Skip navigation


Provision of the website and creation of log files

Description and scope of data processing 

Every time you visit our website, our system automatically collects data and information from the computer system of the visiting computer. 

In this process, the following data is collected:

  • IP address
  • http method
  • http version
  • access status/status code of server responder 
  • browser version
  • referrer (which website the user comes from)
  • visitor's user name (if logged in via system login - if the user is logged in within a web application that has its own user management, the user name is not logged)
  • date and time of request and number of bytes sent
  • answers of the server
  • error codes

This data is also stored in the log files of our system. 

Legal basis of data processing 

The legal basis of the temporary storage of data and log files is Art. 6 (1)(f) GDPR, our legitimate interest in the provision of a website and in successful corporate communication.

Purpose of data processing 

Temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this, the user's IP address must remain stored for the duration of the session. 

The data is stored in log files to ensure the functionality of the website. In addition, the data help us optimise the website and safeguard the security of our information technology systems. Data is not evaluated for marketing purposes in this context. 

Our legitimate interest in data processing pursuant to Art. 6 (1)(f) GDPR lies also in these purposes.

Duration of storage

At the end of the respective session, the data is either deleted or anonymised or stored in log files. Log files are rotated and compressed weekly, with 52 of these log files being kept for the corresponding vHosts and thus deleted after a period of 52 weeks. No further storage of the data in a form that enables identification of the data subjects takes place.


Your data will be forwarded to the following recipients:

  • Group companies of the CA Immo Group
  • Authorities (such as: Labour inspectorate, municipal, district administration and federal authorities, tax office, police/public prosecutor's office, commercial register/land register, OePR (Austrian Financial Reporting Enforcement Panel etc))
  • Legal representatives and notaries
  • Courts 
  • Website provider
  • IT service provider
  • Web agency
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (see Article VI.  below)

Use of cookies

Definition of cookies

Cookies are small text files that are stored in your browser. They are downloaded from your browser when you first visit our website. When you reload this website with the same device or browser, the cookie and the information stored in it will either be returned to the website that generated it (first party cookie) or sent to another website to which it belongs (third party cookie), thus recognising that the web page was loaded with the respective browser and changing the presentation of contents in that status. Cookies "remember", for instance, your preferences, disclose how you use a page and adjust some of the displayed offers individually.

Cookies required for functions

We use the cookies below for the purpose of transmitting messages and providing the services you have requested. The data processing activities resulting from the use of cookies are based on our legitimate interests in the provision of a fully functional website and the services requested by you (Art. 6 (1)(f) GDPR, § 96 (3) TKG (Telecommunications Act)).

CookieType of dataPurposesStorage durationRecipient
PHPSESSIDUser IDPHP Session Cookie identifies users logged into the backendSession – until browser session is endedWebserver
be_typo_userUser IDIdentifies users logged into the backendSession – until browser session is endedWebserver
cookiebar-Stores user's consent status at the cookiebar1 monthWebserver
EquityStory-The EquityStory cookie is used to display the stock graphs integrated in the websiteSession – until browser session is
CAKEPHP-Whatchado cookie is required to play the embedded videos on our website without any problems; stores information such as language and other settings at Whatchado videosSession – until browser session is

Further cookie information

Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. 

Analytics Cookies

CookieType of dataPurposesStorage durationRecipient
_gaUser IDFor anonymised analysis of user behaviour in Google Analytics2 yearsWebserver
_gidUser IDFor anonymised analysis of user behaviour in Google Analytics24 hoursWebserver
_gatUser IDFor anonymised analysis of user behaviour in Google Analytics1 minuteWebserver

Your cookie settings on this website

If you wish to completely block or restrict cookies, you can make the changes in the settings of your Internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. 

You will find the procedures for managing and deleting cookies in the help function integrated in the respective browser. Further information on this process can be found under the following links:

Internet Explorer:

To deactivate Google Analytics you can click on the following button "More information" in the cookie information bar at the bottom of the page, which leads to the further steps required to deactivate Google Analytics

More information

The deactivation information for Google Analytics can also be found in the legal notice section   of the website.


In some cases, we use external service providers (so-called processors) to process personal data. They were selected and commissioned carefully; they are bound by our instructions and are inspected regularly.

The following processors act on our behalf:

  • Website provider
  • IT service provider 
  • Advertising agency
  • Group companies of the CA Immo Group
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

    Transmission outside the EEA

    In the following cases we transmit data to recipients located outside the European Economic Area (EEA):

    • On our behalf, Google LLC ("Google") based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, processes data. We transmit to Google your IP address (if necessary in anonymised form), information about access to websites (URL) and estimates of demography and age. Google is certified for the EU-US Privacy Shield agreement, which guarantees compliance with the data protection level applicable in the EU. 
    • We also pass on parts of your data (name, title, job title, salutation, photos) to group companies of the CA Immo Group in Serbia. "Standard contractual clauses" have been concluded with these Group companies to ensure an adequate level of data protection. If you need more information about them, please contact

    Your rights in connection with data processing

    The General Data Protection Regulation (EU Regulation 2016/679) grants you as data subject certain rights to which we refer you below. Please note that they complement each other, so that you can only request, for instance, either the correction or completion of your data or their deletion.

    Withdrawal of consent 

    If CA Immo stores and processes your personal data on the basis of consent (Art 6 (1)(a) GDPR), you are entitled to withdraw your consent at any time. However, this does not affect the lawfulness of the processing up to the time of withdrawal.

    Right to access personal data 

    You can request information on the origin, the categories, the storage period, the recipients, the purpose of your personal data being processed by CA Immo and the type of processing.

    Right to correction and deletion 

    If CA Immo processes your personal data that is incorrect or incomplete, you can request that it shall be corrected or completed. You may also request the deletion of unlawfully processed data.

    Right to restriction of processing 

    If it is unclear whether your personal data processed is incorrect, incomplete or unlawfully processed, you may request that the processing of your data shall be restricted until this question has been finally clarified.

    Right to object

    Even if your personal data is correct and complete and processed lawfully by CA Immo, you can object to the processing of this data. However, this is possible only in special situations to be justified by you.

    Right to data transferability 

    You may receive your personal data processed by CA Immo that CA Immo itself has received from you in a machine-readable format specified by CA Immo, or commission CA Immo with the direct transmission of this data to a third party of your choice, provided that this recipient enables CA Immo to do so from a technical point of view and that such data transmission is not subject to unjustifiable efforts, statutory or other secrecy obligations or considerations of confidentiality on the part of CA Immo or third parties.

    Right to lodge a complaint 

    Finally, you are entitled to lodge a complaint with the data protection authority if you believe that the processing of your personal data is in breach of the General Data Protection Regulation (EU Regulation 2016/679).

    Who can you contact to assert your rights as a data subject? 

    To assert the above rights, please contact the CA Immo Data Protection Coordination Team ( in writing (by letter to the CA Immo branch of your convenience [here] or e-mail). 

    How can you contact the Data Protection Officer of CA Immo?

    The Data Protection Officer can be contacted at: