This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online service and the websites, functions, and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the “online service”). Regarding the terminology used, such as “processing” or “controller,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

QUETEPO UG (haftungsbeschränkt)
Carsten Wetzel
Templiner Str. 3
17279 Lychen
Germany
Email address: lawyer(at)quetepo.com
Link to legal notice: https://berlin-maisonette.com/impressum/

Types of data processed:

– Inventory data (e.g., names, addresses).
– Contact data (e.g., email, telephone numbers).
– Content data (e.g., text input, photographs, videos).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).

Categories of data subjects

Visitors and users of the online service (hereinafter, we also refer to the data subjects collectively as “users”).

Purpose of processing

– Provision of the online service, its functions, and content.
– Answering contact inquiries and communicating with users.
– Security measures.
– Reach measurement/marketing.

Terminology used

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); A natural person is considered identifiable if they can be identified, directly or indirectly—particularly by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie), or one or more specific factors expressing the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

“Processing” means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses virtually any handling of data.

“Controller” refers to the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Relevant Legal Bases

In accordance with Art. 13 of the GDPR, we inform you of the legal bases for our data processing activities. Unless the legal basis is stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 of the GDPR; the legal basis for processing to perform our services, implement contractual measures, and respond to inquiries is Art. 6(1)(b) of the GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) of the GDPR; and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) of the GDPR. In the event that the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) of the GDPR serves as the legal basis. Cooperation with processors and third parties

If, as part of our processing operations, we disclose data to other persons and companies (processors or third parties), transmit data to them, or otherwise grant them access to the data, this occurs only on the basis of legal authorization (e.g., if transmission of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), if you have consented, if a legal obligation requires it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called “data processing agreement,” this is done in accordance with Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transmitting data to third parties, this takes place only if it is necessary for the fulfillment of our (pre-)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or…