Legal

The controller responsible for data processing on this website is:

commonground Real Estate GmbH
Nymphenburger Str. 213, D-80639 Munich
Germany
Managing Director: Oğuz Kuşdil
Phone: +49 (0) 89 28940414
Email: info@commonreal.com

You have the right at any time to request access to your personal data pursuant to Article 15 GDPR, rectification pursuant to Article 16 GDPR, erasure pursuant to Article 17 GDPR, restriction of processing pursuant to Article 18 GDPR, data portability pursuant to Article 20 GDPR and to object to processing pursuant to Article 21 GDPR.
You may withdraw any consent you have given at any time with effect for the future.
You also have the right to lodge a complaint with a competent supervisory authority. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).

When you access this website, certain information is automatically recorded and stored in server log files. This may include your browser type, operating system, referrer URL, IP address and the date and time of access.
The legal basis for this processing is our legitimate interest in ensuring the secure and stable operation of the website pursuant to Article 6(1)(f) GDPR.

This website is operated on our behalf by av-media productions GmbH (Rum bei Innsbruck, Austria). It is hosted on a server rented from Power-Netz Symgenius GmbH & Co. KG, Im Hüttenkamp 1, 38685 Langelsheim (Germany). The server is located in Germany. When you access the website, the host processes the access data described in section 3 (server log files); the legal basis is our legitimate interest in secure and stable operation (Article 6(1)(f) GDPR).

When you contact us using the contact form or by email, we process the information you provide in order to respond to and manage your enquiry.
The legal basis for this processing is Article 6(1)(a) and Article 6(1)(b) GDPR.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.

If you apply for an advertised position or send us a speculative application, we process the data you submit (name, contact details, earliest starting date and salary expectation, your message and the application documents you upload) solely in order to carry out the application procedure. The legal basis is Section 26 (1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 88 GDPR and Article 6 (1) (b) GDPR (steps prior to entering into an employment contract); where you provide further data voluntarily, Article 6 (1) (a) GDPR applies.

Files uploaded via the application form are automatically deleted from the web server once they have been sent to our recruitment mailbox; they are not stored there permanently. Within our company, the data is accessible only to those involved in the selection process.

If no employment relationship comes about, we delete your application documents no later than six months after the application procedure has been concluded. This period serves to comply with statutory obligations to provide evidence, in particular under the German General Equal Treatment Act (AGG). If you give your explicit consent, we will additionally include your documents in our applicant pool in order to approach you again about suitable positions; you may withdraw this consent at any time without formality. If you are hired, the data will be transferred to your personnel file.

For information, deletion or withdrawal, a message to karriere@commonreal.com is sufficient.

You can subscribe to our newsletter using the form in the footer. We use the double opt-in procedure: after signing up, you will receive an email asking you to confirm your subscription via a confirmation link. Only after this confirmation do we add you to our mailing list; if you do not confirm, your request is automatically deleted after a reasonable period.

Data processed: your email address and the time of sign-up and confirmation (as proof of consent).

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time via the unsubscribe link in every email and thereby withdraw your consent.

Email service provider: We use Brevo (Sendinblue GmbH, Cologne / Sendinblue SAS, France) to send and manage our newsletter. Brevo processes your data as a processor on servers within the EU; a data processing agreement pursuant to Art. 28 GDPR is in place.

Services that are not strictly necessary are only loaded after you have given your consent. Consent is managed via the consent management platform Complianz; you can adjust your settings at any time via the consent banner and withdraw your consent with effect for the future (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG).

Our contact page includes an interactive map. The mapping software (Leaflet) is served from our own server; the map tiles are loaded from OpenStreetMap (OpenStreetMap Foundation, United Kingdom) via the tile service CARTO (CARTO, Inc., USA). In doing so, your IP address is transmitted to these providers; in the case of CARTO this may involve a transfer to the USA. The map is only loaded after your explicit consent (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). Without consent you will see a placeholder in its place — our address is also available in text form on the contact page.

On individual pages we embed videos from the service Vimeo (Vimeo.com, Inc., USA). When a video is loaded or played, a connection to Vimeo's servers is established; your IP address and information about your device are transmitted to Vimeo and transferred to the USA. Vimeo may set cookies and analyse usage behaviour in the process. Videos are only loaded after your explicit consent (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG); until then you will see a placeholder. For further information, please refer to Vimeo's privacy policy.

To display our corporate typeface consistently, we use Adobe Fonts (Adobe Systems Software Ireland Limited, Ireland; a transfer to Adobe Inc., USA, cannot be ruled out). The font files are loaded from Adobe's servers when the page is opened, and your IP address is transmitted to Adobe in the process. According to the provider, Adobe Fonts does not set cookies for advertising purposes. The fonts are only loaded after your explicit consent (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). Without consent, the website is displayed in a substitute font available on your device; all content remains fully legible and usable.

In the footer we link to our profiles on LinkedIn, Instagram and Facebook. These are plain links: simply visiting our website does not transmit any data to the operators of these networks. Only when you click one of these links do you leave our website — from that point onwards the privacy policy of the respective network applies, and its operator alone is responsible for the processing that takes place there.

We currently use no analytics or marketing tools on this website — neither audience measurement nor tracking takes place. The use of Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is planned. Once implemented, Google Analytics will be loaded only after your explicit consent (Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG), will be separately deselectable in the consent banner, and will be described in full at this point (including processing purposes, storage periods and transfers to the USA).

For security reasons, this website uses SSL/TLS encryption. An encrypted connection can be identified by the “https://” prefix in your browser’s address bar.

This Privacy Policy is a template. It must be reviewed, completed and approved by commonreal or its data protection advisers before publication.