With this information we inform you about the processing of your personal data in the context of your contractual relationship (rental or existing contract) with us or Grazer Wechselseitige Versicherung AG and its subsidiaries and about the rights to which you are entitled under the EU General Data Protection Regulation (GDPR).
We collect and process your personal data, which we
for consulting and advertising purposes, for the conclusion and processing of purchase, inventory, brokerage, work or other contracts, for the implementation of real estate projects, for the settlement of claims, for the execution of conservation, repair, maintenance and improvement work.
Processing is carried out for a specific purpose in compliance with the provisions of the GDPR, the Austrian Data Protection Act (DSG) and all other relevant laws.
We are responsible for the processing of your personal data within the meaning of the GDPR:
GRAWE Immo AG
Kaiser-Josef-Platz 1, 8010 Graz
T: +43 (0)316 832339 – 0
E: office@grawe-immo.at / office@grawewohnen.at
If you have any questions about the processing of your data, please contact the data protection officer by post at the above address with the addition “Data Protection Officer” or by e-mail at E: datenschutz@grawe-immo.at
What personal data do we use?
We process the data provided by you in forms (self-disclosure, offers, etc.) and contract texts (rental, brokerage, purchase, work or other contracts) or in general correspondence, data from third parties (employers, real estate agents, etc.) as well as data from public records. This includes, for example, name, date of birth, address, data on payment transactions, rent amount, contract duration, etc.
If a claim occurs, we also determine and process your details about the claim (e.g. date of damage, cause of damage, color photographs). If necessary, this may also include information from third parties who have been commissioned to determine the claim (e.g. experts), who can provide information (authorities, witnesses, etc.) or who are involved in the provision of the service (tradesmen, professionals, etc.). The same applies to the performance of maintenance, repair and improvement work.
We only collect the necessary data, which means that in individual cases it is possible to make do with less than the data described above.
For what purpose and on what legal basis is data collected and used?
a) Contract initiation & advertising purposes (legal basis: Art. 6 para. 1 lit a GDPR)
If you have expressly given your separate, explicit and voluntary consent, we will also process your personal data for advertising purposes. You can revoke your consent at any time.
b) Contract initiation, administration and fulfillment (legal basis: Art. 6 para. 1 lit b GDPR)
If you submit a self-disclosure to us, we need the information you provide in the self-disclosure in order to make a decision on the conclusion of the contract or to assess the risk to be assumed by us in the event of such a decision.
If the rental or tenancy agreement is concluded, we process this data for the purpose of handling the tenancy relationship, e.g. for the purpose of rent invoicing, billing of operating costs, handling claims, maintenance, repair or improvement cases, etc.
If damage occurs or if maintenance, repair and improvement work is carried out, we process additional information on these cases in order to be able to check the scope and amount of our obligations.
The conclusion and execution of purchase, work, rental, inventory, brokerage or other contracts is not possible without the processing of your personal data. If you do not provide us with this data or do not provide it in full, we may not be able to establish the contractual relationship you have requested or assess and fulfill claims arising from this contractual relationship.
c) Processing due to legal obligations (legal basis: Art. 6 para. 1 lit. c GDPR)
We process your personal data to fulfill legal obligations, e.g. to fulfill retention obligations under company and tax law.
d) Processing on the basis of legitimate interests (legal basis: Art. 6 para. 1 lit c GDPR)
The processing of your personal data is carried out to protect our legitimate interests (e.g. you are our tenant/customer or are in our service, etc.): You are our tenant/customer or are in our service, possibly for the purpose of direct advertising, etc.).
To whom do we transfer data?
If it is necessary to achieve the above-mentioned purposes or is required by law, we only transfer the data necessary for the individual case to the recipients involved. Depending on the occasion, these may be the following:
a) (Subsidiaries) companies within the Group structure
We use subsidiaries within the Group to fulfill contracts (property management, handling of damage, maintenance, repair or improvement cases).
b) Professionals
In order to process damage, maintenance, repair or improvement measures, it may be necessary to transfer data to contracted professionals. Only the data required in each individual case will be transmitted.
c) Insurer
In individual cases, it may be necessary to exchange data with insurance companies, e.g. for the settlement of claims (e.g. household insurance). Only the data required in each individual case will be transmitted.
d) Authorities, courts and other third parties
In the context of contract processing or in the event of necessary enforcement of claims arising from the existing contract or rental agreement, we may have to disclose personal data of our contractual partners to authorities or courts at their request and to legal representatives.
When examining a case of damage, maintenance, repair or improvement, we may involve third parties, such as experts or companies commissioned to settle the claim, and transmit personal data to them.
Where is data stored? Is data transferred to recipients in third countries?
The data processed as part of property management is stored in our internal data center in Graz.
If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place.
How long is data stored?
In principle, we store your data for the duration of our contractual relationship. In addition, we are subject to statutory retention obligations, according to which we must retain data about you, third parties, cases of damage, maintenance, repair or improvement and your contractual relationship beyond the end of the contractual relationship. Corresponding verification and retention obligations arise, among other things, from the Austrian Commercial Code and the Federal Fiscal Code.
We also store your data for as long as it is possible to assert legal claims arising from our contractual relationship with you. The general statutory limitation periods are between 3 and 30 years.
What rights do you have as a data subject under data protection law?
As a data subject, you have the following rights vis-à-vis the controller with regard to the data stored about you in accordance with Art. 15 to 22 GDPR:
If the processing is based on consent, you as the data subject have the right to withdraw your consent at any time. As a result, we may no longer process your data unless there is another reason for lawful processing. Such a withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
The persons concerned must identify themselves and contribute to the identification to ensure that the response is actually addressed to the person concerned.
You have the right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority if you believe that your personal data is being processed unlawfully.