Convenience translation (The German version of the PRIVACY AND COOKIE POLICY published on the website is binding)

This Privacy Policy describes the processing of personal data when you use Vonovia’s investor website including the mobile applications (our “Apps”). It also explains the choices you have regarding your personal data (“your rights”) and how you can contact us.

I. Who is responsible and how can I contact the data protection officer?

The responsible person in the sense of the DSGVO is

Vonovia SE
University road 133
44803 Bochum

Further information about our company, details of the persons authorized to represent us and also further contact options can be found in our imprint on our website: https://investoren.vonovia.de/impressum/

If you have any questions about the processing of your personal data by us or about data protection in general, please contact the Corporate Privacy Officer:

Dr. Stefan Drewes
c/o Vonovia SE
University road 133
44803 Bochum
E-mail: datenschutz@vonovia.de

II. Your rights as a data subject

Each data subject has the following rights:

• Right of access (Art. 15 DSGVO)
• Right to rectification of inaccurate data (Art. 16 DSGVO)
• Right to erasure or a right to be “forgotten” (Art. 17 GDPR)
• Right to restrict the processing of personal data (Art. 18 DSGVO)
• Right to data portability (Art. 20 GDPR).

You may object to the processing of personal data for advertising purposes, including an analysis of customer data for advertising purposes, at any time without giving reasons.

 

In addition, the data subject also has a general right of objection (cf. Art. 21 (1) DSGVO). In this case, the objection to data processing must be substantiated. If the data processing is based on consent, your consent can be revoked at any time with effect for the future.

To exercise your data subject rights, the easiest way is to contact:

Vonovia Customer Service GmbH,
P.O. Box 44784 Bochum,
Tel.: +49 234 41 47 000-00,
Fax: +49 234 314 888-4414,
E-mail: service@vonovia.de

In addition, you have the right to complain to the data protection supervisory authority responsible for you.

III. On the processing of personal data within the scope of the investor website

In the following, we would like to give you an overview of how we ensure the protection of your personal data when you access our website and which types of personal data we process for which purposes and to what extent.

1. Processing of data when accessing our website – log files

When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. In addition, the IP address is transmitted and used to provide the service you requested. This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet.

This log file data is anonymized or deleted by us immediately after the end of the usage process. The legal basis for the data processing is Art. 6 para. 1 p. 1 f) DSGVO.

2. Processing of data when using the website – your requests

If you send us an inquiry by e-mail or via the contact form, we collect the data you provide for processing and responding to your request. We store this information for verification purposes for a period of up to two years. Legal basis for data processing Art. 6 para. 1 sentence 1 letter f DSGVO.

3. Email newsletter subscription

We use the so-called double-opt-in procedure to register for our Investor Relations Newsletter. This means that after you have provided your e-mail address, we will send you a confirmation e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 30 days, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe. The storage serves the purpose of being able to send you the newsletter. Furthermore, we store your IP addresses and the times of your registration each time you register and confirm, in order to prevent misuse of your personal data and to be able to provide proof of correct sending. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 letter a DSGVO.

The only mandatory information for sending the newsletter is the e-mail address. You have the right to revoke your consent to the sending of the newsletter at any time. Your revocation does not affect the lawfulness of the processing of your personal data until the revocation. You can declare the revocation by clicking on the link provided in every newsletter e-mail.

4. Use of the chatbot

On our website, we use an automated chatbot from the service provider cognigy GmbH, Speditionsstraße 1, 40221 Düsseldorf, Germany, which we commission and control, to provide you with a simple way to contact us and support you quickly and easily with questions. We delete or anonymize the call histories after use. The legal basis for the processing of your personal data is Art. 6 para. 1 p. 1 lit. f DSGVO.

