Data protection notice

Thank you for your interest in our company. Your visit to our website and the security of your data are important to us, which is why the following data protection notice and compliance with data protection are regulated in accordance with the current EU General Data Protection Regulation (EU GDPR). With this data protection notice, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed.

When you use our website, this is generally possible without providing personal data. In special cases, however, it may be necessary to process personal data if you wish to make use of functions on our website. If it is necessary to process personal data and there is no legal basis for this, we will generally obtain your consent.

We process personal data (e.g. name, address, email address) in accordance with the currently valid data regulations and the EU GDPR. In order to protect your personal data collected and processed via this website as completely as possible, we have implemented numerous organisational and technical measures. Nevertheless, we can never completely rule out security gaps during transmission on the Internet, which is why you can also transmit personal data to us by alternative means (by post or telephone).

Definitions of terms

In our data protection notice, we use a number of terms that were used by the European legislator when the General Data Protection Regulation (GDPR) was adopted. We explain these terms in more detail here so that all the content of our data protection notice is easier to understand and read.

• Personal data

This is information that relates to an identified (natural) person. In this context, the term ‘data subject’ is also used below. A natural person is identifiable if they can be recognised directly or indirectly. This can be done, for example, by name, address, location data, customer number, etc. or other online data that establishes an identity in the physical, psychological, cultural or economic sphere, or also a social identity.

• Person concerned

A data subject is any natural person who is identified or identifiable through the processing of their personal data.

• Processing

In this context, one speaks of the process or a series of processes that relate to personal data. This can be manual or automated. We refer to the collection and recording of personal data, as well as the documentation, organisation, storage, retrieval, use, transmission or provision, restriction, correction, deletion or destruction.

• Consent

Consent is a voluntary expression of will that is unequivocally given by the data subject in the case of data collection. This can take the form of a declaration or other unambiguous action in order to give consent to the collection and processing of the respective personal data.

Name and address of the controller within the meaning of the GDPR and other applicable data protection laws within the EU, which is responsible for the collection and processing:

Wohnungsbaugenossenschaft Wilhelmsruh eG
Wackenbergstraße 92
13156 Berlin
Phone: 030-7554497-0
Fax: 030-7554497-19
E-Mail: info@wbg-wilhelmsruh.de

We have appointed a data protection officer for our company:

DOMUS Consult Wirtschaftsberatungsgesellschaft mbH
Phone: 0331-743 30-0
E-Mail: datenschutz@domusconsult.de

We use cookies on our website. These are small text files that are retrieved by a browser and stored on your computer.

Some cookies contain a cookie ID for unique identification, which can be assigned to a specific browser after storage. This enables us to differentiate between the various Internet browsers and to better display and offer functions within our websites. In this way, we optimise your visit to our website, as the storage of cookies on your computer enables us to recognise your visit and, for example, restore access data you have already entered.

We would like to point out that every data subject can prevent the setting of cookies by our websites at any time. To do this, go to the relevant settings in your browser, which will allow you to delete cookies that have already been set and permanently prevent the setting of new cookies. You can also be informed about the setting of cookies, allow them only in individual cases or activate the automatic deletion of cookies when closing the browser. Please note, however, that deactivating cookies may result in limited functionality of our website.

You can find more information about the cookies we use here.

When you visit our website, several general data and information are collected, which are stored in the server log files and automatically transmitted to us.

This data includes:

• Operating system used
• Browser type and browser version
• Referrer URL (the website from which you access our site)
• Sub-websites of our own website accessed by an accessing system
• IP address used (Internet Protocol address)
• Time and date of the server request
• Internet provider of the accessing system
• Possibly further information that serves to protect against attacks on our system

This data cannot be assigned by us to a specific person. This data is not merged with other data sources. Should we become aware of any indications of unlawful use, we reserve the right to check this data retrospectively.

