Privacy
For reasons of easier readability, the simultaneous use of male and female language forms is not used in this data protection declaration. All personal names apply equally to both genders.
Table of contents
1. Responsible for data processing
Responsible for the website www.trovato.immo is trovato GmbH, FN 551163 i, Jheringgasse 24/Top 1-5, A-1150 Vienna.
2. Processing of personal data
2.1. General
We process personal data according to the principles of legality, good faith, transparency, correctness, purpose limitation, data minimization and storage duration limitation.
In principle, we only process your personal data with your consent or commissioning for the purposes agreed with you or if there is another legal basis in accordance with the GDPR; this is in compliance with data protection and civil law provisions. Personal data are all data that contain individual details about personal or factual circumstances.
2.2. Purpose of data processing
Data processing takes place for the purpose of fulfilling our contractual agreement (Art 6 (1) lit b GDPR) regarding the contracts concluded with our customers, as well as for the fulfillment of legal obligations (Art 6 (1) lit c GDPR). In addition, we process your personal data on the basis of our predominant legitimate interest in order to achieve the stated purposes (Art 6 (1) lit f GDPR).
Your personal data will be processed for the following purposes:
- for the establishment, administration and processing of the business relationship and for the fulfillment of the offered and contractually agreed on service. For example
- processing of personal data when booking a viewing appointment or submitting a rental offer as well as signing a rental agreement
- offsetting of the services provided (accounting, bookkeeping),
- customer management, advice, customer service and information purpose
- assertion of contractual claims,
- use and record-keeping of personal data of applicants,
- in the case of an assignment for internal organization and claims management that has already taken place.
As far as we collect your personal data from you, the provision of your data is fundamentally voluntary. However, we cannot or not completely fulfill our mandate if you do not provide your personal data.
2.3. Categories of data and data origin
We process the following categories of data:
- personal data of customers (first and last name, gender, date of birth, home address, income, professional activity, identification documents),
- communication data (e-mail, telephone numbers, postal addresses),
- bank data (name of the credit institution, mandate reference, IBAN, payment modalities, etc.),
- billing data,
- contracts and declarations of any kind signed by the customer,
- when visiting the website www.trovato.immo: IP address, date and time of the request, time zone difference to GMT, the content of the requests, access status/http status code, amount of data transferred, requesting website, browser, operating system and interface, language and version the browser software (see point 8 of this data protection declaration),
- and other similar data.
We receive data from the above data categories from our customers, authorities, banks, business partners, data information from the Internet and others. Data within the meaning of Article 9 GDPR will only be processed if our customers have obtained separate consent.
2.4. Retention period and deletion
Your personal data will be processed for the duration necessary to achieve the purpose for which the personal data were given.
The data can also be processed, in particular in terms of storage, if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. A restriction or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
3. Data Security
Your personal data is protected by appropriate organizational and technical precautions. These precautions relate in particular to protection against unauthorized, illegal or accidental access, processing, loss, use and manipulation.
Notwithstanding the efforts to maintain a consistently high level of due diligence requirements, it cannot be ruled out that information that you provide to us via the internet is viewed and used by other people.
Please note that we therefore assume no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. hack attack on email account or telephone, interception of faxes).
4. Transmission of data to third parties
In order to fulfill your order, it may also be necessary to forward your data to third parties. Your data will only be forwarded on the basis of the GDPR, in particular, to fulfill your order or on the basis of your prior consent.
If this is absolutely necessary for the purposes mentioned, we will transmit your personal data to the following recipients and similar recipient categories:
- Project developer,
- Property developer,
- IT service providers used by us as well as other service providers brought in to fulfill the contract,
- Administrative authorities, courts and corporations under public law, tax office,
- Cooperation partners and legal representatives working for us,
- Debt collection agencies,
- Tax advisors and public accountants,
- other recipients specified by the customer,
- Insurance institutions,
- Banks on behalf of the customer,
- Other recipients who are named in the further data protection declaration.
5. Data transmission abroad
Some of the above-mentioned recipients of your personal data may be located outside your country or process your personal data there. The level of data protection in other countries may not correspond to that in Austria. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients have an adequate level of data protection, for which we use standard contractual clauses (2010/87/EC and/or 2004/915/EC).
6. Notification of data breaches
We endeavor to ensure that, if data breaches occur at all, they are detected early and, if necessary, immediately reported to you or the responsible supervisory authority, taking into account the respective data categories that are affected.
7. Cookies
This website uses "cookies" to make our offer more user-friendly, more effective and safer.
A "cookie" is a small text file that we transfer to the browser's cookie file on your computer's hard drive via our web server. This enables our website to recognize you as a user when a connection is established between our web server and your browser. Cookies help us to determine the frequency of use and the number of users of our website. The content of the cookies we use is limited to an identification number that no longer allows any personal reference to the user. The main purpose of a cookie is to recognize website visitors.
