COOKIE DECLARATION
 

OTTO Immobilien GmbH and OTTO Immobilien Management GmbH ("OTTO", "we", "us") are committed to protecting your personal data. We therefore comply with the applicable legal provisions on the protection, lawful handling and confidentiality of personal data and on data security, in particular the Datenschutzgesetz as amended ("DSG"), the Telekommunikationsgesetz ("TKG") and the General Data Protection Regulation ("GDPR"). The following cookie statement informs you for which purposes we use which cookies and similar technologies on our website www.otto.at ("website") and we offer you the opportunity to make settings to consent to this use and to revoke your consent at any time.

1. NAME AND ADRESS OF THE PERSON RESPONSIBLE

The person responsible for processing your personal data in accordance with data protection regulations is:

OTTO Immobilien GmbH and OTTO Immobilien Management GmbH
Riemergasse 8,
1010 Vienna
Tel: + 43 1 512 77 77
E-mail: office@otto.at

2. COOKIES AND HOW THEY WORK

Cookies and similar web storage technologies (hereinafter referred to as "cookies") are used on our website. Cookies are small files that are stored on your end device (e.g. PC, smartphone or tablet) when you visit our website. Each time you visit our website, the cookie and the website "communicate" with each other so that your device can be recognised. This is useful for both you and us: cookies serve the purpose of enabling our website to function correctly, expanding the range of functions and optimising the website functions. This enables the website to remember certain entries and settings (e.g. language, font size) over a certain period of time so that you do not have to repeat them each time you visit the website.

We use first-party and third-party cookies (so-called first-party cookies and third-party cookies). Firstparty cookies come directly from our website and only send information to us. However, our website may also contain technologies from other providers (third parties) that we integrate into our website for advertising purposes and that may set their own cookies on your end device. In most cases, the information in a cookie is pseudonymised or anonymised, as cookies generally do not identify you as a person, but rather your end device. In some cases, it is possible to link certain cookies to personal data. There are cookies that require your consent before they can be used on your device and cookies that can be used without your consent because they are technically necessary for us to provide our services ("necessary cookies"). In the case of necessary cookies, the data processing is necessary for the purpose of data security measures, to prevent misuse and to optimise the website and is therefore based on our legitimate interests in accordance with Section 6 (1) (f) GDPR in conjunction with § 165 para. 3 TKG. We set all other cookies on our website exclusively on the basis of your prior express consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG via the cookie banner.

Insofar as the settings you have made or the voluntary consent you have given also includes providers who transfer data to countries without an adequacy decision pursuant to Art. 45 (3) GDPR and without suitable guarantees pursuant to Art. 46 GDPR (such as the USA in particular), your consent pursuant to Art. 49 GDPR also applies here. There is a risk that your data transmitted in this way may be subject to access by authorities in these third countries for control and monitoring purposes and that no effective legal remedies are available against this.
On our website, you have the option via our cookie banner, which appears automatically when you visit our website for the first time or when changes are made, to accept the use of cookies in principle by clicking on the "Accept all" button, to accept only the use of certain categories of cookies by ticking the corresponding boxes and then clicking on the "Save selection" button, or to accept only the use of necessary cookies by clicking on the "Only necessary cookies" button. Below you will find a description of the types of cookies we use.

4. COOKIE CATEGORIES

Depending on their function and purpose, we categorise data processing into different categories. The categories of cookies in connection with the website are described below. We use necessary cookies and cookies for statistical purposes on the website. By clicking on "Accept all", you agree that cookies may be used in accordance with this cookie statement and by third-party providers in accordance with their privacy policies. By clicking on "Accept all", your consent also expressly includes the transfer of data to recipients in countries without an adequacy decision pursuant to Art 45 (3) GDPR and without appropriate safeguards pursuant to Art 46 GDPR (such as the USA in particular) pursuant to Art 49 GDPR. By clicking on the link below, you can view more details and decide individually whether and which cookies you wish to allow. There you can also revoke your consent at any time with effect for the future and change the settings you have made.

