Security
Data protection information
(Date: 07.01.2019)
This data protection information informs you about processing of your personal data (hereinafter: "You,", "Your", "Interested Parties", "Tenant", "Sub-Tenant" or "Purchaser") when you visit and use this website, in the preparation and conclusion of a contract with us, when purchasing our services and within the framework of marketing measures by Vonovia SE (hereinafter "Vonovia", "We" or "Us") and the companies affiliated to it ("Vonovia Real Estate Group", "We" or "Us") according to the European General Data Protection regulation (hereinafter "GDPR").
1. Scope of application, controllers and definitions
1.1. Scope of application
1. This data protection information applies to the processing of your personal data if you are / become a visitor to our website, interested party, tenant, sub-tenant or purchaser with us and within the framework of our marketing measures. Insofar as you are acting as a legal entity in this sense, this data protection information is only applicable with restrictions (the GDPR is only concerned with data of natural entities.). Under certain circumstances, you then ought to inform your employees accordingly.
2. You can access, store and print this data protection information from any website of Vonovia SE and Vonovia Kundenservice GmbH at any time. Other websites (e.g. of Vonovia Immobilien Treuhand GmbH) are not covered by this data protection information and provide their own specific data protection information.
1.2. Controllers
The following are the joint controllers for the processing of your data
1. for parties interested in renting: Vonovia Kundenservice GmbH and Vonovia SE as so-called joint controllers.
2. for tenants, sub-tenants and parties interested in purchasing: Vonovia Kundenservice GmbH, Vonovia SE and the company holding, renting or selling the real property in question as so-called joint controllers (insofar as you are a tenant with us, please refer to your rental contract).
3. Vonovia SE (Universitätsstraße 133, 44803 Bochum) and Vonovia Kundenservice GmbH (Am Silberpalais 1, 47057 Duisburg) are joint contacts for questions. Please address your questions:
- by phone to: +49 234 414 700-000
- by fax to: +49 234 314 888-4414
- by e-mail to: service@vonovia.de
1.3. Group data protection coordinator
Please address your questions to do with data protection to
Ernst & Young Law GmbH
c/o Vonovia SE
Postfach
44784 Bochum
E-Mail: datenschutz@vonovia.de
We expressly point out that contents are not exclusively taken note of by our data protection officer if this e-mail address is used. If you would like to exchange confidential information, we therefore request direct contact or a more detailed description of the matter in hand via this e-mail address to start with.
1.4. Definitions
This data protection information is based on the following terms, which we have defined for easier understanding:
1. The GDPR is the European General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC).
2. The recipient is a natural or legal entity, authority, institution or other agency to whom/which personal data are disclosed, regardless of whether it is a question of a third party or not. Authorities possibly receiving personal data within the framework of a specific examination order according to Union law or the law of the member states shall however not be deemed recipients; processing of these data by the aforementioned authorities is done in harmony with the valid data protection directives according to the purposes of the processing. In connection with the collection of rent, recipients can for example be banks or the post office, via whom we have the rental contract documents sent to you.
3. Joint controllers are two or more controllers within the meaning of Section 1.4.9., who jointly stipulate the purposes and the means of processing personal data. For the processing of the personal data of parties interested in renting, for example, Vonovia Kundenservice GmbH and Vonovia SE jointly stipulate the means and purposes and are thus joint controllers (Section 1.2.1.).
4. You are an interested party if, for example, you inform yourself about Vonovia and our offers and services via our websites, create an account in the online customer portal (available via mein.vonovia.de) and use its functions (for example storage of favourite real properties) and agree inspection appointments with us.
5. You are a purchaser from the time at which you have countersigned the purchase contract for a real property of the Vonovia real estate group with a Notary Public.
6. You are a tenant from the time at which you receive your rental contract back, countersigned by the Vonovia real estate group.
7. Personal data means all information relative to an identified or identifiable natural entity. A natural entity is regarded as identifiable if he/she can be identified directly or indirectly, in particular by means of allocation to an identification such as a name, a code number, location data, an online log-in or to one or more specific feature(s) which are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural entity (Art. 4 no. 1 GDPR). Personal data can for example be name and contact data, user conduct or bank data.
8. You are a (future) sub-tenant if an existing tenant makes an application to us for sub-rental in which you are stated as the sub-tenant.
9. The controller is the natural or legal entity, authority, institution or other agency which decides about the purposes and means of the processing of personal data alone or together with others. If the purposes and means of this processing have been stated by Union law or the law of the member states, the controller or the specific criteria of the appointment can be provided for according to Union law or the law of the member states. Amongst others, Vonovia SE is the controller for the data processing described in this data protection declaration (Section 1.2.).
10. Processing entails the collection, recording, organisation, ordering, storage, adaptation or change, the read-out, the inquiring, the use, the disclosure by transmission, propagation or any other form of provision, comparison or connection, restriction, erasure or destruction of personal data (Art. 4 no. 2 GDPR). For example, processing can be collection and use of your contact data for agreement of an inspection appointment.
