Contact | Privacy Policy
Privacy Policy for Business Partners
With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under the General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR").
This Privacy Policy applies to personal data of (i) persons with whom we enter into contractual or business relationships, as well as (ii) e.g. shareholders, executive bodies, managing directors, key account managers or other employees of our contractual or business partners, which we process in the context of existing or prospective contractual and business relationships. This includes in particular
- Tenants (including prospective tenants);
- Buyers and sellers (including prospective buyers and sellers);
- existing or potential suppliers, service providers or consultants;
- existing or potential cooperation partners or other partner companies;
- existing or potential investors;
media companies; - affiliated companies.
1 Data Controller and Data Protection Officer
Becken Holding GmbH, Esplanade 41, 20354 Hamburg, is responsible for the data processing described in this Privacy Policy.
You can contact our Data Protection Officer at datenschutzbeauftragter@becken.de.
2 Personal Data and Its Source
We primarily process personal data that data subjects themselves provide to us in the context of contractual and business relationships (such as prospective tenants or buyers) or that we receive from the respective contractual and business partners, for example when processing an inquiry. Furthermore, we may also receive your data from one of our affiliated companies, in particular Becken Development GmbH and Becken Asset Management GmbH. In addition, we process personal data that we collect from publicly accessible sources (such as commercial and association registers, the press, and the internet) or receive from third parties (e.g., credit bureaus, brokers, and other intermediaries). We will provide a separate notice regarding the collection of personal data from third-party sources.
Relevant personal data includes in particular personal details (e.g. surname, first name, address, bank details, billing address, tax number/USt ID) and other contact details (e.g. telephone number, e-mail address). In addition, this may also include contract or order data (e.g. sales data, volumes, planned quantities, data on the respective rental or purchase object), data from the fulfillment of our contractual obligations, information about your financial situation (e.g. creditworthiness data), data on your personal situation (e.g. business interests, profession, industry, marital status) and other data comparable to the categories mentioned.
The scope of the data processed about a person varies depending on the function in which he or she appears to us, such as the position he or she holds with the respective business partner.
3 Legal bases and purposes of processing
We process personal data for the following purposes on the basis of the following legal bases:
3.1 In individual cases, we process data because you have expressly consented to this (Art. 6 para. 1 lit. a GDPR), for example in the receipt of advertising by electronic mail and/or telephone;
3.2 The processing is carried out for the performance of contracts concluded with you or the respective companies or for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR); this includes in particular:
rental contracts (e.g. processing of rental inquiries, viewing of prospective tenants, preparation and conclusion of contractual documents, billing and processing of rental payments, operating cost accounting, apartment management/building management, letterboxes, doorbell signs and parking spaces, issuing and documentation of keys, transponders, etc., processing of repair orders and similar matters, sending information letters, operation of access and surveillance systems);
Purchase agreements (e.g., processing purchase and sale inquiries, including, where applicable, forwarding them to the relevant project company or financing partner; reviewing properties for purchase and sale; authenticating contracting parties; preparing and finalizing contract documents; executing purchases and sales; accounting for and settling purchase price payments; financing planning);
Brokerage and other intermediary agreements (e.g., processing and reviewing brokerage offers; authenticating contracting parties; preparing and finalizing contract documents; processing commission payments; sending informational letters);
Investment, construction financing, and other cooperation agreements (e.g., processing and reviewing relevant offers; authenticating contracting parties; preparing and finalizing contract documents; financing planning; processing payments; sending informational letters);
Service and work contracts as well as other contractual relationships (e.g., processing and reviewing relevant offers and inquiries; authenticating contractual partners, preparing and finalizing contract documents, processing payments; sending informational letters);
3.3 Due to legal requirements (Art. 6 para. 1 lit. c GDPR): for example, to fulfill tax and other legal control and reporting obligations, as well as audits by tax or other authorities and to comply with legal retention periods;
3.4 We also process your data to protect our legitimate interests or those of third parties (Art. 6 para. 1 lit. f GDPR); in particular for the following purposes:
Providing optimal customer support and relationship management, including for the employees of our business partners;
Optimizing our business processes, for example by maintaining a database of suppliers or prospective buyers, including as part of a “customer relationship management system”;
Centralizing or outsourcing corporate functions;
Mitigation of default risks in our business processes through consultation with credit reporting agencies (such as Creditreform, Bürgel) as well as the determination of credit scores (profiling), which assist us in assessing, based on a recognized mathematical-statistical method, the likelihood that contractual partners will fulfill their payment obligations in accordance with the contract;
Assertion and defense of legal claims;
Measures to ensure operational, building, and facility security and for business management;
Cooperation with media companies;
Market research purposes.
