We take the protection of your personal data seriously and observe the provisions established under data protection legislation, particularly those set out in the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This means that we only process your personal data if a statutory provision permits it, if doing so is necessary for executing and managing your application process, if we have a legitimate interest in processing the data, or if you have granted your consent. In this data protection information, we explain which information (including personal data) we process in connection with your application process and which data protection rights you have. Which specific data is processed and in what way will largely depend on how your application process is executed and managed.
I. WHO IS RESPONSIBLE FOR DATA PROCESSING?
Depending on which job opening you are applying for and to which company, the data processing explained below will be carried out by Investa Holding GmbH, Investa Development GmbH, Investa Capital Management GmbH, Investa Asset Management GmbH, Investa Projektentwicklungs- und Verwaltungsgesellschaft mbH or e-shelter security GmbH. You can find more details about these companies in the legal notice. This website is the online corporate presence of the Investa Real Estate group and contains information about individual projects, offerings and services provided by the company concerned.
For data protection requests, please contact
Investa Real Estate Datenschutz-Team
Düsseldorfer Strasse 15
Any requests regarding data subjects – in particular, exercising the rights of data subjects – will be forwarded internally to the controller responsible for the processing in question. The website operators have concluded relevant data protection agreements with one another in order to regulate their joint responsibility.
Data protection officers
Investa Real Estate and the individual companies referred to above have appointed data protection officers. If you have any questions about data protection, you can contact our data protection officer and data protection team at:
Investa Real Estate Datenschutz-Team
– An den Datenschutzbeauftragten –
Düsseldorfer Strasse 15
Data protection requests to e-shelter security services GmbH & Co. KG
e-shelter security services GmbH & Co. KG
Eschborner Landstrasse 100
60489 Frankfurt am Main, Germany
II. WHICH DATA DO WE PROCESS?
In order to execute your application process, we need to process the following personal data:
III. FOR WHAT PURPOSES AND ON WHAT LEGAL BASES DO WE PROCESS YOUR DATA?
Please be aware that:
IV. ARE YOU OBLIGATED TO PROVIDE DATA?
The personal data referred to in II above must be provided so that we can execute and manage your application process, unless otherwise explicitly specified by us when this data is being collected. Without this data we cannot execute your application process. If we collect personal data from you beyond this scope, we will communicate to you whether providing this information is required by law or contract, or is required for your application process. In doing so, we usually identify information that is provided voluntarily and not required to fulfill any of the aforementioned obligations or to conclude a contract.
V. WHO RECEIVES YOUR DATA?
As a rule, your personal data is processed within our company. Only specific departments and organizational units are given access to your personal data, based on the type of personal data concerned. In particular, these include the HR department, your potential supervisor(s) and – in the case of data received via the IT infrastructure – the IT department to a certain extent. We have a roles and authorization concept in place to ensure that access within our company is restricted to the roles and scope necessary for the processing purpose in question. To the extent permitted by law, we may also transfer your personal data to third parties outside our company. These external recipients may include, in particular:
With regard to passing data on to other recipients, we are only permitted to pass on your data if required by law, if you have granted your consent or if we are authorized to do so. Other parties may also receive data if you have granted us your consent to transfer data.
VI. ARE AUTOMATED DECISION-MAKING PROCESSES USED?
As a rule, we do not use any automated decision-making (including profiling) as defined by Article 22 GDPR in order to execute or in the course of the application process. However, if we decide to use processes of this kind in isolated cases, we will notify you separately to the extent required by law.
VII. IS DATA PROCESSED IN COUNTRIES OUTSIDE THE EU/EEA?
Your personal data is processed exclusively within the EU or European Economic Area and is not transferred to other countries (third countries).
VIII. FOR HOW LONG IS YOUR DATA STORED?
The criteria for defining the storage duration are determined on the basis of the purpose and any subsequent statutory retention periods. As a rule, we store your personal data if we have a legitimate interest in doing so and provided that your interests do not outweigh the interests in continuing to store the data. Even without a legitimate interest, we may continue to store data if we are legally required to do so (in order to fulfil retention obligations, for example). We will erase your personal data without your intervention as soon as it is no longer required to fulfil the purpose of processing or storing it would not otherwise be permitted by law. Personal data is normally stored until at least the end of the application process. Data will be erased no later than the point at which the purpose of storing it has been achieved. Where applicable, this may not take place until after the application process is complete. Personal data that we need to store in order to meet retention obligations will be stored until the end of the retention obligation in question. If we store personal data exclusively for the purpose of fulfilling retention obligations, the data will be blocked in a way that ensures it can only be accessed if required for the purpose of the retention obligation. Retention obligations may refer to:
IX. WHAT RIGHTS DO YOU HAVE AS A DATA SUBJECT?
Where the right to access and erasure is concerned, the restrictions apply in accordance with Section 35 BDSG. To exercise these rights, you can contact us at any time using one of contacts stated at the beginning of this data protection information, for example. If you have any questions about how your data is processed, you can also contact our data protection officer.
2. In addition, you are entitled to lodge complaints with the relevant supervisory authority for data protection in accordance with Article 77 GDPR.
ASSERTING DATA SUBJECT RIGHTS
You may assert the data subject rights referred to in IX.1 above in writing by sending physical correspondence to the relevant controller within the Investa Real Estate group or an email to email@example.com. We recommend sending requests via email. The controller responsible for data processing depends on the job in question and the person to whom you have sent your application. The Investa Real Estate companies, as joint operators of this online presence in the form of this website, have concluded a data protection agreement and implemented policies for handling the rights of data subjects. This ensures that requests from data subjects are answered and attended to promptly and in accordance with statutory provisions.