11. The Vonovia Real Estate Group entails all the companies affiliated with Vonovia SE according to § 15, German Stock Corporations Act.
2. Purposes, legal bases and, if applicable, categories of data in processing of your personal data
2.1. Processing of your data when you visit our websites
When you access our websites in order to inform yourself about our real estate offers and services without registering in the customer portal, without agreeing an inspection appointment with us or without actively transmitting information to us in any other way (purely informational use), we process your personal data. Your personal data are processed for the following purposes and on the basis of the following legal foundations:
2.1.1. Processing for the purpose of providing the websites and of IT security
1. When you visit our websites, we process your personal data which are technically necessary for us in order to provide our websites to you and to ensure stability and security when you visit our websites. For this purpose, we process the following personal data:
- IP address
- browser user agents
- cookies (Section 2.1.3.)
2. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in providing you with information on our products and services on our websites and in guaranteeing IT security towards you when you visit our websites.
2.1.2. Processing for analysis purposes
1. When you visit our websites, we observe and, under certain circumstances, document how you use our websites, e.g. your surfing conduct on our websites, and the real estate in which you are interested. For this, we process the following personal data:
- IP address
- UU ID
- WEB ID
- cookies (Section 2.1.3.)
2. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interests in carrying out analyses and in improving our internet appearance and our products and services on the basis of these analyses and also due to our legitimate interest in prevention of fraud.
3. For the analysis, we use Google Analytics on our websites, a web analysis service of Google Inc. ("Google"). Google Analytics uses cookies, which enable analysis of the use of our websites. As a rule, the information generated by the cookie about the use of our websites is transmitted to a Google server in the USA and stored there. In the event of activation of IP anonymisation of our websites, the IP address of the visitor to the website is however curtailed beforehand by Google within member states of the European Union or in other contracting states of the European Economic Area Treaty. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and curtailed there. By order of Vonovia, Google will use this information in order to evaluate the use of the websites, to collate reports about the website activities and in order to render further services for Vonovia connected with the use of the websites and the internet.
The IP address transmitted by the user's browser within the framework of Google Analytics is not put together with other data by Google.
You can prevent storage of cookies by a matching setting of your browser software; however, we point out that you will possibly not be able to make use of all the functions of these websites in such a case.
In addition, you can prevent recording of the data generated by the cookie and relative to your use of the websites (incl. your IP address) to Google and processing of these data by Google by downloading and installing the browser plug-in available under the following link:
An opt-out cookie, which prevents future recording of your data when you visit these websites, is set.
Our websites use Google Analytics with the "_anonymizelp()" extension. In this way, IP addresses are processed in a curtailed form; direct reference to a particular individual can be ruled out in this way.
Google Analytics is used in harmony with the preconditions about which the German data protection authorities have come to an agreement with Google.
You will find more information on conditions of use and data protection under:
- https://www.google.de/intl/de/policies/terms/regional.html
- https://www.google.de/intl/de/policies/privacy
Your personal data are transmitted to the USA in connection with the use of Google Analytics. In the case of the USA, the EU Commission has not decided that a suitable level of data protection within the meaning of the GDPR exists; such an adequacy decision (Art. 45 GDPR) does not exist. Google LLC is however subject to the EU-U.S. Privacy Shield. In this way, suitable protection of your personal data has been guaranteed. The complete text of the EU-U.S. Privacy Shield Framework can be accessed under the following link:
2.1.3. Use of cookies
1. When you use our website, cookies are stored on your computer. Cookies are small text files which are assigned to the browser used by you and stored on your hard disk through which certain information goes to the place which sets the cookies. They also contain personal data. Cookies cannot start programmes or transmit viruses to your computer. They serve to make the internet offer more user-friendly and effective all told.
2. For the use of our websites, the cookie information of Vonovia SE and of the enterprises affiliated with Vonovia SE according to § 15 German Stock Corporations Act applies (available under www.vonovia.de/cookie-richtlinien).
2.2. Registration in the online customer portal
1. On our website, you can register in our online customer portal, via which we offer you various services within the framework of your search for real property and within the framework of your rental relationship. Registration and use of our online customer portal require statements of personal data. Mandatory fields have been marked accordingly in the input mask. For registration, we use the so-called "double opt-in method". As soon as you have filled the input mask in, you receive an e-mail from us for your registration with a link. Only if you click on this link and thus confirm your registration is it completed.
2. We process your personal data in order to enable you to produce and to use your account in our online customer portal and on the basis of our legitimate interest in informing you about our real estate offers and services and providing you with specific functions for this (e.g. accessing favourites at your next log-in). These data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) and lit. f) GDPR. If you give voluntary information when registering, you consent to processing of these data by us. Your voluntary data are processed on the basis of your consent within the meaning of Art. 6 subparagraph 1 sentence 1 lit. a) GDPR.
