Information obligation according to EU GDPR

How we handle your data and your rights

Information according to Articles 13, 14 and 21 of the EU General Data Protection Regulation (GDPR)

1. Name of the responsible body

BayernHeim GmbH

2. Managing Director and Chair

Managing Director: Ralph Büchele

Chair of the Supervisory Board: Ministerial Director Petra Kramer

3. Address of the responsible body

BayernHeim GmbH

Einsteinstr. 172

81677 Munich

4. Data protection officer

Treuhandstelle für Wohnungsunternehmen in Bayern GmbH

Data protection department

Stollbergstraße 7

80539 Munich

datenschutzberatung@vdwbayern.de

5. Purposes of data collection, processing or use

Rental of living space:

  • - Billing (rent, operating costs, debt management, etc.)
  • - Initiation and implementation of a contractual obligation similar to a legal transaction
  • - Credit checks as part of the contract initiation
  • - Prospect management
  • - Rent adjustments using reference apartment information (§ 558a BGB)
  • - Rental management
  • - Administration

Legal basis: Contract or contract initiation, Operating Costs Ordinance, Heating Costs Ordinance and EED, reporting laws, AO, BGB, HGB

The legality of the processing is based on the relevant and appropriate business relationship between the company and the person concerned, Article 6 GDPR / EC 47, Art. 9 GDPR and Section 26 BDSG, if applicable in conjunction with other legal norms.

6. Recipients or categories of recipients to whom the data can be communicated

External recipients:

  • - Credit agencies
  • - Recipients of rent adjustments within the scope of the reference apartment information in accordance with Section 558a of the German Civil Code
  • - External data protection officer
  • - Craftsmen (in particular maintenance, modernization, repair measures)
  • - Caretakers and cleaning companies
  • - Debt collection companies
  • - Service providers for property management
  • - IT service providers or software system houses for IT applications (e.g. ERP system, e-archive, telephone service provider/system, external IT administration and auditing, etc.)
  • - Measurement service companies
  • - Prospective tenants for subsequent rentals, after consent
  • - Lawyers, legal advisors (tenant disputes, debt collection, eviction), notaries (purchase/sale)
  • - Service companies for fire protection (smoke detectors, chimney sweeps, etc.)
  • - Social/care services, if necessary after consent
  • - Insurance companies
  • - Utility companies (energy, water, sewer, Garbage)

Offices and authorities

  • - Arge/Jobcenter
  • - Deutsche Bundesbank, Financial Sanctions Service Center
  • - Residents' Registration Office
  • - Investigation and law enforcement authorities
  • - District offices, housing offices, municipalities
  • - Social Welfare Office
  • - Federal and State Statistical Offices


7. Standard deadlines for the deletion of data

If not explicitly listed, in accordance with the statutory retention periods

8. a planned data transfer to third countries

It is possible that the data will be transferred to the United States of America. The recipient has made a voluntary commitment through the EU-US Privacy Shield. Guarantees in accordance with Art. 46 GDPR for the transfer to the third country are in place.

9. Rights of the data subject

  • - Information about your stored and processed personal data
  • - Correction of the stored personal data
  • - Data portability
  • - Restriction of the use of the data
  • - Deletion of data that is no longer required
  • - Objection (especially in the case of previously given consent)

Please send inquiries regarding the protection/implementation of your rights in writing to the address of the responsible body given above.

10. Right to complain to a supervisory authority

According to Article 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR or the BDSG. Please send complaints to:

Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach

poststelle@lda.bayern.de

11. Information regarding the provision of personal data

All data provided to BayernHeim GmbH is necessary in order to be able to guarantee the implementation of a rental/usage relationship. In each of these cases, the collection and processing of the personal data of the data subjects relates to a corresponding contractual relationship or the initiation of a contractual relationship. Furthermore, processing can take place if you have given your consent, if it is a task that is in the public interest, is carried out in the exercise of official authority or due to a legal obligation, or is necessary to protect the legitimate interests of the person responsible or a third party.

12. Automated decision-making (Article 13 paragraph 2 letter f GDPR / Article 22 GDPR)

Automated decision-making does not take place.


As of 07/24