DE

Privacy Policy

Data controller as defined by data protection laws

BHG Berlin Immobilien GmbH & Co. KG
Budapester Straße 48
10787 Berlin

 +49 30 554 964-0
hello(at)bikiniberlin.com


Legal Notice

The data controller continuously reviews and updates the information on its websites. Despite all due care, the data may have changed in the meantime. Therefore, no liability or guarantee can be assumed for the timeliness, accuracy, and completeness of the information provided. The same applies to all other websites linked to via hyperlinks. The responsible party is not responsible for the content of websites accessed via such links. 

The content and design of the website are protected by copyright. Reproduction of the pages or their content requires the prior written consent of the data controller, unless such reproduction is already permitted by law. 

Privacy Policy

We warmly welcome you to our website and appreciate your interest in data protection. The protection of your personal data is a matter of great importance to us. Therefore, the processing of data from our website visitors, prospective customers, and customers is carried out exclusively in compliance with applicable data protection regulations and laws, such as the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG-neu). 

In this privacy policy, we explain what data we collect, for what purposes, and on what legal basis this is done. In addition, we inform you about your rights and who you can contact if you have questions about data protection or wish to file a complaint.

Personal Data

Personal data consists of specific details regarding the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, address, phone number, and date of birth. Information that cannot be directly linked to your identity is not considered personal data. 

General Purposes of Data Collection

Data is collected, stored, or processed solely for the purpose of conducting our own business. In principle, our websites are available to all users without the collection of personal data. Personal data is collected, processed, and used only to the extent necessary to provide the services you have requested or to make content available.

Server Logging

Every visit to the pages of this website is recorded in so-called server log files and stored for a limited period of time. This includes your computer’s connection data, the websites you visited on this site, the date and duration of your visit, the browser and operating system types used, and the website from which you visited us. This data is processed for the purpose of enabling the use of the website (establishing a connection), ensuring system security, performing technical administration of the network infrastructure, and optimizing the website. This information does not allow any conclusions to be drawn about your identity.

Email Newsletter

Provided you give your separate consent, we may send you information via email regarding the use of the website as well as general customer information (email newsletters). The advertised goods and services are listed in the consent form. You may revoke your consent at any time with future effect. To do so, please contact our Data Protection Officer, whose contact information is provided below.

To send the newsletter, we use products from

IMEXX BERLIN - Marcus Schulz
Tirschenreuther Ring 1, 12279 Berlin

and therefore transmit your data required for distribution to this provider.

Registration

The data subject has the option to register on the website by providing personal data. The specific personal data transmitted in this process is determined by the respective input form used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for its own purposes. The data controller may arrange for the transfer of data to one or more processors, who will also use the personal data exclusively for internal purposes attributable to the data controller.

The data subject’s registration, involving the voluntary provision of personal data, serves to offer the data subject content or services that, by their very nature, can only be provided to registered users. 

The username and password are available exclusively to the respective user personally; they are non-transferable. The user is personally responsible for maintaining the confidentiality of the username and password.

Contact

We collect personal data when you voluntarily provide it to us, for example, when you contact us via email or the contact form. We will, of course, use the personal data transmitted to us in this manner exclusively for the purpose for which you provided it to us when contacting us.

The provision of this information is expressly voluntary and subject to your consent. Insofar as this involves information regarding communication channels (such as postal address, email address, phone number), you also consent to us contacting you via these communication channels, if necessary, to address your inquiry.

You may, of course, revoke your consent at any time with future effect. To do so, please contact our Data Protection Officer, whose contact details are provided below.

Collection of Personal Data for Personalized Use

In addition to the purely informational use of our website, we offer various services and products that you can use if you are interested. To do so, you generally need to provide additional personal data, which we use to provide the respective service. If additional voluntary information is available, it is marked accordingly. We collect, process, and use only those personal data that are necessary for your use of the website and/or the fulfillment of a contract concluded with us, or that you provide yourself. This includes, in particular, the following master data and usage data, which may be transmitted via forms on our website or through contractual documents:

  • Company
  • Name (consisting of title, first name, last name)
  • Address
  • Company
  • Phone number
  • Email address
  • User registration and login data

We use inventory data and usage data to establish, define the terms of, modify, or terminate a contractual relationship with you as necessary, to fulfill our contractual obligations, and to contact you, if you request it, or if it is necessary within the scope of the contractual relationship or permitted by law. If a user has the option to log in to the website, user data is also collected when this option is used.

In addition, we collect your data, provided you have consented to this, for example for the purpose of sending informational materials and brochures, advertising, event management, managing press contacts, and managing charity events.

