General Data Protection Regulation –GDPR- and Valuation Reports Dipl.-Ing. Bernhard Bischoff REV Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports It happens in May 2018 In Vienna the owner of residential buildings took away the names of the tenants at the house-bells In Berlin the schools discussed the problem of lists with the name of the pupils All over Europe (only member States of EU) lawyers offered to help in data protection (not for free) There were two years to prepare the local law of the member states, but on 25. 05. 2018 the GDPR was in force And everyone was surprised Nervous experts (members of BVS or not) are talking about the problem to write a valuation report in favour with the GDPR Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports First Data Protection Regulation of the EU in 1995 (RL 95/46 EC) Data Protection Directive 95/46 EG of 24.10.1995 Second Data Protection Regulation of the EU in 2016 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Situation in Germany Basic Law (constituency) of the Federal Republic and the High Court with some decisions to the right of the ownership of personal data the first data protection law in 1975 A lot of discussions in public about list of names in school or kindergarten, publishing list of members of an association in letters or brochures Very important decisions about census, ownership of data, publishing of data in official documents, reading personal data in registers like the land register or the tax register New issue of the data protection law in 2016 to set the right of EU in our local laws Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU GDPR is the frame for data protection in EU Every country has the right to add local laws for special situations. These laws must published to EU to control if the GDPR is not stopped by these laws. It’s allowed to have own laws for data protection if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller Art. 6 GDPR If there are local laws to have a view in official registers with personal data it is possible to continue this special kind of data protection Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU GDPR is not a law for all possibilities of personal data is not a law for all opportunities to publish personal data is a frame for data protection in EU is a special kind of helping the lawyers and advisors in their business Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU GDPR is a very good basic for data protection in times where it is possible to save millions of personal data in databases is an instrument to make sure that everyone can control his or her personal data is the European answer to Google, Facebook or Twitter and their power to know everything about you Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports All over EU Great discussions about to work like the GDPR wants! How can I organize my office? Which data in my office must saved? Is it allowed to save my data in a cloud in my country, in EU or everywhere? What happens if I don’t want to do what GDPR wants? Have I to inform all owners of personal data I have in my office (clients, tenants of properties, owners of properties, etc)? Is it possible to save pictures and documents on my database in my office? What can I write in a valuation report and which plans and pictures can I show? Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Valuer and Data Protection GDPR is the frame for data protection in EU Every country has the right to add local laws for special situations. These laws must published to EU to control if the GDPR is not stopped by these laws. It’s allowed to have own laws for data protection if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller Art. 6 GDPR If there are local laws to have a view in official registers with personal data it is possible to continue this special kind of data protection Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports The Valuer and Data Protection Writing a report What is possible and what is forbidden? And what could be allowed or not? Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data Personal data (name, address, telephone, email) of the client Personal data of the owners Personal data (including the special flat or the rent) of tenants, details of the contracts and other users Personal data of people of the authorities, lawyers, advisors who informed me about some facts Personal data of cases for the comparison method (owner, rents contracts, price) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data Plans (construction or land register) with any information about other properties Registers and tables from others with names, prices, rents, contracts Pictures with personal data like faces or people in a special situation Pictures of Pictures in a flat or an office Pictures with details of the private life of people (the inner site of flats or offices, sleeping, art or others) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data Copies of official documents about the building or from land register Personal data from the internet (Databases like YouTube, Facebook, personal homepages of someone, platforms for jobs or working together) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? In most cases the client give you all personal data about tenants, contracts and owners Very often you get personal data from the facility manager or people doing this job You need personal data by the authorities for example from land register or databases Sometimes you get personal data together with compares prices or rents Often you can buy personal data from others like prices, rents or business Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? GDPR Article 4 (7) ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? Who is a Controller ? your client is a controller A facility manager is a controller A Lawyer is a controller A court is a controller Every authority giving personal data to you is a controller If the valuer gets personal data form a controller, the controller must be sure that it is legal to give the personal data to you. The Valuer can trust this way and has not to inform all the people about the personal data Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Who get the report? Who publish the report? Is there a guarantee that the report is not given to others than your client? In most cases there is the possibility, that someone gives the report away or must do this for the court or the tax authority! For every report the valuer must use the full data protection! There