Privacy information for users of our website

We take the protection of your personal data very seriously. We collect, process and use data about you in accordance with the provisions of the applicable data protection legislation, particularly the European Union’s General Data Protection Regulation. This notice describes the personal data we collect and the purpose for which it is collected, and explains how we ensure it is protected. Personal data is information relating to an identified or identifiable person. It includes, in particular, all information that allows you to be identified, such as your name, telephone number, address or email address. Statistical data such as that collected during a visit to our website, for example, that cannot be attributed to you as an individual, is not personal data. The controller responsible for data processing is Hypoport SE, Heidestraße 8, 10557 Berlin, Germany.

You can contact the data protection officer of Hypoport SE at datenschutz@hypoport.de.

1. Data processing on the website
2. a) Information purposes when visiting the website

Every time you use our website, we collect access data that is sent to us automatically by your browser. This facilitates your use of the website. The access information includes, in particular:

• IP address of the requesting device
• Date and time of the request
• Address of the requesting and requested website
• Information about the browser and operating system used
• Online identification data (e.g. device ID, session ID)

The processing of this data is necessary to enable you to visit the website and to guarantee the  functionality and security of our systems. The access data is also saved in temporary log files for the purposes described above to enable the collection of statistical data about the use of our website so that we can improve our website in accordance with how it is used by our visitors (e.g. if the proportion of visits from mobile devices increases) and so that we can carry out general administrative tasks. The legal basis for this data processing is Art. 6 (1) lit. f GDPR, based on our legitimate interest in optimising our website.

The information stored in the log files does not allow you to be identified directly. After seven days, IP addresses are stored only in a shortened, anonymised form. The log files are stored for 30 days and then anonymised and archived.

1. b) Newsletter

You have the option to subscribe to our newsletter which we send out periodically to keep you informed of news about our services.

We use the so-called ‚double opt-in‘ method for this. After you have registered, we send you a notification email containing a link to click on to confirm that you are the owner of the email address. Only once this has been confirmed will we send you newsletters by email. If you confirm your email address, we save the email address, the time and date of the registration and the IP address used to register. We keep this information until you unsubscribe. The sole purpose of storing this information is to send you the newsletter and be able to prove that you opted to subscribe. You can unsubscribe from the newsletter at any time. Every newsletter contains an Unsubscribe link  Alternatively you can of course send us an email or a letter at any time using the contact details provided above or in the newsletter. The legal basis for processing this information is your consent, pursuant to Art. 6 (1) sentence 1 (a) GDPR.

In our newsletter we use standard, commercially available technologies to measure interaction with the newsletter (e.g. opening of the email, links clicked on). We use this data in pseudonymised form for general statistical analysis and to optimise and enhance our content and customer communications. This is done using small graphics that are embedded in the newsletters (‚pixels‘). This data is collected solely in pseudonymised form, and the data collected is not linked to other personal data about you. The legal basis for this is our aforementioned legitimate interest pursuant to Art. 6 (1) sentence 1 (f) GDPR. We want to better understand what interests our readers and to share information with our customers that is as relevant as possible to them. If you would prefer us not to analyse your usage behaviour, you can unsubscribe from the newsletter or deactivate graphics in your email program as the default setting. We want to better understand what interests our readers and to share information with our customers that is as relevant as possible to them.

You can unsubscribe from the newsletter at any time, for example by clicking on the unsubscribe link included at the end of every newsletter. Alternatively you can contact us at any time using the contact details provided above.

2. Cookies and web analysis

Some of our services require the use of cookies in order to function correctly. A cookie is a small text file that is placed on your device by the browser. Cookies are not used to run programs or spread viruses. The main purpose of our own cookies is to personalise our offering for you and to enable you to use our services as efficiently as possible.

We use our cookies in particular

• to smooth out the flow of traffic to our site
• to remember that we have shown you certain information on our website – so that this same information is not shown to you again the next time you visit the site
• to temporarily save information you have entered on our website to save you having to enter it again if you reload the page.

Our aim is to enhance and personalise your experience of our website. These services are based on our aforementioned legitimate interest; the legal basis is therefore Art. 6 (1) sentence 1 (f) GDPR.

