Information on data protection according to Art. 13 GDRP
Below we inform you to what extent personal data is collected when you call up our website and for what purposes it is processed.
Name and contact details
You can reach the person responsible for the online presence pursuant to Art. 4 (7) GDPR at the following address:
Quantum Immobilien Kapitalverwaltungsgesellschaft mbH
Dornbusch 4
D-20095 Hamburg
Tel.: +49(0)40 / 41 43 30 – 0
E-mail: Info(at)quantum.ag
For further information, please refer to the imprint.
You can reach our Data Privacy Officer at:
Quantum Immobilien AG
Data Privacy Officer
Dornbusch 4
D-20095 Hamburg
Germany
Tel.: +49(0)40 / 41 43 30 – 0
E-Mail: Datenschutz(at)quantum.ag
Processing of personal data
General overview
On our website, we offer various services and use data processing operations, which are listed below:
- Website Operation
- Website analysis to optimize the website
- Display of maps for better navigation
- Display of information, corporate and product films and social media contributions of the stores
- e-mail newsletter
- Contact form for website visitors and press representatives
- Facebook Page
Your data will be processed internally only by authorized employees. We do not pass on your personal data to third parties unless you have consented to such data transfer, we are entitled or obliged to transfer data due to legal provisions and/or official or court orders. We use external service providers (order processors) to provide this service. These include IT service providers and marketing agencies.
We have carefully selected our service providers and bind them contractually in accordance with the legal requirements, for example as processors in accordance with Art. 28 GDPR.
If these providers process your data outside the European Union or the European Economic Area, we ensure that they are bound by EU Standard contractual Clauses (SCCs).
Operation of the website and storage of log files
When you call up the website, personal data is automatically sent to our server by your end device and stored in a log file for a limited period of time.
This includes:
- Name and URL of the retrieved file
- date and time of the retrieval
- amount of data transferred
- Message about successful retrieval
- browser type and version
- operating system
- Previously visited website
- Web Pages that are accessed by your system via our website
- Internet service provider of the user
- IP address of the your device
Your data is processed for the following purposes on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR
- to enable the use of our website,
- to present our portfolio of services,
- to ensure the proper operation of our website, and
- for the fulfillment of legal obligations, such as, for example, for the
- defense against and clarification of cyber attacks.
– legally compliant documentation and verifiability of consent and to control marketing measures, videos and maps.
In our consent tool “Borlabs Cookies”, the following data is processed based on your consent pursuant to Art. 6 para. 1 p.1 lit. a) in conjunction with. Art. 7 GDPR processed:
- Cookie runtime and version
- Logbook data (Consent ID, Processor ID, Controller ID, Consent Status, date and time,)
- Consent data
- Data of the devices used, such as shortened IP addresses (IP v4, IP v6), device information, date and time.
The personal data is automatically deleted after the end of the connection, unless there are legal retention periods or the legitimate interest of us or third parties to the contrary. The consent for the respective services is stored on your terminal device for 12 months, provided you have allowed this, so that you do not have to make a new selection on your next visit.
The collection of data for the provision of our website and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, there are no deletion, objection or correction options on your part.
You can change your consent at any time by clicking on the following button.
Change consentServices
Map displays with Google Maps
Our website uses Google Maps in various places, e.g. to show you our objects on a street map and to make it easier for you to find us. When you call up our website and give your consent pursuant to Art. 6 para. 1 p. 1 letter a) in conjunction with. Art. 7 GDPR, personal data (in particular the IP address of your terminal device) is transmitted to the service provider Google.
The European representative of the Google Maps component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service provider may transfer the transmitted information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. It cannot be ruled out that Google will associate your IP address with other data held by Google. It is technically possible that Google could identify at least individual users on the basis of the data received. We have no influence on the fact that personal data and personality profiles of users of the website are processed by Google for other purposes.
Your personal data may be transferred within Google to a third country (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) based on your consent pursuant to Article 49 (1) a) GDPR. It cannot be ruled out that, due to legal obligations, US authorities may access your data when it is transmitted to or processed at Google.
We do not know how long Google stores the above data.
You can revoke your preferences at any time by clicking on the following button.
