Information obligation according to EU GDPR
How we handle your data and your rights
Information according to Articles 13, 14 and 21 of the EU General Data Protection Regulation (GDPR)
1. Name of the responsible body
BayernHeim GmbH
2. Managing Director and Chair
Managing Director: Ralph Büchele
Chair of the Supervisory Board: Ministerial Director Petra Kramer
3. Address of the responsible body
BayernHeim GmbH
Einsteinstr. 172
81677 Munich
4. Data protection officer
Treuhandstelle für Wohnungsunternehmen in Bayern GmbH
Data protection department
Stollbergstraße 7
80539 Munich
datenschutzberatung@vdwbayern.de
5. Purposes of data collection, processing or use
Rental of living space:
- - Billing (rent, operating costs, debt management, etc.)
- - Initiation and implementation of a contractual obligation similar to a legal transaction
- - Credit checks as part of the contract initiation
- - Prospect management
- - Rent adjustments using reference apartment information (§ 558a BGB)
- - Rental management
- - Administration
Legal basis: Contract or contract initiation, Operating Costs Ordinance, Heating Costs Ordinance and EED, reporting laws, AO, BGB, HGB
The legality of the processing is based on the relevant and appropriate business relationship between the company and the person concerned, Article 6 GDPR / EC 47, Art. 9 GDPR and Section 26 BDSG, if applicable in conjunction with other legal norms.
6. Recipients or categories of recipients to whom the data can be communicated
External recipients:
- - Credit agencies
- - Recipients of rent adjustments within the scope of the reference apartment information in accordance with Section 558a of the German Civil Code
- - External data protection officer
- - Craftsmen (in particular maintenance, modernization, repair measures)
- - Caretakers and cleaning companies
- - Debt collection companies
- - Service providers for property management
- - IT service providers or software system houses for IT applications (e.g. ERP system, e-archive, telephone service provider/system, external IT administration and auditing, etc.)
- - Measurement service companies
- - Prospective tenants for subsequent rentals, after consent
- - Lawyers, legal advisors (tenant disputes, debt collection, eviction), notaries (purchase/sale)
- - Service companies for fire protection (smoke detectors, chimney sweeps, etc.)
- - Social/care services, if necessary after consent
- - Insurance companies
- - Utility companies (energy, water, sewer, Garbage)
Offices and authorities
- - Arge/Jobcenter
- - Deutsche Bundesbank, Financial Sanctions Service Center
- - Residents' Registration Office
- - Investigation and law enforcement authorities
- - District offices, housing offices, municipalities
- - Social Welfare Office
- - Federal and State Statistical Offices
7. Standard deadlines for the deletion of data
If not explicitly listed, in accordance with the statutory retention periods
8. a planned data transfer to third countries
It is possible that the data will be transferred to the United States of America. The recipient has made a voluntary commitment through the EU-US Privacy Shield. Guarantees in accordance with Art. 46 GDPR for the transfer to the third country are in place.
9. Rights of the data subject
- - Information about your stored and processed personal data
- - Correction of the stored personal data
- - Data portability
- - Restriction of the use of the data
- - Deletion of data that is no longer required
- - Objection (especially in the case of previously given consent)
Please send inquiries regarding the protection/implementation of your rights in writing to the address of the responsible body given above.
10. Right to complain to a supervisory authority
According to Article 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR or the BDSG. Please send complaints to:
Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach
poststelle@lda.bayern.de
11. Information regarding the provision of personal data
All data provided to BayernHeim GmbH is necessary in order to be able to guarantee the implementation of a rental/usage relationship. In each of these cases, the collection and processing of the personal data of the data subjects relates to a corresponding contractual relationship or the initiation of a contractual relationship. Furthermore, processing can take place if you have given your consent, if it is a task that is in the public interest, is carried out in the exercise of official authority or due to a legal obligation, or is necessary to protect the legitimate interests of the person responsible or a third party.
12. Automated decision-making (Article 13 paragraph 2 letter f GDPR / Article 22 GDPR)
Automated decision-making does not take place.
As of 07/24