Privacy Policy

Controller

We are delighted that you are visiting our website. First, we would like to introduce ourselves as the controller within the meaning of data protection law:

HEINZL IMMO GmbH
represented by Managing Director Oliver Heinzl
Kammersdorf 173
2033 Kammersdorf
Email: info@heinzl.de

 

General

In accordance with our legal obligation, we would like to inform you about the collection and use of your personal data.

When you use our website, personal data about you is collected. This can occur by you entering the data yourself – such as your email address. However, our system also automatically collects data from you, such as your visit to our website. This happens regardless of which device or software you use to access our website.

Any data entry by you on our website is voluntary; you will not suffer any disadvantages by not disclosing your data. However, without certain data, it is not possible for us to provide services or conclude contracts. We will inform you about such mandatory information as applicable.

On this website, personal data of the user is collected only within the framework of applicable data protection law, in particular the General Data Protection Regulation (GDPR). The technical terms used in the text are explained in more detail in Art. 4 of the GDPR.

Data processing is permitted under the GDPR in particular in three cases:

  • according to Art. 6 para. 1 lit. a and 7 GDPR, if you have consented to data processing by us; in each case, we will inform you precisely beforehand in this privacy policy and at the time of consent, in accordance with Art. 4 No. 11 GDPR, for what purpose and under what circumstances your data will be processed by us;
  • according to Art. 6 para. 1 lit. b GDPR, if the processing of your personal data is necessary for the initiation, conclusion, or fulfillment of a contractual relationship;
  • according to Art. 6 para. 1 lit. f GDPR, if, after a balancing of interests, processing is necessary to protect our legitimate interests; these include, in particular, our interests in analyzing, optimizing, and securing the offering on our website – this primarily includes an analysis of user behavior, the creation of profiles for advertising purposes, the storage of access data, and the use of third-party providers.

 

Inventory Data

We collect inventory data insofar as it is necessary for the establishment, content design, or modification of a (including gratuitous) contractual relationship between us and the user. This may include: customer data (e.g., name, address), contact data (e.g., email address, phone number), service data (e.g., ordered service, term, fee). When establishing the user relationship, we will request this data from you (e.g., name, address, and email address) and also inform you to what extent the respective information is mandatorily required to establish the user relationship.

Usage Data

Furthermore, we collect usage data to enable the user to utilize the services on our website. This may include: usage details (e.g., accessed web pages or areas, duration of visit, interest in services), content data (e.g., data, texts, images, sounds, videos entered or uploaded by you), metadata (e.g., identity of your device, location, IP address).

We only merge usage data if and to the extent that this is necessary for billing purposes. Otherwise, we will only create usage data pseudonymously and only if you have not objected to this. You can send this objection at any time to the address provided in the imprint or to the controller named in this privacy policy.

The legal basis for this data processing is, on the one hand, our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in the analysis of the website and its use, and, if applicable, also the legal permission for storing data within the scope of initiating a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR.

 

Host

easyname GmbH.

Our website is made available on the internet by a service provider (provider or host) for retrieval. For this purpose, we use the service of easyname GmbH., Canettistraße 5/10, 1100 Vienna, Austria. We have concluded a data processing agreement with our provider. According to this, our provider is obliged to process your data only on our behalf and according to our instructions. Further information on data processing by our provider can be found in their privacy policy at https://www.easyname.at/download/data-protection-policy-de-v4.pdf. The legal basis for this data processing is, on the one hand, our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in the provision and use of our website on the internet, and, where applicable, also the legal permission for storing data within the scope of initiating a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR.

Our provider processes information with every use of this website, the so-called server log files, which are automatically transmitted by your browser every time you access websites on the internet. These are:

  • Your IP address
  • Type and version of your browser
  • Hostname
  • Time of visit
  • the website from which you visited our website
  • Name of the accessed website
  • exact time of access, as well as
  • the amount of data transferred

This data is used only for statistical purposes and does not allow us to identify you as a user.