3. Registration in the customer portal with the data marked there as mandatory fields is necessary in advance in order to use the tenants' benefits. The user only has insight and access to our customer benefit sites when these data have been provided. These data have already been recorded in the profile for existing customers or extended interested parties, which means that these users can have direct insight into the site with the benefit offers after logging in to the customer portal and then reach the external website of MIVO mitarbeitervorteile GmbH via the teasers or the link (kundenvorteile.de). After transmission, MIVO mitarbeitervorteile GmbH alone is responsible for processing your personal data, and their data protection provisions apply.
2.3. Processing your profile in the online customer portal
1. After your registration, you can inspect, change and supplement your data in the online customer portal under "My profile". Mandatory inputs have been marked accordingly, In addition, you can also give further, voluntary information.
2. Processing the mandatory information serves to provide our online customer portal and, if applicable, also to initiate, to prepare, to perform and to handle your contract and / or, if applicable, other services of Vonovia and the Vonovia Real Estate Group. Processing and storage of your personal data are on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR. If you give voluntary information, you consent to the processing of these data by us. Your voluntary information is processed by us on the basis on your consent within the meaning of Art. 6 subparagraph 1 sentence 1 lit. a) GDPR.
2.4. Marketing measures in the provision of our real properties (information e-mails)
We carry out marketing measures in the course of the provision of our real properties. As an interested party for our real property, you can, for example, register for our information e-mails. In these e-mails, we inform you about real estate objects and services of the Vonovia Real Estate Group. We process your personal data if you grant us your consent for this within the meaning of Art. 6 subparagraph 1 sentence 1 lit. a) GDPR.
2.5. Agreeing inspection appointments
1. If you are interested in our objects, you can make inspection appointments with us. For this, you can get in touch by phone, by WhatsApp, Telegram, via our chat bot on our website, in writing, via the online customer portal or via our website with the help of the real estate search and make an inspection inquiry. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to agree and to hold an inspection appointment with you.
2. For the use of WhatsApp and Telegram, the data protection information of the messenger service or social network used by you applies. For further details, we make reference to the data protection information in question:
2.6. Interested parties acquired by existing tenants
If an existing tenant terminates his rental contract with us, he may have the possibility of acquiring you as a potential future tenant for the object. If a rental contract is concluded between you and us, the existing tenant who recruits you is given a reward by us if certain preconditions are fulfilled. For this, you can fill in a form together with the existing tenant ("Tenants recruit tenants"). In this context, we process your personal data as an interested party for the purpose of initiating a rental contract with you on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR. Personal data of recruiting existing tenants are processed by us in this context on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in carrying out marketing measures and finding suitable subsequent tenants for our objects.
2.7. Residences with an occupancy right
So-called parties entitled to occupancy (the person who has provided a considerable part of the financing funds in the financing of a building) can propose or name potential tenants (allocated parties) for real estate with an occupancy right. After this, inspections are carried out with these and all the other parties interested in rental. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for initiation and if applicable for conclusion of your rental agreement with us.
Within the framework of new rental and termination, the current or the new tenant's first name and surname and the address of the building in question are notified to the party entitled to occupancy. This applies both to tenants who have been allocated or named by the party entitled to occupancy and also all other tenants of an exempted occupancy residence ("outside tenants"). The data are transmitted on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to a legitimate interest by Vonovia.
2.8. Reservation of an object and conclusion of the rental agreement
1. If one of our properties appeals to you as an inspection, you can reserve it. For this, we produce a reservation record and ask you to submit all the documents necessary for conclusion of the rental contracts with us. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to reserve the object for you and in order to prepare the rental contract with you and to create it with us.
2. When you have signed your reservation record, we carry out a creditworthiness check. This is done via a credit agency (for example infoscore Consumer Data GmbH or Creditreform e.V.). The assessment of your creditworthiness is done on the basis of mathematical-statistical methods, so-called scoring. For this, your personal data necessary for the creditworthiness check are transmitted to the credit agency. We process your personal data for the purpose of the creditworthiness check in order to avoid loss of payments. On the basis of the personal data transmitted, including the address data, a statistical probability of a lost credit and thus your ability to pay is calculated. The credit agency then transmits your score figure to us. In addition, we possibly also use services from address investigation companies in the course of the creditworthiness check in order to examine the address which you have stated. These personal data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the performance of your contract with us and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in avoiding a loss of payment on your part. If the creditworthiness check is positive, we can offer you the object which you have reserved; if it is negative, we possibly check again manually whether the reserved object can be offered to you. If we cannot offer you the object, there is however still the possibility of applying for other Vonovia objects. The implication of the scoring is limited to whether fulfilment of the payment duties for the object which has specifically been reserved is possible. We exclusively use the scoring to protect ourselves against possible losses of payment.
