Laubenganghaeuser EN

Find an apartment

Data protection

  1. Duty to provide information about data processing on this website pursuant to Art. 13 GDPR
    General information

    The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data which can be used to identify you personally.

    Name and contact details of the data controller

    The data controller responsible for data processing is

    Wohnungsgenossenschaft Dessau eG
    Wolfgangstrasse 30
    06844 Dessau-Roßlau

    Email contact details can be found in the imprint.

    Contact details of the data protection officer

    If you have any questions regarding the processing of your data, you can contact our data protection officer, who will be happy to assist you in the event of requests for information, suggestions or complaints.

    Data protection officer for the

    Wohnungsgenossenschaft Dessau eG

    Ralf Müller
    Wolfgangstrasse 30

    06844 Dessau-Roßlau

    datenschutz@wg-dessau.de

    Purposes and legal basis of data processing

    When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

    We would like to point out that data transmission over the Internet (e.g. when communicating by email) can be subject to security breaches. It is not possible to protect data completely from being accessed by third parties.

    Your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.

    Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of viewing the page). This data is collected automatically as soon as you visit our website.

    Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

    Analysis tools and tools from third-party providers

    When you visit our website, your surfing behaviour can be statistically evaluated. This is mainly done using cookies and so-called analysis programmes. Surfing behaviour is generally analysed in an anonymous manner; your surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. For details, please refer to our privacy policy under the heading “Third-party modules and analysis tools”.

    Processing on the basis of legitimate interest

    We process data within the scope of a legitimate interest in accordance with Article 6 (1) (f) GDPR for the purpose of ensuring the system security of the website and improving the website in terms of structure and content.

    Enquiries from third parties to protect the legitimate interest of a third party will be answered by Wohnungsgenossenschaft Dessau eG if the third party declares the existence of a legitimate interest and confirms that no interests of the data subject worthy of protection conflict with this transfer.

    Data recipients

    The processed data is made available to recipients exclusively for a specific purpose in accordance with the principle of minimisation:

    Employees of Wohnungsgenossenschaft Dessau eG who are responsible for implementing the website.
    IT service provider for the operation and maintenance of the website
    Note on data transfer to the USA and other third countries

    Among other things, we use tools from companies based in the USA or other third countries that are not considered secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that these countries do not guarantee a level of data protection comparable to that provided in the EU. For example, US companies are obliged to hand over personal data to security services without you as the data subject being able to take legal action against this. Therefore it cannot be ruled out that US authorities (e.g. secret services) may process, analyse and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

    Duration of data storage

    Log data from website use is stored on our server for a maximum of 90 days. See also the section “Third-party modules and analysis tools”.

    Rights of the data subject

    Every data subject has non-alienable rights under

    Article 15 GDPR (Right to information about data processing)
    Article 16 GDPR (Right to rectification of data)
    Article 17 GDPR Right to erasure (“right to be forgotten”)
    Article 18 GDPR (Right to restriction of processing)
    Article 20 GDPR (Right to data portability)
    Article 77 GDPR in conjunction with. § Section 19 BDSG (Right to lodge a complaint with the competent supervisory authority)
    These rights, as well as the right to object mentioned below, can generally be asserted in text form, directly to the data controller or by contacting the data protection officer.

    Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

    IF THE DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR).

    IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

    Revocation of consent

    Consent given for the processing of data can be revoked at any time with effect for the future. This does not affect the lawfulness of data processing carried out prior to the revocation.

    Right of appeal

    Every data subject has the right to lodge a complaint with the data protection officer of Wohnungsgenossenschaft Dessau eG regarding data processing. The data protection officer must maintain confidentiality vis-à-vis Wohnungsgenossenschaft Dessau eG regarding the identity of the complainant.

    In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.ob-m.de/infos/aufsichtsbehoerden-der-bundeslaender.

