SerTec Immobilien

Privacy policy

This website (the "Website") is operated by SerTec Immobilien Management GmbH ("SerTec", "we", "our" or "us").

Protection of your data

When you provide us with information about yourself, we are aware that you trust us to handle it responsibly. This privacy policy explains who we are, how we collect, share and use personal data about you, and how you can exercise your data protection rights. This applies to personal data that we collect via the Website in connection with our relationships or potential relationships with you (or your organization) in your capacity as a supplier, customer or business partner.

What do we do?

SerTec is a real estate services company that handles tasks relating to real estate.

What data do we collect?

Depending on the nature of your relationship with SerTec, we may collect personal data about you that generally falls into the following categories:

Data you provide voluntarily

  • Website information. You can visit our Website without having to provide any information about yourself. In some situations, however, we may ask you to voluntarily provide us with some personal data. This may be the case, for example, if you are interested in receiving emails from us, attending an event, or contacting us via the Website (in which case we collect data such as name, email address, organization, country, postal code, job title, telephone number(s), details of your comments or inquiries and username/password). If we receive personal data from you, we will handle it securely, lawfully and fairly.
  • Job applicants: if you contact us regarding an employment opportunity at SerTec, we collect certain data as part of the recruitment process and, if this is successful, your employment.
  • Data we collect when you have a business relationship with us. We may collect and process data about you as a natural person (whether as a Website user or otherwise) if you are in a business relationship with SerTec as a customer, potential customer, vendor, supplier, consultant, professional advisor or other third party, or acting on behalf of any of these ("customer, vendor or business partner data").

Examples of customer, vendor or business partner data include:

  • Contact details of a contact person for SerTec's customers, vendors or business partners (such as name, business telephone numbers, business address, photograph).
  • Role-related data about customers, vendors or business partners or their representatives (such as job title, duties, department, professional background, qualifications and experience);
  • Financial data (such as bank account information about natural persons associated with a particular company) or data on real property ownership relating to these persons, where required for the purpose of receiving payments or fulfilling contractual obligations or due diligence obligations or related purposes.

Data we collect automatically

When you visit our Website, we may automatically collect certain data from your device. In some countries, including the countries of the European Economic Area, this data may be considered personal data under the applicable data protection law. The data we automatically collect may include, in particular, your IP address, device type, cookie ID, browser type, geographic location (e.g. location at country or city level) and other technical data. We may also collect data about your device's interaction with our Website, including the pages visited and the links clicked. Collecting this data helps us to better understand the visitors to our Website, where they come from, and which content on our Website is of interest to them. We use this data for our internal analysis purposes and to improve the quality, usefulness and experience of our Website for our visitors.

Data we receive from external sources

  • For the purposes of complying with various regulations or conducting background checks in accordance with our internal requirements (to the extent permitted and consistent with applicable law), we occasionally receive personal data about you from third-party sources, such as credit reference databases, databases of politically exposed persons, government-denied parties, sanctions and watch lists, your employer, other parties in the real estate sector such as real estate agents, buyers, sellers, borrowers, lenders, architects, engineers, surveyors, developers, landlords, tenants and financial institutions, as well as online databases and public registers. We only obtain this information after verifying that these third parties have your consent or are otherwise legally entitled or obliged to disclose your personal data to us. The types of data we collect about third parties include, for example, information about whether certain administrative measures or court proceedings have been initiated against you. We use the data we receive to maintain and improve the factual accuracy of our records about you and to assess risks arising from a relationship or potential relationship with you or your organization.

Sensitive personal data

  • Some of the data you provide, or that we receive from external sources when conducting due diligence checks concerning you or your organization (to the extent permitted by and consistent with applicable law), may be sensitive data, such as criminal records or details of your political activities or religious affiliation (e.g. in connection with determining whether you are a politically exposed person). We require this data to conduct "Know Your Counterparty" checks and for other risk assessments under applicable law in connection with entering into business relationships with you/your organization as a potential customer or supplier.

You may also provide us with data about health issues so that we can make adjustments to ensure the accessibility of premises and/or events.

