Data protection
This privacy information relates to the processing of your personal data within our corporate group or our websites:
cilg-invest.com
cilg-invest.com
To facilitate the readability of this privacy information, the term "We" is used in the following.
Responsible for processing and contact person for inquiries
Catella Project Management GmbH
Kaistr.18
40221 Düsseldorf
Contact details of the Data Protection Officer:
datenschutz@catella-pm.de
Types of personal data we process:
Depending on the customer relationship, we process the following categories of your personal data:
Contact details (e.g., name, address, email address, phone number)
Payment and billing data (e.g., bank account details)
Profile of interests related to real estate
Contract data
Purposes and legal bases of processing
The personal data concerning you will be processed for the following purposes and based on the following legal basis:
Fulfillment of the customer and contractual relationship (Art. 6 para. 1 lit. b) GDPR
Data processing on the basis of our legitimate interest (Art. 6 para. 1 f GDPR)
Data processing based on your consent (Art. 6 para. 1 a GDPR)
The processing based on legitimate interests includes the use and analysis of your personal data for:
– Product information and services
– Measures to improve and develop services and products to offer you personalized communication with relevant offers and products
– Conducting market and opinion research.
– Creating transparency and quality of our products, services, and communication
– Contacting credit bureaus (e.g., Schufa, Creditreform) to determine creditworthiness or payment default risks
– Address determination
– Credit checks
We also process data to fulfill legal obligations (e.g., due to commercial or tax law requirements) based on Art. 6 para. 1 lit. c GDPR.
Origin of your personal data
We collect your personal data directly from you, e.g., in the contact form or with direct inquiries to us.
Disclosure of personal data to third parties (recipients)
Disclosure or transmission of your personal data takes place within the framework of the aforementioned purposes. Recipients of personal data may include:
Marketing agencies
Service and cooperation partners
Printing and shipping service providers
Data destruction service providers
Consultants and consulting companies
A transmission may also occur within the framework of joint responsibility according to Art. 26 GDPR within the Catella group or within the affiliated companies of the Catella group in order to serve your customer inquiries on a project-related basis.
The contact person for this is the entity named in our imprint at the contact details provided above.
If, in addition, data transfer occurs, it generally takes place within the framework of order processing. Our service providers are contractually obligated to process this data securely, confidentially, and correctly.
The processing of personal data primarily takes place within the territory of the European Union (EU), as far as we operate in these countries. A transfer of data outside the EU (to third countries) or to international organizations takes place only if the special conditions of Art. 44 et seq. GDPR are met.
Storage duration
Personal data will be stored for the purposes mentioned for as long as necessary to fulfill those purposes, and if there are no other legal storage obligations (HGB, Tax Code) or legal reasons for storage. This means that we will delete your personal data after the expiry of the legal storage obligations, usually 10 years after the end of the contract.
Your rights regarding the processing of your personal data
You have the following rights with regard to your personal data:
Right to information about your stored personal data (Art. 15 GDPR),
Right to rectification if the stored data concerning you is incorrect, outdated or incorrect (Art. 16 GDPR),
Right to deletion if the storage is unlawful, the purpose of the processing is fulfilled, and the storage is therefore no longer necessary or you have revoked your consent for the processing of certain personal data (Art. 17 GDPR),
Right to restriction of processing if one of the conditions stated in Art. 18 para. 1 lit. a) to d) GDPR is met (Art. 18 GDPR),
Right to transfer the personal data you provided concerning you (Art. 20 GDPR),
Right to withdraw provided consent, whereby the withdrawal does not affect the lawfulness of processing based on the consent before the withdrawal (Art. 7 para. 3 GDPR) and
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Responsible for us is:
The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Tel. 0211 384 24-0, Fax: 0211 38424-10
Email: poststelle@ldi.nrw.de
Right to object
You may object to the processing of your personal data for the purpose of direct advertising and/or market research at any time without giving any reason.
We will no longer process the personal data for the purposes of direct advertising and/or market research after receiving the objection and will delete the data if processing is not necessary for other purposes (for example, to fulfill the contract).