If you have your own account with Google and are logged in there when you visit our website, the visit to our site will be assigned to your profile. If you do not want this, log out of your account.
For more information, see the terms of use for Google Maps, Google’s privacy policy or the Google Maps product.
Google Tag Manager with Google Analytics
We use Google Tag Manager on the website. The system is used to integrate the web analysis service Google Analytics. Google Analytics is used by us to collect, collate and analyze data about the behavior of visitors to our website and processes, among other things.
- the Pages you call up, your “click path
- Your user behavior (e.g. clicks, dwell time or bounce rates)
- Your approximate location (region)
- the IP address of your device (in shortened form)
- technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- your internet service provider
- the referrer URL (via which website/ via which advertising medium you came to this website)
By evaluating the data obtained, we are able to compile and optimize information about the use of our website. When calling up our website, you can determine by your consent pursuant to Art. 6 para. 1 p. 1 lit. a) in conjunction with. Art. 7 GDPR determine whether the processing of your personal data will be carried out.
Your data will be passed on to the provider of Google Tagmanager and Google Analytics. The representative in the EU of the operator of the Google Analytics component is Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
Your personal data may be transferred within Google to a third country (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) based on your consent pursuant to Article 49 (1) a) GDPR. It cannot be ruled out that, due to legal obligations, US authorities may access your data when it is transmitted to or processed at Google.
The data will be deleted as soon as it is no longer required for our recording purposes. In order to be able to track improvements to our website, the data is stored location and then automatically deleted after 14 months.
You can give your consent when calling up the website to allow us to perform web analysis with Google Analytics. You can revoke your consent with effect for the future by clicking on the following link.
If you are already logged in to Google as a user with your Google account, Google Analytics will assign this information to your personal user account. Log out of your Google account if you do not want the data to be assigned to your Google profile.
We use the addition “gat.anonymizeIp” on the website for this purpose. By means of this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if access to our Internet Pages takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
This represents an additional technical measure to ensure the security of the data subjects. Other functions and Google services, such as user ID, remarketing and data sharing have been deactivated.
Further information on Google Analytics can be found here:
Social media presences, videos and links to social media providers
We use online presences with social media providers in order to communicate with our customers and interested parties and to be able to inform them about our services there. The social networks are operated exclusively by third parties.
The embedded videos are stored with the providers. In addition, links to the social networks operated by us have been identified on our website by logos or other notices.
When you click on the logos, you leave our website. A connection is then automatically established between your terminal device and the servers of the respective provider. As a result, the information that you have visited our website is forwarded to the provider. Your Internet browser transmits protocol data, such as your IP address, browser type and version, or your operating system.
On our website, content from the providers is sometimes integrated on our website. In doing so, information from you is transmitted to the provider when you call up our website. The processing of your data is based on your consent pursuant to Art. 6 para. 1 p. 1 letter a) in conjunction with. Art. 7 GDPR.
If you are already registered with the respective provider via your personal user account or log in while visiting our website, your visit to our website will be assigned to your account. By interacting with browser plug-ins or links, e.g. by pressing a “Like” button or leaving a comment, this information is transmitted to the respective provider and stored there.
The purpose and scope of the data collection as well as the further processing and use of your data there as well as your rights in this regard and setting options for protecting your privacy can be found in the respective data protection information of the respective provider.
We point out that your data will be processed in a third country. This may result in risks for you because, for example, it could make it more difficult to enforce your rights. It cannot be ruled out that, due to legal obligations, US authorities may have access to your data if it is transmitted to the service providers or processed there.
Requests for information and the assertion of your rights can be asserted most effectively with the following providers, who have access to your data and can take appropriate measures and provide information directly:
YouTube videos
Service Provider Representative in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Third country recipient: Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Revocation and objection options or safeguards:
- Revocation of your consent
- Logging out of your Google or YouTube account
- Blocking JavaScript technology in your browser
- Deactivating your settings for advertising
Display of Vimeo videos
Service provider representative in Europe: –
Third country recipient: Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011, USA
Revocation and objection options or safeguards:
- Revocation of your consent
- Logging out of your Vimeo account
- Blocking JavaScript technology in your browser
- Privacy Policy Vimeo, LLC
Display of Instagram posts
Service provider representative in Europe: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Third-country recipient: Facebook Inc.,1601 S. California Ave, Palo Alto, CA 94304, USA
Information on data protection: Facebook data policy, Instagram data policy.
