In the following privacy policy, we inform you about the most important aspects of data processing on our website
Statement on the Duty to Inform
Privacy Policy
In the following privacy policy, we inform you about the most important aspects of data processing on our website. We collect and process personal data only on the basis of the legal provisions (General Data Protection Regulation, Telecommunications Act 2003).
As soon as you, as a user, access or visit our website, your IP address as well as the start and end of the session are recorded. This is technically necessary and therefore constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
Contacting Us
If you contact us, either via the contact form on our website or by email, the data you send us will be stored for six months for the purpose of processing your inquiry or in case of follow-up questions. Your data will not be passed on without your consent.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your device by your browser. They do not cause any harm. We use cookies to make our services user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not want this, you can set up your browser to inform you when cookies are set and to allow them only in individual cases. Disabling cookies may limit the functionality of our website.
Google Maps
Our website uses features of the web mapping service “Google Maps”. The provider of this service is:
Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland. Tel: +353 1 543 1000
When using Google Maps, it is necessary to store and process your IP address. Google generally transfers the data to a server in the USA and stores it there. The processing is carried out by the service provider (named above); the operator of this website has no influence on the transfer of the data.
Data processing is based on the legal provisions of § 96 (3) TKG and Art. 6 (1) (f) (legitimate interest) GDPR. The use of Google Maps makes it easier to find the locations provided on our website.
Further information on how the service provider “Google” handles user data can be found in its privacy policy:
https://policies.google.com/privacy?hl=en .
Google also processes the data in the USA but has submitted to the
EU-US Privacy Shield.
https://www.privacyshield.gov/EU-US-Framework
Google Fonts
Our website uses fonts from “Google Fonts”. The provider of this service is:
Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland
Tel: +353 1 543 1000
When you visit this website, your browser loads fonts and stores them in its cache. Since you, as a visitor to the website, receive data from the service provider, Google may set or analyze cookies on your computer.
The use of “Google Fonts” serves to optimize our services and to display content consistently. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
Further information on Google Fonts is available at the following link:
Further information on how Google handles user data can be found in its privacy policy:
https://policies.google.com/privacy?hl=en .
Google also processes the data in the USA but has submitted to the
EU-US Privacy Shield.
https://www.privacyshield.gov/EU-US-Framework
Google User Data (Ermis Application)
If you connect a Google account in the Ermis application (Settings > Integrations), we process Google user data solely to provide the features you actively use.
Which Google user data we process
Gmail: message content and metadata, attachment metadata, labels and drafts from the folders you access (Inbox, Sent, Drafts, Trash, Spam).
Google Account: email address and profile to identify the connected account.
Google Calendar: title, start/end time, location, description and attendees of events in your primary calendar.
How we use the data
We use this data solely to provide you with the integrated email client, to send messages you trigger from your address, to link emails to your property and business cases, and to display and edit your calendar. We do not use Google user data for advertising and we do not sell it. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.
AI/ML Disclosure
We do not use Google Workspace data to train generalized AI/ML models.
Sharing
We do not share Google user data with third parties for their own purposes. Processing takes place on our hosting infrastructure solely to operate the application. You can disconnect your Google account at any time in the settings; we will then delete the stored tokens.
Protection
OAuth access and refresh tokens are stored encrypted (encryption at rest), kept separate per tenant, transmitted exclusively via TLS, and used only on the server side to call Google APIs on your behalf. Access is restricted to authenticated users of the respective tenant. We do not request permanent deletion from Gmail.
Server Log Files
This website and its associated provider automatically collect information in so-called “server log files” when the website is used. This includes in particular:
IP address or hostname
the browser used
time spent on the website as well as date and time
pages visited on the website
language settings and operating system
“Leaving page” (the URL at which the user left the website)
ISP (Internet Service Provider)
This collected information is not processed in a personally identifiable way or linked to personal data.
The website operator reserves the right to evaluate or review this data if unlawful activities become known.
Your Rights as a Data Subject
As a data subject, you generally have the following rights regarding the data we store about you:
Access
Erasure of data
Rectification of data
Data portability
Withdrawal of consent and objection to data processing
Restriction of processing
If you believe that the processing of your data has violated data protection law, you can file a complaint with us (office@ermis.at) or with the data protection authority.
You can reach us at the following contact details:
Website operator: Ermis Property Management Systems GmbH
Phone number: +43723522144
Email: office@ermis.at
Legal text source: fairesRecht.at in cooperation with Immobilien Kredit Vergleich