Cookie declaration and cookie settings

OTTO Immobilien GmbH (“OTTO”, “we”, “us”) is committed to protecting your personal data. We therefore comply with the applicable legal provisions on the protection, lawful handling and confidentiality of personal data and on data security, in particular the Datenschutzgesetz as amended (“DSG”), the Telekommunikationsgesetz (“TKG”) and the General Data Protection Regulation (“GDPR”). The following cookie statement informs you for which purposes we use which cookies and similar technologies on our website luxury.otto.at (“website”) and we offer you the opportunity to make settings to consent to this use and to revoke your consent at any time

1. name and address of the person responsible

The person responsible for processing your personal data in accordance with data protection regulations is:

OTTO Immobilien GmbH
Riemergasse 8,
1010 Vienna
Tel: + 43 1 512 77 77
E-mail: office@otto.at

2. cookies and how they work

Cookies and similar web storage technologies (hereinafter referred to as “cookies”) are used on our website. Cookies are small files that are stored on your end device (e.g. PC, smartphone or tablet) when you visit our website. Each time you visit our website, the cookie and the website “communicate” with each other so that your device can be recognised. This is useful for both you and us: cookies serve the purpose of enabling the correct functioning of our website, expanding the range of functions and optimising the website functions. This enables the website to remember certain entries and settings (e.g. language, font size) over a certain period of time so that you do not have to repeat them each time you visit the website.
We use first-party and third-party cookies (so-called first-party cookies and third-party cookies). Firstparty cookies come directly from our website and only send information to us. However, our website may also contain technologies from other providers (third parties) that we integrate into our website for advertising purposes and that may set their own cookies on your end device.

In most cases, the information in a cookie is pseudonymised or anonymised, as cookies generally do not identify you as a person, but rather your end device. In some cases, it is possible to link certain cookies to personal data. There are cookies that require your consent before they can be used on your device and cookies that can be used without your consent because they are technically necessary for us to provide our services (“necessary cookies”). In the case of necessary cookies, the data processing is necessary for the purpose of data security measures, to prevent misuse and to optimise the website and is therefore based on our legitimate interests in accordance with Section 6 (1) (f) GDPR in conjunction with § 165 para. 3 TKG. We set all other cookies on our website exclusively on the basis of your prior express consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG via the cookie banner.

Insofar as the settings you have made or the voluntary consent you have given also includes providers who transfer data to countries without an adequacy decision pursuant to Art. 45 (3) GDPR and without suitable guarantees pursuant to Art. 46 GDPR (such as the USA in particular), your consent pursuant to Art. 49 GDPR also applies here. There is a risk that your data transmitted in this way may be subject to access by authorities in these third countries for control and monitoring purposes and that no effective legal remedies are available against this.

3. cookie categories

Depending on their function and purpose, we categorise data processing into different categories. The categories of cookies in connection with the website are described below. We use necessary cookies and cookies for statistical purposes on the website.
Apart from technically necessary cookies (§ 96 para. 3 TKG), we only use cookies when you use our online services on the basis of your prior active and voluntary consent via our cookie banner (§ 96 para. 3 TKG 2003 in conjunction with Art 6 para. 1 lit a GDPR).
The cookies set on our website can be divided into four categories:

a) Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies. These cookies can therefore not be deselected.
b) Preference cookies make it possible to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.
c) Statistics cookies (tracking cookies) help us to understand how visitors interact with our website by collecting and reporting information anonymously.
d) Marketing cookies are used to follow visitors on websites and to utilise the data collected by statistics cookies (tracking cookies). The intention is to show adverts that are relevant and appealing to the individual user and therefore more valuable to publishers and third party advertisers.

When you access our website, a window appears with brief information about the purposes for which we and third-party providers wish to use cookies (“cookie banner”). You can generally consent to the use of all cookies for the purposes listed in the cookie banner by clicking on the “Accept all” button. The “Cookie settings” button takes you to the cookie settings. There you can view more detailed information about the cookies and make your selection either per category (e.g. “Necessary cookies”, “Marketing cookies”) or individually per cookie as to whether you want to allow the corresponding cookies or not. Apart from the “necessary cookies”, you can simply deselect all cookies.
Once you have given your consent, you can also withdraw it at a later date by deselecting the relevant cookies in the footer under Cookies in the data protection settings.