2.9. Performance of the rental contract: processing of personal data of existing tenants
When we countersign your rental contract, you are an existing tenant. Your rental contract plus annexes has been created by us. If you have registered in our customer portal (within the meaning of Section 2.2.), you can inspect and download these documents there. In the course of the performance of your rental contract (for example when paying rent and overheads from the rental contract), we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the performance and handling of your rental contract.
2.10. SEPA direct debit mandate
To settle your rent and your overheads from the rental contract (e.g. heating charges), you can give us a SEPA (Single Euro Payment Area) direct debit mandate and authorise us to collect these payments. You can also give us this authorisation via the online customer portal under "My rental contracts/possibilities of payment" with matching settings. In connection with the settlement of heating costs, we also produce an analysis of consumption. In this, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to perform the rental contract with you and to handle the payment obligations with you which originate in this context.
2.11. Rental management
We are obligated by law to carry out an examination of the rental price. In this, we process our tenants' personal data. Your personal data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR for the examination of whether the rental has been charged in harmony with law and the real property in question has been occupied in harmony with the statutory requirements.
2.12. Certificate from the residence provider and proof of entitlement to accommodation
1. If you conclude a rental contract with us and then move into your residence, we are obliged by law (e.g. § 19, Federal Registration Act) to confirm your move to the registration authorities. For this, we issue you with a certificate from the residence provider for presentation to the registration authorities. We process your personal data in this context.
2. Some of our residences are financed with public funds. If you would like to rent one of these residences, you must prove your entitlement by means of a proof of entitlement to accommodation. Insofar as you apply for and receive a proof of entitlement to accommodation from the responsible residences office, it is forwarded to us. We then fill it in, countersign it and then transmit it back to the responsible residences office (§ 4 subparagraph 6 Residence Binding Act).
3. In this, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR in order to fulfil our legal obligations.
2.13. Repair and damage reports
1. As an existing tenant, you can report repairs via the online customer portal under "My rental contracts/repairs and inquiries", via WhatsApp, via Telegram, via our chat bot on our website or via our service number (Tel.: +49 234 414 700-000). In damage to the object of rent, we record the case in order to take matching repair measures and to report the incident to our insurance companies.
2. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for performance of the rental contract with you, on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR due to our legal obligation to maintain the rental object (§ 535 subparagraph 1 German Civil Code) and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in maintaining and modernising our real property objects and also in handling cases of damage via our insurance companies.
2.14. Handling damage in rental with insurances
1. In a case of damage, we process your personal data for handling and administering the insurances (e.g. building insurance, property insurance). Your data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for performance of the rental contract and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in making and/or asserting legal claims.
2. In a case of damage settled via our third-party liability insurance, you receive a report form from us. In it, you enter, amongst other things, information about the sequence of the damage. The report form is then transmitted to our insurance company. In this, your personal data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to perform the rental contract with you.
2.15. Modernisation at the tenant's request
If you have a modernisation wish, you can contact Vonovia and receive an offer from us, if applicable. In your contact, the production of an offer and performance of the modernisation, we process your personal data. The processing is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the performance of the rental contract with you and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in offering modernisation to our tenants if required.
2.16. Applying for subsidies to building costs with the care insurance fund
You can apply for subsidies to building costs with the care insurance fund for certain construction measures on/in your property. If you entitle us to do this with a declaration of assignment, we apply to the care insurance fund for the subsidy instead of you when the construction measures are carried out. The fund then transfers the subsidy directly to us. In this, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR as a result of your declaration of assignment, with which you entitle us to apply for the subsidy with the care insurance fund.
2.17. Application for sub-lease
1. If you as a tenant would like to sub-lease your property, you can make a matching application to us. We process your personal data and also those of the (future) sub-tenant on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to process your application and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in being able to identify the potential sub-tenant within the framework of our consent for sub-rental.
2. In individual cases (e.g. water damage or to make repairs), it may be necessary for us or any craftsmen commissioned by us to obtain access to the property. For this, we get in touch with you if necessary and ask you to transmit your sub-tenant's contact data to us, In this, we process your personal data and also those of the sub-tenant on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) and c) GDPR in order to fulfil our duties from the rental relationship and to maintain the residence.
3. To the extent that you state your (future) sub-tenant's personal data, you ensure that the sub-tenant has been informed adequately by you about the processing of his data by Vonovia and that you are entitled to state the data.
4. Apart from this, the provisions of this data protection information apply accordingly to sub-tenants insofar as and to the extent that they relate to the tenant.
2.18. Customer service
1. If you have questions on Vonovia, our properties or services, need support in your search for a property, would like to make inspection appointments or have questions on your rental contract as a tenant, you can get in touch with our customer service. You can make your inquiries by phone, by WhatsApp, Telegram, via our chat bot on our website, in writing or via the online customer portal. In this context, we process your personal data depending on the subject matter of your inquiry. If applicable, we also have recourse to personal data which have been stored in our systems within the framework of other data processings (e.g. data which you have provided when making an inspection appointment with us or at the conclusion of a rental contract with us).
