Data Privacy Statement

FORTIS Real Estate Investment AG

The FORTIS Geschwister-Scholl GmbH, Baruther Str. 23, 15806 Zossen,
(hereinafter referred to as “FORTIS”) takes protecting your data very seriously.

Your data is therefore always processed on the basis of the respective current provisions of the EU General Data Protection Regulation and the Federal Data Protection Act (BDSG).

Your data is stored on servers in Germany based on an agreement on contract data processing within the meaning of Art. 28 GDPR. The transmission of data to our servers is continuously securely encrypted using TLS/SSL.

We are informing you below in detail on how we handle your data.

In order to guarantee that your data is handled in a legally secure manner, we reserve the right to adapt the data privacy statement to the respective applicable data privacy provisions.

Note: You may also print out or save this data privacy statement using the functions of your browser.

1. General information
1.1 Controller
The Controller in regard to the gathering, processing, use and deletion of your personal data is  
FORTIS Geschwister-Scholl GmbH, Baruther Str. 23, 15806 Zossen
Tel.: 03377 – 99 79 968

1.2 General remarks on the gathering, processing and use of your personal data
You may visit our website without giving details about who you are. We then only log general access data. This includes the log files, cf. Clause 6. Your IP address is only used if it is necessary in order to preserve FORTIS’ legitimate interests, in its capacity as Controller, or a third party, and also only to the extent that such interests outweighs the interests or basic rights or freedoms of the data subject which require the protection of personal data. Examples of this are the pursuit of legal claims, as well as the interest in clarifying any criminal offences and defence against electronic attacks (e.g. hacking, brute force attacks).

1.3 Your rights (“rights of the data subject”) and the respective legal bases.
You are entitled to a) request information on the purpose of the processing, the categories of data processed, any recipients and the scheduled duration of the storage of your data (cf. the right to information, Art. 15 GDPR);

b) request the correction of any incorrect data concerning you, as well as the completion of any incomplete personal data (cf. the right of correction, Art. 16 GDPR);

c) revoke your consent to the processing of data at any time (cf. right of revocation, Art. 7(3) GDPR);

d) object to any data processing concerning you, at any time, on grounds arising from a particular situation (cf. the right of objection, Art. 21 GDPR);

e) have us delete any personal data concerning you without delay (cf. the right of deletion or the right to be forgotten, Art. 17 GDPR), if

(1) your personal data is no longer necessary for the purposes for which it was gathered;

(2) you have revoked your consent (cf. b);

(3) you have objected to any further processing (cf. c);

(4) your personal data has been processed illegitimately;

f) request that the processing be restricted, e.g. if you dispute the accuracy of the personal data, you reject the deletion of your data, you still need your data or you have objected to the data processing and the review of the objection will still take a while (cf. right of restriction, Art. 18 GDPR);

g) receive the data concerning you, that you have made available to us, in a structured form and, if applicable, have it transmitted to a third party (cf. the right to data portability, Art. 20 GDPR);

h) Complain to the competent supervisory authority; about the data processing (cf. the right to complain, Art. 77 GDPR). The supervisory authority competent for FORTIS is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstraße 219, D-10969 Berlin
The State Commissioner for Data Protection and the Right to Inspect the Files in Brandenburg, Dagmar Harte, Stahnsdorfer Damm 77, D-14532 Kleinmachnow. You can alternatively also contact the data protection authority that is competent for your place of residence.

2. Gathering of data by FORTIS
FORTIS gathers personal data that you voluntarily provide us with by means of the contact form or by e-mail. The latter includes your first and last names, as well as your e-mail address. We use the data notified by you to process your enquiry, in line with Art. 6(1)(1)(b) GDPR.

3. Purpose of the gathering, processing and use of data
FORTIS stores your data in order to provide our online services, answer your enquiries, fulfil and execute contracts and for our own promotional purposes, e.g. for sending you our newsletter.

4. Newsletter
FORTIS offers you a newsletter in order to inform you about our latest offers and properties. You only receive this newsletter once you have given consent in accordance with Art. 6(1)(1)(a) GDPR. In order to ensure that you consent to subscribing to our newsletter, we use the double opt-in procedure, i.e. you only receive our newsletter after you have explicitly confirmed to us in advance that we should activate the newsletter service. Once you have entered your e-mail address into the corresponding field and confirmed it using the “Subscribe now” button, you will receive an e-mail notification from us. In this e-mail we ask you to confirm that you would like to receive our newsletter by clicking a link contained in this e-mail. Should you no longer wish to receive our newsletter, you can object to receiving the newsletter at any time. It is sufficient for this purpose if you let us know using the contact details given in Clause 1.1 (e.g. by e-mail or letter). You will naturally also find an unsubscribe link in every newsletter. Once you have unsubscribed, we delete your e-mail address without delay.

5. The passing on of personal data
Your data is only passed on if, and to the extent that, you have granted your consent to it. We do not pass on your data for promotional purposes. Data is otherwise transmitted to third parties if FORTIS is obliged to transmit it, in accordance with Art. 6(1)(1)(d) GDPR, based on statutory provisions or due to an enforceable official or judicial order.

