Privacy Notice

The protection of your personal data is an important concern to us. We process your data on the basis of the statutory provisions (GDPR, BDSG).

I. Scope of Application

This privacy notice provides information about the processing of your personal data by i Live Group GmbH (hereinafter referred to as “i Live”) and its affiliated companies in accordance with the EU General Data Protection Regulation (hereinafter referred to as “GDPR”) when you visit and use this website, when initiating and concluding a contract with us, when using our services, and in the context of marketing measures carried out by i Live and its affiliated companies.

II. Controller and Contact Details of the Data Protection Officer

Controller within the meaning of the GDPR:
I Live Group GmbH
Julius-Bausch-Straße 50
73430 Aalen
Email: info@i-live.de

Contact details of the Data Protection Officer:
You can reach our Data Protection Officer at:
Julius-Bausch-Straße 50
73430 Aalen
Email: datenschutz@i-live.de

III. Joint Processing

We process personal data jointly within the i Live Group corporate group for the purpose of effective internal administration in order to provide you with the best possible service. For this purpose, we transfer your data to affiliated companies in accordance with Section 18 et seq. German Stock Corporation Act (AktG) by analogy, or process the data in systems jointly operated with our affiliated companies.

The companies participating in our corporate group are:

• i Live Immobilienverwaltung GmbH
• i Live Services GmbH
• i Live Real Estate Services GmbH

The legal basis for joint data processing is Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in effective administration and IT infrastructure.

For the processes subject to joint processing, we and our affiliated companies are jointly responsible pursuant to Art. 26 GDPR.

We have internally assigned the handling of data subject rights to i Live Group GmbH. You can contact us at datenschutz@i-live.de.

IV. General Information on Data Processing

1. Types of Data We Process

Data provided by you:
We process personal data that you voluntarily provide to us, for example when subscribing to a newsletter, via contact forms, by email, during telephone inquiries, when registering a user account, or when concluding a tenancy agreement. This includes, in particular, contact data, communication data, and master contract data.

Automatically collected data:
When you visit our website, data is automatically collected through the use of cookies and similar technologies. This includes information about the device type, operating system and version, IP address, approximate geographical location derived from the IP address, browser type, and information about how you interact with our content.

Data from other sources:
Where applicable, we may receive data about you from external sources, in particular when you interact with us via social media platforms or property portals (e.g. Facebook, Immobilienscout24). This privacy notice also applies to such data, supplemented by the specific requirements of the respective platform.

2. Purpose and Legal Bases

We only process your data where this is necessary for providing our website, our content and services. Processing is carried out on the basis of the GDPR:

• Art. 6 para. 1 lit. a GDPR – consent
• Art. 6 para. 1 lit. b GDPR – performance of a contract or pre-contractual measures
• Art. 6 para. 1 lit. c GDPR – compliance with a legal obligation
• Art. 6 para. 1 lit. f GDPR – legitimate interests (e.g. IT security, website optimisation)

3. Security

To protect your data, we use security measures that are in line with the current state of the art, in particular SSL/TLS encryption (HTTPS) for secure data transmission on our website.

V. Data Processing

The data concerned in each case, processing purposes, legal bases, recipients and, where applicable, transfers to third countries are listed below:

1. Hosting

We host our website with Internetagentur Kreativdenker GmbH, Mittelkämmerstraße 6, 67346 Speyer, Germany.

When you visit our website, Kreativdenker automatically collects information in so-called server log files, which your browser automatically transmits to the server. This includes:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used, operating system, and the name of your access provider

This data is technically necessary in order to deliver the website in a stable and secure manner. This data is not merged with other data sources.

Kreativdenker is used for the purpose of secure, fast and efficient provision of our online offering by a professional provider.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically flawless and secure provision of our website.

We have concluded a data processing agreement (DPA) with Kreativdenker GmbH.

2. Content Management System

Our website is operated using the WordPress content management system. WordPress is open-source software for the creation and administration of websites. Personal data is processed solely within the scope of the technical provision of the website via our hosting service provider.

3. Use of Cookies

Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or automatic deletion is performed by your web browser.

