For what purpose is your personal data processed?
CA Immo stores, processes and transmits tenant and supplier data as well as data from CA Immo's internal administrators as part of a data warehouse for uniform group-wide reporting.
What is the legal basis of processing your personal data?
Processing is carried out on the basis of CA Immo's legitimate interest pursuant to Article 6 (1)(f) GDPR. CA Immo's legitimate interest lies in carrying out group-wide portfolio evaluations. Tenant data is forwarded by CA Immo only in pseudonymised form.
Whom does CA Immo forward your personal data to?
The data is exchanged within the Group only to the extent that management companies are able to conduct the operational business management. Internal recipients include the Supervisory Board, the Group Management Board, the specialist departments for capital market financing, valuation, asset & investment management and controlling. In addition, data is forwarded due to centralised IT and in the course of auditing. The data is forwarded to an external IT service provider, auditor, joint venture partner and associations of flat owners. CA Immo has concluded a data processing agreement with the external IT service provider to ensure the security of your data. CA Immo forwards tenant data only in a pseudonymised form.
How long does CA Immo keep your personal data?
CA Immo keeps data in the data warehouse for 10 years.
What rights do you have in connection with the processing of your personal data?
The General Data Protection Regulation (EU Regulation 2016/679) grants you as data subject certain rights to which we refer you below. Please note that they complement each other, so that you can only request either the correction or completion of your data or their deletion.
Withdrawal of consent
In the event that CA Immo stores and processes your personal data on the basis of consent (Art 6 (1) (a) GDPR), you are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of the processing up to the time of withdrawal.
Right to access personal data
You can request information on the origin, the categories, the storage period, the recipients, the purpose of your personal data processed by CA Immo and the type of processing.
Right to correction and deletion
If CA Immo processes your personal data that is incorrect or incomplete, you can request that it shall be corrected or completed. You may also request the deletion of unlawfully processed data.
Right to restriction of processing
If it is unclear whether your personal data processed is incorrect, incomplete or unlawfully processed, you may request that the processing of your data shall be restricted until this question has been finally clarified.
Right to object
Even if your personal data is correct and complete and processed lawfully by CA Immo, you can object to the processing of this data. However, this is possible only in special situations to be justified by you.
Right to data transferability
You may receive your personal data processed by CA Immo that CA Immo has received from you in a machine-readable format specified by CA Immo, or commission CA Immo with the direct transmission of this data to a third party of your choice, provided that this recipient enables CA Immo to do so from a technical point of view and that such data transmission is not subject to unjustifiable efforts, statutory or other secrecy obligations or considerations of confidentiality on the part of CA Immo or third parties.
Right to lodge a complaint
Finally, you are entitled to lodge a complaint with the data protection authority if you believe that the processing of your personal data is in breach of the General Data Protection Regulation (EU Regulation 2016/679).
Who can you contact to assert your rights as data subject?
To assert the above rights, please contact the CA Immo Data Protection Coordination Team (firstname.lastname@example.org) in writing (by letter to the CA Immo branch of your convenience [here] or e-mail).
How can you contact the Data Protection Officer of CA Immo?
The Data Protection Officer can be reached under: email@example.com