However, we primarily use the anonymously collected data to make your visit to our website more pleasant and for statistical purposes. This enables us to optimise and better present their content, to increase our advertising impact and to ensure our technological functionality. Nevertheless, in the event of an attack on our system, we may make the data collected available for criminal prosecution by the relevant authorities. The aim of this data collection and analysis is to protect and secure data within our company. This enables us to guarantee the highest possible level of protection for the personal data we collect and process. The data collected in the log files listed here are stored separately within our company and are not associated with other personal data of data subjects.

Due to legal regulations, this website contains direct information to reach our company quickly and electronically. This enables direct communication with us. If you contact us by electronic mail (e-mail), we cannot guarantee data security, as complete protection cannot be guaranteed when e-mails are transmitted. When contacting us via the contact form, the content is protected by encryption (SSL certificate).
Your transmitted personal data will be stored for the purpose of processing your enquiry or contacting you. This data will not be passed on to third parties. The type and scope of the data transmitted can be seen from the corresponding fields that are filled in. When submitting the form, you must consent to the collection, storage and use of the data you provide for the purpose of the enquiry.

Data protection notice pursuant to Articles 13 and 14 GDPR

We process and store the personal data of a data subject exclusively for the period of time required for the purpose of storage. Otherwise, the data will be stored if there are legal provisions for this by European directives or other regulators responsible for the responsible body.

The personal data will be deleted or blocked in accordance with the statutory provisions if the storage period expires due to the aforementioned statutory provisions or directives, or if the purpose of the storage no longer exists.

In addition, every data subject has the right to confirm whether we process the relevant personal data. To exercise this right, you can contact one of our employees at any time.

The right to information of every data subject means that it is possible at any time to obtain information from us free of charge about the corresponding stored personal data. Furthermore, the data subject may request a copy of this information. The legislator for these regulations and European directives also grants the data subject the right to the following information:

• the purpose of the processing
• the categories into which the personal data are categorised
• the recipients to whom the personal data is transmitted
• the duration or planned duration of the storage of this personal data
• the existence of the right to rectification or erasure of the data subject's personal data, or to restriction of processing by us, or the right to object to the processing of the respective personal data
• the existence of a right to lodge a complaint against the processing of their data with a supervisory authority
• if the personal data was not collected directly from the data subject, all available data on its origin must be disclosed
• information about the transfer of their data to third countries or other international organisations

Even in this case of the right to information, an employee of our company is available to the data subject at any time. Every data subject has the right to rectification in accordance with the provisions of the legislator and European directives of the controller. It means the immediate correction of incorrect personal data and the completion of this data in accordance with the purpose of the processing. A supplementary declaration may also be necessary for this purpose. An employee of our company is available as a contact person for this purpose at any time.

Right to erasure

As a data subject whose personal data is processed, you have the right vis-à-vis our company to have your personal data erased immediately. However, the basis for this is that the processing is not necessary or one of the following reasons applies:

• the necessity or purpose for processing your data no longer exists
• if your personal data has been processed unlawfully
• if you withdraw your consent on which the processing was based according to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR
• if the deletion of your personal data serves to comply with a legal obligation under the law of the Member States or Union law to which the controller is subject
• if you object to the processing pursuant to Art. 21 / Art. 21 (2)
• if the personal data have been collected in relation to information society services offered (Art. 8 para. 1 GDPR)

If one of the above-mentioned reasons applies to you and you wish to have your personal data deleted from our systems, please contact us using the contact details provided in the contact information. We will comply with your request to delete your data immediately.

Right to restriction of processing

As a data subject whose personal data is processed, you have the right to request our company to restrict processing. The prerequisite for this is:

• if you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of your personal data
• if you need your personal data for the exercise, defence or assertion of a legal claim and we no longer need your data for processing purposes
• if the processing of your personal data is unlawful, but you refuse to delete this data and instead request a restriction on the use of this data
• if you have objected to the processing pursuant to Art. 21 (1) GDPR, but it is not yet clear whether our legitimate grounds override your grounds

If one of the above-mentioned reasons applies to you and you wish to restrict the processing of your personal data in our company, please contact us using the contact details provided in the contact information. We will immediately comply with your request to restrict the processing of your data.