Two types of cookies are used on this website:
- Session cookies: These are temporary cookies that remain in the cookie file of your browser until you leave our website and are automatically deleted after your visit.
- Persistent cookies: For better user-friendliness, cookies are stored on your device and allow us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.
8. Server log files
In order to optimize this website in terms of system performance, user-friendliness and the provision of useful information about our services, the website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us and to keep the website safe get saved. This includes your Internet protocol address (IP address), browser and language setting, operating system, referrer URL, your Internet service provider and the date and time of access, websites from which the user's system reached our website and JavaScript activation and the settings regarding cookies.
This data is not combined with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
The legal basis for the temporary storage of the data and the log files is our legitimate interest in accordance with Art 6 (1) lit f GDPR, especially since the temporary storage of the IP address is essential to enable the website to be delivered to the user's computer.
9. Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses targeted cookies. These store information about the use of our site, which we use to improve our offer.
You can find more information on this in Google's data protection declaration at https://support.google.com/analytics/answer/6004245?hl=de.
The data collected by Google may be transmitted by Google to countries outside the EU, in particular the USA. However, Google has submitted to the Privacy Shield Framework, you can find more information about your rights under http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can prevent Google Analytics from collecting your data. An opt-out cookie is set that prevents your data from being recorded when you visit this website in the future. You can find detailed instructions at: https://developers.google.com/analytics/devguides/collection/gajs/#disable.
This website uses Google Analytics with the extension "anonymizeIP()" so that the IP addresses are only further processed in abbreviated form in order to exclude a direct personal reference.
10. Google AdWords
We also use the "Google Adwords" advertising tool to advertise our website. As part of this, we use the "Conversion Tracking" analysis service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA on our website. If you reached our website via a Google ad, a cookie will be placed on your computer. Cookies are small text files that your internet browser places and saves on your computer. These so-called “conversion cookies” lose their validity after 30 days and are not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognize that you, as a user, clicked on one of our advertisements placed on Google and were forwarded to our site.
The information obtained with the help of the "conversion cookies" is used by Google to generate visitor statistics for our website. These statistics tell us the total number of users who clicked on our ad and which pages of our website were subsequently accessed by the respective user. However, we do not receive any information with which users can be personally identified.
You can prevent the installation of the "conversion cookies" by setting your browser accordingly, for example using a browser setting that generally deactivates the automatic setting of cookies or specifically only blocks cookies from the domain “googleadservices.com”. You can obtain the relevant data protection declaration from Google under the following link: https://policies.google.com/privacy?gl=de
11. Facebook pixel
Our website uses the remarketing function "Facebook Pixel" from Facebook Inc. ("Facebook"). This function is used to present visitors to this website when they visit the social network Facebook interessenbezogene Werbeanzeigen ("Facebook Ads"). For this purpose, Facebook pixels were implemented on our website. A direct connection to the Facebook servers is established via Facebook pixels when you visit the website. In doing so, it is transmitted to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account.
For more information on the collection and use of data by Facebook, as well as your rights and options for protecting your privacy, see the Facebook data protection information at
https://www.facebook.com/about/privacy/.
Alternatively, you can deactivate Facebook's remarketing function at https://www.facebook.com/settings/?tab=ads#=. To do this, you have to be logged in to Facebook.
12. Google Optimize
Our website also uses Google Optimize. Google Optimize analyzes the use of different variants of our website and helps us to improve the user-friendliness according to the behavior of our users on the website. Google Optimize is a tool integrated in Google Analytics. Google Tag Manager is also a product from Google that allows us to manage website tags via an interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, this remains in effect for all tracking tags that are implemented with Google Tag Manager. If you do not want to receive interest-based advertising, you can deactivate the use of cookies by Google for these purposes by visiting the page www.google.com/settings/ads/plugin.
13. Hotjar
We use Hotjar to better understand the needs of our users and to optimize the offer on this website. With the help of Hotjar's technology, we get a better understanding of the experiences of our users (e.g. how much time users spend on which pages, which links they click, what they like and whatnot, etc.) and that helps us to offer our users feedback align. Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their end devices (in particular the IP address of the device (is only recorded and stored in anonymized form), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar saves this information in a pseudonymized user profile. The information is neither used by Hotjar nor by us to identify individual users, nor is it merged with other data about individual users. Further information can be found in Hotjar's privacy policy here.
You can deactivate Hotjar at https://www.hotjar.com/opt-out.
14. Mailchimp
Our newsletter is sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA.
This provider is certified under the US-EU data protection agreement "Privacy Shield" and is committed to complying with EU data protection regulations. You can view MailChimp's data protection provisions hier: https://mailchimp.com/legal/privacy/.