Revocation and objection options or safeguards:
- Unsubscribe from your Facebook or Instagram account.
- Blocking JavaScript technology in your browser
Social media provider: Snapchat
Service provider representative in Europe: 77 Shaftesbury Avenue, London, W1D 5DU, United Kingdom.
Third country recipient: Snap Inc, 63 Market Street, Venice, CA 90291, USA.
Information on data protection: Privacy policy
Opt-out, opt-out, or opt-in protections:
– Unsubscribing from your Snapchat – account
– Block JavaScript technology in your browser
– Deactivating your settings for advertising
Contact form
Our contact form provides an easy way to get in touch with us. If you send us an inquiry via contact form, the following information will be processed by us for the purpose of processing the inquiry:
- Personal master data
- Address data
- Communication data
- Your message for contacting us
The processing of personal data from the contact form is solely for the purpose of internal processing of the contact, i.e. for the initiation, execution or termination of a contract pursuant to Art. 6 para. 1 sentence 1 letter b) GDPR. Any other contact is made on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a) in conjunction with. Art. 7 GDPR.
The data you provide will be processed exclusively by our company and the associated processors. A data transfer to countries outside the EU or the EEA (so-called third countries) does not take place.
Your data will be processed in the context of contacting you and deleted after the end of the purpose, i.e. when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no statutory retention obligations prevent processing. You can revoke your consent at any time by sending an informal e-mail to the above address.
E-mail newsletter subscription
Our website allows you to receive a free email newsletter on a regular basis, informing you about our services and news from our shopping hotspot.
To subscribe to our e-mail newsletter, we need your e-mail address. We use the double opt-in procedure for the registration. This means that we will only send you e-mail newsletters if, after your registration, you confirm a link contained in an e-mail sent by us. Your registration and confirmation will be logged. The IP address of your device, your e-mail address and the time of confirmation are stored. This is to ensure that you have registered yourself as a user of the specified e-mail address with our e-mail newsletter service.
If you open the e-mail or click on links in the e-mail, your IP address and the time and your action will be stored and statistically evaluated by us – unless you have technically prevented this yourself – in order to be able to carry out continuous optimization.
The processing of your e-mail address after your confirmation is used to deliver the e-mail newsletter to target groups. The e-mail address is used exclusively for sending the e-mail newsletter. The legal basis for the processing of the data after your registration for the e-mail newsletter and is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) in conjunction with. Art. 7 GDPR.
The logging of your registration before your confirmation, the processing of the IP address and the time of registration as well as the analysis of your reading behavior serve our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR to enable and prove your registration and, if necessary, to clarify a possible misuse of your personal data.
To send and collect user data for our email newsletter, we use processors with whom a contract processing agreement has been concluded pursuant to Art. 28 GDPR. If you register for our e-mail newsletter, the data provided during registration will be transferred to the service provider and processed there. A transfer to third countries does not take place.
The deletion of your personal data takes place according to your revocation or when the service is discontinued. If you revoke your consent, you will no longer receive e-mail newsletters. Your data will be deleted from all IT systems unless there is another legal basis for processing your e-mail address. Unless you have confirmed your subscription to the e-mail newsletter, your data will be automatically deleted within 4 weeks.
You can unsubscribe from receiving future email newsletters at any time. This can be done by using a special link at the end of the e-mail newsletter or by sending a corresponding message by e-mail to the address specified in the e-mail newsletter.
Facebook Page
On our Facebook Page we offer further information. We would like to point out that you use the Page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
When you visit our Facebook Page, Facebook collects, among other things, your IP address as well as further information according to point 4.2, which is available in the form of cookies on your PC.
The information is used to provide us with statistical information about the use of our Facebook Page, to analyze visitors to the website and to design our offer to suit the target group.