6. Server log files
Every time our web pages are accessed, usage data is transmitted by the respective web browser and saved in log files, i.e. server log files. In this context, the data sets stored contain the following data: the data and time of access, the name of the page accessed, the referrer URL, the volume of data transmitted and any product and version information of the browser used. The users’ IP addresses are only stored in anonymised form. When data is anonymised, the IP addresses are changed in such a way that the individual details concerning personal or material circumstances can no longer be assigned to a particular or determinable natural person, or only with disproportionately great effort in regard to time, expense and manpower. The log files are evaluated in order to customise FORTIS’ offer better to suit you and your requirements, to find and eliminate errors faster and to generally improve FORTIS’ services. The evaluation serves, in accordance with Art. 6(1)(1)(f) GDPR, to preserve our predominant legitimate interests in the proper display of our web pages within the context of a weighing up of interests. The log files are saved for up to 14 days, and then deleted. Any storage extending beyond that is only undertaken exceptionally and in order to pursue any legal claims, as well as to clarify any criminal offences and defend against electronic attacks (e.g. hacking, brute force attacks).

7. Google Analytics This website uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ( The use comprises the operating mode of “Universal Analytics”. Google Analytics makes it possible to allocate data, sessions and interactions across multiple devices to a pseudonymised user ID, and thus analyse the activities of a user across devices.

Google Analytics uses cookies, i.e. text files which are stored on your computer and enable an analysis of the use of the website by you.

You can set your browser in such a way that you are informed about cookies being placed and can take an individual decision on whether to accept them or whether to exclude acceptance of cookies for certain cases or in general. You can also subsequently delete cookies via your browser settings. Depending upon the browser used, you can set your browser in such a way that the storage of cookies is only accepted if you consent to it. As a rule, you are shown, in the menu bar of your web browser, via the help function, how you can reject new cookies and disable any already received. In the case of computers that are used jointly, and that are set in such a way that they accept cookies, we recommend you to always log out completely once you are finished with using the computer.

The information generated by the cookie about your use of this website is usually transferred to a server of Google in the USA and stored there. Should IP anonymisation be activated on this website, your IP address is, however, first truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a server of Google in the USA and truncated there. The IP address transmitted by your browser within the context of Google Analytics is not merged with other data of Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on the website activities, and provide the website operator with further services associated with the use of the website and Internet. These purposes also constitute our legitimate interest in the data processing. The legal basis for the use of Google Analytics is Sec. 15(3) of the German Telemedia Act (TMG) or Art. 6(1)(f) GDPR. The data transmitted by us and linked with cookies, user IDs or advertising IDs is automatically deleted after 26 months. Data which has reached its expiry date is automatically deleted, once per month.

You can find further information on the terms and conditions of use and data privacy concerning Google Analytics at:

You can prevent cookies from being stored by setting your browser software accordingly. It may then, however, no longer be possible to use all the functions of this website in full. You can, moreover, prevent the data generated by the cookie and any data which relates to your use of the website from being recorded, as well as the processing of such data by Google, by downloading and installing a browser add-on. In such a case, opt-out cookies will prevent your data from being recorded when visiting our website in future. Should you wish to prevent it from being recorded by Universal Analytics across various devices, the opt-out cookie needs to be placed on all terminals used. You can arrange to have the opt-out cookie placed via the following link: Disable Google Analytics.

8. Google Maps
On our website we use Google Maps, a service of Google, Inc. FORTIS uses Google Maps to show you an interactive map on our website in regard to where, exactly, the respective properties are to be found, and, in the process, enable you to use the map function as conveniently as possible.

The Google Maps service is accessed directly from servers of Google Inc., so that Google Inc. receives the IP address used by you. By visiting the website, Google additionally obtains the information that you have accessed the corresponding sub-page of our website. We are not aware of whether, or to what extent or over what period of time, the IP address is stored and used internally by Google. The legal basis for involving this service is Art. 6(1)(1)(f) GDPR.

If you are registered with a service of Google, Google may assign the visit to your account. Even if you are not registered with Google, or have not logged in, it is possible that Google stores your IP address and uses it for profiling. Google stores the data gathered about you as usage profiles, and uses them for the purposes of advertising, market research and/or designing its website in line with the needs of its users. Such an evaluation is in particular carried out (also for users who are not logged in) in order to display advertising in line with the user’s requirements and inform other users of the social network about your activities on our website. You have a right to object to the creation of such a user profile by Google.

We would like to point out that data may be processed by Google outside the EU/EEA. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. You can find further information on data privacy at Google here.

9. Duration of storage
FORTIS only stores your data as long as is necessary to provide our services or we have a legitimate interest in further storage which exceeds your interest in the data being deleted. We save data, moreover, as long as we need to save it to both fulfil our contractual obligations and comply with the statutory archival periods.

10. Right of objection
Should you wish to object to the gathering, processing and use of your data by FORTIS for the future, altogether, or in regard to individual measures, you may send your objection by e-mail, fax or letter to the following address:

FORTIS Real Estate Investment AG, Steinplatz 2, D-10623 Berlin.
Tel.: 030 – 516 95 97 30

Once you have exercised your right of objection, we shall no longer process your personal data unless the processing carried out is based on statutory requirements or an overwhelming interest of FORTIS in asserting, exercising or defending legal claims.