If we provide contractual or pre-contractual services to you in accordance with Art. 6(1)(b) GDPR, the data to be processed, the type, scope, and purpose of processing, as well as the necessity of such processing, are determined by the underlying order. This generally includes master data (name, address, etc.) and contact information (email address, phone number, etc.). Furthermore, it may be necessary to collect additional contractual data (content of the assignment, fees, terms, details regarding the brokered companies/services) and payment data. We may also process information regarding the characteristics and circumstances of individuals or property belonging to them if this is part of our mandate, for example, in connection with the leasing and sale of commercial or residential real estate. This may include, for example, information regarding personal circumstances as well as movable or immovable property.

Data Protection in Job Applications and the Application Process

The data controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case when an applicant submits the relevant application documents to the data controller electronically, for example via email or through a web form on the website. If the data controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of managing the employment relationship in compliance with legal regulations. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted 6 months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. An other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Use and Disclosure of Personal Data

If, in the course of our processing activities, we disclose data to other individuals or companies (processors or third parties), transfer it to them, or otherwise grant them access to the data, this is done only on the basis of a legal authorization (e.g., if the transfer of data to third parties is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), if you have consented, if a legal obligation requires it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.). 

If we engage third parties to process data under a so-called “data processing agreement,” this is done on the basis of Art. 28 GDPR.

Deletion or Blocking of Data

We adhere to the principles of data avoidance and data minimization. The legislature has enacted various retention obligations and periods. After these periods have expired, your data will be routinely deleted or blocked in accordance with statutory data protection regulations. If data is not subject to such prescribed periods, it will be deleted or blocked once the purpose for which it was collected no longer applies. If you have consented to a longer period of storage, processing, and use of your data, we will delete or block the data upon expiration of the respective period or upon revocation of your consent.

Cookies

So-called cookies are used to improve the content on these web pages. These are small files that are transmitted from a web server to your browser and sent back by your browser each time you access one of our pages. The stored data is collected for market research and to tailor this offering to your needs, and is used exclusively for this purpose. Please also note that you can configure your browser so that you do not receive cookies or so that you receive a notification when a cookie is about to be set. If you would like to know how to change your cookie settings, click on the “Help” field in your browser.

Web Analytics via Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. IP anonymization is enabled on this website. This means that your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can find more information about how Google Analytics uses the data and how you can control the information sent to Google here.

You can prevent the storage of cookies by adjusting your browser settings accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Disable Google Analytics

Google Consent Mode (Basic implementation)

To obtain your consent for Google products, we use Google’s Consent Mode (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). You can find out which products these are here.
We use the basic implementation of Consent Mode. This means that no data is transmitted directly to Google for Consent Mode. Your consent is only transmitted and a Google product is only executed once you have given us your consent to do so.
By using Consent Mode, Google is able to recognize the consent you have given as valid consent under the Digital Markets Act.
You can find more information about Google Consent Mode directly here or in Google’s privacy policy.

Note on the processing of your data collected on this website in the U.S.

Please note that, with regard to certain cookies and service providers, your data is processed in the United States. The European Court of Justice considers the United States to be a country with a level of data protection that is insufficient by EU standards. In particular, there is a risk that your data may be processed by U.S. authorities for control and surveillance purposes, possibly without any legal recourse.

Social Bookmarks

So-called social bookmarks are integrated into our website. Social bookmarks are internet bookmarks that allow users of such a service to collect links and news items. These are integrated into our website solely as links to the corresponding services. After clicking on the embedded graphic, you will be redirected to the respective provider’s page; that is, user information is only transferred to the respective provider at that point. For information on how your personal data is handled when using these websites, please refer to the privacy policy of the respective provider. 

 

 

 

 

 

 

 

  • VK, LLC "V Kontakte" at 1-N, bld. 12-14, Lit. A, Khersonskaya St., St. Petersburg, Russia, 191024;
    https://vk.com/privacy

YouTube

We may have embedded YouTube videos in our online offering that are stored on www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode,” meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos does the third-party provider receive the information that you have accessed the corresponding subpage of our website. We have no influence over this data transfer.

The privacy policy published by YouTube, available at www.google.de/intl/de/policies/privacy/, provides information about the collection, processing, and use of personal data by YouTube and Google.

Use of Google Maps

This website may use the Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes, and uses data regarding visitors’ use of the map features. For more information about data processing by Google, please refer to Google’s Privacy Policy. There, you can also change your personal privacy settings in the Privacy Center.

Address of Google Inc. and URL to its Privacy Policy:
Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de


Use of the Facebook Pixel: 

  1. a) We use the so-called “Facebook Pixel” from Facebook Inc. (“Facebook”) on our website. This allows interest-based advertisements (“Facebook Ads”) to be displayed to users of our website when they visit the social network Facebook or other websites that also use this method. When the Facebook Pixel is used, your browser automatically establishes a direct connection to Facebook’s server. We have no influence over the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you as follows:

 

By integrating the Facebook Pixel, Facebook receives information that you have clicked on an ad from us or visited the corresponding page on our website. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider may obtain and store your IP address and other identifying characteristics.