 

Initial contact via electronic inquiry

If you contact us electronically (e.g., email, fax, phone, messenger, etc.), we store and process the data you have provided to us (e.g., name, contact information, content of the inquiry). The legal basis for this is our legitimate interest in effective customer communication pursuant to Art. 6 para. 1 lit. a GDPR and, insofar as it concerns an inquiry for entering into or fulfilling a contract, also Art. 6 para. 1 lit. b GDPR.
We will only pass on this data to third parties insofar as it is necessary (according to Art. 6 para. 1 lit. b GDPR) for the fulfillment of the contract, this corresponds to the overriding interest in effective performance (pursuant to Art. 6 para. 1 lit. f GDPR), or your consent (according to Art. 6 para. 1 lit. a GDPR) or another legal permission or obligation exists.
You can request information from us at any time free of charge about the purpose of processing, origin, and, if applicable, recipients of your personal data. Furthermore, you can assert the right to rectification, erasure, and restriction of the processing of your personal data. You can object to the (further) processing of your data at any time and have a right to data portability as well as a right to lodge a complaint with the competent supervisory authority.
In principle, your data will only be stored for as long as the purpose of the respective data processing requires. Further storage is primarily considered if this is still necessary for legal prosecution or due to legitimate interests, or if there is a legal obligation to retain the data (e.g., tax retention periods, statute of limitations).

Consent

Insofar as we ask for your consent to process your data, we will inform you in clear and easily accessible language for which cases you are giving your consent. Any consent requested by us is voluntary; any advantage you wish to gain by giving consent can also be obtained without consent, just ask us.

For every consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. This can be done by an informal notification, e.g., via our contact form, an email to the email address provided in the imprint, or an unsubscribe link (if offered by us). Your revocation does not affect the lawfulness of the data processing carried out until then.

Storage Duration

In principle, your data will only be stored for as long as the purpose of the respective data processing requires. Further storage is primarily considered if this is still necessary for legal prosecution by us or due to our other legitimate interests.
For your inventory data that was necessary for the fulfillment of a (including gratuitous) contractual relationship, this means that we store it until the complete fulfillment or termination of the contractual relationship plus the statute of limitations (which is generally 2 or 3 years) along with a reasonable surcharge for any interruption of the limitation period.
For your usage data collected during your use of the website, this means that we only store it for as long as it is necessary for the proper functioning of our website and our legitimate interest extends. We will primarily store statistical data only pseudonymized.
Furthermore, we store your data insofar as we are legally obliged to do so. These are in particular the tax retention periods, which are generally 6 or even 10 years.

Our website uses cookies and, if applicable, technologies with a similar purpose such as pixels, web beacons, or tags, within the scope of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization pursuant to Art. 6 para. 1 lit. f GDPR. A cookie is a data record with information that is stored on your end device (computer, tablet, smartphone, etc.). Cookies can be “session cookies” that are automatically deleted at the end of your visit to our website. However, there are also persistent cookies that are stored on your computer for a certain period, unless you delete them. Then it is possible for us to recognize your browser the next time you visit our website and to provide you with functions corresponding to your previous
use. However, our website only uses cookies that are necessary for the use of our website and, in particular, no external tracking or advertising cookies.
Your browser allows you to prevent the use of cookies entirely or in individual cases. Please refer to the operating instructions for your browser for this. You can also delete cookies; we have compiled some instructions here:

for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
for Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
for Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
for Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
for Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer

Blocking cookies may restrict the functionality of our website and other websites you visit. More information on how to manage, restrict, or completely disable third-party cookies and similar technologies can be found in particular at:
https://www.aboutads.info/choices
https://www.youronlinechoices.eu
https://www.networkadvertising.org/choices

User Rights

You can request information from us at any time free of charge about the personal data stored about you. For this purpose, identification of your person will be required to prevent misuse.

Erasure, Rectification, Restriction

You can request from us at any time the rectification (also by completion) of inaccurate data, as well as a restriction of its processing or the erasure of your data. This applies in particular if the purpose of processing has ceased, a required consent has been revoked and no other legal basis exists, or our data processing is unlawful. We will then immediately rectify, block, or even erase your personal data within the legal framework.