You may also object to other processing that we base on a legitimate interest under Art. 6 para. 1 lit. f) GDPR for reasons arising from your particular situation at any time by stating those reasons. In the event of a justified objection, we will generally no longer process the personal data for the relevant purposes and will delete the data unless we can provide compelling reasons for the processing that outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Please send your objection to the address mentioned at the beginning.
Data protection information for further uses
The information presented also applies to the following special uses unless otherwise stipulated.
+ Server log files and provision of the websites
Each time you access our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected in this process:
Information about the browser type and version used
The user's operating system
The user's internet service provider
The user's IP address
Date and time of access
Websites from which the user's system accesses our website
Websites accessed by the user's system via our website
The data is also stored in our system's log files. These data are not stored together with other personal data of the user.
The legal basis for the temporary storage of the data and system log files is Art. 6 para. 1 lit. f GDPR.
The storage in system log files serves to ensure the functionality of our website. In addition, the data helps us optimize the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of storage of data in system log files, this is the case after a maximum of seven days. Further storage is possible. In this case, the IP addresses of the users will be deleted or anonymized, so that the identification of the calling client is no longer possible.
+ Application process
You can apply online for our job offers on this website. During the application process, we process not only your contact details but also data you provide about your resume and qualifications as well as photos. The data is used exclusively for the application process and will be deleted after six months. Only basic data will be deleted after 24 months for matching with previous applications.
The legal basis for processing application data is based on the user’s consent according to Art. 6 para. 1 lit. a GDPR.
The legal basis for processing basic data is our own legitimate interest under Art. 6 para. 1 lit. f GDPR.
We collect and process the personal data of applicants for the purpose of managing the application process, which can also take place electronically. This is especially true when applicants send application documents via electronic means, for example, by email or through a web form found on the website. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of managing the employment relationship while observing legal provisions. If the responsible party for processing does not conclude an employment contract with the applicant, the application documents will be automatically deleted three months after notification of the rejection decision, unless there are other legitimate interests of the responsible party opposing the deletion. Such other legitimate interest in this sense is, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
+ Cookies
A "cookie" is a small data file that is transferred from a website to your computer's hard drive. We use cookies when you browse our site, make a purchase, request information, or customize or register for certain services. If you accept the cookies on our site, we do not have access to your personal information, but with the help of cookies, we can identify your computer. Cookies are generally distinguished between "session-related" and "permanent" cookies.
"Session-related" cookies do not remain on your computer when you leave our website or close your browser. With the information collected, we can analyze usage patterns and structures of our website. This way, we can optimize our website by improving content or personalization and simplifying usage.
"Permanent" cookies are cookies that remain on your computer. They are used to simplify shopping, personalization, and registration services. Cookies can, for example, remember what you have selected for purchase while you continue shopping. In addition, you only need to enter your password on websites that require registration once. "Permanent" cookies can be manually removed by the user.
Most browsers accept cookies by default. However, you can usually refuse cookies or selectively accept certain cookies by adjusting your browser settings accordingly. If you disable cookies, some features of our site may not be available to you, and some web pages may not display correctly.
+ Facebook
We use the remarketing feature "Custom Audiences" from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). This allows tracking of user behavior after being redirected to the provider's website by clicking on a Facebook ad. This is intended to enable evaluation of the effectiveness of Facebook ads for statistical and market research purposes and may help optimize future advertising measures. The data collected is fundamentally anonymous to us, providing us with no conclusions about the user's identity. However, the data is stored and processed by Facebook, making it possible to link the data to the respective user profile, and Facebook can use the data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). A cookie may also be stored on your computer for this purpose. If you do not want Facebook to assign the collected information directly to your Facebook user account, you can disable the remarketing feature "Custom Audiences" here: https://www.facebook.com/settings/?tab=ads. You must be logged into Facebook to do this.
Current information regarding the General Data Protection Regulation (GDPR) can be found here:
https://www.facebook.com/business/gdpr#Wichtige-Rechtsgrundlagen.
