Privacy Policy
Your trust is important to us. Our company, Tutone Baufinanzierung, takes the protection of your personal data very seriously. Personal data is only collected, processed, or used if the data subject has given their consent, if it is necessary for the fulfillment of a contract, or if a law permits or mandates its collection, processing, or use.
With this privacy policy, we would like to inform you about the details of data collection and processing, as well as your rights in this context.
1. Name and Address of the Controller
The controller in the sense of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other data protection provisions is:
Tutone Baufinanzierung
Kurfürstendamm 195 in 10707 Berlin
Federal Republic of Germany
Tel.: +49 177 21 21 123
E-Mail: info (at ) tutone (dot) de
Website: www (dot) tutone (dot) de
2. General Information on the Processing of Personal Data
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Tutone Baufinanzierung generally processes personal data only if the user has given their consent or if the data processing is permitted by legal regulations. The legal basis is Art. 6 para. 1 of the EU General Data Protection Regulation (GDPR). According to this provision, the processing of personal data is only permissible if the data subject consents (Art. 6 para. 1 lit. a GDPR) or if the processing is necessary for one of the following purposes:
For the fulfillment of a contract with the data subject or for the implementation of pre-contractual measures at the request of the data subject (Art. 6 para. 1 lit. b GDPR).
For compliance with a legal obligation of our company (Art. 6 para. 1 lit. c GDPR).
To protect the vital interests of the data subject or another natural person (Art. 6 para. 1 lit. d GDPR).
For the performance of a task carried out in the public interest or in the exercise of official authority vested in our company by public administration (Art. 6 para. 1 lit. e GDPR).
For the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Art. 6 para. 1 lit. f GDPR).
3. Storage Duration and Data Deletion
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by law. Data will also be blocked or deleted if a storage period prescribed by the aforementioned norms expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract. Prescribed storage periods in this sense include, for example, tax or commercial law retention periods.
4. Collection of Access Data (Creation of Log Files)
The Tutone Baufinanzierung website automatically collects general data and information from the computer system of the accessing computer with each access, which is stored in the server’s log files. The following data and information are collected:
- Browser type including version used
- Operating system used by the accessing computer
- Date and time of access
- User’s IP address
- User’s Internet Service Provider
- Website from which our website is accessed
- Websites and sub-pages accessed from our website
- Other similar data and information that serves to prevent dangers in the event of attacks on our system
The data is stored anonymously in the log files of our system. No linking with other personal data of the user takes place. Tutone Baufinanzierung does not draw conclusions about the data subject.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Storage is necessary to ensure the functionality of our website and the correct display of content. Furthermore, the data serves our statistics and the continuous optimization of our content. Finally, storage takes place to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
No data is passed on to third parties, unless there is a legal obligation to disclose.
Since the collection and storage of data in the log files is absolutely necessary for the undisturbed operation of the website, the user has no right to object.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the collection was for the purpose of providing the website without functional errors, this is the case when the internet session ends.
5. Cookies
We use cookies on our website. Cookies are text files that are stored on your computer by our server, thereby saving certain data. Cookies usually contain a characteristic string of characters that enables a unique assignment of the internet browser when the user revisits the website. This allows the accessing browser to be recognized and identified.
Cookies help us to make it easier for you to use the website. By recognizing the browser and storing previously entered data, the offers and content of our website can be individually optimized, as data entered by you (e.g., access data, search terms) does not have to be re-entered each time you visit the website. The legal basis for this is Art. 6 para. 1 lit. f GDPR.
In addition, we use cookies on our website that enable an analysis of users’ surfing behavior. However, the data collected in this way is pseudonymized, meaning that personal data is replaced by other identifiers (pseudonyms) so that identification of the data subject is no longer possible without additional information. Since your consent is obtained for this when you access the website, the legal basis for processing personal data using analysis cookies is Art. 6 para. 1 lit. a GDPR.
Since cookies are stored on the user’s computer, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. However, if cookies are deactivated for our website, not all functions of the website may be fully usable.
6. Offer Inquiries on our Website
You have the option to submit offer inquiries on our website. The data you enter into an input mask is transmitted to us and stored by us. Which personal data is affected by this can be seen from the input mask. In addition, the user’s IP address and the date and time of registration are also stored. At the end of the registration process, the user’s consent to data processing is obtained again. The legal basis for the processing of personal data is therefore Art. 6 para. 1 lit. a GDPR. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f GDPR. No data is passed on to third parties, unless there is a legal obligation to disclose.
7. Contact Form and Email Contact
The Tutone Baufinanzierung website provides a contact form that can be used for electronic contact with our company. The data entered by the user into the input mask is transmitted to us and stored. In addition, the user’s IP address and the date and time of submission are also stored. For the processing of the data, the user’s consent is obtained during the submission process. The legal basis for processing is therefore Art. 6 para. 1 lit. a GDPR. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f GDPR.
Alternatively, contact can be made via the email address provided on our website for this
purpose. In this case, in addition to the email address, the personal data listed by the user in the email will be transmitted. The legal basis in this respect is Art. 6 para. 1 lit. f GDPR.