Right to data portability

As a data subject whose personal data is collected and processed, you have the right vis-à-vis our company to request your data in a structured, commonly used and machine-readable format. This information will be provided in such a way that you can easily transfer it to another controller. The prerequisite for this is:

• consent to processing in accordance with Art. 6 para. 1 lit. A of the GDPR or Art. 9 para. 2 lit. A of the GDPR, -
• or if a contract pursuant to Art. 6 para. 1 lit. B of the GDPR exists and the processing is carried out by automated means
• if the processing is not necessary for the performance of a task carried out in the public interest and the exercise of official authority vested in us

Insofar as it is technically possible and there is no impairment of others, you have the right under Art. 20 para. 1 of the GDPR for us to transfer your personal data directly to a body named by you for further processing.

Our employees are available to you for this purpose under the contact options provided.

Right to object

If your data has been collected and processed, you as the data subject have the right to object to the processing of your data at any time (pursuant to Art. 6 (1) (e/f) GDPR).

In the event of an objection, we will no longer process your personal data. However, exceptions to this are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. The necessity of processing for the establishment, exercise or defence of legal claims is also an exception.

If we process your personal data for the purpose of direct marketing, you also have the right to object to this processing. In this case, we will no longer process your data for direct marketing purposes.

To assert your right to object, you can contact one of our employees at any time.

Right to revoke consent under data protection law

You have the right to withdraw your consent to data processing at any time. To do so, please contact one of our employees using the contact information provided above.

Legal basis for processing

For processing operations for which we obtain your consent for this purpose, Art. 6 lit. a of the GDPR serves as the legal basis. For the purpose of a contractual service with you, or even in the case of a prior enquiry about a service from our company, the processing of personal data is based on Art. 6 lit.b of the GDPR.
Article 6(c) of the GDPR is used as the legal basis if the processing of personal data should become a legal obligation for us as a company.
Article 6(d) of the GDPR refers to the collection and processing of personal data in order to protect or preserve the vital interests of a person. This is a rather exceptional case and comes into force in the event of injuries or other life-threatening situations within our business premises, which is why your insurance data would then have to be transmitted to a doctor, for example.
Article 6(f) of the GDPR covers all processing operations that make it necessary to process your data in order to safeguard a legitimate interest on our part or that of a third party. However, it must be ensured that your interests, fundamental rights and freedoms do not prevail. Our legitimate interest based on this legal basis is the performance of our business activities and the maintenance of our customer relationship.

Duration of the storage of personal data

If your data is no longer required for the purpose of contract fulfilment or contract initiation, we will automatically delete the corresponding data after expiry of the respective statutory retention period.

Other regulations for the provision of personal data

It may be the case that your personal data must be provided for the conclusion of a contract, which we must then process as a result. If we are not provided with your data for this purpose, a corresponding contract cannot be concluded. If you have any questions regarding the provision of personal data, please do not hesitate to contact us. We will then inform you about any statutory or contractually prescribed provision and any obligation to do so. We will also inform you about the consequences of not providing personal data.

Our company collects and processes the personal data of applicants for the purpose of handling the application process. Processing can be carried out both manually and electronically. This is particularly the case if an applicant sends the relevant application documents to our company electronically, for example by e-mail or via a web form on the website. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant as a result of the application process, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

This site uses the open source mapping tool “OpenStreetMap” (OSM) via an API. The provider is the OpenStreetMap Foundation. To use the functions of OpenStreetMap, it is necessary to save your IP address. This information is usually transmitted to an OpenStreetMap server and stored there. The provider of this site has no influence on this data transfer. The use of OpenStreetMap is in the interest of an appealing presentation and easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information on the handling of user data on the OpenStreetMap data protection page https://wiki.osmfoundation.org/wiki/Privacy_Policy