This data protection statement for the use of the website https://www.graeserimmobilien.com/ (hereinafter referred to as "the website") is valid as of 25th of May 2018.


Graeser & Partner in its function as the responsible body (hereinafter referred to as "Graeser & Partner") hereby informs its users that their personally identifiable data will be processed in the following ways when they use the website:


● personally identifiable data (e.g. e-mail address, given name, family name, title, address, telephone number – hereinafter referred to as "data" or "personally identifiable data") provided by users when they register with the website (e.g. via contact inquiries and newsletter subscription)
● personally identifiable data transmitted by the user's internet browser each time they access the website. This data is stored in log files, which are also known as server log files. This data includes: IP address (Internet Protocol address) of the accessing computer; name of the page accessed; date and time of access; related URL from which the user accesses the page; amount of transmitted data; status message for successful access; session ID number 

Purpose of Data Processing 

Graeser & Partner as the responsible body processes website users' personally identifiable data for the following purposes: 

● fulfilment of user inquiries (e.g. handling contact inquiries, handling requests for regular e-newsletters with advertising information on property listings from Graeser & Partner) 
● to allow users to register on the website 
● technical management of the website and its operative features, including the resolution of technical problems, statistical analysis, tests and research 
● to prevent fraudulent activity or misuse of the website or in connection with the website 
● in order to comply with the requirements of the applicable laws, to protect the security of an individual and the rights and property of Graeser & Partner and to prevent deception or security or technical problems 

The legal basis for the processing of personally identifiable data is Art. 6 I lit. a, b and f of the General Data Protection Regulation (GDPR). The legitimate interest of Graeser & Partner entails the processing of personal data for direct marketing purposes per Art. 6 I lit. f GDPR. 

The Nature of the Provision of Personally Identifiable Data and the Consequences of Refusal 

The provision of personal data by the user is voluntary. You can freely decide whether to provide personally identifiable data to Graeser & Partner and you may revoke previously declared consent to the processing of personal data. This revocation may lead to it no longer being possible to use the Graeser & Partner website. 

Processing Modalities 

The processing of users' personally identifiable data is done only where necessary and is done exclusively electronically, in particular by: Collection, registration, organisation, storage, consulting, processing, modification, selection, extraction, comparison, use, interconnection, access and communication, blocking, deletion and destruction of data. The processing operations can be performed electronically and non-electronically. 

Access to Data 

The personally identifiable data are processed by Graeser & Partner, in particular by 

● employees and consultants who are entitled to administer the website and provide the related services 
● third-party companies (e.g. IT service providers, hosting providers, etc.) to which Graeser & Partner has outsourced services with processing operations as part of order processing 

Information about Data 

As the responsible body, we can provide information about your personally identifiable data. This information can only be provided for the following purposes: 

● in the case of fulfilment of legal obligations or obligations under regulations and directives of national or European legislation 
● for defence in court in cases of legal dispute 

Transfer of Data 

Transfer of Data to Non-EEA Countries 

In general, Graeser & Partner does not transfer personally identifiable data to non-EEA countries. 

The servers used by Graeser & Partner are located within the European Union. 

Storage and Deletion of Data 

Graeser & Partner stores personally identifiable data for the time necessary to fulfil the purposes for which said data is collected and processed, including any retention period required by applicable law (e.g. retention of accounting records), in each case for a maximum of 36 months after the collection of personally identifiable information. 

Use of Cookies 

To improve website usability, Graeser & Partner uses cookies. Cookies are small text files that usually consist of letters and numbers that are stored by the user's web browser on their PCs and contain pseudo-anonymised data. Cookies allow a website to recognise the user's computer, in order to track the browsing of multiple pages of a website and to identify the users who return to a website. There are cookies for technical, analytical and profiling purposes. 

The website uses the following technical cookies: 

● to save the language selection: _icl_visitor_lang_js, _icl_current_language, evlocale 
● to save the selection of units of measure: graeserimmobilienconfig 
● to save recent searches: LAST_SEARCH 
● to save the ID of the watch list: watchlist_id 
● to save the test assignment for AB tests: user_ab 
● to store allocation to distributed systems for load balancers: BIGipServergroup-rz-webfe-prod 

Graeser & Partner informs users that they can disable or remove cookies in their web browser following the instructions on the following links: 

● Internet Explorer ((https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies) 
● Mozilla Firefox (https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored) 
● Safari (https://support.apple.com/kb/PH19214?viewlocale=en_US&locale=de_DE) 

The Website also uses analytical cookies that are set by third parties such as Google (see also Terms of Use for Analysis Tools and Tracking Tools), Adroll (https://www.adroll.com/en-GB/about) /Privacy) and Haufe (https://en.onlinehelp.umantis.com/index.php/Cookies). 