4 Disclosure of personal data
Under certain circumstances (in addition to the cases already mentioned above), your personal data may be disclosed for the above-mentioned purposes; in detail:
4.1 If it is necessary to clarify or prosecute illegal or abusive incidents, personal data will be forwarded to our legal advisors, the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. Data may also be passed on if this serves to enforce contractual regulations between us and our contractual and business partners.
4.2 We are also legally obliged to provide information to certain public authorities on request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines and the tax authorities.
4.3 If it is necessary for the processing of your request or the conclusion or execution of a contractual or business relationship with you, as well as in the case of centralized or outsourced corporate functions, your data may be passed on to companies affiliated with us for the fulfillment of the above-mentioned purposes.
4.4 Occasionally, in order to fulfill the purposes described in this Privacy Policy or to provide our services, we may rely on contractually affiliated third-party companies or other cooperation partners and external service providers based outside the EU or the EEA, such as brokers, logistics companies, IT service providers, business consultants and financial institutions. In such cases, information is passed on to these companies or individuals to enable further processing. Insofar as these are entities outside the EU or the EEA, we ensure an appropriate level of data protection, for example by concluding corresponding contracts or certifications with the respective data controller.
4.5 As part of the further development of our business, the structure of our company may change by changing its legal form, founding, buying or selling subsidiaries, parts of the company or components. In such transactions, customer information is passed on together with the part of the company to be transferred. Whenever personal data is passed on to third parties to the extent described above, we ensure that this is done in accordance with this data protection declaration and the relevant data protection laws.
5 Duration of Processing
We process and store your personal data for as long as necessary to fulfill the purposes and legal obligations described above: We generally retain master and contact data indefinitely or until the respective business relationship is definitively terminated. We delete transaction-related information (such as that pertaining to a specific contractual or order relationship) upon completion of the respective transaction, e.g., the end of a lease, with a retention period of three years following the end of the respective calendar year, unless such data is subject to statutory retention obligations (such as the six- or ten-year retention period pursuant to Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code); in such a case, the data in question will be blocked for any further processing.
6 Right of access / other data subject rights (Articles 15–22 of the GDPR)
You have the right to obtain information about the personal data stored about you at any time. Provided the relevant conditions are met, you may also be entitled to the following rights:
Right to Rectification: You have the right to have inaccurate personal data concerning you corrected.
Right to Erasure: You may also request the erasure of your personal data, for example, if your data is no longer necessary for the purposes for which it was collected or otherwise processed.
Right to restriction of processing: You also have the right to request the restriction of the processing of your personal data; in such a case, the data will be blocked from any further processing. This right applies in particular if the accuracy of the personal data is disputed between you and us.
Right to data portability: If we process your personal data to fulfill a contract with you or based on your consent, you also have the right to receive your personal data in a structured, commonly used, and machine-readable format, provided that and to the extent that you have provided the data to us.
Right to Withdraw Consent: If you have given us consent to process your personal data, you may withdraw this consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
In addition, you can object to data processing for reasons arising from your particular situation. However, this only applies in cases in which we process data to fulfill a legitimate interest of Becken Holding GmbH or a third party. If you can present such a reason and we cannot assert a compelling interest worthy of protection in further processing, we will no longer process this data for the respective purpose.
If you would like information about the data stored about you, would like to assert your other rights or have questions about data protection with us, you can contact us using the contact details above. When exercising your rights in accordance with Art. 15 to 22 GDPR, we process the personal data you provide for the purpose of implementing these rights and to be able to provide proof of this. This processing is based on the legal basis of Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and § 34 para. 2 BDSG. After finally answering your request, we will delete your request after a period of three years after the end of the respective calendar year.
You also have the right to lodge a complaint with a supervisory authority at any time, in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection regulations.
7 Changes to this Privacy Policy
The current version of this Privacy Policy is always available at https://www.becken-hamburg.de/datenschutz-gp.
Status: January 6, 2023