Privacy Policy Sheet

DATA PROTECTION INFORMATION SHEET PURSUANT TO ART. 13 GDPR (DIRECT COLLECTION) PURSUANT TO ARTICLE 14 GDPR (THIRD-PARTY COLLECTION)

FOR INTERESTED PARTIES, CUSTOMERS, SERVICE PROVIDERS FOR EMPLOYEES, APPLICANTS

We hereby inform you of how we handle your personal data that we collect and store as Sunny Side of Life, S.L. Personal data is information that relates to you and can lead to your identification. In detail:

1. Name and contact details of the controller, the representative of the controller and any data protection officer

Person in charge:

Sunny Side of Life, S.L.

Oliver Gläser

Ronda Ponent 13

E-07620 Llucmajor, Baleares

E-Mail be [at] sunnysideoflife [.] email

Phone: +34 608 71 12 7x (x=5+4 )

2. Purpose of processing and legal bases

The processing of data is carried out for the following purposes relating to interested parties, customers, service providers:

• to get in touch with you as an interested party, customer or service provider on the basis of your inquiry or questions on our part to you and/or to initiate or execute a contract (proof and/or mediation of the conclusion of a notarial purchase contract, proof and/or the mediation of a rental agreement, valuation of developed and undeveloped land, processing of all matters in connection with a property management company, Processing of mining damage and other processing activities, Art. 6 (1) (b) and (f) GDPR
• for the purpose of direct marketing, Art. 6 (1) (f) GDPR
• to comply with a legal obligation to which we are subject, including obligations to other associations, organisations and authorities, Art. 6 (1) (c) GDPR.
• In addition, Art. 6 (1) (a) GDPR (if you have given us your consent to processing that is not already legitimized by law) or Art. 6 (1) (f) GDPR (safeguarding our legitimate interests) are further legal bases for processing. The legitimate interest lies, for example, in providing you with new information in the context of direct marketing that appears necessary and/or sensible for the performance of the actual purpose of the contract.

The processing of data is carried out for the following purposes relating to employees, applicants:

First and foremost, data processing serves to establish, execute and terminate the employment relationship, Art. 6 (1) (b) GDPR. In detail:

• to get in touch with you as an applicant or employee, Art. 6 (1) (b) and (f) GDPR,
• in order to be able to carry out the existing employment relationship with you, Art. 6 (1) (b) GDPR,
• to comply with a legal obligation to which we are subject, including obligations towards other associations, organisations and authorities, in particular in order to be able to fulfil our legal obligations as an employer in the area of tax and social security law, Art. 6 (1) (c) GDPR in conjunction with § 26 BDSG-new.
• In addition, Art. 6 (1) (a) GDPR (if you have given us your consent to processing that has not already been legitimized by law, Art. 7 GDPR in conjunction with Section 26 (2) BDSG-new), or Art. 6 (1) (f) GDPR (safeguarding our legitimate interests; e.g. investigation of criminal offences (legal basis § 26 (1) sentence 2 BDSG-new) or internal communication) form further legal bases for processing. The legitimate interest lies, for example, in informing you about operational events.
• Insofar as special categories of personal data are processed in accordance with Art. 9 (1) GDPR, this serves in the context of the employment relationship for the exercise of rights or the fulfilment of legal obligations under labour law, social security law and social protection (e.g. disclosure of health data to the health insurance company, Recording of severe disability due to additional leave and determination of the severely disabled person's levy). This is done on the basis of Art. 9 para. 2 b) GDPR in conjunction with § 26 para. 3 BDSG-new. In addition, the processing of health data may be necessary for the assessment of your ability to work in accordance with Art. 9 para. 2 h) in conjunction with § 22 para. 1 b) BDSG new.
• In addition, the processing of special categories of personal data may be based on consent pursuant to Art. 9 (2) (a) GDPR in conjunction with Section 26 (2) BDSG-new (e.g. occupational health management).

3. Category of data

The following categories of data are processed by us in relation to interested parties, customers, service providers:

When you first contact us:

• First name and surname
• Company name
• Address
• Telephone number
• E-mail address

If a viewing appointment has been arranged, the following can still be processed:

• Type, age, size and equipment, amount of rental or maintenance costs of the apartment or property
• Photos/photographs of your property and interior design
• Consumption data (heating, water, electricity, property taxes)
• Energy Performance Certificate data for the property
• Prices (e.g. for your property, rental prices)
• Parcel / Municipal area
• Presence of pets
• Number of persons living in the household
• The existence of a certificate of eligibility for housing, if necessary

If a contract is about to be concluded (deadline before the conclusion of the contract), the following categories of data may also be processed:

• Birth
• Data from land registers
• Data from contracts, appraisals, building files, lists of building encumbrances/contaminated sites on the property
• Data from declarations of division, certificates of seclusion, minutes, annual statements, amount of reserves of communities of property
• Insurance data for the property
• Occupation
• Employer
• SCHUFA/Information Information
• Bank account
• Solvency information
• Entries in public lists of debtors (e.g. an affidavit)
• Eviction Order/Preliminary Injunction in Lease Matters

At the time of making the decision for the specific conclusion of the contract, the following categories of data may also be processed:

• Identity card data
• Proof of income

The following categories of data are processed by us in relation to employees, applicants:

• Name and surname
• Surname, maiden name
• Address
• Sex
• Date of birth
• Place of birth
• Nationality
• Contact details (e.g. telephone, e-mail, fax)
• Marital status
• The existence of a severely disabled status
• Account details
• Previous employment (incl. date of entry and exit)
• previous employer
• School Leaving Certificates
• Apprenticeships
• Studies / Training
• (already taken) Holidays
• Sick leave (incl. certificates of incapacity for work)
• Health data (e.g. in the context of company integration management -BEM-)
• Status at the start of the activity (pupil, student, employee, self-employed, etc.)
• Vacations
• Tax data, tax class, tax identification number, social security number, pension insurance number
• Denomination
• Health insurance details
• Information on an exemption from compulsory pension insurance
• Remuneration/Salary
• Disclosures on capital-forming benefits
• Information on other occupations
• Personnel number
• Time Tracking Data
• Skill Data
• Salary data

In addition, we process personal data that we have lawfully obtained from publicly accessible sources (e.g. professional networks such as Xing, etc.).

4. Recipients of the data

Recipients of the data may be related to interested parties, customers, service providers:

• Landlord, Seller, Owner
• Tenants, Buyers
• Caretaker
• Grantor of heritable building rights
• Districts/Cities/Municipalities
• Censor
• Chimney Sweep, Energy Consultant
• Property Managers
• Measurement Service Providers
• Craftsman
• Utilities
• Insurances
• Credit institutions
• Lawyers/Notaries
• RAG
• Surveying offices
• Sewer/Pipe Rehabilitation Companies
• Tax advisor

A transfer of data to other EU countries does not take place and is not intended.

Recipients of the data may be related to employees and applicants:

• Authorities (e.g. pension insurance institutions, social security institutions, tax authorities, courts)
• Employment Agency
• Lawyers/Notaries
• Tax advisor
• Banks, savings banks, credit institutions (SEPA payment transactions)
• Health insurance
• Insurances
• Third-party debtors in the event of garnishment of wages and salaries
• Insolvency administrator in the event of personal insolvency

A transfer of data to other EU countries does not take place and is not intended.

5. Duration of storage; Deletion

The data will be stored for the duration of the respective purpose. That is. Your data will be processed at least for the duration of the contract. Your personal data will be deleted upon achievement of the respective purpose, unless otherwise prohibited by legal or contractual obligations, such as retention obligations under the Money Laundering Act (5 years), commercial law (6, 10 years) or tax law (10 years), conflict with this. Otherwise, the data will not be deleted for the period after the purpose has been achieved, insofar as this is still necessary for the assertion, exercise or defence of legal claims. The regular limitation period for other claims is 3 years (§ 195 BGB), in the cases of § 197 BGB 30 years. If an interested party decides not to conclude a contract, the data will also be deleted after 6 months (after the last contact). An interested party, without an interest in concluding a contract, can assert against the controller that his data must be deleted immediately. Unless the reasons set out in this section apply.

Data of rejected applicants for employment will be deleted after 4 months after notification of the rejection.

6. Right of access (Art. 15 GDPR)

You have the right to request information about your data stored by us at any time.

7. Right to rectification (Art. 16 GDPR) or deletion of data (Art. 17 GDPR)

In the event that your data has been stored incorrectly or incompletely, you have the right to request correction or deletion.

8. Right to restriction of processing (Art. 18 GDPR)

You may request the restriction of processing under the conditions of Art. 18 GDPR if you contest the accuracy of the data collected, if the processing is unlawful or the purpose of the processing has been fulfilled, as well as if you have objected to the processing pursuant to Art. 21 (1) GDPR.

9. Right to withdraw consent (Art. 7 (3) GDPR)

To the extent that the processing of your personal data for a specific purpose is based on your consent, you can withdraw it at any time; however, until the time of your revocation, the data processing remains lawful.

The revocation must be addressed to:

Sunny Side of Life, S.L.

