Privacy Policy
for the SoFi Living Apartments serviced apartment building in Hanover
As of: 2022-12-31
1. General information and mandatory information on data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy listed below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the controller” in this Privacy Policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may include, for example, data you enter into a contact form.
When you use this website, various personal data is collected.
2. Personal data
Personal data includes, among other things, data that can be used to identify you personally, such as the name, address, email address, and telephone number of a data subject.
3. Purpose of processing personal data
We use the personal data you provide to respond to your enquiries, process your orders, or provide you with access to certain information or offers.
We will collect, process, and use the personal data you provide online only for the purposes communicated to you. Your personal data will not be passed on to third parties without your explicit consent.
Personal data is collected and transmitted to state institutions and authorities entitled to receive information only within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees and the service providers commissioned by us are obliged to maintain confidentiality and to comply with the provisions of the Federal Data Protection Act (BDSG).
In accordance with the applicable European and national legal provisions. The BDSG regulates which personal information about guests, employees, and business partners must be protected (personal data, Section 3 (1) BDSG) and who is responsible for this (controller, Section 3 (7) BDSG). Discretion is therefore part of our standard.
This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Other data is collected automatically by our IT systems when you visit the website, or after your consent. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyse your user behaviour.
Please note that data transmission over the internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
4. What rights do you have regarding your data?
Right to confirmation: Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right of confirmation, they may contact the controller at any time.
Right of access: Every person affected by the processing of personal data has the right to obtain, at any time, free information from the controller about the personal data stored about them, as well as a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:
- the purposes of the processing
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of personal data concerning them, or restriction of processing by the controller, or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- where the personal data is not collected from the data subject: any available information as to its source
- the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and—at least in those cases—meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
Furthermore, the data subject has the right to obtain information as to whether personal data has been transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, they may contact the controller at any time.
Right to rectification: Every person affected by the processing of personal data has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data—including by means of a supplementary statement.
If a data subject wishes to exercise this right to rectification, they may contact the controller at any time.
Right to erasure (right to be forgotten): Every person affected by the processing of personal data has the right to request that the controller erase personal data concerning them without undue delay, provided that one of the following reasons applies and insofar as the processing is not necessary:
The personal data was collected for such purposes or otherwise processed for which it is no longer necessary.
Handling of registration data at the beginning of the stay: the hotelier is obliged to request the guest’s registration data. The accommodated person must then complete and sign a special registration form upon arrival.
In addition, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
If you have any questions about data protection, you may contact us at any time.
5. Storage period
Unless a more specific storage period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, erasure will take place once these reasons no longer apply.
6. Data collection on our website
Data that is collected automatically when you visit our website.
When using our website, the following data is stored for organisational and technical reasons:
- date and time of access
- the names of the pages you accessed
- the pages you accessed, your “click path”
- achievement of “website goals” (conversions, e.g., newsletter sign-ups, downloads, purchases)
- your user behaviour (e.g., clicks, time on site, bounce rates)
- your approximate location (region)
- your IP address (in truncated form)
cookies
Some of the website pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
7. Analytics tools and advertising
Google Analytics
When you visit this website, your browsing behaviour may be statistically evaluated. This is done primarily with so-called analytics programs.
Our websites use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.
Further information on Google Analytics terms of use and Google’s privacy policy can be found at https://www.google.com/analytics/terms/de.html
8. Google Maps
This site uses the Google Maps map service via an API. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under the section “Access data” is transmitted to Google. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and to make it easy to find the locations we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
If you do not want this to be associated with your Google profile, you must log out before activating the button.
More information on how Google handles user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.
Further information on the Google Maps terms of use can be found at: https://www.google.com/intl/de_de/help/terms_maps.html
9. Newsletter distribution
If you would like to subscribe to our newsletter, we require your email address as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively to send the requested information and do not pass it on to third parties.
10. Data protection information in the application process
We process applicant data only for the purpose of and within the scope of the application process in accordance with the legal requirements. Applicant data is processed to fulfil our (pre-)contractual obligations within the application process within the meaning of Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR, insofar as data processing becomes necessary for us, for example, in the context of legal proceedings (in Germany, Section 26 BDSG also applies).
The application process requires applicants to provide us with their applicant data. The required applicant data is marked if we provide an online form; otherwise, it results from the job descriptions and generally includes personal details, postal and contact addresses, and the documents belonging to the application, such as cover letter, CV, and certificates. In addition, applicants may voluntarily provide us with additional information.
By submitting the application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this Privacy Policy.
11. Name and address of the controller:
The controller within the meaning of the EU General Data Protection Regulation (GDPR), other data protection laws applicable in the
Member States of the European Union, and other provisions with
data protection character is: SoFi-Living-Apartments / managed by Ina Albrecht e.K.
ImmoGreat Hannover
Im Heidkampe 55,
30659 Hanover,
info@sofi-living-apartments.de
12. Changes to data protection provisions
We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technical developments.