+ Google Analytics
We use Google Analytics, a web analysis service from Google LLC ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a server of Google in the USA and stored there. In the event of activation of IP anonymization on this website, your IP address will be shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and stored there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website usage and internet usage to the website operator. Our legitimate interest in data processing lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG or Art. 6 para. 1 lit. f GDPR.
The personal data of users will be deleted or anonymized after 14 months. Deletion of data whose retention period has been reached takes place automatically once a month.
The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
Opt-out cookies prevent future collection of your data when visiting this website. To prevent collection by Google Analytics across multiple devices, you need to perform the opt-out on all used systems. If you click here, the opt-out cookie will be set: Disable Google Analytics.
For more information on terms of use and data protection, please visit www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html. On this website, we have added the code from Google Analytics to include the function "anonymizeIp()". This ensures that the collection of IP addresses is anonymized.
+ Google AdWords Conversion Tracking
If you have reached our website through a Google ad, statistics about our conversion rate can be created using a Google AdWords cookie that expires after 30 days. This means that we learn how many users visit our website and purchase a product within 30 days. A conclusion about your person is not possible.
Information and objection:
If you do not wish to participate in the tracking procedure, you can deactivate the conversion cookies by setting your browser settings to block cookies from the respective domain:
Google Adwords: googleadservices.com
Current information regarding the General Data Protection Regulation (GDPR) on how Google specifically protects and processes your data can be found at https://privacy.google.com/businesses/ and https://privacy.google.com/businesses/adsservices/.
+ Google Maps
We use the "Google Maps" component on our site. "Google Maps" is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
With each individual invocation of this component, Google sets a cookie to process user settings and data when displaying the page on which the "Google Maps" component is integrated. This cookie usually is not deleted when the browser is closed, but expires after a certain period unless manually deleted by you beforehand.
If you do not agree with this processing of your data, you can deactivate the service of "Google Maps" and thereby prevent the transmission of data to Google. To do this, you need to disable the JavaScript function in your browser. However, we point out that in this case, you may not be able to use "Google Maps" at all or only to a limited extent.
The use of "Google Maps" and the information obtained via "Google Maps" is in accordance with Google's terms of use
www.google.de/intl/de/policies/terms/regional.html
and the additional terms of service for "Google Maps"
www.google.com/intl/de_de/help/terms_maps.html
If you are logged into your personal account at the time of accessing the "Google Maps" page, Google can collect the information obtained as well as your IP address and other browser-related information and associate it with your account.
If you want to prevent Google from transmitting and storing data about you and your behavior on our website, you must log out of these providers before visiting our site.
+ Google Tag Manager
We use the Google Tag Manager. For this, we have concluded an order processing agreement with Google. The Google Tag Manager only processes personal data for technically necessary purposes and ensures the loading of additional components, which in turn may collect personal data. For more information about Google Tag Manager, please refer to Google’s privacy information.
Please note that American authorities may be granted access to personal data exchanged with Google due to corresponding laws such as the Cloud Act when incorporating this service.
+ Facebook Pixel
We use Facebook pixels for reach measurement. The provider is Facebook Ireland Limited in Dublin. The data processed in this process is also transferred to the USA and possibly to other third countries. This allows tracking of the behavior of website visitors after these have been redirected to the provider's website by clicking on a Facebook ad. The effectiveness of Facebook ads for statistical and market research purposes is thus evaluated, and future advertising measures can be optimized in this way. This data is initially anonymous to us as operators, and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, making the connection to the respective user profile possible, and Facebook can use the data for its own purposes. The further use of the data cannot be influenced by us as operators of the page. If you give your consent, processing occurs on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In the privacy policy of Facebook, you will find further information on protecting your privacy: https://de-de.facebook.com/about/privacy/.
+ Instagram
We have integrated components of the "Instagram" service on our websites. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos and also disseminate such data in other social networks.
The operating company of Instagram's services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this Internet site operated by the processor, on which an Instagram component (Insta button) is integrated, is called up, the Internet browser on the information technology system of the affected person automatically prompts the respective Instagram component to download a representation of the corresponding Instagram component. As part of this technical procedure, Instagram becomes aware of which specific sub-page of our website is being visited by the affected person.