You can prevent cookies from being stored on your device by disabling the acceptance of cookies in your browser settings. If you do not accept cookies, however, you may find that the functionality of our website is substantially restricted.

We also use cookies and similar technologies (such as web beacons) from partners for analysis and marketing purposes. The legal basis for the data processing described in the following sections is Art. 6 (1) sentence 1 (f) GDPR, based on our legitimate interest in the demand-drive design and continuous optimisation of our website.

1. a) Google Analytics

Our website uses the Google Analytics web analysis service provided by Google LLC, (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‚Google‘). Google Analytics uses cookies that last 14 months to collect your access data when you visit our website. The access data is collated by Google on our behalf in pseudonymous usage profiles and transferred to a Google server in the USA. Your IP address is anonymised before the data is transferred. This means we cannot link any usage profile with a specific user. We cannot therefore use the data produced by Google to identify you or see how you use our website. For the eventuality that data may, by way of exception, be transferred to the USA, Google has joined the EU-US Privacy Shield framework. This means Google has committed to adhere to the European data protection principles and the standards of data protection that apply here, when processing data in the USA.

Google will use the information obtained from the cookies on our behalf to analyse the use of our website, compile reports on website activity and provide other services for us relating to the use of the website and use of the internet.

The processing of the usage data by Google Analytics is based on our legitimate interest in the demand-drive design and optimisation of our website, so the legal basis is Art. 6 (1) sentence 1 (f) GDPR. You can object to the analysis by Google at any time. There are several ways of doing this:

• You can adjust your browser settings so that cookies from Google Analytics are blocked.
• You can adjust your ad settings at Google .
• You can set an opt-out cookie by clicking here: opt out of Google Analytics
• You can install the opt-out browser add-on provided by Google in your Firefox, Internet Explorer or Chrome browser via the following link (this variant does not work on mobile devices): browser add-on link

For further information on Google Analytics, please refer to Google’s privacy notice.

1. b) Google Maps

We use Google Maps on our website to show addresses in visual form. Google Maps is a map service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‚Google‘). In order for the Google maps we use to be displayed in your browser, your browser must accept a link to a Google server, which may be in the USA, when you access our website. For the eventuality that data may be transferred to the USA, Google has joined the EU-US Privacy Shield framework. When you visit our site, Google is informed that our website has been accessed from the IP address of your terminal device. The legal basis for this data processing is Art. 6 (1) sentence 1 (f) GDPR, based on our legitimate interest in providing a map service on our website.

If you access the Google maps service on our website while you are logged into your Google profile, Google may link this event to your Google profile. If you do not wish this information to be attributed to your Google profile, you need to log out of Google before accessing our website. Google stores your data and uses it for the purpose of advertising, market research and personalising your experience of Google Maps. You can inform Google of your objection to this collection of data at any time. For further information, please refer to Google’s privacy policy  and the Google Maps/Google Earth Additional Terms of Service.

1. c) YouTube

Our website features videos that are stored on YouTube and can be played directly on our website. YouTube is a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‚Google‘). When you visit the pages on which YouTube videos have been integrated, Google is informed that you have accessed the relevant page on our website. This happens irrespective of whether or not you are logged into Google or your YouTube account. If you are logged in, the information about the video played will be attributed directly to your Google account and your YouTube account. If you do not wish this information to be provided, you must log out of your account before playing the video. Google stores your data and may use it for the purposes of advertising, market research and the demand-driven design of its own websites. This information is analysed even if you are not logged in. You can configure your browser as described above so that it refuses to accept cookies, or you can prevent the collection of the data generated by the cookies relating to your use of this website, and the processing of this data by Google, by going to the Google ad settings and deactivating the ‚Ads personalization across the web‘ option. If this setting is deactivated, Google will only show you general advertising, including when you use YouTube, not ads that have been personalised based on information collected about you.

If Google also processes your data in the USA, it guarantees compliance with European data protection principles through its certification under the EU-US Privacy Shield framework. The legal basis for the integration of YouTube and the associated data processing is Art. 6 (1) sentence 1 (f) GDPR, based on our legitimate interest in integrating video and image content into our website to make it more appealing.