    Necessity of the data processing

    The provision of personal data is only required for the conclusion or initiation of a contract. If data is not clearly labelled as voluntary and the processing is not based on consent, the intended service cannot be provided by Wohnungsgenossenschaft Dessau eG if data processing is refused.

    All data marked as voluntary can be left blank without affecting the fulfilment of the contract. There is no automated decision-making, including profiling.

    Processing for another purpose

    Further processing for another purpose, beyond the fulfilment of the contract, takes place exclusively for the fulfilment of legal storage and retention obligations.

    SSL or TLS encryption

    This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://” to "https://” and by the lock symbol in your browser bar.

    If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

    Third-party modules and analysis tools
    Cookies

    Our Internet pages use so-called “cookies”. Cookies are small data packets. They do not cause any damage to your end device. They are stored on your end device, either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

    Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

    Cookies have various functions. Many cookies are technically necessary, as certain website features would not work without them (e.g. the shopping basket feature or video playback). Other cookies can be used to evaluate user behaviour or for advertising purposes.

    Cookies that are required to carry out the electronic communication process, to provide certain features that you have requested (e.g. for the shopping basket feature) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storaging essential cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG); consent can be revoked at any time.

    You can adjust your browser settings to inform you about the setting of cookies and only allow cookies in individual cases, to exclude the acceptance of cookies in certain cases or in general, and to automatically delete cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

    You can find out which cookies and services are used on this website in this privacy policy.

    Contact form

    If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

    This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested.

    We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

    Enquiry by email, telephone or fax

    If you contact us by email, telephone or fax, your enquiry including all personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

    This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.

    We will retain the data you provide via contact requests until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

    Google Tag Manager

    We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

    Google Tag Manager is a tool that we can use to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, nor does it store any cookies nor carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

    We use Google Tag Manager on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in integrating and managing various tools on its website, quickly and conveniently. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

    The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider under the following link:

    https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

    Google Analytics

    This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

    Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is assigned to the user's respective end device. There is no assignment to a user ID.

    Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

    The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.

    Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

    The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

    IP anonymisation

    We have activated the IP anonymisation feature on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

    Browser plug-in

    You can prevent Google from collecting and processing your data by Google by downloading and installing the browser plug-in available at the following link:

    https://tools.google.com/dlpage/gaoptout?hl=de.

    YouTube

    This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

    When you visit one of our websites on which YouTube is integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

    YouTube may also store various cookies on your device or use comparable technologies to recognise you (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts.

    If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

    The use of YouTube is in the interest of presenting our online offers in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

    Further information on the handling of user data can be found in YouTube's privacy policy at https://policies.google.com/privacy?hl=de.

    The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

    Google Fonts (local hosting)

    This site uses so-called Google Fonts, which are provided by Google, for the standardised display of fonts. Google Fonts are installed locally. No connection is established with Google servers.

    Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

    Google Maps

    This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

    To use Google Maps features, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Fonts for the purpose of representing fonts in a uniform manner. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

    The use of Google Maps is in the interest of presenting our online offers in an appealing way and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

    Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

    You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de.

    The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

    OpenStreetMap

    We use the OpenStreetMap (OSM) map service.

    We host OpenStreetMap on the server of the following provider:

    Alfahosting GmbH
    Edmund-von-Lippmann-Straße 13-15

    06112 Halle (Saale)

    The use of OpenStreetMap is in the interest of an presenting our online offers in an appealing way and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If the corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

    This privacy policy also applies to the social media sites

    https://www.instagram.com/wgdessau/

    https://www.facebook.com/wgdessau.de

    https://www.tiktok.com/@wgdessau

    https://www.youtube.com/channel/UCqMuDrqM2fm6gNL6_Oy1jiQ

    Information obligations pursuant to Article 13 GDPR for our customers
    Information obligations pursuant to Article 13 GDPR tenants
    Information obligations pursuant to Article 13 GDPR members
    Information obligations pursuant to Article 14 GDPR Schufa (credit protection agency)