Privacy policy
This English version is provided for convenience only. In the event of any discrepancy, the German version shall prevail.
Privacy information pursuant to Art. 13, 14 and 21 GDPR for the website and other processing operations of ServiceInvest Kapitalverwaltungsgesellschaft mbH.
I. General information
Controller
We, ServiceInvest Kapitalverwaltungsgesellschaft mbH, take the protection of your personal data and the statutory obligations serving that protection very seriously. The statutory requirements call for comprehensive transparency regarding the processing of personal data. Only if you are sufficiently informed about the purpose, nature and scope of the processing can you, as the data subject, understand that processing.
This privacy policy therefore explains in detail which personal data we process when you use our website (www.serviceinvest.de) and any other websites referring to it, and in the other cases described here where applicable (for definitions, see I.2. below).
The controller within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and other data protection provisions is:
ServiceInvest Kapitalverwaltungsgesellschaft mbH
Fürstenrieder Straße 61
80686 München
Email: datenschutz@serviceinvest.de
Hereinafter referred to as the “controller” or “we”.
You can contact our data protection officer at:
Sascha Kremer, c/o KREMER LEGAL, Bahnhofstraße 66, 41236 Mönchengladbach, sascha.kremer@kremer.legal
How we process personal data of tenants of our funds’ properties is explained in our Privacy notice for tenants.
Please note that links on our website may take you to other websites that are operated not by us but by third parties. We either mark such links clearly, or they can be recognised by a change in the address bar of your browser. We are not responsible for compliance with data protection provisions or for the secure handling of your personal data on these websites operated by third parties.
Definitions
From the GDPR
This privacy policy uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR), for example, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.
Additional definitions:
Cookies and similar technologies
Cookies are text files that a website places on, or reads from, your terminal device. They contain combinations of letters and numbers in order, for example, to recognise the user and their settings when they reconnect to the website that set the cookie, to allow the user to stay logged in to a customer account, or to analyse certain usage behaviour statistically.
WebStorage technology makes it possible to store variables and values locally in the user’s browser cache. The technology comprises both “sessionStorage”, which remains stored until the browser tab is closed, and “localStorage”, which remains stored in the browser cache until the user clears the cache. Among other things, localStorage technology makes it possible to recognise the user and their settings when they access our website.
Data categories
Where we state the categories of data processed, this refers in particular to the following data: master data (e.g. names, address, dates of birth), contact data (e.g. email addresses, telephone number, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrer), location data (e.g. GPS data, IP geolocation, access points).
Information on data processing
We process personal data only to the extent permitted by law. Personal data are disclosed to others exclusively in the cases described below. The personal data are protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Unless we are legally obliged to store the data or to disclose them to third parties (in particular law enforcement authorities), the decision as to which personal data we process, for how long, and to what extent we disclose them where applicable depends on which functions of the website you use in the individual case.
Storage period
Personal data are erased as soon as the purpose of the processing ceases to apply or a prescribed retention period expires, unless further storage of the personal data is necessary for the conclusion or performance of a contract. Where we are required to provide information on the storage period of cookies and similar technologies, you will find it at the end of this privacy policy.
Personal data that we process in the context of an application (see below) are stored for a period of six months after the conclusion of the application procedure.
Automated individual decision-making, including profiling
No automated individual decision-making, including profiling, takes place.
Rights of data subjects
As a data subject, you have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The right of access and the right to erasure are subject to the restrictions under §§ 34, 35 BDSG.
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The competent data protection supervisory authority is:
Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA)
Promenade 18
91522 Ansbach
However, you are free to lodge a complaint with another data protection supervisory authority. A list of the supervisory authorities can be found at: https://www.bfdi.bund.de/ (under “Infothek” / “Anschriften und Links”)
Notification obligations of the controller
We communicate any rectification or erasure of your personal data or restriction of processing pursuant to Art. 16, Art. 17(1) and Art. 18 GDPR to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.
Obligation to provide data
Unless otherwise explained below in the information on the legal bases, you are not obliged to provide personal data. In the cases of Art. 6(1)(b) GDPR, however, the personal data are required for the performance or conclusion of a contract. If you do not provide the personal data concerned, the contract cannot be performed or concluded. If you do not provide the data in the cases of Art. 6(1)(a) and (f) GDPR, you will not be able to use the relevant parts of our website.
Objection and withdrawal
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.
Pursuant to Art. 7(3) sentence 1 GDPR, you have the right to withdraw your consent at any time with effect for the future, informally by post or email. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Upon your withdrawal, we will erase the personal data processed on the basis of the consent if there is no other legal basis for their processing.
Objections and withdrawals are not subject to any formal requirements and should be addressed to the contact details given above.
You can withdraw certain consent(s) on our careers page directly via our cookie consent tool. Please note that you must do this on every terminal device on which you have visited our website and consented to the data processing.
II. Data processing in connection with the use of our website
Using the website and its functions generally requires the processing of personal data.
Provision of the website
Purpose of processing: Functionality and optimisation of the website, and ensuring the security of our information technology systems when our website is used for information purposes only (without using additional functions); integration and display of functions and content (e.g. graphics) that we do not provide ourselves.
