How we handle your data and your rights
– Information pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR) –
Dear Customer,
Below we will inform you about how we process your personal data the claims and rights to which you are entitled under data protection regulations. It depends largely on which data is processed and how it is used according to the requested or agreed services.
1. Who is responsible for data processing and who can I contact?
The responsible body is:
Khajees Property Real Estate S.L
Avenida del Parque.3
29631 Benalmadena
Spain
Telephone: +34 622 648 914
Email: Khajeespropertyrealestate@gmail.com
You can reach the person responsible for data protection at:
Telephone: +34 622 648 914
Email: khajeespropertyrealestate@gmail.com
2. What sources and data do we use?
We process personal data that we receive from you as part of our business relationship. In addition, to the extent necessary for the provision of our services, we process personal data that we lawfully receive from other companies (e.g. SCHUFA, Creditreform) or authorities (e.g. brokerage agreements, rental agreements, to execute orders, to fulfill contracts or based on your consent). On the other hand, we process personal data that we have legitimately obtained and are permitted to process from publicly accessible sources (e.g. debtor lists, land registers, commercial and association registers, press, media). Relevant personal data are personal details (name, address and other contact details, birthday) and identification data (e.g. ID details). In addition, this may also include order data (e.g. payment order, purchase contract, service contract), data from the fulfillment of our contractual obligations (e.g. sales data in goods transactions, credit lines, product data, information about your financial situation (e.g. creditworthiness data) , advertising and sales data (including advertising scores), documentation data, register data, data about your use of the telemedia we offer (e.g. time of access to our websites, apps or newsletters, pages clicked on by us or entries) and others with the above Categories can be comparable data.
3. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
3.1. To fulfill contractual obligations (Article 6 Para. 1b GDPR)
The processing of personal data (Article 4 No. 2 GDPR) is carried out for the provision and brokering of services or goods transactions and in particular for the implementation of our contracts with you and the execution of your orders, as well as all activities necessary for the operation and administration of our company. The purposes of data processing depend primarily on the specific contract/product and may include, among other things, advice, contract administration and support as well as the commissioning of third parties to fulfill the contract or based on your requirements. Further details on the purpose of data processing can be found in the respective contract documents and terms and conditions.
3.2. As part of the balancing of interests (Article 6 Para. 1f GDPR)
To the extent necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties, such as in the following cases:
• Measures for business management and further development of services and products
• Examination and optimization of procedures for direct customer contact
• Advertising or market and opinion research, unless you have objected to the use of your data
• Ensuring the company's IT security and IT operations
• Assertion of legal claims and defense in legal disputes
• Prevention and investigation of crimes
• Measures to ensure house rules
• Consultation and data exchange with credit agencies (e.g. SCHUFA, Creditreform) to determine creditworthiness and default risks
3.3. Based on your consent (Article 6 Paragraph 1a GDPR)
If you have given us your consent to process personal data for specific purposes (e.g. passing on data to other companies), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
3.4. Due to legal requirements (Article 6 Paragraph 1c GDPR) or in the public interest (Article 6 Paragraph 1e GDPR)
In addition, as a company, we are subject to various legal obligations, i.e. legal requirements (e.g. tax laws). The purposes of processing include, among other things, the fulfillment of tax control and reporting obligations, but also reports to other authorities that arise from the nature and content of the contract between us.
4. Who gets my data?
Within the company, those departments that need it to fulfill our contractual and legal obligations have access to your data. Processors we use (Article 28 GDPR) may also receive data for these purposes. These can be companies in particular from the categories of accounting services, IT services, crafts, insurance, logistics, printing services, telecommunications, debt collection, advice and consulting as well as sales and marketing. We may only pass on information about you if required by law, if you have consented or if we are authorized to provide information. Under these conditions, recipients of personal data can e.g. B. be:
• Public bodies and institutions (e.g. tax authorities) if there is a legal or official obligation.
• Other companies or comparable institutions to which we transmit personal data in order to carry out the business relationship with you (depending on the contract: e.g. companies of our suppliers, service providers and credit agencies).
• Other data recipients may include those entities for which you have given us your consent to transfer data.
5. How long will my data be stored?
If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract. In addition, we are subject to various retention and documentation obligations, which arise, among other things, from the Commercial Code (HGB), the Tax Code (AO) and tax law. The periods specified there for storage and documentation are two to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example, according to Sections 195 ff. of the Civil Code (BGB), are usually three years, but in certain cases can also be up to thirty years.
6. Will data be transferred to a third country or to an international organization?
There is no data transfer to third countries.
7. Is there an obligation to provide data?
As part of our business relationship, you only have to provide the personal data that is necessary for the establishment, implementation and termination of a business relationship or which we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or carry out the order or will no longer be able to carry out an existing contract and may have to terminate it.
8. To what extent is there automated decision-making in individual cases?
In principle, we do not use fully automated decision-making in accordance with Article 22 of the GDPR to establish and implement the business relationship. If we use these procedures in individual cases, we will inform you separately if this is required by law.
9. To what extent will my data be used for profile creation (scoring)?
We partially process your data automatically with the aim of evaluating certain personal aspects (profiling). For example, we use profiling in the following cases:
• We use scoring (e.g. Schufa score) as part of the assessment of your creditworthiness. This calculates the probability with which a customer will meet their payment obligations in accordance with the contract. For example, income, expenses, existing liabilities, profession, employer, length of employment, experience from previous business relationships, contractual repayment of previous loans and information from credit reporting agencies can be taken into account in the calculation. The scoring is based on a mathematically and statistically recognized and proven procedure. The calculated score values support us in making decisions when it comes to product sales and are included in ongoing risk management.
10. What rights do you have?
As a customer of ours, depending on the situation in the individual case, you have the following data protection rights in accordance with Articles 15-22, 34 GDPR, to exercise which you can contact us or our data protection officer at any time using the data mentioned in section 1:
• Information about the stored data and its processing (Article 15 GDPR).
• Correction of incorrect personal data (Art. 16 GDPR).
• Deletion of stored data (Art. 17 GDPR).
The right to erasure is limited if processing is necessary:
o to comply with a legal obligation that requires processing under Union or Member State law to which we are subject.
o to assert, exercise or defend legal claims.
• Restriction of data processing if data cannot yet be deleted due to legal obligations (Article 18 GDPR).
• OBJECTION to the processing of data (Art. 21 GDPR)
• Data portability, provided that data processing has been consented to or a contract has been concluded (Art. 20 GDPR).
• Consent to processing that has been given can be revoked at any time with future effect. • Right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You can also contact our data protection officer.
Information about your right
to object according to Article 21 of the General Data Protection Regulation (GDPR)
1. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is based on Article 6 Paragraph 1e GDPR (data processing in the public interest) and Article 6 Paragraph 1f GDPR (data processing on the basis of a balancing of interests) to lodge an objection; This also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR, which we use to assess creditworthiness. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2. In individual cases we process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally and should, if possible, be addressed to:
Khajees Property Real Estate S.L
Avenida del Parque.3
29631 Benalmadena
Spain