Cookies are small text files that are stored on your end device with the help of the browser. We use cookies to make the website and our services more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit.

You can find the specific cookie settings here. 

5. TOOLS

We use various tools on the basis of your voluntary consent given via the cookie banner (Art. 6 para. 1 lit. a GDPR).

5.1 GOOGLE ANALYTICS

We use Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics also uses cookies, which enable your use of the website to be analysed. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and stored there. Google will use the information on our behalf to analyse the use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage.
You can prevent the installation of cookies by setting your browser software accordingly (so-called "browser add-on"); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available at the following link. The current link is: https://tools.google.com/dlpage/gaoptout?hl=en.
You can find more information on Google's terms of use and data protection at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html.

5.2 SOCIAL PLUGINS

If you have given your consent to marketing cookies in the cookie banner, our website uses a social plugin from Meta Platforms Ireland Limited ("Meta") and LinkedIn Ireland Unlimited Company ("LinkedIn").
When you visit a page of our website that contains such a social plugin, your device establishes a direct connection with the servers of the respective provider. The content of the social plugin is then transmitted directly to your device by the respective provider and integrated into our online offering. By integrating the social plugins on our website, the respective provider of the social network receives the information that you have accessed the corresponding page of our online offer. If you are logged in to the respective social network, the provider can assign your visit to your specific account on the platform. If you interact with the social plugins, for example by clicking the Facebook Like button, the corresponding information is transmitted directly from your device to the respective provider of the social network and stored there. If you are not a member of the social networks, it is still possible for the respective providers to find out and store your IP address.
Based on this data about your visit to our website and your use of our online offer, the respective provider of the social network can create user profiles about you.
Further information about data collection and the processing and use of data by Facebook and Instagram can be found here: https://www.facebook.com/about/privacy and by LinkedIn here: https://www.linkedin.com/legal/privacy-policy.

6. STORAGE PERIOD

With regard to the storage period, a distinction must be made between "session cookies" and "persistent cookies":

Session cookies are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your end device until the cookies either reach an expiry date specified by us or are manually deleted by you in your browser. We use such persistent cookies to recognise you the next time you visit our website. You can find the exact storage period under point 3:

7. RECIPIENTS OF DATA

We regularly use IT service providers to operate and manage the website, who may also have access to personal data on our behalf and in accordance with our instructions in order to be able to provide the commissioned IT services ("processors").
We also transfer your personal data to the following recipients:

• to external third parties to the extent necessary on the basis of our legitimate interests (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of a claim, etc.);

• to authorities and other public bodies to the extent required by law (e.g. tax authorities, courts, etc.).

Your data will not be passed on to any other third parties for their own purposes without your consent.

8. RIGHTS OF THE DATA SUBJECT

8.1 RIGHT TO INFORMATION

You have the right to request information from us about all personal data concerning you that is processed by us. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

8.2 RIGHT TORECTIFICATION AND RIGHT TO RESCTRICTION OF PROCESSING

You may request the rectification or completion of incorrect or incomplete data. Under certain circumstances, for example if the accuracy of data is disputed until the accuracy has been verified, you may request that the processing of data be restricted so that it may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

8.3 RIGHT TO DATA PORTABILITY

You may request that we send you - or, where technically feasible, a third party designated by you – a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

• the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and

• the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

8.4 RIGHT TO CANCELLATION

You have the right to erasure of data in certain circumstances, for example if it is not processed in accordance with data protection requirements.
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

8.5 RIGHT OF OBJECTION

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR.
In this case, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

8.6 RIGHT TO REVOKE THE DECLARATION OF CONSENT UNDER DATA PROTECTION LAW

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before ist withdrawal.

8.7 SUPERVISORY AUTHORITY

Irrespective of any other legal remedies, you have the right to lodge a complaint with the national supervisory authority of your place of residence if unlawful processing of personal data is assumed. In Austria, the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, e-mail dsb@dsb.gv.at, telephone: +43 1 52 152-0 is responsible.
 
Status: September 2023