Privacy policy
Thank you for visiting our website www.homberg-innenstadt.de ("website") and for your interest in our company. When you visit our website, we also process your personal data within the meaning of Art. 4 No. 1 GDPR ("data"). We are aware of the importance of the data entrusted to us. The protection of your privacy when processing your data is an important concern for us, which we take into account in our business processes. Your data is handled in accordance with the legal requirements for data protection.
1. responsible body and data protection officer
The controller pursuant to Art. 4 No. 7 GDPR for the processing of your data in connection with this website is
Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH ("NH" or "we")
Schaumainkai 47
60596 Frankfurt am Main
Phone: 069/678674-0
Email: kontakt@naheimst.de
You can contact NH's data protection officer as follows
Dr Dennis Voigt
UBG mbH
Im Breitspiel 21
69126 Heidelberg
Phone: 069/6530006-23
Email: datenschutz@naheimst.de
2. purpose of data processing, legal basis, storage period, recipients and transfer to third countries
Depending on the purpose of processing, your data may be processed on a different legal basis. When operating our website, we are sometimes supported by processors who process your data on our behalf and on our instructions and are therefore recipients of your data ("service providers"). Your data may also be disclosed to other companies.
In the following, we specify the various purposes for which your data may be processed on our website, stating the relevant legal basis and the storage period. We will also inform you whether this company is a service provider and whether your data is transferred outside the EU or the European Economic Area ("EEA").
a. Accessing our website and server log file
In order to display our website on your device, it is technically necessary for our web server, on which our website is hosted, to process your data. For this purpose, we process your IP address together with the date and time of access, name and URL of the file accessed, referrer URL (website from which access is made), the amount of data transferred and loading time in a server log file. A service provider supports us with hosting.
Your data is processed in accordance with Art. 6 para. 1 lit. f) GDPR. The processing of your IP address is necessary to safeguard our legitimate interests in the retrievability and correct presentation of our website. The additional storage of your data in a server log file serves to safeguard our legitimate interests in operating our website securely and error-free and to be able to recognise, limit and eliminate malfunctions and errors.
Your data in our server log file is automatically deleted 30 days after visiting our website.
b. Making contact
On our website, we give you the opportunity to contact us on various topics.
If you contact us using our contact form, the mandatory information you are required to provide is labelled as such. This information is required in order to process your enquiry. All other information is voluntary and only serves to answer your enquiry more precisely. You can also contact us by telephone, e-mail or post. The data we process from you in this context may vary depending on the communication channel, but regularly includes your first and last name, your address, your telephone number and your e-mail address.
If your contact is aimed at the conclusion of a contract or is related to a contract, we process your data on the basis of Art. 6 para. 1 lit. b) GDPR. If your contact is of a general nature, we process your data in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interests in answering your enquiry about our company and/or our offers individually and in the best possible way.
We will delete your data if it is related to a contractual relationship, if applicable, only after the expiry of commercial or tax retention obligations, which can be up to 6 years from the end of the year in which you contacted us. We delete all other data when your enquiry has been finally clarified and we are not subject to any legal obligation to retain the corresponding data.
c. Communication by post
If you contact us with a view to concluding a contract or in connection with a contract, we may subsequently use the data you have provided to us to contact you by post.
The processing of your data is based on Art. 6 para. 1 lit. b) GDPR.
We may only delete your data after the expiry of retention obligations under commercial or tax law, which can be up to 6 years from the end of the year in which you contacted us
d. Technically necessary cookies and local storage
Cookies are small files that are sent by us to the browser of your end device and stored there when you visit our website. We use technically necessary cookies on our website to guarantee the basic functions of our website. The cookies contain a so-called session ID, which can be used to assign various requests from your end device during your visit to our website. We also store data locally in your browser's cache (local storage).
The legal basis for the associated processing of your data is Art. 6 para. 1 lit. f) GDPR. The use of technically necessary cookies and local storage is necessary to safeguard our legitimate interests in the retrievability, correct presentation and full functionality of our website.
Technically necessary cookies are deleted at the latest after you close the browser you are using. Data in local storage remains even after you close the browser - unless the browser deletes the cache.
If you do not want cookies to be set on your end device or data to be stored in your local storage, you can control this centrally via the browser you are using. You can also delete both cookies and data from the local storage via your browser.
However, blocking or deleting cookies can lead to a noticeable reduction in the usability of our website for you.
e. Matomo analysis tool
This website uses the open source web analysis service Matomo. Matomo uses technologies that enable the cross-page recognition of the user to analyse user behaviour. With the "disableCookies" function, we refrain from setting cookies and device fingerprinting. The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymised before storage. With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which pages were accessed and from which region. We also record various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks).
This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to both
IP anonymisation
We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before it is analysed so that it can no longer be clearly assigned to you.
Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.
f. who thinks what investment widget
Our website uses the participation widget of wer denkt was GmbH (wer denkt was GmbH, Robert-Bosch-Straße 7, 64293 Darmstadt, Germany). When you visit one of our pages equipped with the participation widget, a connection to the servers of wer denkt was GmbH is established. The use of the participation widget is in the interest of an interactive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
3. transfer to third countries
Your data will not be transferred to a country outside the EEA (third country).
4. recipient of the data
When you visit our website, the recipients of your data are initially only the aforementioned service providers and companies. In addition, we are supported in the maintenance, care and further development of our website by service providers engaged by us, who process your data only on our instructions and on our behalf. Your data may also be passed on to other companies affiliated with us for internal administrative purposes.
Your data will only be passed on beyond this on the basis of a legal obligation, such as to authorities or for the defence, assertion, exercise or defence of legal claims.
5 Necessity of the data collection
You are neither contractually nor legally obliged to provide us with the data described in this privacy policy.
6. your rights
In accordance with the provisions of the GDPR, you can assert the following rights against us
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
You have the right to revokeconsent given to us at any time with effect for the future.
7. right of objection of the data subject pursuant to Art. 21 GDPR
Pursuant to Art. 21 GDPR, the data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6(1)(f) GDPR, with effect for the future.
The controller will then no longer process the data subject's personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
The data subject can object to the processing of data for the purpose of direct marketing at any time with effect for the future. In the event of an objection, the controller must refrain from any further processing of the data for the purpose of direct marketing.
8. right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Accordingly, without prejudice to any other administrative or judicial remedy, any data subject may lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
The data protection supervisory authority responsible for us is
The Hessian Data Protection Officer for Data Protection and Freedom of Information
Gustav-Stresemann-Ring
65189 Wiesbaden
You can find the online complaint form at the following link:
https://datenschutz.hessen.de/service/beschwerde
You are also welcome to contact us first. As you know, many things can be clarified in a telephone call.