J&P Immobilienmakler GmbH, Lehargasse 7, 1060 Vienna, email@example.com (“we”, “us”, “data controller”) is committed to ensuring that your personal data is sufficiently protected. We therefore comply with the applicable legislation, particularly the General Data Protection Regulation (“GDPR”), the Austrian Data Protection Act (“DSG”) and the Austrian Telecommunications Act 2021 (“TKG”), with regard to the protection, lawful handling and non-disclosure of personal data and regarding data security. The information below explains which data may be collected, processed and used when you visit and use the website www.jpi.at (“website”):
1. DATA CONTROLLER RESPONSIBLE FOR DATA PROCESSING
The data controller responsible for data processing is J&P Immobilienmakler GmbH, Lehargasse 7, 1060 Vienna, firstname.lastname@example.org.
2. WHAT IS PERSONAL DATA?
Personal data is any information that relates to identified or identifiable natural persons (“data subjects”). This includes your name, IP address or email address.
3. WHAT DATA DO WE COLLECT FROM YOU?
Usage data: When you visit our website, we record the IP address of your device, the Internet browser you are using, the browser language, your operating system, the files requested on our website, your Java settings, screen resolution, colour depth, your clicking behaviour on the website (time of access, clicks) as well as information about the website from which you are visiting us (referrer URL).
Contact with us: When you complete the contact form on our website and send your enquiry, we process the personal data that you have voluntarily provided (name, email address, telephone number and message content).
Social media plugins: Some pages contain buttons from social media networks (e.g. Facebook and Twitter) which you can use to recommend our website to others. These plugins are indicated by symbols (e.g. “Facebook”, “Twitter” and “Pinterest” button). When you click on one of these buttons, the following data may be transmitted to the respective operator of the social network: IP address, browser information and operating system, screen resolution, installed browser plugins, origin of the visitors and URL of the current page. The respective social network may be able to assign your usage behaviour to your personal social media account. For further information, see point 7.
We will only transmit your personal data in connection with the use of social media plugins on the basis of your consent. You may revoke this consent at any time with future effect.
4. HOW DO WE COLLECT YOUR DATA?
The data that arises when you visit our website is collected automatically via cookies (details under point 7). Otherwise, we only collect data on the basis of what you enter on our website.
5. FOR WHAT PURPOSES AND ON WHAT LEGAL BASES DO WE USE YOUR DATA?
Usage data: We use your personal data (i) to improve our services and our website and to improve user-friendliness and (ii) to personalise the services for users of the website by temporarily storing search parameters. The access data that we collect from you when you use the website is only used for statistical evaluations and in aggregated form for the purposes of operating, securing and optimising the website (legitimate prevailing interests in accordance with Art 6 (1) (f) GDPR).
Contact us: We will only use the personal data that you send via the contact form on our website for the purposes of processing your enquiry and thus fulfilling our (pre)contractual obligations (contractual basis in accordance with Art 6 (1) (b) GDPR).
Newsletter: If you have granted your consent, we will use the personal data that you provide when registering for the newsletter (name, telephone number and email address) for the following direct marketing purposes:
When you click on the “Send” button as part of the newsletter registration, you consent to us processing the personal data that you voluntarily provide (name, email address and telephone number) for the purposes of sending (i) newsletters about our current projects (ii) marketing and product information in connection with our services (iii) satisfaction surveys regarding our services and (iv) event invitations via email.
You can revoke this consent at any time by sending an email or clicking the unsubscribe link in the email footer.
If these third-party providers are based outside the EEA, we will only transmit your data to the relevant third country if we have your explicit consent in accordance with Art 49 GDPR.
6. WILL YOUR DATA BE SHARED WITH THIRD PARTIES?
We will share your personal data with the following external service providers (processors) to the extent necessary:
- IT service providers and/or providers of data hosting or data processing solutions or similar services;
- other service providers, providers of tools and software solutions who also support us in providing our services and who act on our behalf (including providers of marketing tools, marketing agencies, communications service providers and call centres).
All of our processors only process your data on our behalf and on the basis of our instructions so that we can provide the services stated above.