Technically necessary cookies: Many cookies are technically necessary because certain website functions would not work without them. These cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR and Section 25 para. 2 TDDDG.

Cookies requiring consent (analysis & advertising): These cookies are only used if you have given your explicit consent. The legal basis is Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. This consent can be revoked at any time with effect for the future.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

4. Consent via Consent Manager

Our website uses the consent management tool Consentmanager in order to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection compliant manner. The provider of this technology is Consentmanager AB, Hältegelvägen 1b, 72348 Västeras, Sweden.

When our website is accessed, a connection is established to the servers of Consentmanager AB in order to display the cookie banner and request your consent settings. The following data is processed and stored in a cookie or comparable technology on your end device:

• Your consent(s) or withdrawal of your consent(s)
• Your IP address (used to determine the region and subsequently anonymised)
• Information about your browser and your end device
• Time of your visit (date and time)

The data is processed in order to obtain the legally required consents for the use of cookies. The legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR. If you wish to withdraw your consent, simply delete the cookie in your browser. If you revisit or reload the website, you will be asked again for your cookie consent.

5. Contact Form and Email Contact

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you enter there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass this data on without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested; consent may be revoked at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

This processing takes place within the scope of joint responsibility in accordance with section 3 of this privacy notice.

6. Conclusion and Performance of Tenancy Agreements

In order to establish and properly manage a tenancy relationship with you, we process various categories of your personal data.

a) Prospective tenants and tenant self-disclosure

For the assessment of your creditworthiness and reliability, we request a tenant self-disclosure form during the contract initiation process. Data such as name, address, date of birth and proof of income are processed in this context.

Legal basis: Processing is carried out for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR and to safeguard our legitimate interests in avoiding rental defaults pursuant to Art. 6 para. 1 lit. f GDPR.

b) Booking and contract processing

We offer bookings of furnished accommodation on our website. In this context, we collect:

• Master and contact data (name, address, email, telephone number, nationality, date of birth, where applicable study-related data)
• Payment information (bank details)
• Contract and reservation details as well as correspondence contents
• Usage data when using our media services (e.g. internet usage)

Legal basis: Processing is necessary for the performance of the tenancy agreement (Art. 6 para. 1 lit. b GDPR).

c) Special categories of personal data

If you voluntarily inform us that you require an accessible apartment (health data), we process this information solely in order to adapt your living environment to your needs.

Legal basis: The processing of these sensitive data is carried out only on the basis of your explicit consent pursuant to Art. 9 para. 2 lit. a GDPR. You can use our general services even without providing this information.

d) Disclosure of data to third parties

As part of contract processing, we pass on data to the following recipients:

• IT system providers and email providers
• Service providers for consumption measurement and billing
• Banks for payment processing
• Craftsmen and insurance companies (in the event of damage)
• Internet providers (when using the provided connection)
• Debt collection service providers and lawyers (in legal disputes for the enforcement of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR)

e) Storage period and deletion

• Contract data: This is stored for the duration of the tenancy. After the end of the contract, it remains stored for the duration of the statutory retention periods.
• Traffic data (internet): Stored for 7 days for abuse control and troubleshooting and then deleted.
• Video surveillance: Please refer to the notices on site for information.

7. Video Surveillance

We may use video surveillance in our properties. The monitored areas are marked with corresponding pictograms and notices.

Video surveillance is carried out for the exercise of domiciliary rights, the prevention of criminal offences and the preservation of evidence in the event of criminal offences. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. All persons present in the marked area are recorded. If recordings are made, the data is stored for a maximum of 72 hours. Longer storage only takes place if this is necessary in a specific individual case for the enforcement of legal claims or the prosecution of criminal offences. Recorded data is only transferred to third parties, for example the police, if this is necessary to investigate criminal offences.

VI. Analytics Tools and Advertising

1. Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is an administration tool that enables website tags to be integrated and controlled centrally. Google Tag Manager itself does not process any personal data of website visitors and does not set any cookies. It merely triggers other tags, which may in turn collect data. Google Tag Manager does not access this data.