Ronda Ponent 13

E-07620 Llucmajor, Baleares

E-mail be[at]sunnysideoflife. [email]

Phone: +34 608 71 12 7x (x=5+4 )

10. Right to object to processing (Art. 21 GDPR)

(1) Insofar as the processing of your personal data is based on the balancing of interests, you may object to the processing in accordance with Art. 21 GDPR with the controller. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, but is based on the legal basis of Art. 6 (1) (e) and/or (f) GDPR. If you wish to object, we will ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will review the situation and will either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing.

(2) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

You can inform us about your objection pursuant to Art. 21 GDPR using the following contact details:

Sunny Side of Life, S.L.

Oliver Gläser

Ronda Ponent 13

E-07620 Llucmajor, Baleares

E-mail be[at]sunnysideoflife. [email]

Phone: +34 608 71 12 7x (x=5+4 )

11. Right to data portability (Art. 20 GDPR)

You have the right to receive your data – provided to Sunny Side of Life, S.L. – and to have it transferred to a third party, provided that this is technically feasible.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data is unlawful. Responsible for Sunny Side of Life, S.L. is the State Commissioner for Data Protection and Freedom of Information Berlin.

13. Data source

Generally available sources:

Information in mass media, such as

• Newspapers
• Periodicals
• Broadcasting (radio and television)

Information on websites

Information on/in data carriers distributed to anyone, such as

• Books
• Address and telephone directories

information in registers accessible to everyone, such as

• Commercial register
• Population registers only for data that are available in a simple population register information.

14. Are you obliged to provide your data?

To be able to get in touch with you, e.g. In order to answer any questions you may have about us, it is necessary for you to provide us with your appropriate contact address (e.g. e-mail address) where we can reach you. The other data categories listed above and the individual information associated with them are necessary, for example, so that an evaluation or a selection decision can be made. Furthermore, the information is required, for example, in order to be able to conclude a contract with you that meets the legal requirements, to be able to issue invoices, etc. Without providing the required data, we cannot conclude a contract with you and thus cannot provide you with our service.

15. Automated decision-making (incl. profiling)

When a search order or sales order is placed via the brokerage software, an automatic selection is made on the basis of the type of property sought/offered and the object location sought/offered.

Note: For the sake of improved readability, the masculine spelling was usually used. At this point, we expressly point out that both the masculine and the feminine spelling are meant.

Data Protection Consent

By using the services, the user consents to the processing and storage of personal data by Sunny Side of Life, S.L., such as first name, surname, address, telephone number and e-mail address. This is done for the purpose of proving and/or arranging the conclusion of a lease agreement or a purchase contract or for the valuation of developed and undeveloped land. All or part of this data will be transmitted to third parties – I have read the following information on data protection as well as the duty to provide information and transparency. This consent can be revoked at any time with effect for the future. To revoke your consent, please send a written declaration of consent to Sunny Side of Life, S.L., Ronda Ponent 13, E-07620 Llucmajor or by e-mail to be[at]sunnysideoflife. [email].

What data do we collect?

If you decide to request a property exposé for the purchase/rental of a property, we will store the title, first and last name, address, telephone number and e-mail address of the prospective buyer or tenant. This is done on the legal basis of Art. 6, para. 1b of the GDPR.

If you commission a search request for the purchase/rental of a property, we store the title, first and last name, address, telephone number, e-mail address of the prospective buyer or tenant as well as the details of your search profile (e.g. size, location, price of the property you are looking for). This is done on the legal basis of Art. 6, para. 1 a of the GDPR. You can revoke this request at any time.

If you would like to rent a property after viewing, we will ask the landlord for a self-disclosure with approved and relevant information about you as a future tenant. If you and the owner then wish to conclude the rental agreement, we will pass on your data to Creditreform for a credit check with your prior consent. You can find out more about this in the information and transparency obligation attached below.

If you want to buy a property, we collect additional data such as date of birth, tax identification number and matrimonial property regime for the preparation of the notarial purchase contract. We forward this data to the notary for the preparation of the notarial purchase contract. Furthermore, under the Money Laundering Act, we are required to make a copy of your identity card and keep it for 5 years. You can find out more about this in the information and transparency obligation attached below.

If you instruct us to contact you about the sale/rental of a property, for advice or valuation of real estate, we store your title, first and last name, address, telephone number and e-mail address and all property data provided. This is done on the legal basis of Art. 6, para. 1b of the EU GDPR. You can find out more about this in the information and transparency obligation attached below.

If you would like to be contacted for financing via our cooperation partner Raiffeisenbank Aschaffenburg, we will pass on your title, first and last name as well as telephone number to Raiffeisenbank Aschaffenburg - but of course only at your express request and with prior consent. This is done on the legal basis of Art. 6, para. 1a of the EU GDPR.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security gaps. It is not possible to completely protect the data from access by third parties.

What happens to your data?

Your data will not be sold or passed on to third parties without authorisation for other economic reasons.