Privacy Notice

In brief

Protecting your data matters to us. We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

No cookies are required to operate this website. We use Google Analytics for audience measurement, but only if you have consented beforehand. Without your consent no cookies are set, no data is transferred to Google and no usage profile is created.

Controller

Controller within the meaning of the GDPR

i Live Group GmbH
Julius-Bausch-Straße 50
73431 Aalen
Germany
+49 7361 9412-0
info@i-live.de

Data protection officer

Julius-Bausch-Straße 50
73431 Aalen
datenschutz@i-live.de

Scope

These notices apply to visiting and using the website www.ilivegroup.com. Our other services have their own privacy notices, for example the booking platform ilive.de, rioca.eu and our careers portal.

For tenancies, purchase contracts and investor relationships we provide separate information within the respective contractual process.

Joint processing within the group

Within i Live Group we process personal data partly jointly in order to run administration and IT infrastructure efficiently and consistently. i Live Immobilienverwaltung GmbH, i Live Services GmbH and i Live Real Estate Services GmbH are involved.

The legal basis is our legitimate interest in effective administration under Art. 6 (1) (f) GDPR. For the processes concerned we are joint controllers under Art. 26 GDPR. Internally, i Live Group GmbH handles the fulfilment of your data subject rights, reachable at datenschutz@i-live.de.

We make the essence of the arrangement under Art. 26 (2) GDPR available on request. Irrespective of that arrangement, you may exercise your rights vis-à-vis each of the companies involved.

Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. When a page is called up, data your browser transmits is recorded automatically, which is technically necessary to deliver the page:

• IP address of the accessing device
• Date and time of the request
• Name and URL of the file retrieved
• Referrer URL, meaning the page you came from
• Browser used, operating system and access provider

This data serves the error-free delivery, the security and the stability of the website. It is not merged with other data sources and is not analysed to identify individuals. The legal basis is Art. 6 (1) (f) GDPR. A data processing agreement under Art. 28 GDPR is in place with our hosting provider.

Log files are deleted automatically as soon as they are no longer required for the stated purpose. They are not combined with other records and are not retained longer for analysis purposes.

Cookies and consent

No cookies are required for the technical operation of this website. Cookies are used exclusively for audience measurement and only if you have accepted in the consent banner. The legal basis for storing and reading information on your device is § 25 (1) TDDDG, and for the subsequent processing Art. 6 (1) (a) GDPR.

As long as you have not consented, no analytics script is loaded and no cookie is set. If you decline, the website remains fully usable.

We store your decision in your browser so that we do not have to ask again on every visit. This storage does not require consent under § 25 (2) no. 2 TDDDG. We ask again after twelve months in the case of consent and after six months in the case of a refusal. You may withdraw your consent at any time with effect for the future via the Cookie settings link in the footer. On withdrawal we delete the analytics cookies that have been set.

In detail, the following cookies and storage entries are used:

• _ga, lifetime two years, distinguishes visitors from one another. Only set after your consent.
• _ga_ followed by the data stream identifier, lifetime two years, records the session state. Only set after your consent.
• ilive.consent, an entry in your browser’s local storage, records your decision in the consent dialogue. It is set regardless of your choice and can be reset via the cookie settings.

Audience measurement with Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Our aim is to understand which content is read and how visitors find us. No advertising delivery, retargeting or cross-device recognition takes place; advertising features and Google Signals are switched off.

The following data in particular is processed:

• shortened IP address, from which an approximate location at country or city level is derived
• pages viewed, time spent and time of access
• referrer, that is the page or search query that brought you to us
• device type, browser, operating system and screen resolution
• a randomly generated identifier in the cookie which recognises your browser on further visits

The legal basis is your consent under Art. 6 (1) (a) GDPR. A data processing agreement under Art. 28 GDPR is in place with Google. The data is deleted automatically after 14 months.

A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies; standard contractual clauses under Art. 46 GDPR apply in addition. Despite these safeguards it cannot be excluded that US authorities access the data. A level of protection comparable to European standards can therefore not be guaranteed in every case. By giving your consent you expressly agree to this transfer under Art. 49 (1) (a) GDPR.

Which interactions are recorded

In addition to a page being opened, we record individual interactions in order to see which content leads further. This is exclusively about aggregated usage patterns, not about observing individual people:

• page views with address, title, language version and site area, for example investors or careers
• clicks on email addresses and telephone numbers
• clicks on links to external sites, with the target domain being stored
• downloads of PDF files, for example our reports

Form entries are not recorded, nor are mouse movements, screen recordings or the contents of your clipboard.