Legal basis: Art. 6(1)(f) GDPR.
Data categories: Connection data
Recipients of the data: IT service providers
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
Contacting us
Purpose of processing: Handling your contact request; forwarding it to the responsible property manager if your request concerns a tenancy.
Legal basis: Art. 6(1)(f) GDPR; where applicable, Art. 6(1)(b) GDPR (if the request concerns pre-contractual measures or an existing contract)
Data categories: Master data, contact data, content data, where applicable usage data, connection data, where applicable contract data (depending on the nature of the request)
Recipients of the data: IT service providers; where applicable, the property manager responsible for the property, insofar as your request concerns a tenancy
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
Video interviews/statements and podcasts
Purpose of processing: Depending on the respective photos, videos and/or audio recordings, internal and/or external documentation of the controller’s activities; where applicable, presentation of an event; use of the photos, videos and/or audio recordings for advertising, streaming, marketing and public relations, including internal and external publications on the internet, intranet, social media or in print publications
Legal basis: Art. 6(1) sentence 1 (a), (b) and (f) GDPR; Art. 9(2)(a) GDPR
Data categories: Master data, content data
Recipients of the data: Depending on the photo, video and/or audio recording, where applicable IT service providers, social media, photographers/agencies, affiliated companies within the 2IG group
Intended third-country transfer: Possible depending on the photo, video and/or audio recording (on the basis of adequacy decisions pursuant to Art. 45 GDPR, standard contractual clauses pursuant to Art. 46(2)(c) GDPR, or your consent pursuant to Art. 49(1) sentence 1 (a) GDPR)
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
III. Data processing on our careers page (karriere.2ig.de)
Applications
Purpose of processing: Handling your application and conducting the application procedure; consideration of your application by our affiliated companies, provided that your express consent has been given.
Legal basis: Art. 6(1)(b) GDPR (taking pre-contractual measures); for applications to affiliated companies, Art. 6(1)(a) GDPR in conjunction with Art. 7 GDPR.
Data categories: Master data, contact data, content data, contract data and, where applicable, special categories of personal data within the meaning of Art. 9(1) GDPR (depending on the specific vacancy and the information you provide; only those data relating to your application that you provide to us and that we are permitted to process in the context of applications are stored).
Recipients of the data: rexx systems GmbH Headquarters, Süderstrasse 75-79, 20097 Hamburg; data are passed on to affiliated companies for their application procedures only if you expressly consent to this.
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
Matomo
Purpose of processing: Statistical analysis, optimisation and needs-based design of our careers page.
Legal basis: Art. 6(1)(a) GDPR
Data categories: Usage data, connection data
Recipients of the data: rexx systems GmbH Headquarters, Süderstrasse 75-79, 20097 Hamburg
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? Yes (details can be found in the overview at the end of this policy)
Job alert
Purpose of processing: Notification of new job vacancies; proof of your consent; ensuring the security of our information technology systems.
Legal basis: Art. 6(1)(a) and (f) GDPR
Data categories: Contact data, where applicable content data and connection data
Recipients of the data: Where applicable, IT service providers
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
Cookie consent service
Purpose of processing: When you access our website, certain information is placed on or read from your terminal device where this is strictly necessary for the operation of our website. This includes information processed by our cookie consent service to ensure that only those cookies and similar technologies are set or read that are technically strictly necessary to operate our website or to which you have consented.
Legal basis: Art. 6(1)(c) and (f) GDPR.
Data categories: Usage data, connection data.
Recipients of the data: rexx systems GmbH Headquarters, Süderstrasse 75-79, 20097 Hamburg
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
IV. Other data processing operations outside our website
Guest Wi-Fi
Purpose of processing: Use of our guest Wi-Fi; ensuring the security of our information technology systems. This is also our legitimate interest.
Legal basis: Art. 6(1)(f) GDPR
Data categories: Connection data
Recipients of the data: None
Intended third-country transfer: None
Do we store personal data on, or read personal data from, your terminal device on the basis of your consent? No
V. Information on the storage period of consent-based cookies and similar technologies
Below, we inform you about the names and lifetimes of the cookies and similar technologies used by the plug-ins and services mentioned above – if you have given your consent. The information is presented according to the following scheme:
Access to a cookie/similar technologies is in principle only possible from the internet address from which the cookie is set. This means that we have no access to the cookies of the providers used (above). They have no access to our cookies. Third parties have access neither to our cookies nor to those of the providers used. Access by third parties can only be obtained through technical attacks which we cannot control and for which we are not responsible.
Service: Matomo
_pk_id*
Domain name: karriere.2ig.de
Expiry: 13 months
Registers a unique ID for a website visitor which records how the visitor uses the website. The data are used for statistics.
_pk_ref*
Domain name: karriere.2ig.de
Expiry: 6 months
This cookie is used as a reference to the anonymous tracking session on the page.
_pk_ses*
Domain name: karriere.2ig.de
Expiry: 30 minutes
This cookie stores a unique session ID.
MATOMO_SESSID
Domain name: karriere.2ig.de
Expiry: This session cookie is deleted when the browser is closed
Last updated: November 2026