Status: September 2024
Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Khosrow Karimian-Pour, OWS – Optimler.Wirtschafts.Service, Bonner Str 484-486, 50968 Cologne, Germany, Tel.: 0221 47 450 50, Fax: 0221 47 450 525, Email: info@ows-finanz.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
2) Data Collection When Visiting Our Website
If you are using our website merely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which are technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
The processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
3) Cookies
We use cookies and similar technologies to operate the OWS-Finanz website.
For more information about the cookies we use and how to manage your cookie settings and disable certain types of tracking, please refer to our Cookie Notice.
4) Contact
Our website contains contact forms that can be used for electronic contact. If a user takes advantage of this option, the data entered into the contact form will be transmitted to us and processed.
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data to unauthorized third parties.
At the time of sending the message, the following data is stored:
• Email address
• Name
• First name
• Date and time of contact
• Concern of the user
Alternatively, contact can be made via the provided email address or by phone.
In the context of contacting us (e.g., via contact form or email), personal data is collected. These data are stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry, provided that no statutory retention obligations oppose this.
5) Forwarding to Third Parties
This website may contain links to other service providers to which this declaration does not extend. If you leave our website via a link, it is recommended to read the privacy policy of the respective website carefully.
5.1 Immobilienscout24 - immobilienscout24.de iframe
In order to display a larger selection of real estate on our website, we currently use the following iframe: portal.immobilienscout24.de (for example under „Immobilien“). The integration of this service is not done without your prior consent. This iframe is embedded in such a way that initially, no personal data is transmitted to the iframe provider when you visit our site. Only when you click on the correspondingly marked fields and thus activate them, the iframe provider „Immobilien Scout GmbH“ receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in section 2 of this declaration is transmitted to the iframe provider. The legal basis for using the iframe is Art. 6 para. 1 sentence 1 lit. f GDPR.
For more information on the purpose and scope of data collection and its processing by the iframe provider „Immobilien Scout GmbH“, please refer to the following privacy notices of this provider. There you will also find further information on your rights and setting options for protecting your privacy:
https://www.immobilienscout24.de/agb/datenschutz.html
5.2 Cognito Forms - cognitoforms.com iframe
To offer you contact forms on our website, we currently use the following iframe: cognitoforms.com (for example under „Immobilien“). The integration of this service is not done without your prior consent. By embedding the iframe, the iframe provider „Cognito, LLC“ receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in section 2 of this declaration is transmitted to the iframe provider. The legal basis for using the iframe is Art. 6 para. 1 sentence 1 lit. f GDPR.
In the context of using the service „Cognito Forms“, personal data is transferred to the USA, as the provider „Cognito, LLC“ is a company based in the USA. To protect your personal data and ensure an adequate level of data protection, „Cognito Forms“ has signed the EU-US Privacy Shield agreement and accordingly updated its terms of use and privacy policies.
Additionally, we have signed a Data Processing Agreement (DPA) with „Cognito Forms“, which ensures that all necessary data protection measures are observed and your personal data is protected in accordance with the provisions of the General Data Protection Regulation (GDPR).
Through these measures, including compliance with the EU-US Privacy Shield and the signing of the DPA, an adequate level of data protection is ensured when transferring your personal data to the USA. For more information on data processing by „Cognito Forms“ and their privacy policies, please visit: https://www.cognitoforms.com/legal/2/privacy-policy.
6) Rights of the Data Subject
6.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the guarantees pursuant to Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met. This right does not exist, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data to establish, exercise, or defend legal claims after we no longer need these data once the purpose has been achieved, or if you have objected on grounds relating to your particular situation, as long as it is not yet clear whether our legitimate grounds prevail;
- Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible;
- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw consent to the processing of data once granted at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work, or place of the alleged infringement.
6.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
7) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the period expires, the corresponding data is routinely deleted, provided that it is no longer necessary for contract fulfillment or contract initiation and/or there is no legitimate interest in further storage on our part.