If the affected person is simultaneously logged in to Instagram, Instagram recognizes with each visit of our website by the affected person and throughout the duration of the respective stay on our website which specific sub-page the affected person is visiting. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the affected person. If the affected person activates one of the Instagram buttons integrated on our website, the data and information transmitted in this way will be assigned to the personal Instagram user account of the affected person and stored and processed by Instagram.
Instagram receives information that the affected person has visited our website whenever the affected person is simultaneously logged in to Instagram at the time of access to our website; this happens regardless of whether the affected person clicks the Instagram component or not. If the affected person does not want such a transmission of this information to Instagram, they can prevent the transmission by logging out of their Instagram account before accessing our website.
Further information and the applicable privacy policy of Instagram can be found at help.instagram.com and www.instagram.com/about/legal/privacy/.
+ Contact form
A contact form is available on our website, which you can use for electronic contact. The data entered in the input mask, as well as the date and time of registration and your IP address, are stored. Your consent is obtained for the processing of this data. Alternatively, contact can be made via the provided email address. In this case, your personal data transmitted via email will be stored.
The processing of personal data from the input mask or the email serves us solely to process the contact or conversation with you. This also constitutes the required legitimate interest in processing the data. The other processed personal data serve to prevent misuse of the contact form and ensure the security of our information technology systems.
+ Newsletter dispatch (Apsis)
To register for the email newsletter, we need your salutation, name, and email address to which the newsletter should be sent. Any further information is optional and will be used to personally address you and customize the newsletter as well as clarify any questions regarding the email address.
If you register for our newsletter, we will use the data you provided exclusively for this purpose or to inform you about relevant circumstances regarding this service or its registration. We will pass this data on to the service provider Apsis for the purpose of managing and executing the newsletter mailing. We have concluded a processing agreement with Apsis.
A valid email address is required for receiving the newsletter. The IP address from which you registered for the newsletter and the date on which you order the newsletter will also be stored. These data serve as proof in case of misuse if a foreign email address is registered for the newsletter. To ensure that an email address is not abusively entered into the distribution list by third parties, we work with the "double opt-in" procedure. In this procedure, you will receive a confirmation email to your specified email address after registration. Only when you confirm your registration by clicking on a link contained therein will you subsequently receive the desired email newsletter. In the context of this procedure, the ordering of the newsletter, the sending of the confirmation email, and the receipt of the registration confirmation are logged.
You may revoke your consent for storing the data, your email address, and its use for newsletter distribution at any time in the future. For the revocation, we provide a link in every newsletter. You also have the option to communicate your revocation request in writing to the contact options listed in the imprint.
+ Social media
We maintain online presences within the social networks Facebook, YouTube, Twitter, and Instagram. The aim of these presences is to communicate with the users active there and to inform them about our products and services.
When you visit our profiles on social networks, the terms and conditions and data processing policies of the respective operators apply. Unless otherwise stated in our privacy information, we process user data if they communicate with us within the social networks and platforms, e.g., by writing posts on our online presences or sending us messages. The sending of personal data on these platforms is always voluntary. Users can delete the personal data in the communications we can see or in public communications at any time.
Facebook Data Policy
Instagram Privacy Policy
Twitter Privacy Policy
Google Privacy Information
+ Twitter
The responsible party has integrated components from Twitter on this website. Twitter is a multilingual publicly accessible microblogging service through which users can publish and distribute short messages limited to 140 characters, known as tweets. These short messages are accessible to everyone, including those who are not registered on Twitter. The tweets are also displayed to the so-called followers of the respective user. Additionally, Twitter allows addressing a wide audience through hashtags, links, or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website, which is operated by the responsible party and on which a Twitter component (Twitter button) is integrated, is accessed, the internet browser on the affected person's information technology system automatically prompts the respective Twitter component to download a representation of the corresponding Twitter component. More information on Twitter buttons can be found at about.twitter.com/de/resources/buttons. In this technical procedure, Twitter becomes aware of which specific sub-page of our website is being visited by the affected person. The purpose of integrating the Twitter component is to allow our users to disseminate the content of this website, promote the website in the digital world, and increase our visitor numbers.