Google Tag Manager is integrated on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient and technically error-free integration and management of tracking and analytics tools on our website.

If tools integrated via Google Tag Manager process personal data, this is done solely on the basis of prior consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG. Consent may be revoked at any time with effect for the future.

A transfer of data to third countries, in particular the USA, cannot be ruled out if corresponding services are integrated via Google Tag Manager. For data transfers to the USA, Google relies on the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework).

Further information on data protection at Google:
https://policies.google.com/privacy

2. Google Analytics

We use Google Analytics on this website, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies and similar technologies to collect information about your use of the website, such as pages visited, time spent and clicks.

The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG via the cookie banner. Consent may be revoked at any time.

Further information:
https://policies.google.com/privacy

3. Meta Pixel (Facebook & Instagram)

We use the Meta Pixel of Meta Platforms Ireland Ltd., Dublin, Ireland. When you visit our website, the pixel establishes a direct connection between your browser and the Meta server. Meta thereby receives the information that you have visited our website with your IP address. If you are logged in to Facebook or Instagram, Meta may assign this visit to your user account.

With the help of the Meta Pixel, the behaviour of website visitors can be tracked after they have been redirected to our website by clicking on a Meta advertisement. This enables the effectiveness of advertisements to be evaluated and future advertising measures to be optimised.

Processing is carried out solely on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

4. LinkedIn

We use functions of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland.

The tool sets a cookie in your web browser that enables the collection of data such as IP address, device and browser properties, as well as events on the website, for example form submissions. If you are logged in to your LinkedIn account, LinkedIn may assign the visit to your user account.

Further information:
https://www.linkedin.com/legal/privacy-policy

5. YouTube (Embedded Videos)

We embed videos from the YouTube platform. The provider is Google Ireland Limited, Dublin, Ireland.

When you access a page with an embedded YouTube video, a connection to YouTube servers is established after your consent. If you are logged in to YouTube, your browsing behaviour may be assigned to your personal profile.

Embedding is carried out solely on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

Further information:
https://policies.google.com/privacy

VII. Plugins and Tools

1. Font Awesome

This website uses Font Awesome for the uniform display of fonts. Font Awesome is installed locally. No connection to servers of Fonticons, Inc. is established.

Further information on Font Awesome:
https://fontawesome.com/privacy

2. Google Maps

This website uses the Google Maps map service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA and stored there.

Google Maps is used solely on the basis of prior consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG. Consent may be revoked at any time with effect for the future.

VIII. Duration of Data Storage

We only store personal data for as long as is necessary to fulfil the respective purposes or as required by statutory retention periods. Data processed on the basis of consent is stored until consent is revoked, unless there are other legal grounds for storage. After the purpose ceases to apply or the periods expire, the data is routinely deleted.

IX. Your Rights as a Data Subject

Rights of data subjects
If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

1. Right of Access

Upon request, you will receive information free of charge at any time about all personal data we have stored about you.

2. Rectification, Erasure, Restriction of Processing, Objection

If you no longer agree to the storage of your personal data or if it has become inaccurate, we will, upon appropriate instruction, arrange for the deletion or blocking of your data or make the necessary corrections, insofar as this is possible under applicable law.

3. Right to Withdraw Consent with Effect for the Future

You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out until the withdrawal remains unaffected.

4. Data Portability

If data is processed on the basis of a contract, pre-contractual negotiations, consent or by automated means, you have the right to data portability.

5. Restriction of Processing

Data in relation to which we are not able to identify the data subject, for example where such data has been anonymised for analytical purposes, is not covered by the above rights. Access, deletion, blocking, correction or transfer to another company may nevertheless be possible in relation to such data if you provide us with additional information that allows identification.

6. Exercising Your Rights and Right to Lodge a Complaint

If you have any questions regarding the processing of your personal data, requests for information, rectification, blocking, objection or deletion of data, or if you wish to transfer your data to another company, please contact datenschutz@i-live.de.

You also have the right to lodge a complaint with a supervisory authority regarding your rights as a data subject.