Data Protection Information Sheet of DIMA Finanzierungs- und Immobilientreuhand GmbH
You came to this page via a link, because you want to find out about our handling of your personal data. In order to fulfill our information requirements according to Art. 12 et seq. of the General Data Protection Regulation (DSGVO), we would like to inform you about the processing of personal data:
Who is responsible for this data processing and whom can I contact?
DIMA Finanzierungs- und Immobilientreuhand GmbH
Wittelsbacherstraße 18
10707 Berlin
Telefon: +49 30 790002-0
Fax: +49 30 790002-712
E-mail: dima(at)dima-finanzierung.de
Contact Details of the Data Protection Officer
DIMA Finanzierungs- und Immobilientreuhand GmbH
Data Protection
Wittelsbacherstraße 18
10707 in Berlin
Phone: +49 30 790002-13
E-mail: datenschutz(at)dima-finanzierung.de
Which personal data do we collect?
Depending on the need, DIMA stores and processes the following personal data in the acquisition interview:
- your personal details and contact information (e.g., first and last name, nationality, address, e-mail address)
- socio-demographic data (e.g. marital status, profession)
As part of the follow-up discussions, DIMA also stores and processes the following personal data in addition to the above-mentioned data categories, as required:
data required for contract initiation and implementation (e.g. order data, creditworthiness data, data from publicly available sources, our business correspondence)
For what purpose and based on what legal basis is personal data processed?
Information about our range of services
With your consent, we collect, store and process your data in order to provide you with information and offers about our service portfolio by e-mail. The legal basis for this processing of your data is Art. 6 Para. 1 lit. a) GDPR.
We also use your personal data, which we collect during a follow-up interview, for the following purposes:
Marketing
Insofar as we provide you with information on our range of services and offers, these measures are based on Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The pursuit of our business and obtaining information by means of market research is a legitimate interest.
Contract preparation and execution
The collection, storage and disclosure of personal data takes place for the purpose of preparing and implementing a provision of financing or marketing for a property. The legal basis for processing for the purpose of fulfilling a contract or for carrying out pre-contractual measures is Art. Para. 6 Sentence 1 lit. b) GDPR.
Statutory obligations
As a financial intermediary and real estate broker, DIMA is subject to special statutory provisions, such as the German Money Laundering Act/[Geldwäschegesetz]. To comply with your legal obligations, DIMA shall forward personal data to the competent authorities. The legal basis for this data processing is Art. 6 Para. 1 lit. c) GDPR.
Data processing in the credit bureau
To assess your creditworthiness, we collect credit information from credit bureaus. When soliciting information, we will pass on your personal data to the credit bureau The legal basis for this data processing is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. As a financial intermediary, DIMA has a legal and economic interest in credit information.
Legal disputes
If required, we process your personally identifiable information for the judicial and extra-judicial enforcement of claims and defence of claims by third parties. The legal basis for the data processing is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. We have a legitimate interest in defending ourselves against unjustified claims and, if necessary, enforcing our rights in court.
Who will receive my data?
Within DIMA
In the framework of the first call and follow-up talks, only employees of DIMA subject to confidentiality provisions have access to your disclosed personal information.
Recipients outside DIMA
Data transfer to recipients outside the DIMA only relates to your data collected as part of a follow-up call. In doing so, we are generally obliged to maintain confidentiality regarding all customer-related facts and assessments. We may share personal data only under the abovementioned legal bases.
Under these conditions, the recipients of personal data are:
- credit and financial institutions (e.g. banking institutions and insurance companies)
- public authorities and institutions (should a legal, regulatory or administrative obligation exist)
contracted processors (e.g. IT service providers)
our lawyers and insurance companies in the event of litigation
Is data transferred to a third country or to an international organisation?
If a data recipient is located outside the European Economic Area, DIMA shall contractually ensure the adequate protection of your personal data. Appropriate protection means that we implement the highest possible level of protection in connection with the third country.
In addition, if data protection and other laws in different countries are not as strict or as comprehensive as in your home country, we take measures under Articles 45 and 46 GDPR (such as standard contractual clauses of the European Commission) to ensure the protection of your personal data as described in this data protection declaration. We can gladly provide you with a copy of the measures taken. To do so, please contact our Privacy Officer at the contact address indicated above.
How long will my data be stored?
Personal data is stored only as long as this is necessary for achieving the relevant purpose. This usually corresponds to the duration of the business relationship.
With regard to your personal data collected in a follow-up interview, DIMA has recording and documentation obligations resulting from the German Commercial Code/[Handelsgesetzbuch], the German Tax Code/[Abgabenordnung], the German Banking Act/[Kreditwesengesetz] and the German Money Laundering Act/[Geldwäschegesetz]. The period for retention and documentation specified in these regulations can range from two to ten years.
Furthermore, we store data for the preservation of evidence. In this case the storage period is based on the statutory limitation periods, which, according to §§ 195 ff. BGB/[Bundesgestzbuch] (German Civil Code), can generally be three years, but in certain cases up to 30 years.
What data protection rights do I have?
The rights to information, rectification, deletion and restriction
You have the right to request information about the personal data stored about you at any time. This also relates to the recipients or
categories of recipients with whom this data has been shared and the purpose of the storage. In addition, in justified cases you may request the correction or deletion of your data, as well as the restriction of further use.
Right to data transfer
You have the right to transfer personal data that concerns you and that you have given us on the basis of a consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a) or Art. 9 Para. 2 lit. a) GDPR in a structured, common and machine-readable format and to transmit this data to others. Details and restrictions can be found in Article 20 GDPR. The exercise of this right will not affect your right to deletion.
Right to Object
In particular, under Article 21 GDPR, you have the right, at any time, to object to the processing of your data for reasons arising from your particular situation, if we base this processing on legitimate interests under Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you object, we will no longer process your personal data, other than in two cases:
- we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or
- the processing is to assert, exercise or defend against legal claims.
In particular, even if we process your personal data for direct marketing (e.g. in the context of our newsletter), you have the right to object at any time to the processing of your data for the purpose of marketing measures. If you object to the processing of your data for direct marketing purposes, we shall no longer use your personal data for this purpose.
Revocation of consent to data processing
Under Art. 13 Para. 2 lit. c) GDPR you also have the right to revoke your consent given to data processing at any time, but without affecting the legality of the processing on the basis of the consent until the point of revocation.
Contact
All information requests, requests for notification or objections to data processing should be addressed to:
datenschutz@dima-finanzierung.de
Right to appeal
Furthermore, according to Art. 13 Para. 2 lit. d) GDPR you have the opportunity to complain to the Berlin Data Protection Officer about data protection issues.
