Effective date: October 17, 2018

HEBSTREIT (“us”, “we”, or “our”) operates the HEBSTREIT website (the “Website”), accessible from https://hebstreit.com.

This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Website and the choices you have associated with that information. We use your information to provide and improve our Website. By using our Website, you agree to the collection and use of information in accordance with this policy.

Identity and Contact Details of the Controller

See https://hebstreit.com/imprint/ for more information.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Website.

Types of Data Collected

Personal Information

While using our Website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Information”). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City

Usage Information

We may also collect information how our Website is accessed and used (“Usage Information”). Usage Information is information collected automatically either generated by the use of the Website or from the Website infrastructure itself (for example, the duration of a page visit).

The Usage Information we collect may include information such as your computer’s Internet Protocol address (IP address), browser type, browser version, the pages of our Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Cookies Information

Cookies are small pieces of data stored on your device (computer or mobile device). Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device (web browser or mobile device browser).

We use cookies and similar tracking technologies to track the activity on our Website and hold certain information.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.

Examples of cookies we use:

  • Session Cookies. We use Session Cookies to operate our Website.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Use of the Information We Collect

HEBSTREIT uses the collected information for various purposes:

  • To provide and maintain our Website
  • To notify you about changes to our Website
  • To allow you to participate in interactive features of our Website when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Website
  • To monitor the usage of our Website
  • To bill and process any payments that may be owed to us.
  • To detect, prevent and address technical issues
  • To enforce compliance with our Terms and Conditions.

Transfer of Information

Your information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside Germany and choose to provide information to us, please note that we transfer the data, including Personal Information, to Germany and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

HEBSTREIT will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure of Information

HEBSTREIT may disclose your Personal Information in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of HEBSTREIT
  • To prevent or investigate possible wrongdoing in connection with our Website
  • To protect the personal safety of users of our Website or the public
  • To protect against legal liability

Security of Information

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Our Website Providers

We may employ third party companies and individuals to facilitate providing you with our Website (“Website Providers”), to provide our Website on our behalf, to perform Website-related services or to assist us in analyzing how our Website is used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics Providers

We use analytics providers to monitor and analyze the use of our Website.

  • Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Website. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.You can opt-out of having made your activity on our Website available to Google Analytics by installing the Google Aalytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.Please visit the Google Privacy & Terms web page: http://www.google.com/intl/en/policies/privacy/

Payment Providers

We use payment providers to verify and process payments for our Website. Please note that we do not collect or process your credit or debit card details. These are however collected and processed by our payment processing service provider Stripe. The collection and processing by these providers of your payment details such as credit or debit card details and other personal data are governed by their respective terms and conditions.

  • Stripe Payments Europe, Ltd (“Stripe”). Personal Data collected: Various types of Data as specified in the privacy policy of the service. See https://stripe.com/gb/privacy for more information.
  • PayPal is a payment service provided by PayPal Inc., which allows users to make online payments using their Paypal credentials. Personal Data collected: Various types of Data as specified in the privacy policy of the service. See Privacy Policy for more information.

 

Information for our European Economic Area (EEA) users

For the purpose of this Privacy Policy, we are a Data Controller of your Personal Information. Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.

Legal Basis for Processing Personal Information Under General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), HEBSTREIT legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it.

HEBSTREIT may process your Personal Information because:

  • We need to perform a contract with you
  • You have given us permission to do so
  • The processing of your information is in our legitimate interests and it’s not overridden by your rights
  • We need to comply with the law

Retention of Data

HEBSTREIT will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

HEBSTREIT will also retain Usage Information for internal analysis purposes. This type of information is generally retained for a shorter period of time, except when this information is used to strengthen the security or to improve the functionality of our Website, or we are legally obligated to retain this data for longer time periods.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. HEBSTREIT aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information.

If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us.

You have the following data protection rights:

  • The right of access. You have the right to obtain from us confirmation as to whether or not
    personal data concerning you are being processed, and, where that is the case, access to the
    personal data and the following information: the purposes of the processing; the categories of
    personal data concerned; the recipients or categories of recipient to whom the personal data
    have been or will be disclosed; where possible, the envisaged period for which the personal data
    will be stored, or, if not possible, the criteria used to determine that period; the existence of the
    right to request from the controller rectification or erasure of personal data or restriction of
    processing of personal data concerning the data subject or to object to such processing; the
    right to lodge a complaint with a supervisory authority; where the personal data are not collected
    from the data subject, any available information as to their source; the existence of automated
    decision-making, including profiling and, at least in those cases, meaningful information about
    the logic involved, as well as the significance and the envisaged consequences of such
    processing for the data subject.
  • The right to rectification. You have the right to have your information rectified if that information is inaccurate.
    Taking into account the purposes of the processing, you have the right to have incomplete
    personal data completed, including by means of providing a supplementary statement.
  • The right to erasure (‘right to be forgotten’). You have the right to delete the information we have on you,
    unless the processing of your personal data is necessary: for exercising the right of freedom of
    expression and information; for compliance with a legal obligation; for reasons of public interest;
    or for the establishment, exercise or defence of legal claims.
  • The right to restriction of processing. You have the right to request that we restrict the
    processing of your personal information where: the accuracy of your personal data is contested
    by you; the processing is unlawful and you oppose the erasure of the personal data and request
    the restriction of their use instead; we no longer need the personal data for the purposes of the
    processing, but they are required by you for the establishment, exercise or defence of legal
    claims; you have objected to processing pending the verification whether the legitimate grounds
    of us override those of you.
  • The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You have the right to withdraw your consent at any time where we relied on your consent to process your Personal Information. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority.

 

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to our processing of
your information. We will no longer process your personal data unless we demonstrate compelling
legitimate grounds for the processing which override your interests, rights and freedoms or for the
establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any
time to processing of your personal data for such marketing, which includes profiling to the extent that
it is related to such direct marketing. Where you object to processing for direct marketing purposes,
your personal data will no longer be processed for such purposes.

 

Links to Other Websites

Our Website may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s website. We strongly advise you to review the Privacy Policy of every website you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party websites or services.

Children’s Privacy

Our Website does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Information, please contact us. If we become aware that we have collected information from children without verification of parental consent, we take steps to remove that information from our servers.

Changes Our Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Website, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us.