Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Landgut Stober GmbH & Co. Betriebs KG, Behnitzer Dorfstraße 27-31, 14641 Nauen, Germany, Tel.: +49 3323920440, Email: info@landgut-stober.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 The controller has appointed a data protection officer who can be contacted as follows: Landgut Stober Kontor GmbH & Co. Betriebs KG, Prof. Dr. Norbert Pintsch, Behnitzer Dorfstraße 27-31, 14641 Nauen OT Groß Behnitz, Germany, Tel.: +49 3323920440, Email: info@landgut-stober.de.
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Used browser
- Used operating system
- Used IP address (possibly in anonymized form)
Processing is carried out pursuant to Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
Cloudflare
We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA.
This service enables us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
4) Cookies
To make visiting our website attractive and enable the use of certain functions, we use cookies – small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device longer to allow storage of site settings (so-called "persistent cookies"). You can find the storage duration in your web browser’s cookie settings.
If personal data is also processed by individual cookies implemented by us, such processing is carried out in accordance with Art. 6 (1) lit. b GDPR (for contract performance), Art. 6 (1) lit. a GDPR (if consent is given), or Art. 6 (1) lit. f GDPR (for our legitimate interest in the best possible functionality of the website and user-friendly design of the site visit).
You can configure your browser to notify you when cookies are set and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting Us
When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form is shown on the respective form. This data is used exclusively for the purpose of responding to your inquiry and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your inquiry aims at concluding a contract, then the additional legal basis is Art. 6 (1) lit. b GDPR. Your data will be deleted once your inquiry has been fully processed, unless legal retention obligations apply.
6) Web Analytics Services
etracker
Data is collected and stored on this website using technologies provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com). Pseudonymized usage profiles may be created and evaluated for the same purpose.
This website uses etracker exclusively without cookies, meaning that etracker does not place any cookies on your end device at any time.
According to etracker, only website data from web servers and information that the web browser transmits when retrieving web pages are used. These details are transmitted during every page request. However, no information is read from or stored on the user's device.
If personal data is processed in the described context, it is based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, according to Art. 6 (1) lit. f GDPR.
You can object to the collection and storage of your visitor data at any time with future effect using the opt-out function provided on our website.
More information about etracker's data protection policy can be found at: https://www.etracker.com/en/data-privacy/
7) Site Functionality – Job Applications via Email
We publish current job openings in a separate section on our website, to which interested candidates may apply via email using the contact address provided.
Applicants are required to submit all personal data necessary for a well-founded assessment, including general information such as name, address, and contact details, as well as performance-related documentation and, if applicable, health-related information. Details regarding the application process can be found in the respective job posting.
Upon receipt of the application via email, the data will be stored and evaluated solely for the purpose of processing the application. In case of follow-up questions, we may use the applicant's email address or telephone number. The legal basis for processing is Art. 6 (1) lit. b GDPR (and, where applicable in Germany, § 26 (1) BDSG), whereby participation in the application process is considered the initiation of an employment contract.
If special categories of personal data pursuant to Art. 9 (1) GDPR (e.g., health data such as information about a severe disability) are requested during the application process, the processing is carried out in accordance with Art. 9 (2) lit. b GDPR, so that we can exercise rights or fulfill obligations arising from employment law, social security, and social protection law.
Additionally or alternatively, the processing of such special categories of data may be based on Art. 9 (2) lit. h GDPR, if it is necessary for the purposes of preventive or occupational medicine, assessment of the applicant’s working capacity, medical diagnosis, provision or management of health or social care systems and services.
If no hiring decision is made or an applicant withdraws their application, the submitted data and all related electronic correspondence, including the application email, will be deleted no later than 6 months after the corresponding notification. This period is based on our legitimate interest in being able to respond to any follow-up questions and to comply with our obligations under equal treatment laws for applicants.
In the event of a successful application, the data provided will be processed for the purpose of carrying out the employment relationship on the basis of Art. 6 (1) lit. b GDPR (in conjunction with § 26 (1) BDSG for processing in Germany).
8) Tools and Miscellaneous
Cookie Consent Tool
This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications requiring consent. The "cookie consent tool" is displayed as an interactive interface when the site is accessed, allowing consent via checkboxes. Cookies/services requiring consent are only loaded when the user has given explicit consent.
The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed.
If personal data (e.g., IP address) is processed for storage, assignment, or logging of cookie settings, it is done on the basis of our legitimate interest under Art. 6 (1) lit. f GDPR in legally compliant and user-specific cookie management and thus in the legally compliant design of our online presence.
Further legal basis is Art. 6 (1) lit. c GDPR. We are legally obliged to make the use of non-essential cookies dependent on user consent.
If necessary, we have concluded a data processing agreement with the provider to ensure the protection of visitor data and to prevent unauthorized disclosure to third parties.
You can find more information about the provider and settings directly in the consent tool interface on our website.
Note on the Use of Matterport
Our website contains virtual tours of rooms and/or business premises embedded via the my.matterport.com portal, operated by Matterport, Inc., 352 E. Java Dr. Sunnyvale, CA 94089, USA.
When you visit one of our pages containing a virtual tour, a connection to Matterport’s servers is established. Matterport is informed of which of our pages you have visited. Matterport also obtains your IP address, date, time, requested page, and browser information. This applies even if you are not logged into Matterport or do not have an account.
If you are logged into your Matterport account, you allow Matterport to associate your browsing behavior with your personal profile. You can prevent this by logging out of your Matterport account. The use of Matterport is in the interest of providing an appealing online presence, which constitutes a legitimate interest under Art. 6 (1) lit. f GDPR.
For contact with Matterport’s Data Protection Officer: https://matterport.com/de/node/44.
Duration of processing: variable, ending when the processing purpose no longer applies.
9) Rights of the Data Subject
9.1 Under applicable data protection law, you have the following rights regarding your personal data, with reference to the legal basis for exercising them:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to notification (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
- Right to lodge a complaint (Art. 77 GDPR)
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS IN A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THIS AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA FOR DIRECT MARKETING PURPOSES.
10) Duration of Storage of Personal Data
The duration of storage of personal data depends on the legal basis, the purpose of processing, and—where relevant—statutory retention periods (e.g., commercial and tax retention periods).
For processing based on consent under Art. 6 (1) lit. a GDPR, data is stored until consent is withdrawn.
Where legal retention periods exist for data processed under Art. 6 (1) lit. b GDPR, such data will be routinely deleted after expiry of the retention period, provided it is no longer needed for contract performance or initiation and/or no legitimate interest in continued storage exists.
For data processed under Art. 6 (1) lit. f GDPR, storage continues until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate overriding legitimate grounds or the processing serves to assert, exercise or defend legal claims.
For data processed for direct marketing based on Art. 6 (1) lit. f GDPR, storage continues until you exercise your right to object under Art. 21 (2) GDPR.
Unless otherwise stated in this policy, personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.
Copyright Notice: This privacy policy was created by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)
Effective as of: March 24, 2025