If you share data about another person with us, you thereby confirm that you are authorized by that person, that you have informed that person of our identity and the purposes (as set out in this privacy policy) for which their data will be processed, and that you have obtained all necessary consents for the processing of that person's personal data. When we first contact this person, we may inform them of where we obtained the data.

How do we use your personal data?

We use your personal data for the following purposes (or as otherwise stated at the time of collection):

  • to create and manage records of your online account (if any), to provide online services to you, including enabling your participation in discussion forums and administering websites and systems;
  • to further develop our website(s) and our products and services;
  • for due diligence checks under applicable law, to assess financial, reputational, credit or insurance risks arising from a relationship or potential relationship with you/your organization and/or to carry out required anti-money laundering checks;
  • to provide you/your organization with requested information, products and services, and to process invoices and payments;
  • to send communications relating to services, in response to communications you send us, and to request feedback;
  • to enable your participation in events or competitions for which you have registered or in which you have participated;
  • to identify trends in the real estate sector;
  • to ensure that the content, services and promotional activities we offer are tailored to your needs and interests (or those of your organization), and for business development purposes;
  • to contact you, directly or through our representatives, by mail, telephone, fax, email, SMS or other electronic messaging services with offers of goods and services or information that may be of interest to you (including information about goods and services of other organizations). If you do not wish to receive promotional messages from us, please indicate this where requested on the registration or contact form, or contact us using the contact details given at the end of this privacy policy. We will obtain your consent to send you direct marketing material where this is required by law.

To whom do we disclose your personal data?

We may disclose your personal data to the following categories of recipients:

  • our affiliated organizations, external service providers and partners:
  • who provide data processing services to us (e.g. to assist with the provision of our Website or other IT infrastructure, functions thereon, or to improve the security associated with it, to assist in conducting due diligence checks, to carry out marketing activities, analysis or research on our behalf, or to assist in providing services to our customers generally or on the basis of a specific obligation);
  • in the case of affiliated organizations that otherwise process personal data for purposes set out in this privacy policy or communicated to you at the time your personal data was collected.
  • our customers and bidders in offers and transactions concerning you.
  • competent law enforcement authorities, supervisory authorities, government agencies, courts or other third parties, where we believe disclosure is necessary (i) under applicable laws or regulations, (ii) to exercise, assert or defend our legal rights, or (iii) to protect your vital interests or those of another person;
  • actual or potential buyers (and their representatives and advisors) in connection with an actual or proposed purchase, merger or acquisition of any part of our business, on the condition that we inform the buyer that they may only use your personal data for the purposes set out in this privacy policy;
  • any other person, where you have consented to the disclosure.

Legal basis for the processing of personal data

Under European Union data protection law, our legal basis for collecting and using the personal data described above depends on the specific personal data concerned and the particular context in which we collect it.

However, we generally only collect personal data from you (i) where we need the personal data to perform a contract with you, (ii) where the processing is in our legitimate interest and is not overridden by your interests, or (iii) where we have obtained your consent to do so. In some cases, we may also be legally obliged to collect personal data from you, or may otherwise need the personal data to protect your vital interests or those of another person.

Where we process sensitive personal data about you, we do so: (i) in connection with Know-Your-Counterparty checks in accordance with the requirements of applicable law, (ii) on the basis that the processing is necessary for reasons of substantial public interest, (iii) on the basis of your explicit consent, or (iv) to establish, exercise or defend legal claims.

You may choose not to provide us with any personal data. However, unless otherwise stated, the data we request is necessary for the purposes of entering into and performing a contract with you or your organization and/or providing services to you or your organization, and failure to provide it would impair the contracting process or the provision of the relevant services.

Where we collect and use personal data from you in reliance on our legitimate interest (or that of a third party), this interest generally consists of providing our services to you, responding to your inquiries, further developing our website(s), carrying out marketing activities, or detecting or preventing unlawful activities.