1. d) Twitter

Twitter functions are integrated into our website. These functions are provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. If you use Twitter and the ‚re-tweet‘ function, the websites you have visited will be linked to your Twitter account and shared with other users. This also involves transferring data to Twitter.

We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transferred or the way in which Twitter uses this data. For further information please refer to Twitter’s privacy policy at twitter.com/privacy. You can change your data protection settings at Twitter in your account settings at twitter.com/account/settings.

3. Links to other websites and online services

Our website may also contain links to the websites and online services of other providers who are not affiliated with us. If you click on these links, we have no control over the data such providers collect about you. For precise information about collection and use of data, please see the privacy policy of the provider in question. As the collection and processing of data by third parties is beyond our control, we are unable to accept any responsibility in this regard.

4. Social media

Twitter feed and follow plugin

Functions provided by Twitter are integrated into our website. These functions are provided by Twitter Inc., 1355 Market Street., Suite 900, San Francisco, CA 94103, USA. If you use Twitter and the ‚re-tweet‘ function, the websites you have visited will be linked to your Twitter account and shared with other users. This also involves transferring data to Twitter. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transferred or the way in which Twitter uses this data. For further information, please refer to Twitter’s privacy policy at https://twitter.com/en/privacy.

You can change your data protection settings at Twitter in your account settings at https://twitter.com/settings/personalization and https://twitter.com/settings/your_twitter_data.

1. a) Use of YouTube videos

Our website features videos that are stored on YouTube and can be played directly on our website. YouTube is a multimedia service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (‚YouTube‘), a Group company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‚Google‘). For the eventuality that personal data may be transferred to the USA, Google and its subsidiary YouTube have joined the EU-US Privacy Shield framework. The legal basis is Art. 6 (1) sentence 1 (f) GDPR, based on our legitimate interest in integrating video and image content.

When you visit our website, YouTube and Google are informed that you have accessed the relevant page on our website. This happens irrespective of whether or not you are logged into your YouTube or Google account. YouTube and Google store your data and may use it for the purposes of advertising, market research and the demand-driven design of their own websites. If you access YouTube on our website while you are logged into your YouTube or Google profile, YouTube and Google may link this event to your profile . If you do not wish this information to be attributed to your Google profile, you need to log out of Google before accessing our website.

You can configure your browser as described above so that it rejects cookies, or you can prevent the collection of the data generated by the cookies relating to your use of this website, and the processing of this data by Google, by going to the Google ad settings and deactivating the ‚Ads personalization across the web‘ option. Google will then only show you non-personalised ads.

For further information, including about YouTube, please refer to Google’s privacy notice.

5. Social media functions

Our website features social plugins from various social media providers:

• Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA), Privacy
• Twitter (Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA), Privacy Policy
• Google+ (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Privacy
• LinkedIn (LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, California 94043, USA), Privacy Policy
• Xing (XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany), Your Privacy

Social plugins can be identified by the logos of the individual providers.

If you access an article or a page on our website that contains these social plugins, your browser will establish a direct connection to the servers of the social network in question and load the visible image of the plugin and its underlying functionality from there. If you are already logged into the social network with your user name and password at the time, the social network service will be informed that you have visited our website and can attribute this information to your user account. If you interact with the social plugins, e.g. if you click on the Facebook ‚like‘ button or use the Twitter ‚tweet this‘ function, the content of our page will be linked to your Facebook or Twitter profile.

If you are not a member of the social network in question or if you log out of your account before visiting our website, there is still the possibility that at least your IP address may be transmitted and stored there.

We would point out that the content and scope of the data directly collected by and transmitted to social media services via social plugins, along with the storage period of up to 250 days and the intended use, are determined solely by the provider in question. We have no control over the content of the plugins or the transmission of information. For more information, please see the privacy policies of the respective providers using the links provided above.

The legal basis for the use of such plugins is Art. 6 (1) sentence 1 (f) GDPR, based on our legitimate interest in providing the aforementioned social media functions.

