Zum Hauptinhalt springen

Privacy Policy

I. Information on the Processing of Your Data pursuant to Art. 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The controller for this website is

Pacon Real Estate GmbH
Im Schuhmachergewann 6
D-69123 Heidelberg
Email: datenschutz@pacon-re.de

You can reach the Data Protection Officer via email at datenschutz@pacon-re.de or through the postal address mentioned above.

2. Data Processed for Website Provision and Log File Creation

a. What Data is Processed and for What Purpose?

Whenever content on the website is accessed, data that may allow identification is temporarily stored. The following data is collected:

  • Date and time of access
  • IP address
  • Hostname of the accessing computer
  • Website from which the website was accessed
  • Websites accessed via the website
  • Page visited on our website
  • Notification of whether the retrieval was successful
  • Amount of data transferred
  • Information about the browser type and version used
  • Operating system

Temporary storage of the data is necessary for the course of a website visit to enable the delivery of the website. Further storage in log files occurs to ensure the functionality of the website and the security of IT systems. These purposes also constitute our legitimate interest in data processing.

These are exclusively technical platform logs of the hosting provider, serving the operation and security of the infrastructure. No user activity analysis or tracking of user behavior takes place. We do not use analytics tools (e.g., Google Analytics) or marketing/advertising services.

b. On What Legal Basis Are These Data Processed?

The data are processed based on Art. 6 Abs. 1 Letter f GDPR.

c. Are There Other Recipients of the Personal Data Besides the Controller?

The website is hosted by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Service: Azure Static Web Apps, Azure Region "Germany West Central," Frankfurt am Main). The host receives the aforementioned data as a processor pursuant to Art. 28 GDPR. The basis is the Microsoft Data Protection Addendum (DPA). The data are processed and stored exclusively in a German data center.

d. How Long Are the Data Stored?

The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. For website provision, this is the case when the respective session ends. Log files are kept accessible exclusively to administrators for up to 30 days and then permanently deleted.

3. Local Storage in the Browser

This website does not use cookies. Only two entries are stored in your browser's local storage (localStorage). These data remain exclusively on your device and are never transmitted to a server:

  • Consent: Stores that you have acknowledged the privacy notice so that it is not displayed again on each visit.
  • Language Preference: Stores your selected language (German/English) to display the website in the correct language on your next visit.

Legal Basis: Art. 6 Abs. 1 Letter f GDPR (legitimate interest in a functional website). You can delete these entries at any time via your browser settings.

4. Online Application Process (Personio)

Our website includes an embedded application form in the "Career" section, operated via the recruiting platform of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich. If you apply via this form, your personal data (e.g., name, email address, phone number, resume, cover letter, certificates) are directly collected by Personio as a processor pursuant to Art. 28 GDPR, transmitted via TLS encryption, and stored in a database.

Pacon Real Estate GmbH is the responsible entity for processing your application data. Personio acts solely as a technical service provider (processor). The basis is a data processing agreement between us and Personio.

Legal Basis: Art. 6 Abs. 1 Letter b GDPR (execution of pre-contractual measures) and § 26 BDSG (data processing for employment purposes).

Retention Period: Your application data are retained for 6 months after the conclusion of the application process and then deleted unless further consent (e.g., inclusion in a talent pool) is provided.

The complete privacy policy for the application process — including information on data processing by Personio as the operator of the recruiting site — can be found in the footer of the career section on our website.

5. Rights of Data Subjects

a. Right to Access

You can request information pursuant to Art. 15 GDPR about your personal data that we process.

b. Right to Object

You have the right to object for special reasons (see Point II).

c. Right to Rectification

If the information concerning you is not (or no longer) accurate, you can request rectification pursuant to Art. 16 GDPR. If your data are incomplete, you can request completion.

d. Right to Erasure

You can request the erasure of your personal data pursuant to Art. 17 GDPR.

e. Right to Restriction of Processing

You have the right to request restriction of processing of your personal data pursuant to Art. 18 GDPR.

f. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right pursuant to Art. 77 Abs. 1 GDPR to lodge a complaint with a supervisory authority of your choice. This includes the supervisory authority responsible for the controller:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Tel.: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
www.baden-wuerttemberg.datenschutz.de

g. Right to Data Portability

If the conditions of Art. 20 Abs. 1 GDPR are met, you have the right to have data that we process based on your consent or in fulfillment of a contract automatically transferred to yourself or third parties. The collection of data for website provision and log file storage is essential for the operation of the website. Therefore, it is not based on consent pursuant to Art. 6 Abs. 1 Letter a GDPR or a contract pursuant to Art. 6 Abs. 1 Letter b GDPR but is justified pursuant to Art. 6 Abs. 1 Letter f GDPR. The conditions of Art. 20 Abs. 1 GDPR are therefore not met in this respect.

II. Right to Object pursuant to Art. 21 Abs. 1 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 Abs. 1 Letter f GDPR. The controller will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims. The collection of data for website provision and log file storage is essential for the operation of the website.