 

  1. b) By using the Facebook Pixel, our goal is to display the Facebook ads we place only to those Facebook users who are interested in our website offerings. We therefore use the Facebook Pixel to ensure that our Facebook ads align with users’ potential interests. Furthermore, we can use the Facebook Pixel to track the effectiveness of Facebook ads for statistical purposes by seeing whether users were redirected to our website after clicking on a Facebook ad. The legal basis for the use of the Facebook Pixel is Art. 6(1)(f) of the GDPR.

 

  1. c) You can object to the use of the Facebook Pixel at any time by using the following opt-out option: [nach Vorgabe des BayLDA vom Website-Betreiber selbst zu erstellendes Opt-Out erforderlich, diese muss eingebaut werden]

 

  1. d) Third-party provider information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; Further information on data collection: http://www.facebook.com/help/186325668085084

 

Use of an AI-powered assistant

We provide an AI-powered assistant on our website. The assistant is designed to automatically answer general questions about BIKINI BERLIN—particularly regarding opening hours, stores, services, directions, and general center information—as well as questions on the tenant portal regarding tenant information and guidelines.

When you use the AI assistant, the content you enter, the assistant’s responses, technical usage data, the time of the request, a session ID, your user agent, and your IP address may be processed. This processing is carried out to provide the AI assistant, ensure technical security, prevent misuse, and improve the user-friendliness of our online offering.

Please do not enter any sensitive, confidential, or unnecessary personal data into the AI assistant. This includes, in particular, health data, payment data, contract data, application data, identification data, access data, and information about third parties.

The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendly, efficient, and automated provision of general information about our Center. If you voluntarily enter personal data, the processing may additionally be based on Article 6(1)(a) of the GDPR. If your input is necessary for processing a contract-related inquiry, Article 6(1)(b) of the GDPR may apply.

No decision-making based solely on automated processing within the meaning of Article 22 of the GDPR takes place. The AI assistant’s responses are non-binding and may be incomplete, outdated, or incorrect. For binding information, please contact us via the contact details listed in the legal notice or contact the Center management.

Provider and Data Processing

Processing is carried out by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The AI assistant uses the Gemini 2.5 Flash model via Google’s Generative Language API. A contract for data processing in accordance with Article 28 of the GDPR exists with Google in the form of the Google Cloud Data Processing Addendum, which governs the processing of your data by Google as a data processor.

Transfer to Third Countries

Personal data is transferred to the United States. The transfer is based on appropriate safeguards pursuant to Art. 44 et seq. of the GDPR, in particular on the EU Standard Contractual Clauses in the version of Implementing Decision (EU) 2021/914, which form an integral part of the data processing agreement with Google.

Retention period

The data processed in connection with the use of the AI assistant is stored as follows: The content of your inquiries and the assistant’s responses, your IP address, the session ID, and the user agent are retained in our systems for a maximum of 90 days and subsequently anonymized automatically. Anonymized usage statistics without personal references (model used, token consumption, time) are retained for a maximum of 24 months for internal analysis and cost control.

No Use for Model Training

The content you enter is not used to train AI models. Google has contractually committed to paying customers of the Gemini API not to use entered prompts and generated responses to improve or train its models.

For more information on processing by Google, please refer to Google’s Privacy Policy at https://policies.google.com/privacy?hl=de and the Google Cloud Data Processing Addendum at https://cloud.google.com/terms/data-processing-addendum.


Links to Third-Party Websites

Our websites contain links to third-party websites to which this Privacy Policy does not apply. To the extent that the use of third-party websites involves the collection, processing, or use of personal data, please refer to the privacy policies of the respective providers. 

Legal Basis for Data Collection

In accordance with Articles 13 and 14 of the GDPR, we inform you of the legal bases for our data processing.

- Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis.

- When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

- To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

- The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.

- The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) of the GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Article 6(1)(f) of the GDPR.

- After you register for our newsletter, we store your email address for the purpose of sending you the newsletter. The legal basis is Article 6(1)(a) of the GDPR.

- If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

- If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and our shareholders.

Security

We have implemented comprehensive technical and organizational security measures to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted in line with technological advancements. 

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., TLS) via HTTPS.

Server Location

Our hosting partner’s systems are located within the territory of the Federal Republic of Germany.