2. Depending on the inquiry, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the purpose of initiation, performance or, if applicable, winding up of the contract with you, on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR for fulfilment of our legal obligations towards you and / or on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in replying to your inquiry.
3. Insofar as you transmit health data to us as part of your inquiry, we only process these personal data to the extent that this is necessary to reply to your inquiry and you have granted us express consent for this within the meaning of Art. 6 subparagraph 1 sentence 1 lit. a) GDPR.
4. For the use of WhatsApp and Telegram, the data protection information of the messenger service or social network used by you apply. For further details, we make reference to the data protection information in question:
2.19. Information e-mail about property offers and services to existing tenants
After conclusion of your rental contract with us, we will send you information e-mails about similar property objects and services of the Vonovia real estate group in future to the e-mail address stated by you. We process your data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR, § 7 subparagraph 3 German Unfair Competition Act, due to our legitimate interest in advertising for our products and services.
2.20. Customer surveys
We regularly hold customer surveys by phone in order to measure and improve our customers' satisfaction. If you participate in a customer survey, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in improving our products and services according to your requirements and wishes.
2.21. Online communication
We are represented on various social media channels (currently Facebook, Instagram and Twitter), on which we regularly publish reports and photos in order to inform you about us and also our products and services. On the social media channels, you have the possibility of reacting to our "posts" and of communicating with us. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR, if applicable due to our legitimate interest in replying to your comments / questions / suggestions and advertising for our products and services.
For the use of Facebook, Instagram and Twitter, the data protection information of the social media channel used by you applies. For further details, we make reference to the data protection information in question:
- https://www.facebook.com/privacy/explanation
- https://help.instagram.com/155833707900388
- https://twitter.com/de/privacy
2.22. Cautioning and terminating your rental contract
If you do not or only insufficiently comply with your duties from the rental contract (e.g. arrears in rent payment), we reserve the right to initiate measures against you (e.g. caution or termination of the rental agreement concluded with you). If applicable, we also process data which have not been collected directly from you (e.g. statements which you have made yourself at the conclusion of your rental contract), but also data from other sources. This may be the case if, for example, we receive complaints from other tenants, on the basis of which we caution you or terminate your rental contract. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the performance and, if applicable, winding up of your rental contract.
2.23. Reminders, legal consultancy and assertion and defence of legal claims, factorisation and corporate transactions
1. If receivables are open towards us (e.g. arrears in payment), we follow them up in receivables management, assess them, get in contact with you by phone in order to give you matching information and, if applicable, we send you a reminder.
2. Insofar as you do not comply with your contractual duties, for example (such as arrears in rental despite a caution or improper use of the object of rent) and in the course of legal disputes with you, we commission external attorneys or debt collection companies with legal consultancy and assertion and / or defence of our rights. Under certain circumstances, we also process personal data from other public sources (e.g. credit agencies).
3. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the purpose of performing and if applicable winding up the rental contract with you and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in safeguarding, asserting and / or defending our legal interests.
4. Under certain circumstances, we sell our open receivables to factoring companies who then collect the claim in their own name. In the course of the sale and its preparation, the debt collection companies are given access to data which are connected with the open receivables. They also contain personal data. If an open claim of which you are the creditor is sold, we inform you about this and about the recipient, i.e. the new owner of the claim. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the purpose of fulfilling the contract with you.
5. In the event of breaches of duties by our employees and in criminal proceedings related to work against our employees, we also commission external attorneys for legal consultancy and the assertion and / or defence of our rights. When handling these cases, your personal data may also be processed under certain circumstances. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in safeguarding, asserting and / or defending our legal interests.
6. In connection with a corporate transaction, a risk examination (due diligence) is carried out with the enterprise of the Vonovia real estate group to be sold. In this context, personal data are also processed. The data are processed on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in having the enterprise to be sold examined for the sale with the help of a risk assessment.
2.24. Self-inspections
1. When you terminate your rental contract, you can grant us your consent in the acceptance record that we are allowed to forward your contact data to possible interested parties for purposes of inspection. They can then get in touch with you directly and make appointments for an inspection. You can give your consent both by post and also via the online customer portal under "Find a home".
2. The party interested in renting undertakes to treat your contact data confidentially and exclusively to use them for inspections of properties of the Vonovia real estate group and for the communication which is necessary in this context. The party interested in renting is not allowed to use your contact data for purposes other than those stated in Section 2.24. This in particular applies to the dispatch of advertising, inclusion of contact data in address lists or transmission and sale of the contact data to third parties.
2.25. Mediation and sale of properties: processing of personal data of parties interested in purchasing
We also organise real properties for people interested in buying. If you are interested, you can get in touch with our customer service by phone or by e-mail or with us via a contact form on our website (www.vonovia.de). You have the possibility of inquiring a specific object or transmitting us your interest profile for a general inquiry. To reply to your inquiry and to organise the real properties, we process your personal data. If you decide in favour of an object, we process your personal data for the preparation and the conclusion of your purchase contract. Processing of your data is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for initiation and, if applicable, conclusion of the purchase contract with you and also on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in replying to your inquiries.
