Data protection has a particularly high priority for our company Karlinger Real Estate GmbH. The use of our website is generally possible without providing personal data. Insofar as the entry of personal data is required, this is done on the basis of a legal basis (See legal basis of processing).

The collection and processing of your personal data in our company, is carried out in compliance with the applicable data protection regulations, in particular the Data Protection Regulation (DSGVO) and the DSG. The collection and processing is for the purpose of customer and supplier traffic. With this privacy policy, we comply with the obligation to inform (Article 13 DSGVO). Furthermore, we would like to inform you about your rights.

As a dutiful company, we have implemented the necessary TOMs (technical and organizational measures) to ensure the protection of personal data processed by us. If you are not comfortable with e-mail-based data transfers for security reasons, you are also welcome to contact us by mail.

The responsible party in the sense of the DSGVO/DSG, is:

KARLINGER REAL ESTATE GmbH Etrichgasse 14 6020 Innsbruck Austria

office@tirolrealestate.com

www.tirolrealestate.com

When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person.

In particular, they are processed for the following purposes:

• Ensuring a smooth connection setup of the website,
• Ensuring a smooth use of our website,
• evaluation of system security and stability, and
• for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimize our website and the technology behind it.

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves the assignment of the request and the subsequent response to the same. The provision of further data is optional. Legal basis: The processing of the data entered in the contact form is based on a legitimate interest (Art 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to request a quote, the data entered in the contact form will be processed for the implementation of pre-contractual measures (Art 6 para 1 lit. b DSGVO).

Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. You can see whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f DSGVO. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Google Analytics opt-out. More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

Unless specifically stated, we store personal data only for as long as necessary to fulfill the purposes pursued. In some cases, the legislator provides for the retention of personal data, such as in tax or commercial law. In these cases, we only continue to store the data for these legal purposes, but do not process it in any other way and block or delete it after the legal retention period has expired.

a) Right to confirmation

Every data subject has the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

b) Right to information

Every data subject has the right to obtain confirmation from data controllers at any time as to whether personal data in question are being processed. If this is the case, you have the right to request from us free information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:

• the purposes of processing
• the categories of personal data processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
• the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or to obtain the restriction of processing by the controller, or a right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: Any available information about the origin of the data
• The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data are transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

If a data subject wishes to exercise this right, he or she may contact our data protection coordinator or another employee of the controller at any time.

c) Right to rectification

Every data subject has the right to demand the correction, if necessary also the completion, of incorrect/incomplete personal data concerning him or her.

If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

d) Right to erasure (right to be forgotten).

Pursuant to Article 17(1) of the GDPR, every data subject has the right to request that we erase personal data concerning him or her without undue delay, and we are obliged to erase personal data without undue delay if one of the following reasons applies:

• The personal data was collected or otherwise processed for such purposes for which it is no longer necessary.
• The data subject revokes his or her consent on which the processing was based pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO and there is no other legal basis for the processing.
• The data subject objects to the processing pursuant to Article 21(1) DS-GVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DS-GVO.
• The personal data have been processed unlawfully.
• The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data have been collected in relation to information society services offered pursuant to Article 8 (1) DS-GVO.

If the personal data have been made public by the TIROL REAL ESTATE GMBH and we as a data controller are obliged to erase the personal data pursuant to Article 17 (1) of the DS-GVO, the controller shall implement reasonable measures, including technical measures, to monitor the available technology and the cost of implementation in order to inform other data controllers which process the published personal data, that the data subject has requested from those other data controllers to erase all links to or copies of the personal data. The controller will arrange the necessary steps in individual cases.

If a data subject wishes to exercise this right, he or she may, at any time, contact our Data Protection Coordinator or another employee of the controller.

e) Right to restriction of processing

Every data subject has the right to obtain from the controller the restriction of processing if one of the following conditions is met:

• The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful , and the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data.
• The controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the establishment, exercise or defense of legal claims.
• The data subject has objected to the processing pursuant to Article 21 (1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

f) Right to data portability

Every data subject has the right to obtain personal data concerning him or her, which has been provided by the controller, in a structured, commonly used and machine-readable format. He or she has the right to transfer this data to another controller without hindrance from the controller, provided that:

1. the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and.
2. the processing is carried out with the help of automated procedures.

When exercising their right to data portability pursuant to Article 20(1) of the GDPR, the right to obtain that the personal data be transferred directly from the controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

g) Right to object

Any data subject has the right, on grounds relating to his or her particular situation, to object at any time to processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

If the controller processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data for such marketing. This also applies to profiling, insofar as it is related to such direct marketing.

If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

h) Automated decisions including profiling

Every data subject has the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning him or her or similarly significantly affects him or her

i) Right to withdraw consent under data protection law.

Every data subject has the right to withdraw consent to the processing of personal data at any time.

If a data subject wishes to exercise this right, he or she may, at any time, contact our data protection coordinator or another employee of the controller.

j) Right to lodge a complaint

Every data subject has the right to lodge a complaint with the data protection authority if he or she is of the opinion that the processing of personal data concerning him or her violates the GDPR or Section 1 or Article 2 1st main section of the Data Protection Act. In Austria, this is the data protection authority in Vienna.

Art. 6 (1) lit. a DSGVO

The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes.

Art. 6 (1) lit. b 6 DSGVO

Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request.

Art. 6 (1) lit. 6 c DSGVO

Processing is necessary for compliance with a legal obligation to which the controller is subject. E.g. tax regulations

Art. 6 (1) lit. 6 d DSGVO

Processing is necessary to protect the vital interests of the data subject or another natural person. E.g. disclosure of personal data after an accident.

Art. 6 (1) lit. 6 f DSGVO

Processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Unless specifically stated, we store personal data only for as long as necessary to fulfill the purposes pursued.

In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, we will only continue to store the data for these legal purposes, but will not process it in any other way and will delete it after the legal retention period has expired.

8. existence of automatic decision-making

As a responsible company, we do not use automatic decision-making or profiling.

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.