1 / 30

GDPR and Valuation Reports: Understanding Data Protection Regulations for Property Evaluations

This informative guide explores the implications of GDPR on valuation reports, offering insights on compliance and data protection. Dive into the world of property evaluations in light of the EU's General Data Protection Regulation.

jclose
Download Presentation

GDPR and Valuation Reports: Understanding Data Protection Regulations for Property Evaluations

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. General Data Protection Regulation –GDPR- and Valuation Reports General Data Protection Regulation GDPR and valuation reports Dipl.-Ing. Bernhard Bischoff REV Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  2. General Data Protection Regulation –GDPR- and Valuation Reports It happens in May 2018 • In Vienna the owner of residential buildings took away the names of the tenants at the house-bells • In Berlin the schools discussed the problem of lists with the name of the pupils • All over Europe (only member States of EU) lawyers offered to help in data protection (not for free) • There were two years to prepare the local law of the member states, but on 25. 05. 2018 the GDPR was in force • And everyone was surprised • Nervous experts (members of BVS or not) are talking about the problem • to write a valuation report in favour with the GDPR Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  3. General Data Protection Regulation –GDPR- and Valuation Reports First Data Protection Regulation of the EU in 1995 (RL 95/46 EC) Data Protection Directive 95/46 EG of 24.10.1995 Second Data Protection Regulation of the EU in 2016 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  4. General Data Protection Regulation –GDPR- and Valuation Reports Situation in Germany • Basic Law (constituency) of the Federal Republic and the High Court with some decisions to the right of the ownership of personal data • the first data protection law in 1975 • A lot of discussions in public about list of names in school or kindergarten, publishing list of members of an association in letters or brochures • Very important decisions about census, ownership of data, publishing of data in official documents, reading personal data in registers like the land register or the tax register • New issue of the data protection law in 2016 to set the right of EU in our local laws Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  5. General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU • GDPR is the frame for data protection in EU • Every country has the right to add local laws for special situations. • These laws must published to EU to control if the GDPR is not stopped by these laws. • It’s allowed to have own laws for data protection if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller Art. 6 GDPR • If there are local laws to have a view in official registers with personal data it is possible to continue this special kind of data protection Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  6. General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU • GDPR • is not a law for all possibilities of personal data • is not a law for all opportunities to publish personal data • is a frame for data protection in EU • is a special kind of helping the lawyers and advisors in their business Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  7. General Data Protection Regulation –GDPR- and Valuation Reports Situation in EU • GDPR • is a very good basic for data protection in times where it is possible to save millions of personal data in databases • is an instrument to make sure that everyone can control his or her personal data • is the European answer to Google, Facebook or Twitter and their power to know everything about you Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  8. General Data Protection Regulation –GDPR- and Valuation Reports All over EU • Great discussions about to work like the GDPR wants! • How can I organize my office? • Which data in my office must saved? • Is it allowed to save my data in a cloud in my country, in EU or everywhere? • What happens if I don’t want to do what GDPR wants? • Have I to inform all owners of personal data I have in my office (clients, tenants of properties, owners of properties, etc)? • Is it possible to save pictures and documents on my database in my office? • What can I write in a valuation report and which plans and pictures can I show? Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  9. General Data Protection Regulation –GDPR- and Valuation Reports Valuer and Data Protection • GDPR is the frame for data protection in EU • Every country has the right to add local laws for special situations. • These laws must published to EU to control if the GDPR is not stopped by these laws. • It’s allowed to have own laws for data protection if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller Art. 6 GDPR • If there are local laws to have a view in official registers with personal data it is possible to continue this special kind of data protection Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  10. General Data Protection Regulation –GDPR- and Valuation Reports The Valuer and Data Protection Writing a report What is possible and what is forbidden? And what could be allowed or not? Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  11. General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data • Personal data (name, address, telephone, email) of the client • Personal data of the owners • Personal data (including the special flat or the rent) of tenants, details of the contracts and other users • Personal data of people of the authorities, lawyers, advisors who informed me about some facts • Personal data of cases for the comparison method (owner, rents contracts, price) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  12. General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data • Plans (construction or land register) with any information about other properties • Registers and tables from others with names, prices, rents, contracts • Pictures with personal data like faces or people in a special situation • Pictures of Pictures in a flat or an office • Pictures with details of the private life of people (the inner site of flats or offices, sleeping, art or others) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  13. General Data Protection Regulation –GDPR- and Valuation Reports Which personal data do we use? Personal data • Copies of official documents about the building or from land register • Personal data from the internet (Databases like YouTube, Facebook, personal homepages of someone, platforms for jobs or working together) Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  14. General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? • In