6. Data subject rights
7. a) Your rights

You have the right at any time to request information from us about the processing of your personal data. Upon such request, we will explain the way in which we process your data and provide an overview of the personal data we hold about you.

If the data we hold is incorrect or out of date, you have the right to have this data corrected.

You can also demand the erasure of your data. If, by way of exception, other legal provisions prevent us from erasing your data, the data will be blocked in such a way that it can only be used for the purpose specified by the legal provisions in question.

You can also restrict the processing of your data, e.g. if you believe that the data we hold about you is incorrect. You also have the right to data portability i.e. to request that we send you a digital copy of the personal data that you have provided and that we hold about you.

You can contact us at any time using the contact details provided above to exercise the rights outlined here. This also applies if you would like us to send you copies of guarantees proving we have an appropriate standard of data protection.

You also have the right to object to the processing of your data where such processing is based on Art. 6 (1) sentence 1 (e) or (f) GDPR. Finally, you have the right to complain to the competent data protection regulatory authority. You can exercise this right by contacting a regulatory authority in the EU member state where you live or work, or where the suspected data breach took place. In (…), the competent regulatory authority is:

Right to withdraw consent and right to object

Pursuant to Article 7 (2) GDPR, you have the right to withdraw the consent you have given us at any time. If you do this, it means we will no longer be able to process data on the basis of this consent in future. It does not affect the legality of processing carried out prior to the withdrawal of your consent.

If we process your personal data based on a legitimate interest pursuant to Art.. 6 (1) sentence 1 (f) GDPR, you have the right, under Art. 21 GDPR, to object to the processing of your data for reasons arising from your particular situation or if the objection relates to direct marketing. In the latter case, your right to object is unconditional and we must stop processing your data for this purpose without you having to provide a specific reason.

If you wish to exercise your right to withdraw consent or to object, you can contact us using the contact details provided above.

7. Data security and amendments
8. a) Data security

We implement up-to-date technical measures to ensure that data is kept safe, in particular to protect your personal data against the risks inherent in the transfer of data, and to prevent it from being disclosed to third parties. These measures are regularly updated to ensure they remain state of the art. We secure the personal data you provide via our website using Transport Layer Security (TLS) encryption.

1. b) Amendments to this privacy policy

We may update this privacy policy from time to time, for example if we make changes to our website or in the event of amendments to statutory provisions or other official regulations.

1. c) Contact

If you have questions, complaints, suggestions or concerns about this privacy policy, or require information about the use or disclosure of your personal data, or require the correction, amendment, or erasure of your personal data, or if you wish to revoke your consent to the processing of your personal data, please send an email to: info@hypoport.de.

8. Disclosure of data

We will only disclose the data we have collected if :

• you have explicitly given us consent to do so in accordance with Article 6 (1) sentence 1 (a) GDPR
• disclosure is necessary pursuant to Article 6 (1) sentence 1 (f) GDPR for the enforcement, exercising, or defence of legal claims and there is no reason to assume that your interest in preventing the disclosure of your data overrides our interest
• we are under a statutory obligation to do so under Art. 6 (1) sentence 1 (c) GDPR or
• under Art. 6 (1) sentence 1 (b) GDPR it is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract. This includes, in particular, the transmission of your data to advisors in order that they may advise you on the products of interest.

Some aspects of our data processing may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, these may include, in particular, computer centres that host our website and databases, IT service providers who look after our IT systems, and consultancy firms. If we disclose data to our service providers, they are permitted to use this data solely for the purpose of fulfilling their duties. The service providers have been carefully selected and instructed by us. They are contractually obliged to comply with our instructions, they have implemented the technical and organisational measures necessary to protect the rights of the data subjects, and are periodically checked and inspected by us.

Data may also be disclosed in connection with official requests, court orders and legal proceedings, if such disclosure is necessary for the pursuit or enforcement of legal claims.

Your cookie preferences

Adjust cookie settings

As a visitor to our site, you can view your personal cookie settings at any time using the following Link and adjust them as required.

Cookie Choice History

User-ID