GROPYUS Technologies GmbH, Hauptstraße 27, 10827 Berlin (hereinafter referred to as "we") informs you about the processing of personal data in the context of the use of the BOS additional services. If you have any questions about data protection, you can also contact datenschutz@gropyus.com at any time  .

The data protection officer of the companies of the GROPYUS Group is lawyer Nikolaus Bertermann, daspro GmbH, Kurfürstendamm 21, D-10719 Berlin. You can contact the data protection officer by e-mail at gropyus-dsb@daspro.de.

 

1. Master and contract data

1. We process your data for the purpose of executing the contract for the use of the BOS additional services as well as for the ongoing maintenance and development of the BOS services.

2. The processed data are name, address, apartment data, e-mail address, date of birth, telephone number, contract data.

3. The legal basis for the processing is Article 6 (1) (b) GDPR (contract for the BOS additional services) and Article 6 (1) (c) GDPR (legal obligations). When examining, enforcing or rejecting claims, the legal basis is Article 6 (1) (f) GDPR (legitimate interest, namely enforcement of claims or defense against claims).

4. The data will be actively provided by you as part of the conclusion of the contract.

5. Recipients of data can be banks for the processing of payments. Authorities and offices may be recipients within the scope of their duties, insofar as we are obliged or entitled to transmit data. Furthermore, in individual cases, data may be transmitted to debt collection service providers, lawyers and courts. In the event of suspicion of a criminal offence or in preliminary proceedings, data may be transmitted to the police and the public prosecutor's office. We also use service providers by way of order processing in the provision of services, in particular for the provision, maintenance and servicing of IT systems as well as for the ongoing management of the property. It is possible that a transfer of personal data to so-called third countries cannot be ruled out. If there is no adequacy decision for the potential recipient, we conclude the EU standard contractual clauses (2021/914; Module 2 or 3). You can request a copy of the essential contractual contents of the standard contractual clauses at any time.

6. We retain your master and contract data for up to 10 calendar years after termination of the contract for the BOS additional services.

7. The provision of data is both legally and contractually obligatory. Without providing data, the contract for the BOS additional services cannot be established and executed.

 

2. Free BOS additional services

The rental property has a Building Operation System ("BOS") that controls the technical functions of the building and the rental property.

1. We process your data for the purpose of executing the contract for the BOS additional services, for the further development of the BOS and for usage analysis as well as for the safe operation, ongoing care and maintenance of the BOS.

2. The processed data are usage data, user data, settings and status data, measurement and sensor data, log data, device and service IDs.

3. The legal basis for the processing is Article 6 (1) (b) GDPR (contract for the BOS additional services) and Article 6 (1) (c) GDPR (legal obligations). We base the anonymization of the data mentioned under (ii) on our legitimate interest pursuant to Art. 6 (1) (f) GDPR for the further development of our services.

4. The data is generated automatically by using the BOS or is actively entered into the system by the user.

5. We use service providers by way of order processing in the provision of services, in particular for the provision, maintenance and servicing of IT systems as well as for the reading or reading of meter readings (also via radio reading) for operating cost accounting. It is possible that a transfer of personal data to so-called third countries cannot be ruled out. If there is no adequacy decision for the potential recipient, we conclude the EU standard contractual clauses (2021/914; Module 2 or 3). You can request a copy of the essential contractual contents of the standard contractual clauses at any time.

6. We anonymize or delete usage, measurement and sensor data one year after the end of the month in which it is collected.

7. The provision of data is contractually obligatory. Without providing data, the BOS additional services cannot be used.

 

3. App Analytics

1. We process your data to track and analyze user interactions with the apps in order to improve our products and services.

2. The processed data are name, e-mail address, usage data, user data, device and service IDs, log data.

3. The legal basis for the processing is Article 6 (1) (a) GDPR (consent in the app).

4. The data is collected automatically when using the apps.

5. Authorities and offices may be recipients within the scope of their duties, insofar as we are obliged or entitled to transmit data. We also use service providers by way of order processing in the provision of services, in particular for the provision, maintenance and servicing of IT systems as well as for the ongoing management of the property. It is possible that a transfer of personal data to so-called third countries cannot be ruled out. If there is no adequacy decision for the potential recipient, we conclude the EU standard contractual clauses (2021/914; Module 2 or 3). You can request a copy of the essential contractual contents of the standard contractual clauses at any time.

6. We delete or anonymize the app analytics data one year after the end of the month in which it was collected. Thereafter, we may continue to store them in anonymized form.

7. There is no legal or contractual obligation to provide the data. The user provides the data voluntarily. The user has no disadvantages if he does not provide the data.

 

4. Surveys and studies

We regularly invite users of the BOS to participate in surveys and studies. Participation is voluntary. The aim of the surveys and studies is to further develop the innovative BOS and other products and services related to housing and to determine the needs of users.

(i)      The purposes of the processing are long-term research and product development for residential buildings and related services, the further development and improvement of products and services, the promotion of interaction with users and their active involvement in innovation processes to better identify needs. 

(ii)      The processed data are usually: E-mail address, name (if provided and not anonymous), specific survey or study content, voluntarily provided additional information provided by the participants in the context of the survey or study, e.g. gender, timestamp of participation, technical metadata of participation. If, deviating from this, other personal data is processed, you will be informed of this during the survey or study.

(iii)     The legal basis for invitations to surveys and studies is the BOS additional service contract (Art. 6 (1) (b) GDPR, Sec. 7 (3) UWG). The legal basis for the implementation and evaluation of the surveys and studies is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing carried out before the revocation.

(iv)     The data is actively provided by yourself or automatically by your browser or device.

(v)     By way of order processing, we use service providers in the provision of services, in particular for the provision, maintenance and servicing of IT systems. It is possible that a transfer of personal data to so-called third countries cannot be ruled out. If there is no adequacy decision for the potential recipient, we conclude the EU standard contractual clauses (2021/914; Module 2 or 3). You can request a copy of the essential contractual contents of the standard contractual clauses at any time.

(vi)     Unless otherwise stated in the survey or study, we will delete personal data no later than six months after the survey or study has been conducted. The results of the survey are only stored in anonymized form after evaluation.

(vii)    There is no legal or contractual obligation to participate in surveys or to provide the data. However, an invitation or participation is not possible without disclosing personal data.

 

5. Data protection rights of data subjects and other information

We do not use procedures of automated case-by-case decisions.

You have the right to request information about all personal data that we process about you at any time.

If your personal data is incorrect or incomplete, you have the right to have it corrected and supplemented.

You can request the deletion of your personal data at any time, unless we are legally obliged or entitled to further process your data.

If the legal requirements are met, you can request a restriction on the processing of your personal data.

You have the right to object to the processing if the data processing is carried out for the purpose of direct advertising or profiling.

If the processing is carried out on the basis of a balancing of interests, you may object to the processing by stating reasons arising from your particular situation.

If the data processing is carried out on the basis of your consent or within the framework of a contract, you have a right to transfer the data you have provided, provided that this does not affect the rights and freedoms of other persons.

If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with effect for the future. The processing carried out before a revocation remains unaffected by the revocation.

You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in violation of applicable law.

 

As of September 21, 2023