is no difference to publish a report as a printed brochure, as an electronic file or in the internet Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Direct personal data and indirect personal data Direct personal data are every information about a special human like names, addresses or pictures of the people Indirect personal data are information which allowes to find out personal data like addresses, locations or special information to identify someone All personal data are forbidden in the valuer report Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Examples for personal data in a valuer report A list of the tenants of a residential property with full name, birthday and not payed rent is forbidden. A list of the flats and their rents and special situation (like level, equipment, costs) is necessary for the valuation and to understand the report and is not forbidden The name of the owner is not necessary for the valuation so it is better to write not the name in your report. But if your client is the owner you can write the name, when you’ve got the permission Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Tempelherrenstraße 8/8a und Wilmsstraße 23 WEG-Aufteilungsplan und Grundücher AG Tempelhof-Kreuzberg Grundbuch von Tempelhofer Vorstadt Blatt 12647 bis 12673 Stand: Januar 2016   Geschoss WE Grundbuch- MEA* Eigentümer m² GbR Anteil T8/8a/W23 Nr. blatt 10.000stel in % EG 8a, li 1/G 12647 167 GbR 42,37 8, li 2 12648 461 116,69 8,re 3/G 12649 358 90,49 23, li 4 12650 402 101,64 23, re 5/G 12651 127 GbR/Fahrrad 32,25 1. OG 6 12652 166 42,01 8a, re 7 12653 297 Wiebke Wagenführ 75,15 8 12654 547 138,37 8, re 9 12655 606 Peter Klippel 153,31 10,81% W23, re 10 12656 178 44,94 2. OG 11 12657 170 42,88 12 12658 296 74,87 13 12659 548 Sauerteig/Kalonjia 138,64 14 12660 611 Bernhard Schläfer 154,78 10,46% 15 12661 183 46,18 3. OG 16 12662 42,89 17 12663 75,22 18 12664 543 Elke Strohmeier-Ewert 137,43 11,83% A list of owners of a Residential building Name of the owners Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report A list of tenants of a mixed used building Name of the tenants and their kind of using the flat, office or shop Address is allowed It‘s the valuation object Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Examples for personal data in a valuer report If the valuer got personal data from the facility manager like an overview about tenants, the valuer should not write in the report the personal data. In most cases the facility manager has not made clear with the tenants, that he can give the personal data to the valuer. The facility manager is a controller, but the valuer must be sure, that the facility manager knows it. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Examples for personal data in a valuer report If the Valuer gets prices of sales or rents of properties to make the market value, it is mostly forbidden to present the whole address and location. The combination between price and detailed situation are personal data. But look at the local right in the country, because in some countries the location and the price are published. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report A list of contracts to sale properties Bz Jahr Lfnr V-Datum SL Ort Block Straßenname(HL) Gnr(HL) Gmrk(HL) Flur(HL) FlstNr(HL) FluNr(HL) Wilhelmstadt 13583 5 2011 515 16.05.2011 W 501 29280 Seegefelder Str. 55 18 1 1199 13595 909 13.10.2011 509 32413 Pichelsdorfer Str. 82 10 19 738 14 Hakenfelde 13587 1058 07.11.2011 507 28064 Rauchstr. 16 7 450 13597 2012 678 03.07.2012 29633 Carl-Schurz-Str. 51 13 11 365 Mitte 13585 1137 04.09.2012 29188 Kirchhofstr. 9 302 1761 12.11.2012 29305 60 157 2013 769 28.03.2013 32440 47 1948 46 492 14.05.2013 32458 Gatower Str. 98 22 1790 48 859 15.07.2013 29297 Breite Str. 62 220 The case can be identified Not allowed TNA Vg Eg Vf WT Bodenwert Pga Bauj Zs Hz AnzW AnzG WF-NF NFA NF GF JahrMiete M GMA tatLz Mie/WF Mie/NF KP/GF Kaufpreis W 13 2 6 213.613 210 1985 9 21 1.521 131 1.950 K 462 900.000 3 311.190 1988 27 2.084 128 3.023 133.476 N 12 6,1 5,01 6,98 566 1.710.000 175.997 1996 8 1 961 22 216 1.390 674 937.500 M1 367.829 10 1.121 89.728 1.280 1.435.000 192.027 1993 15 1.378 205 2.007 87.744 26 4,63 6,22 553 1.110.000 394.212 1.796 28 495 2.407 800 1.925.000 234.407 1989 14 1.420 303 1.877 194.184 19 11,8 11,73 8,92 767 1.440.000   162.330 2005 343 1.079 370.000 1.078.308 1992 17 5 1.978 36 706 2.279 201.645 58 5,7 5,57 13,03 1.338 3.050.000 Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Examples for personal data in a valuer report If there are pictures in the report, the valuer has be very careful with faces and bodies. The Valuer needs the permission to take these pictures and to publish them in the report. The best way is to have a written permission by the man or the wife. If there are pictures showing details of the life of the people make sure that they give you the permission to take pictures and use them in the report. If there are pictures of cars or other things to identify a person, it would be better to clean the picture of the numbers or figures. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Examples for personal data in a valuer report If there are pictures of a building or other parts of the property you can use them, but they must be taken from the street and not from the ground of the property. The valuers must be clear with the local right to visit the property and enter the ground. The personal data like faces or numbers must be unseen in the pictures. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Conclusion GDPR is not so strong and difficult for the valuer The reports must be written in order of GDPR and the local right of the Member o the EU In some cases the valuer has to change something, but not really important things for the valuation Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

General Data Protection Regulation –GDPR- and Valuation Reports Conclusion The Valuer must be careful if the report is published by someone in the internet without any control by the valuer All over Europe are lawyers looking especially in the internet for mistakes No one knows what is really possible and allowed. We need years to get the decisions by the courts all over Europe. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

Questions and reports about GDPR could be sent: General Data Protection Regulation –GDPR- and Valuation Reports Questions and reports about GDPR could be sent: info@sachverstaendiger-bischoff.de Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur 30