a so-called “Share-Button” of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. If you click on the corresponding button, a connection to the Xing servers is established by your browser. Your personal data relating to your access to this website is not stored. Neither does XING store IP addresses nor is your usage behaviour analysed. The current information on data protection in regard to the Xing Share button and other relevant information can be found at https://www.xing.com/app/share?op=data_protection.

Twitter

Our website uses share plugins of the Twitter service of Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.

With the help of this plugin it is possible, for example, to share a post or a page of this website via Twitter or to follow us on Twitter. As additional content, it is possible to integrate single tweets into the website.

When a user activates a corresponding Twitter plugin by clicking the respective button, his browser establishes a direct connection with the Twitter servers (see details above under “Usage of social media plugins”).

Further information on this can be found in the Twitter privacy policy at http://twitter.com/privacy.

Instagram

Our website uses share plug-ins from Instagram, which are operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram Camera”.

When a user activates a corresponding Instagram plug-in by clicking the respective button, his browser establishes a direct connection with Instagram’s servers (see “Usage of Social Media Plugins” above for details).

For further information on the purpose and scope of data collection and additional data processing and usage by Instagram, as well as your rights and settings options for protecting your privacy, please refer to Instagram’s privacy policy at

https://help.instagram.com/155833707900388/.

Matterport

On our site we use components of the video and photo network provider Matterport. Matterport is a service of Matterport, Inc., 352 East Java Drive, Sunnyvale, CA 94089, USA.

When a user activates a corresponding Matterport plugin by clicking on the respective button, his browser establishes a direct connection with the servers of Matterport (see details above under “Usage of Social Media Plugins”).

Further information on the subject of data protection in relation to Matterport can be found at https://matterport.com/legal/privacy-policy/

Further information on the tools mentioned above

The operators of the services Twitter, Instagram and Matterport mentioned above under point 3(VII) (may additionally) process personal data of you in the USA.

Twitter and Matterport have pledged to comply with the Privacy Shield Agreement between the EU and the USA on the collection, use and storage of personal data from EU member states, as published by the US Department of Commerce. These providers have declared by certification that they comply with the relevant privacy shield principles. The EU Commission assumes that the United States provides adequate legal protection for personal data transferred from the EU to self-certified organizations in the USA under the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework.

Instagram ensures an adequate level of data protection in third party countries outside the EU (e.g. the United States) by implementing sufficient safety measures. This included the so-called standard contractual or standard privacy clauses approved by the EU Commission, with respect to data transfers from the EU to the United States. For more information, please visit https://help.instagram.com/519522125107875. For more information on the standard contractual clauses used by Instagram, please contact Instagram.

WhatsApp

The website uses a so-called WhatsApp Sharing button. Unlike other social plugins, this is an HTML link programmed by us that creates a native deep link into your WhatsApp application. Data is only transferred to WhatsApp when a user activates the link AND forwards information within their WhatsApp application to a friend (we do not directly transfer data to third parties (especially the WhatsApp provider)).

4. Disclosure of data to third parties

The personal data collected during the use of the website will not be passed on or otherwise transferred to third parties without your consent, except in cases explicitly described in this privacy policy.

We may use (technical) service providers that process personal data on our behalf (e.g. IT service providers related to the booking system used on the website). These service providers process corresponding personal data exclusively on our instructions (processors). This data processing is based legally on Art. 28 GPDR (processing) usually together with Art. 6 Abs. 1 S. 1 lit. f GPDR (legit interest; see above for corresponding legit interests) or Art. 6 Abs. 1 S. 1 lit. c GDPR (contract, precontractual measures respectively).

We may transmit your personal data to third parties if we are legally bound to do so (e.g. court inquiries or law enforcement authorities). This is legally based on Art. 6 Abs. 1 S. 1 lit. c GPDR(legal obligation).

5. Storage duration of your personal data

As far as no other storage period results from other regulations of this privacy policy, we store your personal data obtained by us in relation with the use of the website only as long as necessary, in particular, to process your enquiries to us or only for the period of time required to achieve the purpose of storage. If we no longer need your data for the purposes described above, they will only be stored during the respective legal retention period and will not be processed for other purposes.

6. Your rights

You have the right to request information from us at any time about the personal data we have stored about you. As long as legal requirements are met, you also have the right to correct, delete or restrict the processing of the corresponding personal data and the right to object to the processing of your personal data by us and to have the personal data concerning you which you have provided to us sent to you in a structured, common and machine-readable format (you may transmit this data or have it transmitted to other parties).

If you have given your consent to the use of personal data, you can revoke this consent at any time for the future.

If you believe that us processing your personal data is violating the applicable data protection law, you may file a complaint at the (responsible) supervisory authority for data protection.

For Violations of the GDPR each in the processing involved controller shall be liable. Any person suffering of material or non-material damage has the right to receive compensation. Furthermore, controllers may receive penalties by responsible government entities when violating the GDPR

7. Safety of your data

The data you transmit to us will be protected by suitable technical and organizational measures from accidental or intentional manipulation, loss, destruction or unauthorized access. Our security measures are continuously monitored and improved in line with technological developments and organisational possibilities.