Privacy Policy

1. Controller

UPEC Verwaltungs- & Beteiligungs GmbH
Klosterkamp 5
27711 Osterholz-Scharmbeck
Germany

Email: pg@upecrealestate.com

Managing Directors: Udo Granz, Philip Granz

2. Collection and storage of personal data, and the nature and purpose of its use

a) When visiting the website (server log files)

When you access our website, the web server automatically records information and stores it temporarily in what are known as server log files:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file / page retrieved
  • Volume of data transferred and access status (HTTP status code)
  • Browser type and version
  • Operating system used
  • Referrer URL (the previously visited page)

Processing takes place to ensure a smooth connection, system security and for administrative purposes, on the basis of Art. 6(1)(1)(f) GDPR (legitimate interest).

b) When using our contact form

If you use our contact form, we collect the data you enter (name, email address, where applicable telephone number, and your message) in order to process and respond to your enquiry. The legal basis for this is Art. 6(1)(1)(a) GDPR (consent) or Art. 6(1)(1)(b) GDPR, where your enquiry is aimed at concluding or initiating a contract.

3. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL / TLS encryption. You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://” and by the padlock symbol in your browser bar.

4. Disclosure of data to third parties / processors

  • Web3Forms: We use the Web3Forms service (web3forms.com) for the technical forwarding of form enquiries. The data you enter in the contact form is transmitted to Web3Forms in encrypted form, processed there and forwarded to us by email. Processing takes place on the basis of our legitimate interest in the efficient and secure handling of enquiries (Art. 6(1)(1)(f) GDPR) or for the performance of a contract (Art. 6(1)(1)(b) GDPR).
  • No disclosure to third parties beyond this takes place unless we are legally obliged to do so or you have expressly consented.

5. Web analytics with Plausible Analytics

On our website we use the privacy-friendly web analytics service Plausible Analytics (plausible.io). Plausible uses no cookies, stores no personal data and does not track users across multiple websites. All data collected is processed in aggregated and anonymised form. At no point can it be related to an individual.

Use takes place on the basis of our legitimate interest in privacy-compliant, anonymous reach measurement pursuant to Art. 6(1)(1)(f) GDPR.

6. Hosting

Our website runs on our own server using nginx. The server log files generated in the course of hosting serve to ensure IT security and to analyse faults. They are deleted automatically after 14 days.

7. Retention period

Personal data from contact enquiries is deleted once the enquiry has been dealt with conclusively, and at the latest after six months, unless statutory retention obligations (for example under commercial or tax law) or pre-contractual/contractual requirements prevent deletion.

8. Your rights as a data subject

Within the scope of the applicable statutory provisions you have the right at any time to:

  • Information about the personal data we process about you (Art. 15 GDPR)
  • Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
  • Erasure of the data we hold about you (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR)
  • Withdrawal of your consent: you have the right to withdraw consent to data processing at any time with effect for the future (Art. 7(3) GDPR).
  • Right to object: you may object at any time to the future processing of your data on grounds relating to your particular situation (Art. 21 GDPR), where processing is carried out on the basis of Art. 6(1)(1)(f) GDPR.

You also have the right to lodge a complaint with a competent data protection supervisory authority (as a rule the Landesbeauftragte für den Datenschutz Niedersachsen).

9. Data protection contact

If you have questions about the collection, processing or use of your personal data, or wish to exercise your data subject rights, please contact:

UPEC Verwaltungs- & Beteiligungs GmbH
Klosterkamp 5
27711 Osterholz-Scharmbeck
Email: pg@upecrealestate.com