In addition, we will transmit your personal data to the following recipients to the extent necessary:
- external third parties to the extent necessary on the basis of our legitimate interests (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of a case, etc.);
- authorities and other public bodies to the extent required by law (e.g. financial authorities, etc.).
7. HOW IS YOUR DATA PROTECTED?
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful deletion, modification, damage or loss as well as unauthorised disclosure or access. Furthermore, we and our employees are obliged to maintain data secrecy.
8.1 Google Analytics
The following information is collected by Google Analytics: browser, device type, device model, country, Internet service provider, screen resolution (on mobile devices), the time spent on the website, language, operating system, pages visited on the website. Google will use this information for the purposes of evaluating your use of the website and compiling reports on website activity for us.
You can object to cookies being placed on your device by adjusting your browser settings or downloading a plugin for this purpose from http://tools.google.com/dlpage/gaoptout.
We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected using Google technologies, it will be shortened by activating IP anonymisation before it is saved on Google’s servers. The full IP address will only be sent to a Google server and shortened there in exceptional cases. Unless otherwise specified for the individual technologies, the data processing takes place on the basis of an agreement concluded for the respective technology between jointly responsible persons in accordance with Art. 26 GDPR. You can find more information about data processing by Google in Google’s data protection information.
Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google on the basis of the Internet Protocol (TCP) when this service is integrated, due to American laws such as the Cloud Act.
As well as using Google Analytics, J&P Immobilien GmbH uses the Leadfeeder service operated by Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland. Leadfeeder accesses the list of IP addresses of website visitors provided by Google Analytics in the analysis and links the list of IP addresses with information about the companies that can be found on the Internet at these IP addresses. Due to the shortening of the IP addresses of the website visitors already carried out when using Google Analytics, a direct personal reference is not established. A personal reference can be presumed by examining the linked company information. Further information about Leadfeeder and the collected data can be found here: www.leadfeeder.com/privacy/; information about Leadfeeder and conformity with the General Data Protection Regulation can be found here: help.leadfeeder.com/faqs-and-troubleshooting/is-leadfeeder-ready-for-gdpr.
For advertising purposes in the Google search results as well as on the websites of third parties, the Google remarketing cookie is set when you visit our website. This automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information as well as information on your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages you visit. Any further data processing will only take place if you have activated the “personalised advertising” setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
For the uniform presentation of the content on our website, data (IP address, time of visit, device and browser information) is collected by the script code “Google Fonts”, transmitted to Google and subsequently processed by Google. We have no influence on this subsequent data processing.
YOUTUBE VIDEO PLUGIN
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and subsequently processed by Google only when you play a video.
8.2 Google Tag Manager
8.3 Google Remarketing
We also use the Google Remarketing targeting technology provided by Google Inc., USA, on our website. This allows us to target Internet users who have visited our website with personalised product recommendations in the form of advertising banners on the websites of the Google partner network. This advertising is displayed on our partners’ websites on the basis of cookies and an analysis of your previous usage behaviour. The analysis is carried out under a pseudonym; no usage profiles are merged with your real name. You may object to the collection of the data by Google Inc. at any time under the following link: http://www.google.com/settings.
8.4 Facebook pixel
USE OF FACEBOOK PIXEL
We use the Facebook pixel as part of the following technologies provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The Facebook pixel is used to automatically collect and store data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as a visit to a website or newsletter registration), from which user profiles are created using pseudonyms. For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables recognition of your browser when visiting other websites by means of a pseudonymous cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activities and to provide other services associated with website use, in particular personalised and group-based advertising.
As part of Facebook Analytics, the statistics created via Facebook pixels about your use of our website enable us to analyse visitor activity on the website. The data processing is based on a data processing agreement with Facebook. The analysis is used to ensure optimal presentation and marketing of our website.
We use Facebook Ads to promote this website on Facebook and other platforms. We determine the parameters of the respective advertising campaign. Facebook is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is based on an arrangement between joint controllers in accordance with Art. 26 GDPR. The joint controllership is limited to the collection of data and its transmission to Facebook Ireland. The subsequent data processing by Facebook Ireland is not covered by this arrangement.