We use ready-made reports for this purpose, such as total number of page views, “Like” votes, end devices used, page activity, post interactions and reach, user activity (comments, shared content, replies), origin (country and city), language, store views and clicks, age group, gender, education level, profession, relationship status, clicks on phone numbers or Facebook groups linked to our Page.
For example, we use the distributions by age and gender for a customized approach and the preferred visiting times of users for a time-optimized planning of our posts.
We can limit the analysis in terms of time and content, but we have no influence on the display, processing and presentation of the insights. We, as the provider of the information service, do not process any further data from your use of our service beyond this.
In accordance with the Facebook Terms of Use, which each user has agreed to as part of creating a Facebook profile, we can identify subscribers and fans of our Page and view their profiles and other shared information from them.
In what way Facebook uses the data from your visit to our Page for its own purposes, such as for the analysis of your personal data and the creation of personalized advertising, for the creation of user profiles and for market research, to what extent activities on the Facebook Page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook Page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us.
Facebook also processes information about its users’ end devices (e.g., as part of the “login notification” function); where applicable, this enables Facebook to assign IP addresses to individual users. Facebook uses cookies, i.e. small text files that are stored on the various end devices of the users, for further processing of this information. If you have a Facebook profile and are logged in to it, the storage and analysis also takes place across devices.
For the information service offered, we operate a joint responsibility together with Facebook pursuant to Art. 26 GDPR. The legal basis for the processing of personal data is Art. 6 (1) (f) GDPR. Our legitimate interest is to draw attention to our services and to be able to contact you.
The data processing is carried out with the company Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). It cannot be ruled out that your data will be transferred to a third country to Facebook Inc, (1 Hacker Way, Menlo Park, CA 94025, USA). Facebook Inc, the US parent company of Facebook Ireland Ltd, states that the transfer of your data is adequately secured based on EU Standard Contractual Clauses pursuant to Art. 46 (2) (c ) GDPR.
In the case of the transfer and further processing of your personal data to third countries, such as the USA, it cannot be ruled out that state authorities will access your personal data and process it for their own purposes.
If you are currently logged in to Facebook as a user, there is usually a cookie with your Facebook ID on your end device. This enables Facebook to track that you have visited this Page and how you have used it. This also applies to all other Facebook Pages.
Via Facebook pixels embedded in websites, it is possible for Facebook to record your visits to these websites and assign them to your Facebook profile. Based on this data, content or advertising can be offered tailored to you. If you wish to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies present on your device and exit and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted. This will allow you to use our Facebook Page without revealing your Facebook identifier. When you access interactive features of the Page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.
Since only Facebook has full access to user data, we recommend that you contact Facebook directly if you wish to make requests for information or other questions regarding your rights as a user (e.g. right to deletion). Alternatively, we offer you support at the above address to assert your rights. You can also assert objection options at Facebook.
You can find more information on data protection at Facebook in the data policy.
There you will also find information on contact options for Facebook as well as on the setting options for advertisements. You can find Facebook’s complete data policy here.
Your rights as a data subject
Insofar as your personal data are processed on the occasion of your visit to our website and when using our services, you have the following rights as a data subject within the meaning of the GDPR:
- 15 GDPR: Right to information of the data subject.You have the right to obtain information from us about what data we process about you.
- 16 GDPR: Right to rectification. If the data concerning you is incorrect or incomplete, you may request that incorrect information be corrected or that incomplete information be completed.
- 17 GDPR: Right to erasure. Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data. Your right to erasure depends, among other things, on whether the data concerning you is still needed by us to fulfill our legal duties.
- 18 GDPR: Right to restriction of processing. Under the conditions of Art.18 GDPR, you may request the restriction of the processing of personal data concerning you.
- 21 GDPR: Right to object. For reasons arising from your particular situation, you may object to the processing of data concerning you at any time.
- 7 (3) GDPR: Right to withdraw consent. You have the right to revoke any consent given for the processing of your personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Art. 77 GDPR: Right to complain to a supervisory authority. If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority competent for the place where you reside or work or for the place of the alleged infringement. The supervisory authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information (www.datenschutz-hamburg.de).
Status and update
This information on data protection is as of August 2021. Where legal bases are mentioned, these are authoritative for the processing of personal data in their respective version.