The processing of data transmitted via the contact form or by email serves exclusively to carry out the desired contact. The storage of other data takes place to prevent or detect misuse of the website and to ensure the security of our system. No data is passed on to third parties, unless there is a legal obligation to disclose.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. As far as the data transmitted by the user in the contact form or in the email is concerned, this is the case when the communication in question has ended, unless the content of the communication still has legal significance thereafter.
The data subject has the option to revoke consent to data processing or to object to the use of data at any time. In this case, the intended contact with the user is no longer possible, or communication that has already begun can no longer be continued.
The processing of the data transmitted by the user by entering it into the registration form is necessary to send the newsletter. No further use takes place. The storage of the IP address is necessary to prevent or detect misuse (especially of the email address) and to ensure the security of our system.
The newsletter subscription can be canceled by the data subject at any time, thereby revoking consent to its dispatch. For this purpose, a corresponding link is provided in every newsletter email sent. In this case – as well as in the event of any other objection to data use, which is possible at any time – the personal data stored by us as part of the newsletter subscription will be deleted. The data will therefore be stored as long as the newsletter subscription is active.
8. Use of Social Plug-Ins
We have integrated plug-ins from social networks on our website. If the data subject is registered with the respective social network and also logged in when accessing our website, the social network recognizes which specific sub-page of our website the data subject is accessing. This information is collected by the operator of the social network and assigned to the data subject’s account there. We have no influence on the type and extent of data collected, stored, and processed by the operator of the social network. For more information, please contact the operator of the respective social network. To prevent data about you from being processed by the operator of the respective social network, you must log out of the relevant network before accessing our website. In addition, you can use special tools that block data transmission (e.g., Facebook Blocker).
We have integrated social media plug-ins from the following companies on our website:
- Facebook Inc.: https://de-de.facebook.com/about/privacy/
- Youtube: https://youtube.com/about/privacy
- XING AG: https://www.xing.com/privacy
- Beratung.de: https://beratung.de/agb/#datenschutz
- Whofinance.de: https://www.whofinance.de/datenschutz/
9. Use of Matomo
This website uses Matomo (formerly Piwik), an open-source software for the statistical analysis of visitor access. Matomo uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website.
The information generated by the cookie about your use of the internet offering is stored on a server in Germany.
The IP address is anonymized immediately after processing and before storage. You have the option to prevent the installation of cookies by changing your browser software settings. We point out that with appropriate settings, not all functions of this website may be available.
You can decide whether a unique web analysis cookie may be placed in your browser to enable the website operator to collect and analyze various statistical data.
10. Content and Services from Third-Party Providers for the Use of YouTube
Our website also contains content and services from third-party providers, e.g., videos from YouTube or map material from Google Maps. When you access this content/services via our website, your IP address is usually transmitted to the respective third-party provider. This enables these third-party providers to process your user IP address. Even if we strive to only include third-party providers who use IP addresses solely for the delivery of content, we have no influence on how the affected third-party provider uses the data received. For more information, please contact the respective third-party provider.
11. Your Rights as a Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the controller:
a) Right to Confirmation and Information
You can request confirmation from us at any time as to whether personal data concerning you is being processed by us. If this is the case, you have the right to be informed by us about the following circumstances:
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
- the planned duration for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- all available information as to the source of the data where the personal data are not collected from the data subject; the existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Furthermore, you have the right to be informed whether personal data is transferred to a country that is not a member of the EU (so-called third country) or to an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
b) Right to Rectification
You have the right to demand from us the immediate rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data – also by means of a supplementary statement.
c) Right to Erasure (“Right to be Forgotten”)
You can demand from us that the personal data concerning you be erased without undue delay if one of the following reasons applies:
- The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing is based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal ground for the processing.
- You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
- The personal data concerning you has been unlawfully processed.
- The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
If the personal data concerning you has been made public by Tutone Baufinanzierung and we are obliged to erase the personal data according to the principles above, we are also obliged to inform other controllers processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
In this regard, we take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to comply with these obligations, at least insofar as processing is not still necessary, i.e., legal requirements mandate it or legitimate interests oppose the erasure.
d) Right to Restriction of Processing
You can request from us the restriction of processing of your personal data under the following conditions:
- The accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims.
- You have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether the legitimate grounds of Tutone Baufinanzierung override yours.
If the processing of personal data concerning you has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. In this case, you will also be informed by us before the restriction is lifted.
e) Right to Notification
If you have asserted the right to rectification, erasure, or restriction of processing, we are obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. In this respect, you can request to be informed about these recipients.
f) Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, where the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.
g) Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
Tutone Baufinanzierung shall no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
h) Right to Withdraw Data Protection Consent
If you have given data protection consent, you have the right to withdraw this consent at any time with effect for the future.
i) Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, unless the decision:
- is not necessary for entering into, or performance of, a contract between you and Tutone Baufinanzierung
or
- is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests
or
- is based on your explicit consent.
However, these decisions shall not be based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests have been put in place.
If the decision is necessary for entering into or performance of a contract between the data subject and the controller, or if it is based on the data subject’s explicit consent, Tutone Baufinanzierung shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
j) Right to Lodge a Complaint with a Supervisory Authority
Notwithstanding the rights you have against us, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform you on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.