In connection with the purchase of a real property, we process your personal data They are subject to statutory archiving periods and are therefore stored by us for a long period For example, duties to archive according to § 257, German Commercial Code (HGB) and § 147 German Fiscal Code (AO) exist. We shall erase these data when the archiving periods expire without you having to ask us. This period is 10 years for real property purchases The period starts with the expiry of the calendar year in which the real property has passed into your possession
The data are stored on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR.
2.26. Other processing
2.26.1. Compliance examinations and measures and internal audits
1. We document breaches of duty within our group of companies in order to clarify the facts of the matter, to inform the employee in question about the breach of duty, if applicable to caution him/her and / or to give notice if necessary. Depending on the individual case of breach of duty, the documentation of the breaches of duty may also contain your personal data under certain circumstances.
2. If a suspicion of punishable conduct by the employee exists, we carry out a special audit in order to determine the facts of the matter, to examine whether a crime has been committed and, if applicable, to secure evidence. Under certain circumstances, your personal data may also be processed in this.
3. Your personal data may also be processed in the course of audit examinations at Vonovia.
4. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR in order to comply with our legal obligations. In addition, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interests in holding the audits requested by the Supervisory Board, in order to examine the sequences and the efficiency in the group of companies, to safeguard, to assert and / or to defend our legal interests and to prevent cases of fraud and misuse in the enterprise and also to guarantee IT and network security within the enterprise.
2.26.2. Press communiqués, reports about our events and photographs
1. We regularly receive inquiries from the press. In individual cases, the subject of these inquiries may also be personal data (e.g. a tenant's name). In this context and as a part of press reports, we process these legal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in making comments and, if applicable, correcting a false portrayal.
2. We regularly report on our events. In this context, we also take photos and / or videos, store and publish them.
3. If it is a question of photos / videos which do not purposefully portray individual visitors to the event (e.g. portraits), but are pictures of the event in which these persons may be shown merely in the mass or as props, we process these personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in documenting our events and reporting to you on them.
4. Photos on which individual persons have been shown (e.g. portraits), / video sequences (e.g. videos with interviews of individual persons), are processed by us with consent of the data subject within the meaning of Art. 6 subparagraph 1 sentence 1 lit. a) GDPR. We process photos / video sequences of persons of contemporary history on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in informing the public about the event and its contents.
2.27 Mail delivery after a tenant moves
If a tenant does not make a forwarding application or only with a delay, mail for the former tenant is often found in the letter-box. After a move, we therefore remove the name-plate from the letter-box without delay. If mail is nevertheless put into the former tenant's letter-box, we shall destroy it.
3. Archiving and erasure of your personal data
1. If you have merely applied to us for real property objects, your data are stored for 3 months following rejection of your wish by you or by us, unless you continue to be interested in our real property offers.
2. Apart from this, we store your personal data as long and insofar as is necessary for the purposes (Section 2.) for which they are processed.
3. Insofar as and to the extent that your personal data are no longer necessary for processing, we only store your personal data as long as you have claims against us or we can make claims against you (statutory period of barring as a rule three years, starting with the end of the year of the origination of the claim, e.g. §§ 195, 199 German Civil Code).
4. In addition, we store your personal data as long as and to the extent that we are obliged to do so by law. Corresponding proof and archiving duties result, amongst other things, from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act (e.g. § 257 German Commercial Code; § 147 German Fiscal Code). The archiving periods amount to up to ten years.
4. Categories of recipients of your personal data
We transmit your personal data to externals in the form of commissioned processing and to third parties for own further processing; further within the framework of an in-group, labour-division process for preparation, performance and, if applicable, winding up of your rental contract or purchase contract and, if applicable, for handling and performance of energy contracts (for example electricity or gas and contracts for television, telephony and internet) within the Vonovia Real Estate Group. Transmission is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in performing internal administration activities efficiently and with division of labour.
4.1. Data processing by external service providers – commissioned data processing
1. Within the framework of the real estate mediation and renting process, we make use of external IT service providers (e.g. DATASEC in-formation factory GmbH, IBM Deutschland GmbH, AT AG), who provide platforms, databases or tools for our services, amongst others (e.g. our website and our customer portal, various possibilities of contact or marketing measures) and process personal data on our behalf by our order.
2. To reply to inquiries from interested parties in a search for real property and in booking inspection appointments and also inquiries from tenants, we use a chat bot from Microsoft Azure. In this, your personal data are processed on our behalf by our order. In connection with the use of Microsoft Azure, your personal data are transmitted to the USA. Microsoft Corporation is subject to the EU-U.S. Privacy Shield. In this way, suitable protection of your personal data has been guaranteed. The complete text of the EU-U.S. Privacy Shield Framework can be accessed under the following link:
3. To carry out customer surveys, we make use of external service providers (e.g. IBM and agencies) who process your personal data on our behalf by our order.