Right to Object

YOU CAN OBJECT AT ANY TIME TO ANY PROCESSING OF YOUR PERSONAL DATA THAT WE BASE ON A BALANCING OF YOUR INTERESTS PURSUANT TO ART. 6 PARA. 1 LIT. F GDPR, IF THERE ARE REASONS ARISING FROM YOUR PARTICULAR SITUATION.
WE WILL THEN NO LONGER PROCESS YOUR DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS ON OUR PART.

Data Portability

You can request from us the transfer of the data stored about you in a machine-readable format.

Complaint

Insofar as you feel that your rights have been violated by our data processing, you can lodge a complaint with the competent supervisory authority (you can find a list of authorities here).

Changes to the Privacy Policy

Should an amendment to the privacy policy become necessary for legal or factual reasons, we will update this page accordingly. No changes will be made to the consents given by the user.

Data Entry

Encryption

When you enter data on our website, be it on a contact form, during registration, logging in, or for payment purposes, the webpage where you enter the data is encrypted. This prevents third parties from reading the data you enter. You can recognize the encryption by the padlock symbol in your browser and by the address bar starting with “https” instead of just “http”.

Contact Form

General Contact Form

If you fill out a contact form or send us an email or any other electronic message, your information will be stored and used only within the scope of the inquiry for processing the request, possible follow-up questions, or related further questions.

Your data is entered encrypted, which means that third parties cannot read your data during entry, even if they have access to the network (e.g., in unprotected public Wi-Fi networks).

The basis for this storage is our legitimate interest in communication with interested users pursuant to Art. 6 para. 1 lit. f GDPR and, in the case of contract inquiries, also the storage of contract data pursuant to Art. 6 para. 1 lit. b GDPR.

Your data will remain stored for as long as the processing of the inquiry requires, in particular if storage is still necessary for contract fulfillment/processing, for legal prosecution by us or due to our other legitimate interests, or if we are legally obliged to retain your data (e.g., within the scope of tax retention periods).

Social media

We link to our social media presences. Unlike social media plugins, links do not already inform the social media platform about your visit when you access our page. However, like any link, they will at the latest lead to your data being processed by the social media platform when you click the link. The social media platform will generally store cookies on your device or even store your usage behavior related to your account, especially if you are logged in yourself. The social media platform can analyze your user behavior with your data and use it for (interest-based) advertising. This can lead to advertisements being displayed to you within and outside the social media platform. Please be aware whether you want to accept this and only use a social media platform if you have sufficiently informed yourself about the data processing there and agree to it (this applies in particular if you have not used it yourself until now) – we have included links to the privacy policies of the social media platforms in each case.

Our page uses links to our presence on the social network Facebook of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It is just a normal link; when you access our page, Facebook does not learn about your visit to our website. However, if you click the link, you will be redirected to Facebook, whereby Facebook will also learn that you visited our page.
Your data is transferred by Facebook Ireland to Facebook in the USA based on the standard contractual clauses. In addition, this provider is certified under the EU-US Data Privacy Framework. This makes data transfer to the USA legally secure based on the adequacy decision concluded on July 10, 2023.

We have no knowledge of and no influence over the collection and use of your data by Facebook that may occur after clicking the link. Further information can be found in Facebook’s privacy policy at https://de-de.facebook.com/policy.php.

Our site uses links to our presence on the social network Instagram of Instagram LLC, now Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

It is just a normal link, so when you visit our site, Instagram does not learn about your visit to our website. However, if you click the link, you will be redirected to Instagram, which means Instagram or Facebook will also know that you visited our site.
Your data will be transferred by Meta Platforms Ireland to Meta Platforms in the USA based on the standard contractual clauses. In addition, this provider is certified under the EU-US Data Privacy Framework. This makes data transfer to the USA legally secure based on the adequacy decision concluded on 2023-07-10.

We have no knowledge of and no influence over the possible collection and use of your data by Instagram/Facebook after clicking the link. Further information can be found in Instagram’s privacy policy at https://privacycenter.instagram.com/policy.

 

Our current privacy policy from 2025-05-26 applies.