Further information can be found in Google’s privacy notice at policies.google.com/privacy.

Fonts (self-hosted)

For a consistent appearance we use the typefaces Plus Jakarta Sans and DM Sans. The font files are stored on our own server and loaded from there (self-hosting).

When the fonts are loaded, no connection is established to Google or any other third-party servers. Your IP address is not transmitted to any third party in the process.

The legal basis is our legitimate interest in a consistent and fast presentation of our website under Art. 6 (1) (f) GDPR.

Contacting us

This website contains no contact form. You can reach us by email and telephone using the addresses and numbers given on the site.

If you write or call, we process your details in order to deal with your request and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or its preparation, otherwise our legitimate interest in handling your enquiry under Art. 6 (1) (f) GDPR.

We keep this data for as long as is necessary to deal with the matter and delete it afterwards, unless statutory retention periods apply.

Links to other services

We link to our own and to third-party services, including ilive.de, my-ilive-home.com, rioca.eu, sabor-restaurant.de, our careers portal, individual location websites, Google Maps and our profiles on Instagram and LinkedIn.

As soon as you follow such a link, you leave this website. The respective provider is responsible for data processing on the target site; their privacy notices apply. As long as you do not click the link, no data is transferred there.

Applications

Applications run via our careers portal karriere.i-live.de or by email. We process your application data insofar as this is necessary to decide on an employment relationship. The legal basis is § 26 BDSG and Art. 6 (1) (b) GDPR, and additionally Art. 6 (1) (a) GDPR where consent is given.

If no appointment is made, we keep your documents for up to six months after the procedure ends, in order to demonstrate or defend claims, for example under the General Equal Treatment Act. We then delete them.

With your express consent we add your profile to our talent pool so that we can approach you again for suitable positions. You may withdraw this consent at any time; without withdrawal we delete the data after 24 months.

Recipients of your data

We only pass on personal data where this is necessary for the purposes described or where we are legally obliged to do so. Recipients fall into the following categories in particular:

• our hosting provider, for the operation of the website
• service providers for IT operations, maintenance and email infrastructure
• Google Ireland Limited for audience measurement, where you have consented
• the provider of our applicant tracking system, in the case of job applications
• affiliated companies of i Live Group, within the joint processing described above
• authorities and courts, where we are legally obliged to provide information

We have concluded data processing agreements under Art. 28 GDPR with service providers processing data on our behalf. Data is neither sold nor passed on for advertising purposes.

Transfers to third countries

We process your data exclusively on servers within the European Union. No transfer to countries outside the EU or the European Economic Area takes place in connection with this website.

Should a transfer to a third country become necessary in future, it will only take place on one of the bases provided for in Art. 44 et seq. GDPR, for example an adequacy decision of the European Commission or standard contractual clauses. We would inform you here in advance.

No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place. Enquiries and applications are decided by people only.

Provision of your data

You are not obliged to provide us with personal data. Simply visiting this website only requires the technically necessary processing of the server log files described above. If you contact us or apply for a position, we need the details you provide in order to handle your request. Without them we cannot respond to that extent.

Security

We secure the transmission of your data with SSL/TLS encryption. You can recognise an encrypted connection by the https in your browser's address bar. In addition, we take technical and organisational measures reflecting the state of the art to protect your data against loss, manipulation and unauthorised access.

Retention period

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods, in particular the commercial and tax retention periods of six to ten years. Data processed on the basis of consent is stored until that consent is withdrawn. We then delete it as a matter of routine.

Your rights

Where we process personal data about you, you have the following rights:

• Access to the data we hold about you (Art. 15 GDPR), free of charge.
• Rectification of inaccurate or incomplete data (Art. 16 GDPR).
• Erasure of your data, unless a statutory retention obligation applies (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability in a common, machine-readable format (Art. 20 GDPR).
• Objection to processing based on a legitimate interest, and at any time to direct marketing (Art. 21 GDPR).
• Withdrawal of consent with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.

An informal message to datenschutz@i-live.de.

Right to lodge a complaint with a supervisory authority

You may lodge a complaint with a data protection supervisory authority at any time. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstrasse 20, 70173 Stuttgart, Germany.

Changes to these notices

We adapt these privacy notices when our website, the services we use or the legal situation change. The version published here applies in each case.