4. For meter reading (heating, water etc.) and controls prescribed by law (e.g. drinking water, smoke alarms), we use external service providers. We transmit your name and address to these service providers. The date normally comes about by a notice in the building or via a notification card in the letter-box.
5. The external service providers commissioned by us are selected carefully by us and commissioned in writing. They are bound by our instructions and are regularly controlled by us. All the systems in which your personal data are stored and to which external service providers have access have been secured by passwords and are only accessible to a certain group of people who need the data for the processing of the purposes authorised by you. In this context, we ensure within the framework of the statutory directives in all transmissions to and data processing by external service providers that the data are processed, used and if applicable transmitted within the meaning agreed here.
4.2. Transmission of personal data to third parties
1. For holding inspection appointments, we may transmit your personal data to external brokers under certain circumstances. Transmission serves holding of your inspection appointments and is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR to initiate a contract with you.
2. When you sign the reservation record, we transmit your personal data to credit service providers and address determination enterprises (Section 2.8.). We transmit your data for the purpose of credit checks, obtaining information for assessment of the risk of loss of payment on the basis of mathematical-statistical processing making use of address data, to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Creditreform e.V., address determination enterprises or comparable service providers. Legal bases of these transmission are Art. 6 subparagraph 1 sentence 1 lit. b) and lit. f) GDPR. Further information can be found under the following link:
3. If you have given us a SEPA direct debit mandate for collection of your rent including the subsidiary contractual costs, we transmit your personal data to banks in order to collect the rent including the subsidiary contractual costs. Transmission of your data is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for performance of your rental contract with us.
4. For repair measures and in cases of damage, we may commission external service providers if necessary (e.g. craftsmen) to carry out the repairs and remedy damage. In this, we may transmit your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for performance of the rental contract with you under certain circumstances, on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR due to our legal obligation to maintain the object of rent (§ 535 subparagraph 1 German Civil Code) and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in regularly refurbishing and modernising our real property objects and handling cases of damage via our insurance companies.
5. Within the framework of construction cost subsidies, we transmit your personal data to care insurance funds. In this, your personal data are transmitted on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR as a result of your declaration of assignment, with which you have entitled us to apply for the subsidy with the care insurance fund.
6. If you apply for a proof of entitlement to accommodation, we are requested to fill in a matching form by the residences office of the town competent in the case in question. We send the filled-in form back to the responsible residences office, with the result that your proof of entitlement to accommodation can be issued. We transmit your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR for fulfilment of our statutory obligations.
7. Under certain circumstances, authorities, supply companies and network operators inquire whether you are still a tenant with us. In this, we transmit your personal data (surname, first name and address) to the inquirer on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in replying to the inquiries if the matching preconditions have been fulfilled.
8. Some of our objects are up for sale. If they have been rented, we transmit the tenant's file for the object in question with the tenant's data and a list of the credit on the deposit account to the purchaser of the object after conclusion of the purchase contract. In the course of sales of objects, your personal data may be transmitted to brokers and Notaries Public under certain circumstances. We process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR in order to comply with our legal duties towards the purchaser in the sale of our objects and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in selling our rented objects and taking all measures necessary in connection with the sale.
9. Insofar as you do not comply with your contractual duties (such as arrears in rent payment despite a caution or improper use of the object of rent) and in the course of legal disputes with you, we possibly transmit your personal data to credit agencies, external attorneys and, under certain circumstances, to social managers (e.g. for official accompaniment) on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to perform and if necessary to wind up the contract with you and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in safeguarding, asserting and / or defending our legitimate interests.
10. If you do not comply with your payment duties, we initiate collection proceedings. For these collection proceedings, we transmit your personal data to collection service providers. In this context, we process your personal data on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR in order to perform and to wind up the contract with you and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in asserting our legal claims, including collection.
11. In the sale of open claims, we transmit personal data to factoring enterprises on the basis of Art. 6 subparagraph 1 sentence 1 lit. b) GDPR for the purpose of performance of the contract with you.
12. In connection with a corporate transaction, we commission external attorneys with a risk assessment (due diligence). In this, we also transmit personal data. The data are transmitted on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interest in having the enterprise to be sold audited for sale with the help of a risk assessment.
13. In the course of special audits with a view to the suspicion of punishable action by employees and in audit examinations, we make use of supportive service providers (such as auditing companies). For the performance of the audit, we transmit your personal data under certain circumstances on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR in order to comply with our legal obligations and on the basis of Art. 6 subparagraph 1 sentence 1 lit. f) GDPR due to our legitimate interests in performing the audits required by the Supervisory Board in order to examine the sequences and the efficiency in the group of companies, in safeguarding, asserting and/or defending our legal interests and preventing cases of fraud and misuse in the company.
14. In addition, we only transmit your personal data to the extent that a statutory obligation to forwarding on our part exists. The transmission is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR.
