Within the scope of this privacy policy, we provide you with the mandatory information required under Art. 12 and 13 of the General Data Protection Regulation (GDPR) regarding the processing of personal data in connection with the contractual relationship.
1. Legal Basis and Purpose of Data Processing
When we process personal data in connection with a contract, this is done exclusively for the purpose of initiating and fulfilling the contract. Only personal data that is necessary for fulfilling the contract is processed. This primarily includes the contact details of customers or their representatives (e.g., names, email addresses, and phone numbers). If we act as a data processor, the provisions specified in the data processing agreement apply. The data is only shared within our company with the internally responsible personnel. Furthermore, in compliance with legal requirements, data may also be shared with external accountants or tax advisors. For invoicing, we use the accounting software “Stripe” and the Property Management System “Guesty.” Data processing agreements have been concluded with these providers. The legal basis for data processing is Art. 6(1)(b) GDPR.
Personal data will be deleted after the termination of the contract and the expiration of any applicable statutory retention periods, provided there is no legal requirement (e.g., pursuant to Art. 6(1)(c) or (e) GDPR) or legitimate interest within the meaning of Art. 6(1)(f) GDPR that obliges or permits longer retention of the personal data.
3. Data Controller
The party responsible for data processing within the meaning of Art. 4 No. 7 GDPR is:
Cruwzo Germany GmbH, Friedrichstr. 171, 10117 Berlin
4. Rights of the Data Subject
Data subjects have the right to obtain, free of charge, information about the origin, recipients, and purpose of their stored personal data. They also have the right to request the correction or deletion of their data. Furthermore, under certain circumstances, they can request the restriction of the processing of their personal data; in such cases, the data may only be processed—apart from storage—under specific conditions (e.g., for reasons of important public interest of the EU). In addition, every data subject has the right to lodge a complaint with the competent supervisory authority.
5. Right to Object to Data Collection
In special cases, as well as for direct marketing under Article 21 GDPR, if data processing is based on Article 6(1)(e) or (f) GDPR, data subjects have the right at any time, for reasons arising from their particular situation, to object to the processing of their personal data; this also applies to profiling based on these provisions.
If a data subject objects, we will no longer process the personal data of the individual unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims (objection under Article 21(1) GDPR).
If personal data is processed for direct marketing purposes, data subjects have the right to object at any time to the processing of their personal data for such advertising; this also applies to profiling insofar as it is related to such direct marketing. If the data subjects object, their personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).