Based on the pseudonymous cookie ID set by the Facebook pixel and the data collected about your usage behaviour on our website, we operate personalised advertising via Facebook pixel remarketing.
Via Facebook pixel conversions we measure your subsequent usage behaviour for web analytics and event tracking purposes if you have reached our website via a Facebook Ads ad. The data processing is based on a data processing agreement with Facebook.
8.5 LinkedIn Insight Tag
This website uses the Insight Tag from LinkedIn. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing by LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about the visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take any other action (conversion measurement). Conversion measurement can also be done across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted advertising to visitors to our website outside of the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data is then deleted within 180 days.
The use of LinkedIn Insight is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; the consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Objection to the use of LinkedIn Insight Tag
You can object to the analysis of usage behaviour and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
Our website uses Hotjar to collect information about the behaviour of our users and about their end devices (e.g. IP address in anonymised form, device type, browser type, preferred language, etc.). Hotjar saves this information in a pseudonymised user profile. The information is not used to identify a user. You can object to the storage of the user profile and the information about your visit to our website and the setting of Hotjar tracking cookies by revoking your consent. You can find more information on this under this link and in Hotjar’s data protection declaration at https://www.hotjar.com/legal/policies/privacy.
8.7 Adform pixel
You can also object to the setting of cookies via an opt-out on this page: https://site.adform.com/de/privacy-center/website/datenschutz-opt-out/
8.8 Teads universal pixel
We use the Teads universal pixel (Teads Schweiz GmbH, Ausstellungsstrasse 50, 1020 Vienna) to track user behaviour. The installed Teads pixel sends a signal every time a user visits our website. Teads can then confirm whether it already knows the user or not. If the user is already known to Teads, they will be excluded from our campaign. If the user is not known to Teads, Teads does nothing, as the pixel only reads out users who already have the Teads cookie on their device and thus have consented to tracking. The sole purpose of this pixel is to analyse whether the Teads cookie has already been installed on the user’s device. If this is the case, the Teads cookie will subsequently identify the Teads user who visited our website and exclude them from our campaign.
8.9 Borlabs Cookies
This website uses Borlabs Cookie, which sets technically necessary cookies (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
The borlabs-cookie cookie stores your consents that you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie from your browser. If you re-enter/reload the website, you will be asked for your cookie consent again.
8.10 WP Immomakler
9. Storage period
We will only store your personal data for as long as is necessary to fulfil our obligations towards you. However, due to the storage obligations that apply to us, we will generally store any personal data that you provide in connection with orders for seven years following fulfilment of the contract.
If you have only registered to receive the newsletter and promotional information as described in point 4 and are not one of our customers, we will store your data until you revoke your consent.
10. What rights do you have?
You have the right to receive clear, transparent and easily understandable information about how we process personal data and about your rights as the data subject (Art 13 ff GDPR):
This means you have the right to be informed about the personal data that we process in relation to you. You also have the right to correction of incorrect data and deletion of your data (“right to be forgotten”). Furthermore, you can revoke your consent to the processing of personal data with future effect if the processing is based on your consent. You may also have the right to restrict the processing of your data, the right to object to processing and the right to receive the data you have provided in a structured, common and machine-readable format (“data portability”).
We will not process your personal data for the purpose of making decisions based solely on automated processing, including profiling, which produce legal effects concerning you (Art 22 GDPR).
You are entitled to lodge a complaint with the data protection officer stated above or with a data protection authority. The data protection authority responsible for us is the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna.
Before lodging a complaint with the data protection authority or if you have any other questions, please contact us:
To enable us to process your enquiry regarding the rights stated above and to ensure that personal data is not disclosed to unauthorised third parties, please identify yourself when sending the enquiry and include a brief description of the extent to which you are exercising the data subject rights listed above.
11. Final provisions
The website contains links to third-party websites. We have no control over the content or data protection practices of these other websites. Please read the privacy policies of any other websites that you visit.
We require some of the personal data stated above in order to provide the website and to fulfil contractual and/or legal obligations to which we are subject. If you refuse to provide personal data that must be processed in order to provide the website or fulfil these obligations, we may not be able to carry out processing for the purposes stated above or provide some of the services mentioned.