If the affected person is simultaneously logged in to Twitter, Twitter recognizes with each visit of our website by the affected person and throughout the duration of their stay on our website which specific sub-page of our website the affected person is visiting. This information is collected by the Twitter component and assigned by Twitter to the respective Twitter account of the affected person. If the affected person activates one of the Twitter buttons integrated into our website, the data and information transmitted through it will be assigned to the personal Twitter user account of the affected person and stored and processed by Twitter.
Twitter receives information that the affected person has visited our website whenever the affected person is simultaneously logged in to Twitter at the time of accessing our website; this occurs regardless of whether the affected person clicks on the Twitter component or not. If the affected person does not wish to transmit this information to Twitter, they can prevent the transmission by logging out of their Twitter account before accessing our website.
The applicable privacy policy of Twitter can be accessed at twitter.com/privacy.
+ Web Beacons
Some of our web pages and email newsletters in HTML format use web beacons in conjunction with cookies to create overall statistics on website usage. A web beacon is an electronic, invisible image that is also referred to as a single pixel GIF or empty GIF. Web beacons can detect certain types of information on a visitor's computer, such as the visitor's cookie number, time and date of the page view, and a description of the page on which the web beacon is located. You can disable some web beacons by rejecting the cookies associated with them.
+ XING Share Button
We would like to inform you here about the processing of personal data through the function of the XING Share Button.
The "XING Share Button" is used on this website. When this website is called up, a connection is briefly established via your browser to the servers of XING AG ("XING"), which provide the functions of the "XING Share Button" (especially the calculation/display of the counter value). XING does not store any personal data about you when you visit this website. XING specifically does not store IP addresses. There is also no evaluation of your usage behavior through the use of cookies in connection with the "XING Share Button".
The current privacy information about the "XING Share Button" and additional information can be accessed at: https://www.xing.com/app/share?op=data_protection
+ YouTube
We incorporate videos from the "YouTube" platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy information: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
+ Framer (CMS, Analytic, and Forms)
We use "Framer" for our websites. Framer is a content management system (CMS) from the Netherlands and has analysis features among others. Hosting takes place in a data center in Amsterdam. Framer analysis provides metrics and counts visitors, page views, top sources, and top pages.
When you visit our pages, the IP address is encrypted and additionally provided with a daily rotating secret (salt) that is reset and deleted every day to calculate the daily unique visitors. Framer Analytics does not track, collect, or store any data or information that can identify a person.
The data collected to analyze Framer websites is completely anonymized and cannot be traced back to a person.
Framer Analytics does not use cookies and does not generate permanent identifiers. No cookie consent is required to use the integrated analytical tool in Framer. However, Framer Forms may collect personal data such as names, email addresses, or other personal information submitted via the form. In this case, you decide how much information you provide us. This is based on your voluntary consent according to Art. 6 para. 1 lit. a GDPR.
Mapbox
In accordance with your consent in the cookie notice, we use the Mapbox API on our website for visualizing geographic representations and information as well as for cartographic representations. This is a service of Mapbox Inc. with headquarters in San Francisco, California, and Washington D.C., USA. Your consent according to Art. 6, para. 1 S.1 lit. a GDPR constitutes the legal basis for data processing within the framework of the Mapbox API. Explanations can be found in the cookie notice.
With your consent by selecting the appropriate options in the cookie notice, a cookie is stored via the selected Internet browser on your end device by Mapbox API. This way, information is transmitted to the servers of Mapbox in the USA for up to 31 days regarding the use of our website (e.g., usage and location data, URL, temporal parameters) as well as IP address, browser, and operating system. It cannot be ruled out that Mapbox may pass data on to third parties if this is permissible or required by law, or if information is processed by a third party on behalf of Mapbox.
If this type of data processing is not desired, you have corresponding options in the cookie tool. Detailed information is provided by Mapbox Inc. on their website: https://www.mapbox.com/legal/tos/ as well as in the privacy information under https://www.mapbox.com/legal/privacy/.
If you have questions regarding data protection, please feel free to contact the above-mentioned contact details.
Data protection information according to Art. 13 GDPR
from April 24, 2020