Privacy Policy

Privacy Policy

The data controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

maklerform UG (limited liability)
Heinrichstraße 10F
23617 Stockelsdorf
Authorised representative: Johannes Möllerherm
hello@propform.io

Your rights as a data subject

You may exercise the following rights at any time using the contact details provided for our Data Protection Officer:

  • Access to your data stored by us and information regarding its processing (Art. 15 GDPR),
  • Rectification of inaccurate personal data (Art. 16 GDPR),
  • Erasure of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing, provided that we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us your consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority in the federal state where you reside or with the authority responsible for us as the data controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

 

Collection of general information when visiting our website

Nature and purpose of processing:

When you access our website, i.e. when you do not register or otherwise submit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar details.

It is processed in particular for the following purposes:

  • To ensure the website connects without issues,
  • To ensure the smooth operation of our website,
  • To evaluate system security and stability, and
  • to optimise our website.

We do not use your data to draw conclusions about your identity. Where applicable, we may analyse information of this kind anonymously for statistical purposes in order to optimise our website and the underlying technology.

Legal basis and legitimate interest:

Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may include technical service providers acting as data processors for the operation and maintenance of our website.

 

Retention period:

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case once the respective session has ended.

In the case of data stored in log files, this occurs after 14 days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are anonymised so that it is no longer possible to identify the client making the request.

 

Provision mandatory or necessary:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted. For this reason, an objection is not possible.

 

Cookies

Like many other websites, we also use so-called ‘cookies’. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or the entire cookie file. Furthermore, you will find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information via the following links:

Storage duration and cookies used:

Provided you allow us to use cookies via your browser settings or consent, the following cookies may be used on our websites:

Our own propform session cookie: Storage period 1 week, technically necessary for the functionality of the login area and the forms to distinguish which user is logged in or is merely a guest
XSRF token cookie: Storage period 1 week, technically necessary cookie to prevent XSRF.
Paddle cookie: Storage period: 4 weeks; a cookie from the payment service provider used to process subscription payments.

Technically necessary cookies

Nature and purpose of processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the browser accessing the site can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require cookies for the following applications:

  • secure form submissions
  • Login area
  • payment processing

Legal basis and legitimate interest:

Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in ensuring our website is user-friendly.

Recipients:

Recipients of the data may include technical service providers who act as data processors for the operation and maintenance of our website.

 

Provision mandatory or necessary:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. Furthermore, individual features and services may be unavailable or restricted.

Objection

Please read the information below regarding your right to object under Article 21 of the GDPR.

 

Registration on our website

Nature and purpose of processing:

To register on our website, we require certain personal data, which is transmitted to us via an input form.

The following data is also collected at the time of registration:

IP address, timestamp

Your registration is required to provide certain content and services on our website.

Legal basis:

The processing of the data entered during registration is based on the user’s consent (Art. 6(1)(a) GDPR).

Recipients:

Recipients of the data may include technical service providers acting as data processors for the operation and maintenance of our website.

 

Transfer to third countries:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

 

Retention period:

Data will only be processed in this context for as long as the relevant consent is in place.

Provision mandatory or necessary:

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to the content we offer.

 

Provision of paid services

Nature and purpose of processing:

In order to provide paid services, we request additional data, such as payment details, to enable us to fulfil your order.

Legal basis:

The processing of data required to conclude the contract is based on Article 6(1)(b) of the GDPR.

Recipients:

Recipients of the data may include data processors.

 

Transfer to third countries:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

 

Retention period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision mandatory or necessary:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

 

Newsletter

Nature and purpose of processing:

To deliver our newsletter, we collect personal data that is submitted to us via an input form.

We require a valid email address for registration to be effective. To verify that a registration has actually been carried out by the owner of an email address, we use the “double opt-in” procedure. To this end, we log the newsletter registration, the sending of a confirmation email and the receipt of the reply requested therein. No further data is collected.

Legal basis:

On the basis of your expressly given consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or similar information by email to the email address you have provided.

You may withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with future effect. A link to this effect can be found in every newsletter. You may also unsubscribe directly on this website at any time or notify us of your withdrawal via the contact details provided at the end of this privacy notice.

Recipients:

Recipients of the data may include data processors.

 

Transfer to third countries:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

 

Retention period:

In this context, the data will only be processed for as long as the relevant consent is in place. After that, it will be deleted.

Provision mandatory or necessary:

The provision of your personal data is voluntary, based solely on your consent. Without your consent, we are unfortunately unable to send you our newsletter.

Withdrawal of consent:

You may withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with future effect. You can unsubscribe via the link contained in every email or by contacting the data protection officer or the person responsible for data protection listed below.

 

Contact form

Nature and purpose of processing:

The data you enter is stored for the purpose of communicating with you individually. To do this, you must provide a valid email address and your name. This is used to assign your enquiry and subsequently respond to it. Providing further data is optional.

Legal basis:

The processing of data entered into the contact form is based on a legitimate interest (Art. 6(1)(f) GDPR).

By providing the contact form, we aim to make it easy for you to get in touch. The information you provide is stored for the purpose of processing your enquiry and for any follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed for the purpose of taking pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients:

Recipients of the data may include data processors.

 

Transfer to third countries:

The data collected may be transferred to the following third countries:

No

The following data protection safeguards are in place:

 

Retention period:

Data will be deleted no later than 6 months after the enquiry has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data once these periods have expired.

Provision mandatory or necessary:

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, email address and the reason for your enquiry.

 

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

 

Information regarding your right to object under Article 21 of the GDPR

Right to object in specific cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Recipient of an objection

maklerform UG (limited liability)
Heinrichstraße 10F
23617 Stockelsdorf
hello@propform.io

Changes to our privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the Data Protection Officer

If you have any questions regarding data protection, please send us an email or contact the person responsible for data protection within our organisation directly:

hello@propform.io

This privacy policy was created with the assistance of activeMind AG, the experts in external data protection officers (Version #2020-09-30).