Given that we process your personal data in your capacity as a corporate customer, as well as the safeguards we implement to protect your personal data (including those set out below under the heading "How do we protect your data?"), our legitimate interest is not outweighed by any impairment of your individual rights and freedoms. We may also have other legitimate interests and will, where necessary, clarify at the relevant time which legitimate interests these are. If you have any questions or require further information about the legal basis on which we collect and use personal data from you, please contact us using the contact details given under the heading "How you can contact us".

How do we protect your data?

We use appropriate technical and organizational measures to protect the personal data we collect and process about you. The measures we use are designed to provide a level of protection appropriate to the risk associated with the processing of your personal data. We take care to grant access to personal data only to those who need it to perform their tasks and duties, as well as to third parties who provide services to us or who otherwise have a legitimate reason for access (see above under the heading "To whom do we disclose your personal data?"). Where we permit a third party to access personal data, we will take appropriate measures to ensure that the use of the data is consistent with this privacy policy and that the security and confidentiality of the data is maintained.

International data transfer

Your personal data may be transferred to and processed in countries other than the one in which you reside. These countries may have data protection laws that differ from those of your country (and in some cases may offer a lower level of protection).

We take measures to protect your personal data in accordance with this privacy policy. This includes, for example, requiring an external service provider to be registered under an EU-US Privacy Shield (in accordance with Article 45 of the General Data Protection Regulation). Further details about the protection of your personal data are available on request by contacting us using the contact details given under the heading "How you can contact us".

Data storage

We store personal data that we collect from you for as long as there is an ongoing legitimate business need to do so. If you are a customer or supplier (or the representative of a customer or supplier), the data will be stored for a period that enables us to provide our services, comply with applicable legal, tax or accounting requirements, and, if necessary, to establish, exercise or defend legal claims.

Where there is no ongoing legitimate business need for us to process your personal data, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.

Your data protection rights

Within the scope of application of European data protection law, you have the following rights:

  • If you would like to access, correct, update or delete your personal data, you can request this at any time by contacting us using the contact details given under the heading "How you can contact us".
  • In addition, you may object to the processing of your personal data, request that we restrict the processing of your personal data, or request the portability of your personal data. You may also exercise these rights by contacting us using the contact details given under the heading "How you can contact us".
  • You have the right at any time to unsubscribe from promotional messages sent by us. You can exercise this right by clicking the "Unsubscribe" or "Opt out" link in the promotional emails we send, or by sending us an email at info@sertec-immobilien.de. If you wish to opt out of other forms of marketing (such as postal or telemarketing), please contact us using the contact details given under the heading "How you can contact us".
  • Likewise, you may withdraw your consent at any time where we have collected and processed your personal data on the basis of your consent. Withdrawal of consent does not affect the lawfulness of processing carried out by us prior to the withdrawal, nor does it affect the processing of your personal data carried out in reliance on a legal basis for processing other than consent.

You have the right to lodge a complaint with a supervisory authority about our collection and use of your personal data. For further information, please contact your local supervisory authority.

We will respond to all requests from individuals wishing to exercise their data protection rights in accordance with the applicable data protection laws.

Links to other websites

We also link to other websites. We are not responsible for the content or privacy policies of these websites, or for the way in which user data is handled there. Unless expressly stated otherwise, we are in particular not representatives of these websites or advertisers, nor are we authorized to make statements on their behalf. In any case, you should review the privacy practices of these third-party providers.

Revisions to this privacy policy

We may update this privacy policy from time to time to reflect changing legal, technical or business developments. When we update our privacy policy, we will take appropriate measures to inform you in a manner appropriate to the significance of the changes we make. We will obtain your consent to any material changes to the privacy policy if and to the extent required under applicable data protection law.

How you can contact us

If you have received one or more emails from SerTec that you no longer wish to receive in the future, please contact us at info@sertec-immobilien.de. If you have any questions or concerns regarding the use of your personal data, please contact us at info@sertec-immobilien.de.

The controller responsible for the processing of your personal data is the management of SerTec, (i) with which you or your organization deal as a supplier or customer, (ii) which is considering entering into a relationship with you or your organization, and/or (iii) with which you interact as a user of a particular SerTec website.