Otherwise, your personal data will not be passed on to other companies or other organizations unless we are obliged to disclose this data, for example, due to a court order or official order.
When passing on your personal data to third parties to the extent described above and to countries outside the European Economic Area (EEA), we ensure that the information is passed on in accordance with this data protection declaration and the applicable data protection regulations.
Please understand that it is not possible to use our website or our services if you do not agree to the above regulations in whole or in part.
15. Sendgrid
We use SendGrid, an email delivery service, on our website. The service provider is the American company Twilio Inc., 889 Winslow St, Redwood City, California 94063, USA. You can find out more about the data processed by using SendGrid in the Privacy Policy at https://www.twilio.com/legal/privacy.
16. Intercom
For the purpose of customer administration, we use Intercom - Intercom, Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111 USA (“Intercom”). To do this, we pass on data such as name, e-mail address, time of registration, activity, etc. to Intercom. Furthermore, Intercom can be used as a communication medium on the website, for emails or messages within the product. Information on Intercom's data protection can be found at: https://docs.intercom.com/pricing-privacy-and-terms/data-protection/how-were-preparing-for-gdpr
17. Contact possibilities
The use of this website is usually possible without providing personal data. Insofar as personal data (e.g. name, address or email address) is collected on our website, this is always done on a voluntary basis as far as possible. These data will not be passed on to third parties without your express consent.
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be saved.
When you contact us, the data you provide (name, address, telephone number, email address and, if applicable, case-specific data) will be stored in order to answer your questions, process your request quickly and so that you can be contacted again. The data arising in this context will be deleted unless a contract is concluded between us and as soon as storage is no longer required or data processing is restricted to the legal minimum if retention periods are stipulated by law.
18 User account
We offer you the option of creating a user account on our website, with which your personal data is permanently stored, whereby the creation of this user account is voluntary and we use the double-opt-in procedure (DOI procedure). After you have actively given your consent and entered your email address in the registration field, we will send you a confirmation link to the address provided. The registration is only considered complete after the link then transmitted has been confirmed.
With the creation of such a user account, you benefit from the convenience that data only has to be entered once. The data you provide can be viewed and changed at any time.
Please treat your personal access data confidentially and, in particular, do not make them accessible to unauthorized third parties. Please note that you will automatically remain logged in after leaving our website, unless you actively log out. You have the option of deleting your customer account at any time.
19 Newsletter
If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter . Further data is not collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.
In order to be sure that no errors were made when entering the email address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field, we will send it A confirmation link to the address provided. Only when you click on this confirmation link will your email address be added to our mailing list for sending our newsletters. The legal basis for this data processing is Article 6 Paragraph 1 Letter a) GDPR. You can object to receiving the newsletter at any time by deactivating the relevant newsletter service. You will of course also find an unsubscribe link in every issue of our newsletter.
20 Rights regarding the processing of personal data
20.1. Right of providing information
As a data subject, you have the right at any time to receive information about the personal data relating to you processed by us within the scope of Art 15 GDPR. To do this, you can send an application by post or email to the addresses given under point 25 of this data protection declaration.
20.2. Right to correct inaccurate data
You have the right to request us to correct your personal data without delay if it is incorrect (Art 16 GDPR). For this purpose, please contact one of the contact addresses given.
20.3. Right to delete or restrict the processing
You have the right to immediate deletion ("right to be forgotten") or to restrict the processing of your personal data if there are legal reasons according to Art. 17 and 18 GDPR. To exercise these rights, please contact one of the contact addresses provided.
20.4. Right to data portability
You have the right to data portability in accordance with Art 20 GDPR. You have the right to receive the data relating to you that you have provided to us in a common, structured and machine-readable format and to transfer this data to another person responsible, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and takes place with the aid of automated procedures. In order to assert your above right, please contact one of the contact addresses provided.
20.5. Right to object
You have the right, for reasons that arise from your particular situation, to object to the processing of personal data concerning you at any time in accordance with Art. 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. In order to assert your above right, please contact one of the contact addresses provided
20.6.Right to complain with a supervisory authority
If you are of the opinion that the processing of personal data concerning you by us is inadmissible, you have the right to complain to the supervisory authority responsible for us, which you can contact as follows:
Austrian Data Protection Authority
Wickenburggasse 8a
1080 Vienna
Tel: +43 (0) 1 52 152-0
E-Mail: dsb@dsb.gv.at
21. Changes
We can change our privacy policy over time. The updated data protection declaration applies to your further use of the website and to our use of personal data. We ask you to check our data protection declaration regularly.
22. Contact
If you have any questions about this declaration or if you intend to make specific requests, please contact us as the person responsible for your data:
Andreas Dorner, CEO
trovato GmbH
Jheringgasse 24/Top 1-5
A-1150 Wien
hallo@trovato.immo