Your Rights / Rights of Access, Objection, Erasure, Rectification, and Complaint

Users and other data subjects have the following rights with respect to their personal data:

- Right of access to the personal data in question (Art. 15 GDPR)

- Right to rectification (Art. 16 GDPR)

- Right to erasure (Art. 17 GDPR)

- Right to restriction of processing (Art. 18 GDPR)

- Right to object to processing if the data processing is based on Article 6(1)(e) or (f) of the GDPR (Article 21 of the GDPR); see also the following note on the right to object under Article 21 of the GDPR

- Right to data portability (Art. 20 GDPR)

- Right to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal, if the data processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR).

Note on the right to object under Article 21 of the GDPR

A. Right to object based on your particular situation

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) (public security) or (f) (data processing based on a balancing of interests) of the GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. 

B. Right to Object to Direct Marketing

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for the purpose of direct marketing, the personal data will no longer be processed for this purpose.

C. Exercising the Right to Object

The right to object may be exercised informally. To do so, simply contact our data protection officer listed at the end of this privacy policy.

Contact Information for the Data Protection Officer

If you have any questions or requests for information regarding data protection, please contact our Data Protection Officer:

Sascha Hesse, AGOR AG
Email: datenschutz-re@hausbau.de

Contact information for the competent supervisory authority

Berlin Commissioner for Data Protection and Freedom of Information
An der Urania 4-10
10787 Berlin
Phone: +49 30 138 89-0
Fax: +49 30 215 50 50
Email: mailbox@datenschutz-berlin.de 

Changes to Our Privacy Policy

We reserve the right to occasionally update this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.



Privacy Policy for Our Facebook and Instagram Pages 

Below, we inform you about which data is processed when you visit our Facebook or Instagram fan page.

As the operator of our fan page, we receive anonymized visitor statistics (Insights) generated by Facebook (Facebook Inc., Headquarters: 1 Hacker Way, 94025 Menlo Park, CA, USA; for users within the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland): Page Insights consist of aggregated data that allows us to gain insight into how users interact with our page. We do not receive any personal data. We therefore do not have access to the individual personal data of visitors to our Facebook or Instagram page. As the operator of the fan page, we are jointly responsible with Facebook for the visitor statistics (Insights) (Art. 26 GDPR), with Facebook assuming primary responsibility. The legal basis for the use of Insights data is our legitimate interest within the meaning of Art. 6(1)(f) GDPR to provide information and communication services to interested parties and customers via social networks. We use this information for business and communication purposes, including to remain competitive as a company.

When you visit our Facebook or Instagram page, Facebook—which also owns the Instagram service—places cookies on the device you use for this purpose (i.e., your computer or mobile device) cookies that are intended to store information in web browsers and remain active for up to two years unless deleted. Facebook receives the information stored in the cookies, records it, and processes it. This occurs not only when you access Facebook services such as our Facebook or Instagram page, but also when using services provided by other members of the Facebook corporate group, as well as services provided by other companies that use Facebook services. Facebook partners and third parties also use cookies on Facebook services to provide services to Facebook/Instagram or to companies advertising on Facebook/Instagram. The data is used by the Facebook Group and third-party companies for product research and development, as well as for advertising and sponsored content.

Please note that cookies are placed when you visit our Facebook or Instagram page, regardless of whether you have a Facebook or Instagram account.

If you have a Facebook or Instagram account, Facebook collects and processes data when you visit the fan page, provided you have made this information available in your Facebook or Instagram account. This includes your age, gender, relationship status, employment status, as well as information about your lifestyle, interests, and purchases or purchasing behavior (demographic data). Facebook also collects and processes geographic data such as your location. Facebook uses this to provide targeted information and advertising (personalization). Facebook can associate this data with you personally.

If you do not have a Facebook or Instagram account, the placement of cookies will in any case collect your IP address, information about your device, the region, or, if applicable, the more precise location where you are using it, the time of access and duration of visit, and the aforementioned demographic data will be estimated based on your browsing behavior.

You can prevent the collection of data generated by the cookie and related to your use of our Facebook or Instagram page (including your IP address) by Facebook, as well as the processing of this data by Facebook, by adjusting your cookie settings before visiting the Facebook or Instagram page. Most browsers have an option to restrict or completely prevent the storage of cookies. However, please note that the use of the site—and in particular the user experience—will be limited without cookies. In addition, you can activate the “do not track” function in your browser, disable script code execution in your browser, or use a so-called script blocker.

For more information, please refer to Facebook’s Privacy Policy at https://www.facebook.com/privacy/explanation, Facebook’s Cookie Policy athttps://www.facebook.com/policies/cookies, Instagram’s Data Policy at https://help.instagram.com/519522125107875, Instagram’s Cookie Policy at https://help.instagram.com/1896641480634370?ref=ig, information on Page Insights data at https://www.facebook.com/legal/terms/information_about_page_insights_data, and options for managing ad settings in the Privacy Policy at https://www.facebook.com/help/568137493302217.