In detail these are: 

a) Google Analytics 

Graeser & Partner uses the Google Analytics web analytics service provided by Google Inc. ("Google") to analyse the use of the web pages. The information that is generated from cookies on the use of the websites are usually transmitted to a Google server in the US and stored there. Graeser & Partner uses Google Analytics exclusively with the extension "ga ('set', 'anonymizeIp', true)" to ensure that IP addresses are processed only as a shortened version and to exclude a direct reference to individuals. Google may disclose data to third parties as long as it is legally required to do so or insofar as third parties process data on behalf of Google. Google will not disclose the user's IP address in conjunction with other Google data. 
Users can prevent the recording and storage of data by Google Analytics at any time by installing the Google-issued browser plug-in, which can be downloaded from the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. 

b) Universal Analytics 

Graeser & Partner uses the universal analytics features provided by Google. With these features, Graeser & Partner can record and analyse socio-demographic information about users through a Google ID (if available) and Google-generated advertising cookies (DoubleClick). If a Google ID is available, the data controller will also record that data across all devices (for example, if users use a smartphone and a PC) to analyse traffic across all devices. 
Users can prevent Google from recording and storing data at any time by installing a Google-issued browser plug-in that can be downloaded from the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB. 

c) Google Remarketing and Retargeting 

Graeser & Partner uses the Google Analytics advertising features. These allow users who have already visited the site and have shown an interest in certain products to be addressed via targeted advertising on the websites of Google partner networks. Advertising is indicated by the use of cookies that analyse user behaviour during a visit to the website and send targeted product recommendations and advertising based on users' interests. 
Users can block Google Remarketing and disable Google's use of cookies for these purposes by accessing the DoubleClick opt-out page. Alternatively, users may disable the use of cookies by third parties by accessing the deactivation page of the Network Advertising Initiative. 
Google also offers users the ability to manage their own cookies for advertising parameters: https://tools.google.com/dlpage/gaoptout?hl=en-GB. 

d) Facebook Remarketing and Retargeting 

Graeser & Partner uses remarketing technology for advertising on Facebook. With this technology, users who have already visited the website and are interested in a product or service are addressed by targeted advertising on Facebook in the form of displayed ads. Advertising is realised through the use of cookies via the service provider AdRoll (AdRoll EMEA, Level 6; 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland). 
Users can disable targeted advertising via Facebook remarketing technology by disabling the use of third-party cookies on the Facebook Advertising Initiative deactivation page at the following link: http://optout.networkadvertising.org/. 

This web site does not use profiling cookies. 

Social Media Plug-Ins 

This website uses social media plug-ins offered the by major social networks (e.g. Facebook and Twitter). When you visit the website, browser data can be transferred directly to the respective social networks, even without direct user interaction. Users acknowledge and agree that the operation of social networking plug-ins is managed directly by the company offering the respective plug-in. When users use the plug-ins via the website (e.g. log in with their access data to a social network or link their accounts), they click on the respective button (such as Facebook's "Like" or "Share" buttons) and connect with the server of this social network, which then sends the content of the plug-in directly to the user's browser. 

Graeser & Partner may therefore, in accordance with the terms of use and the privacy policy of the respective social network, receive data relating to users and may add data about users' personal data already collected through their own services. If the user decides to share information with the social networks, he/she also shares data with Graeser & Partner about, for example, his/her preferences. To prevent the social networks from collecting the user's personal information, please check the relevant terms on the social networks' websites. 

In particular, the website uses: 

a) Facebook 

This website uses Facebook social plug-ins operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). If users access the Graeser & Partner pages via Facebook or vice versa, the user's browser will create a direct link to Facebook servers. 

If the user is logged on to Facebook, Facebook can assign the user's visit to his or her Facebook account. When the user interacts with the plugins, for example by clicking on the "Like" button or posting a comment, the respective information is transferred directly from the user's browser to Facebook and stored there. The purpose and scope of the processing of data by Facebook, in addition to the respective user rights and settings options for the protection of their privacy, can be found in the Facebook Data Policy (https://www.facebook.com/about/privacy/). 

b) Google "+1" 

The Website uses the +1 interface of the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). When the user presses the +1 button, the user's browser will connect directly to Google servers. The content of the +1 interface is transmitted directly from Google to the user's browser and is integrated into the website from there. The purpose and scope of the processing of data by Google, in addition to the respective user rights and settings options for the protection of their privacy, can be found in the +1 Buttons Policy (https://developers.google.com/+/web/buttons-policy). 

c) Twitter 

The website uses the features of the Twitter microblogging service offered by Twitter, Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA. By using the Twitter features, the websites visited by the user are linked to their Twitter account and made known to other users. During this process, data is also transferred to Twitter. 

Graeser & Partner has no knowledge of the nature, content and extent of the transferred data. The user him/herself can change his/her privacy settings on Twitter in her account settings. See the Twitter Privacy Policy for more information. 

To prevent the providers of the respective social media plug-ins from gathering information about users, the latter can log out of the social-media network at the beginning of their visit to the website and delete any possible cookie from their browser. 

Rights of the data subject 

You are entitled to receive information about the processing of your personally identifiable data (for example the origin of this data, the purpose of the processing, the modalities of data processing). Furthermore, you are entitled at any time to object to the processing of data for the future, to restrict it, or to demand the deletion of the data. Finally, you can prevent the sending of promotional material or the execution of market research or commercial communications at any time. 

To summarise, you have a right to: 

● information 
● rectification 
● deletion (or to be forgotten) 
● limitation of data processing 
● data transferability 
● object to the processing of your personally identifiable data 
● complain to supervisory authorities 

To exercise the above rights and request information, users can write to the following e-mail address contact@graeserimmobilien.com or the postal address Graeser & Partner, Avenida de Tirajana, 19- Local 10, E-35100 Playa del Inglés, Gran Canaria, Spain. In the same way, users can revoke, correct and delete their data at any time. 

Contacts 

The responsible body for data processing is Graeser & Partner, Gran Canaria, Spain. If you have any questions about our data processors, we will be happy to provide you with an up-to-date list of them. 

If you have any questions about this privacy policy and about data protection, please contact Graeser & Partner: 

GRAESER & PARTNER
Gran Canaria, Spain
Tel.: +34 928 77 86 23
Fax.: +34 928 77 43 44

If you have a complaint about the way we process your information, you can lodge a complaint with the regulator.