Privacy Policy

This is a translation provided for your convenience. In case of any discrepancy or ambiguity between this English version and the German original, the German version (Datenschutzerklärung) is legally binding.

This privacy policy informs you, pursuant to Art. 13 GDPR, about the processing of personal data on this private sale website for two condominium apartments. The website does not embed any advertising trackers and does not set any cookies. Reach is measured by a cookieless analytics tool running on our own server (Matomo); details below.

Controller

The controller within the meaning of Art. 4 No. 7 GDPR is:

Dipl.-Ing. Lorenz Kromer
Hohe Straße 185
4048 Puchenau
Austria
Email: wohnen@am-alpengarten.de

Data Protection Officer

No data protection officer has been appointed. As a private sale website without employees, the controller is not subject to any of the appointment obligations under Art. 37 GDPR or Section 38 BDSG (German Federal Data Protection Act).

Contact via the contact form

Data processed: the contact details you provide in the contact form (e.g. name, email address) as well as the message text you write.

Purpose: handling your enquiry regarding the purchase of one of the two condominium apartments offered and the initiation of a purchase contract.

Legal basis: Art. 6(1)(b) GDPR, as the processing serves to carry out pre-contractual measures taken at your own request. In the alternative, we rely on Art. 6(1)(f) GDPR; the legitimate interest pursued is the direct contact with prospective buyers in the context of a private sale without an estate agent.

Operation of the form: the contact form is operated using software called Steerbase. This software comes from the controller himself — he develops it under his sole proprietorship Kromer Lorenz — IT Services & Solutions — and it runs on the same server as this website.

Your form data is therefore not passed on to any third party. Under Austrian law a sole proprietorship is not a legal entity separate from its owner; the controller and the operator of the software are one and the same person. There is accordingly no processing on behalf of a controller within the meaning of Art. 28 GDPR and no such contract is required.

Processor: the server on which this website and the contact form run is rented from Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany. Hetzner processes the data solely on our instructions on the basis of a contract pursuant to Art. 28 GDPR.

Transfer to third countries: none takes place. The server and the backup copies are located within the European Union or the European Economic Area.

Storage period

Enquiries submitted through the contact form are deleted once they have been dealt with — at the latest six months after our last contact with you.

If your enquiry leads to a purchase contract, we retain the associated correspondence until the statutory limitation periods expire: three years, counted from the end of the year in which the contract was concluded (Sections 195, 199 German Civil Code). The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the defence and enforcement of possible claims arising from the contract.

Server log data is deleted automatically after 30 days at the latest.

No commercial or tax retention obligations apply to this data: the sale is private and the controller is not acting as a merchant. The periods under Section 257 German Commercial Code and Section 147 German Fiscal Code are therefore not applicable.

Server log data

Each time a page of this website is accessed, the web server automatically logs the following data: IP address, time of access, resource requested, HTTP status code, amount of data transferred, referrer and user agent of the browser used.

Purpose: technically error-free delivery of the website and operational security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning operation of the website).

This data is not combined with other data sources and is not used for profiling.

Browser language setting (localStorage)

The home page of this website stores your chosen language under the key lang in your browser's localStorage. This is not a cookie; the information is not transmitted to the server.

Pursuant to Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act), no consent is required for this, because the storage is strictly necessary to provide a service you have explicitly requested — the language version you selected yourself. For this reason, this website has no cookie banner.

Reach measurement with Matomo (cookieless)

This website uses Matomo, a web analytics software. Matomo runs on our own server at matomo.kromerlorenz.at. The data collected never leaves that server, is not passed on to third parties and is not transferred to any third country. No data processing agreement with an analytics provider exists, because no such provider is involved.

Matomo sets no cookies on this website and neither stores nor reads any information on your device. For this reason no consent is required under Section 25(2) TDDDG and there is no cookie banner.

The following is processed:

• the pages you visit and the time of the visit
• the referring page that brought you here
• browser type, operating system and approximate screen size
• your truncated IP address — the last two blocks are removed before any storage, so no conclusion about your connection is possible

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to understand whether this page is found and understood — it is the digital destination of physical notices and newspaper advertisements whose effect cannot otherwise be judged. Because the measurement is cookieless and uses a truncated IP address, the interference with your rights is minimal.

Storage period: raw visit data is deleted automatically after 180 days. Beyond that, only aggregated figures without any individual reference remain.

Your right to object (Art. 21 GDPR): this website honours your browser's “Do Not Track” setting. If it is enabled, no measurement takes place at all. You will find this setting in your browser's privacy settings. Alternatively, an informal message to the contact address above is sufficient.

No other external services

Apart from the reach measurement described above, this website does not embed any web fonts, map services or advertising services; all images and styles are delivered from our own server. The website contains a small number of external links (e.g. to a map service); when you click such a link, the privacy policy of the respective target provider applies.

Your rights

Under the GDPR you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). You may exercise these rights informally via the email address given above.

Right of withdrawal

No right of withdrawal exists here, as the processing is not based on consent pursuant to Art. 6(1)(a) GDPR.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.

Provision of data

Providing your contact details in the form is voluntary. Without them, contact via the form is not possible. There is no statutory or contractual obligation to provide this data.

Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.