4. deactivation of cookies

You can revoke your consent given to us at any time with effect for the future by (i) calling up the cookie banner again and changing the cookie settings as described in point 3. or (ii) deleting the corresponding cookies and preventing the storage of cookies as described here. You can also decide which categories of cookies you wish to allow and can change your cookie settings as described in point 3.
You can also change all cookie settings at any time via your browser. Most browsers accept cookies automatically. It may also be necessary to use certain cookies in order to open a website or to save your objection to the use of other cookies. You can delete all cookies stored on your computer and set most browsers so that the storage of cookies is prevented or explicit consent is required before a cookie is stored. You can also separately activate “Block third-party cookies”. As a rule, the help function in the menu bar of your web browser will show you how you can reject new cookies and switch off cookies you have already received. You can find out how here, for example: http://www.aboutcookies.org/.

Below we have also compiled links where you can find detailed information on deactivating cookies in common browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-deletemanage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Safari: https://support.apple.com/kb/PH17191?locale=de_AT&viewlocale=de_DE

However, we would like to point out that if you deactivate cookies, you may not be able to use all the functions of this website to their full extent. You may then have to make some settings manually each time you visit the website and accept the impairment of some functions.

5. tools

We use various tools on the basis of your voluntary consent given via the cookie banner (Art. 6 para. 1 lit. a GDPR).

5.1 Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics also uses cookies, which enable your use of the website to be analysed. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and stored there. Google will use the information on our behalf to analyse the use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage.
You can prevent the installation of cookies by setting your browser software accordingly (so-called “browser add-on”); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available at the following link. The current link is: https://tools.google.com/dlpage/gaoptout?hl=en
You can find more information on Google’s terms of use and data protection at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html.

5.2 Social plugins
If you have given your consent to marketing cookies in the cookie banner, our website uses a social plugin from Meta Platforms Ireland Limited (“Meta”) and LinkedIn Ireland Unlimited Company (“LinkedIn”).
When you visit a page of our website that contains such a social plugin, your device establishes a direct connection with the servers of the respective provider. The content of the social plugin is then transmitted directly to your device by the respective provider and integrated into our online offering. By integrating the social plugins on our website, the respective provider of the social network receives the information that you have accessed the corresponding page of our online offer. If you are logged in to the respective social network, the provider can assign your visit to your specific account on the platform. If you interact with the social plugins, for example by clicking the Facebook Like button, the corresponding information is transmitted directly from your device to the respective provider of the social network and stored there. If you are not a member of the social networks, it is still possible for the respective providers to find out and store your IP address.
Based on this data about your visit to our website and your use of our online offer, the respective provider of the social network can create user profiles about you.
Further information about data collection and the processing and use of data by Facebook and Instagram can be found here: https://www.facebook.com/about/privacy and by LinkedIn here: https://www.linkedin.com/legal/privacy-policy .

6. storage period

With regard to the storage period, a distinction must be made between “session cookies” and “persistent cookies”:

Session cookies are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your end device until the cookies either reach an expiry date specified by us or are manually deleted by you in your browser. We use such persistent cookies to recognise you the next time you visit our website. You can find the exact storage period in the cookie banner.

7. recipients of data

We regularly use IT service providers to operate and manage the website, who may also have access to personal data on our behalf and in accordance with our instructions in order to be able to provide the commissioned IT services (“processors”).
We also transfer your personal data to the following recipients:

• to external third parties to the extent necessary on the basis of our legitimate interests (e.g. auditors, insurance companies in the event of an insurance claim, legal representatives in the event of a claim, etc.);
• to authorities and other public bodies to the extent required by law (e.g. tax authorities, courts, etc.).

Your data will not be passed on to any other third parties for their own purposes without your consent.

8. Rights of the data subject

8.1 Right to information
You have the right to request information from us about all personal data concerning you that is processed by us. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

8.2 Right to rectification and right to restriction of processing
You may request the rectification or completion of incorrect or incomplete data. Under certain circumstances, for example if the accuracy of data is disputed until the accuracy has been verified, you may request that the processing of data be restricted so that it may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

8.3 Right to data portability
You may request that we send you – or, where technically feasible, a third party designated by you – a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
• the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this

8.4 Right to cancellation
You have the right to erasure of data in certain circumstances, for example if it is not processed in accordance with data protection requirements.
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

8.5 Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR.
In this case, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

8.6 Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before ist withdrawal.

8.7 Supervisory authority
Irrespective of any other legal remedies, you have the right to lodge a complaint with the national supervisory authority of your place of residence if unlawful processing of personal data is assumed. In Austria, the data protection authority, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at, telephone: +43 1 52 152-0 is responsible.

Status: September 2023