5. Legitimate interests and objection
1. We process your personal data within the meaning of Section 2 on the basis of our legitimate interests in providing you with information on our products and services on our websites and in guaranteeing IT security to you when you visit our websites, in carrying out analyses and in improving our internet appearance and our products and services on the basis of these analyses, in prevention of fraud, in informing you about our real estate offers and services and in providing you with special functions for this (such as accessing favourites at your next log-in), in avoiding loss of payment on your part, in maintaining and modernising our real estate objects and in handling cases of damage via our insurance companies, in making and / or asserting legal claims, in being able to offer our tenants modernisations upon request, in processing invoices and payments efficiently, in advertising for our products and services, in improving our products and services in accordance with your requirements and wishes, in replying to your inquiries, in replying to your comments / suggestions / questions, in preventing cases of fraud and misuse in the company, in guaranteeing IT and network security within the company, in having the enterprise to be sold audited for sale with the help of a risk assessment, in commenting to questions from the press and, if applicable, in correcting a false portrayal, in selling our rented objects and in taking all measures necessary in connection with the sale and also in carrying out internal administration activities efficiently and with division of labour.
You can obtain information about the balancing of interests carried out under
Vonovia Kundenservice GmbH,
Postfach 44784 Bochum,
Tel.: +49 234 41 47 000-00,
Fax: +49 234 314 888-4414,
E-Mail: service@vonovia.de
2. To the extent that we process your personal data on the basis of these legitimate interests (Art. 6 subparagraph 1 sentence 1 lit. f) GDPR), you have the right to object to the processing of your personal data at any time for grounds relating to your own specific situation. We will then no longer process your data for this/these purpose(s) insofar as our interests worthy of protection do not override or processing serves establishment, exercising or defence of legal claims. Notwithstanding this, you can object to the processing of your personal data at any time without stating grounds in the event of direct advertising (e.g. newsletter). Please send your inquiry to
Vonovia Kundenservice GmbH,
Postfach 44784 Bochum,
Tel.: +49 234 41 47 000-00,
Fax: +49 234 314 888-4414,
E-Mail: service@vonovia.de
3. If you object to data processing, we process your personal data collected in this context for replying to your inquiry. Processing of your personal data is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR for the fulfilment of a legal obligation.
6. Consent and withdrawal of your consent
1. Insofar as your have granted us consent for the processing of your personal data, you can withdraw it at any time. Withdrawal of your consent has an effect for the future. The lawfulness of the processing of your personal data up to the time of the withdrawal remains unaffected. Please send your withdrawal in writing, by telephone or by e-mail to
Vonovia Kundenservice GmbH,
Postfach 44784 Bochum,
Tel.: +49 234 41 47 000-00,
Fax: +49 234 314 888-4414,
E-Mail: service@vonovia.de
2. To the extent that you withdraw your consent, we process your personal data collected in this context for replying to your inquiry. Processing of your personal data is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR to fulfil a legal obligation.
7. Your rights
1. According to the provisions of the GDPR, you can at any time demand that we
- give you information about the personal data concerned with yourself which we process (Art. 15 GDPR),
- correct personal data concerned with yourself which are incorrect (Art. 16 GDPR) and / or
- erase your personal data stored with us (Art. 17 GDPR), block them (Art. 18 GDPR) and / or provide them to you (Art. 20 GDPR).
2. Please send your inquiry in the sense of Section 7. to
Vonovia Kundenservice GmbH,
Postfach 44784 Bochum,
Tel.: +49 234 41 47 000-00,
Fax: +49 234 314 888-4414,
E-Mail: service@vonovia.de
3. If you claim your rights against us, we process your personal data collected in this context for replying to your inquiry. Processing of your personal data is done on the basis of Art. 6 subparagraph 1 sentence 1 lit. c) GDPR to fulfil a legal obligation.
4. Notwithstanding your rights according to Section 7., you can complain to a supervisory authority for data protection if you are of the opinion that processing of the personal data concerned with you by us breaches the GDPR (Art. 77 GDPR).
5. In addition, you can inspect, correct, change and / or delete your data in your profile in the online customer portal under "My profile" and under "My rental contracts". You can close your customer profile in the online customer portal at any time and notwithstanding your rights according to Section 7.
8. Changes to this data protection information
1. The provisions of this data protection information (available free of charge under www.vonovia.de/datenschutz) including the cookie information of Vonovia SE (available free of charge under www.vonovia.de/datenschutz) as amended at the time in question (cf. date and version of the data protection information) shall apply.
2. We reserve the right to supplement and to change the contents of this data protection information. The updated data protection information applies from validity (cf. date and version of the data protection information).
3. We shall inform you in good time under mein.vonovia.de/datenschutz about these changes and supplements on our website and, if you have registered in the online customer portal, with your next log-in, by e-mail or by post. You will be given the opportunity of inspecting, printing and storing the changed data protection information free of charge.