5. Reach measurement by means of etracker

On our website, we use a tool for measuring reach provided by the service provider etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, which we commissioned. This tool does not use cookies. We use the tool from etracker to create statistical usage analyses of our website so that we can design and optimize our website to meet your needs. For this purpose, we collect data on your usage and behavior on our website, whereby this data is anonymized and aggregated into statistics after 24 hours at the latest.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 letter f DSGVO. Our legitimate interest is the design and optimization of our website according to demand. You can object to the range measurement by means of etracker at any time here.

6. Use of a cookie consent management platform

On our website, we use the consent management platform of the service provider Cookiebot, which is contracted and controlled by us. This web service is our cookie consent management system. We use this to block cookies, to collect the necessary consents from our users for the setting of cookies, to enable you to revoke consents given, and to document the consents given and revoked and correctly assign them to you as a user. For this purpose, Cookiebot processes a consent ID and the date of consent. We store this data for a period of 12 months, after which your data is deleted.

The legal basis for the described processing of your data is Art. 6 para. 1 p. 1 lit. c DSGVO.

7. Notes on ensuring data security

We take technical and organizational security precautions on our pages to protect the personal data stored with us from access by third parties, loss or misuse and to enable secure data transfer.

We must point out that due to the structure of the Internet, unauthorized access to data by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encryption or in any other way. Without appropriate protective measures, unencrypted data in particular, even if transmitted by e-mail, can be read by third parties.

IV. Integration of external service offers

1. Integration of Google TAG Manager

For the delivery of online advertising and the integration of external partners, we use the Google Tag Manager of the service provider Google Ireland Limited. This allows us to control the delivery of online advertising. This tool works without cookies, but nevertheless requires a transfer of IP addresses to Google. The anonymization of the IP address before forwarding to Google has been activated by us. The legal basis for the data processing is Art. 6 para. 1 p. 1 f) DSGVO.

V. Our Cookie Policy

1. General information on the use of cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your terminal device and saved by your browser. They serve to make our offers more user-friendly, effective and secure. We use both so-called temporary cookies, which are automatically deleted when you close your browser (“session cookies”), and persistent (permanent) cookies.

You have the choice whether to allow cookies to be set. You can make changes in your browser settings. In principle, you have the choice of accepting all cookies, being informed when cookies are set or rejecting all cookies. If you choose the latter option, it is possible that you will not be able to fully use our offer. You can make individual settings in the cookie settings.

In the use of cookies, a distinction must be made between cookies that are mandatory and those for more extensive purposes (measurement of access figures, advertising purposes).

2. Mandatory cookies when using the website

We use session cookies on our websites that are absolutely necessary for the use of our websites. These include cookies that enable us to recognize you while you are visiting the site as part of a single session. These session cookies contribute to the secure use of our offer.

3. Use of cookies with your consent

Below you will find an overview of the cookies that are used by us with your consent given at the beginning of the use of the website. You will also find an opt-out option with each explanation of the use. These are cookies that are used to record the usage behavior of our website.

a. Use of cookies to record usage behavior (tracking)

The use of tracking cookies enables us to recognize users when they access our website again and thus to assign usage processes to an internally assigned identification number (pseudonym). This allows us to record repeated accesses to our website and analyze them in a coherent manner.

Specifically, the following tracking cookies are used:

etracker

This website uses technologies from etracker GmbH (www.etracker.com.) to collect and store data for marketing and optimization purposes. This data can be used to create user profiles under a pseudonym in order to obtain a database for optimizing our website. Cookies are used for this purpose. With the help of the cookies, our service provider will collect information on our behalf about your visits to our website, or how you move within our website, and will use this information to evaluate your use of the website, as well as to compile reports on website activity. In this way, we want to analyze the use of our website and thus better understand how visitors use our website so that we can make it even more intuitive.

The legal basis for the storage of the cookie is your consent according to Art. 6 para. 1 sentence 1 lit. a) DSGVO. The further evaluation of the collected data over a period of 24 months is based on Art. 6 para. 1 sentence 1 lit. f) DSGVO.