Privacy Information
Website www.kairosred.eu
With this privacy information, we want to provide you with an overview of the processing of your personal data by us and your rights based on applicable data protection regulations, particularly the EU General Data Protection Regulation (“GDPR”) and the Telecommunications Act (“TMG”).
This privacy information relates to the processing of information (including personal data) by us in connection with your visit and use of our aforementioned internet offering (“website”).
I. Who is responsible for data processing?
The data controller for the processing of personal data is Kairos Real Estate Development GmbH, Op’n Hainholt 111 d, 22589 Hamburg, Phone +49 (0)40 209 104 90, Email info@kairosred.eu. Where this privacy information refers to “we” or “us,” it refers to the mentioned company.
The mention of affiliated companies (such as “KairosBlue,” “KairosGreen,” or “Kairos Lab”) on our website does not affect our responsibility in terms of data protection.
Based on Article 37 GDPR, a data protection officer has been appointed by the aforementioned responsible entity:
Dipl. Jur. Mortimer Graf zu Eulenburg, Office: Philippistraße 9
14059 Berlin, Phone: 049 (0) 30 2866 7408 Email: ds@ahig-group.com
II. What principles do we follow?
In compliance with data protection regulations, we process your personal data only if a legal provision permits this or if you have given your consent. This also applies to the processing of personal data for advertising and marketing purposes.
On this website, we may also collect information that does not by itself directly reveal your identity. In certain cases - especially when combined with other data - this information may still be considered “personal data” under data protection laws. Furthermore, we may collect information on this website that cannot identify you either directly or indirectly; for example, aggregated information about all users of this website.
III. What data do we process?
You can access our website without providing direct personal data (such as your name, postal address, or email address). Even in this case, we need to process certain information to allow you access to our website.
IV. For what purposes and on what legal bases do we process your data?
V. Am I obliged to provide data?
To process a request to us, providing at least one means of contact is necessary; without this information, we cannot process your request.
When we collect personal data from you, we will inform you at the time of collection whether the provision of this information is legally or contractually required or necessary for concluding a contract. We usually mark information whose provision is voluntary and not based on the aforementioned obligations or required to conclude a contract.
VI. Who receives my data?
Your personal data is generally processed within our company. Depending on the type of personal data, only certain departments/organizational units have access to your personal data. Access within our company is limited to those functions and the extent necessary for the processing purpose by a role and authorization concept.
We may transmit your personal data to third parties outside our company within the legally permissible scope. These external recipients may include particularly
VII. Is automated decision-making used?
Log files: When you visit this website, our web server automatically stores the domain name or the IP address of the requesting computer (usually your internet access provider), including the date, time, and duration of your visit, the sub-pages/URLs you visit, as well as information about the applications and devices you use to view our pages.
Contact: If you contact us via one of the ways provided on our website, we will process the personal data contained in your message and provided by you solely to process and respond to your inquiry without your further consent.
The processing of personal data possibly contained in the log files is carried out to allow you to use our website; this is based on § 15 para. 1 TMG or on Article 6 para. 1 f) GDPR to safeguard our legitimate interest in operating our website.
The processing of data to process an inquiry is carried out to safeguard our legitimate interest in establishing and maintaining business contacts based on Article 6 para. 1 f) GDPR. If your request relates to the conclusion of a contract or pre-contractual measures, we will process your personal data based on Article 6 para. 1 b) GDPR.
We may also process personal data collected in connection with your use of our website to fulfill legal obligations we are subject to; this is based on Article 6 para. 1 c) GDPR.
If necessary, we process your data beyond the aforementioned purposes to safeguard our legitimate interests or the interests of third parties; this is based on Article 6 para. 1 f) GDPR. Our legitimate interests include
assertion of legal claims and defense in legal disputes;
prevention and investigation of criminal offenses; as well as
control and further development of our business activities, including risk management.
[affiliated companies to which we may transfer data in compliance with legal regulations, e.g., if this is necessary for internal administrative purposes];
the service providers engaged by us who provide services based on a separate contractual basis, which may also include the processing of personal data, and subcontractors of our service providers engaged with our consent;
non-public and public authorities, insofar as we are obliged to transmit your personal data due to legal obligations,
In connection with the operation of our website, we generally do not use automated decision-making (including profiling) as defined in Article 22 GDPR. If we employ such procedures in individual cases, we will inform you separately as required by law.
VIII. Are data transferred to countries outside the EU/EER?
No; the processing of your personal data takes place within the EU or the European Economic Area, and we intend no transfer of personal data to other countries.
The personal data that we must store to fulfill retention obligations are stored until the end of the respective retention period. As far as we store personal data solely to fulfill retention obligations, these are usually blocked, so that access is only possible if required concerning the purpose of the retention obligation.
IX. How long are my data stored?
We generally store your personal data as long as we have a legitimate interest in this storage, and your interests in not continuing the storage do not prevail.
Even without a legitimate interest, we may continue to store the data if we are legally obliged to do so (e.g., to fulfill retention obligations). We delete your personal data even without your request as soon as their knowledge is no longer necessary to fulfill the processing purpose or if storage becomes otherwise legally inadmissible.
As a rule,
log data are deleted within seven days unless further storage is required for legally provided purposes, such as the detection of abuse and the recognition and elimination of technical faults;
the data processed about an inquiry are deleted after their processing and the expiration of any applicable retention periods.
The personal data that we must store to fulfill retention obligations are stored until the end of the respective retention period. As far as we store personal data solely to fulfill retention obligations, these are usually blocked, so that access is only possible if required concerning the purpose of the retention obligation.
X. What rights do I have?
a) Right to object under Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you carried out based on Article 6 para. 1 e) or f) GDPR; this also applies to profiling based on these provisions. In the event of your objection, we will no longer process the personal data concerning you unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
b) Further Rights
As a data subject, you also have the right
to information about the personal data stored about you, Article 15 GDPR;
to correction of incorrect or incomplete data, Article 16 GDPR;
to deletion of personal data, Article 17 GDPR;
to restriction of processing, Article 18 GDPR; and
to data portability, Article 20 GDPR.
To exercise these rights, you can contact us at any time - e.g., using one of the contact methods mentioned at the beginning of this privacy information.
You are also entitled to file a complaint with a competent data protection supervisory authority, Article 77 GDPR.