most cases the client give you all personal data about tenants, contracts and owners • Very often you get personal data from the facility manager or people doing this job • You need personal data by the authorities for example from land register or databases • Sometimes you get personal data together with compares prices or rents • Often you can buy personal data from others like prices, rents or business Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  15. General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? • GDPR Article 4 (7) • ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law; Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  16. General Data Protection Regulation –GDPR- and Valuation Reports Who delivered the personal data? • Who is a Controller ? • your client is a controller • A facility manager is a controller • A Lawyer is a controller • A court is a controller • Every authority giving personal data to you is a controller • If the valuer gets personal data form a controller, the controller must be sure that it is legal to give the personal data to you. The Valuer can trust this way and has not to inform all the people about the personal data Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  17. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Who get the report? Who publish the report? • Is there a guarantee that the report is not given to others than your client? • In most cases there is the possibility, that someone gives the report away or must do this for the court or the tax authority! • For every report the valuer must use the full data protection! There is no difference to publish a report as a printed brochure, as an electronic file or in the internet Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  18. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Direct personal data and indirect personal data • Direct personal data are every information about a special human like names, addresses or pictures of the people • Indirect personal data are information which allowes to find out personal data like addresses, locations or special information to identify someone All personal data are forbidden in the valuer report Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  19. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Examples for personal data in a valuer report • A list of the tenants of a residential property with full name, birthday and not payed rent is forbidden. A list of the flats and their rents and special situation (like level, equipment, costs) is necessary for the valuation and to understand the report and is not forbidden • The name of the owner is not necessary for the valuation so it is better to write not the name in your report. But if your client is the owner you can write the name, when you’ve got the permission Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  20. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report A list of owners of a Residential building Name of the owners Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  21. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report A list of tenants of a mixed used building Name of the tenants and their kind of using the flat, office or shop Addressisallowed It‘sthevaluationobject Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  22. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Examples for personal data in a valuer report • If the valuer got personal data from the facility manager like an overview about tenants, the valuer should not write in the report the personal data. In most cases the facility manager has not made clear with the tenants, that he can give the personal data to the valuer. The facility manager is a controller, but the valuer must be sure, that the facility manager knows it. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  23. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Examples for personal data in a valuer report • If the Valuer gets prices of sales or rents of properties to make the market value, it is mostly forbidden to present the whole address and location. The combination between price and detailed situation are personal data. But look at the local right in the country, because in some countries the location and the price are published. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  24. General Data Protection Regulation –GDPR- and Valuation Reports A listofcontractstosaleproperties Personal data in the report Not allowed The case can be identified Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  25. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Examples for personal data in a valuer report • If there are pictures in the report, the valuer has be very careful with faces and bodies. The Valuer needs the permission to take these pictures and to publish them in the report. The best way is to have a written permission by the man or the wife. • If there are pictures showing details of the life of the people make sure that they give you the permission to take pictures and use them in the report. • If there are pictures of cars or other things to identify a person, it would be better to clean the picture of the numbers or figures. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  26. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  27. General Data Protection Regulation –GDPR- and Valuation Reports Personal data in the report • Examples for personal data in a valuer report • If there are pictures of a building or other parts of the property you can use them, but they must be taken from the street and not from the ground of the property. The valuers must be clear with the local right to visit the property and enter the ground. The personal data like faces or numbers must be unseen in the pictures. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  28. General Data Protection Regulation –GDPR- and Valuation Reports Conclusion • GDPR is not so strong and difficult for the valuer • The reports must be written in order of GDPR and the local right of the Member o the EU • In some cases the valuer has to change something, but not really important things for the valuation Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  29. General Data Protection Regulation –GDPR- and Valuation Reports Conclusion • The Valuer must be careful if the report is published by someone in the internet without any control by the valuer • All over Europe are lawyers looking especially in the internet for mistakes • No one knows what is really possible and allowed. We need years to get the decisions by the courts all over Europe. Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

  30. General Data Protection Regulation –GDPR- and Valuation Reports QuestionsandreportsaboutGDPRcouldbesent: info@sachverstaendiger-bischoff.de Dipl.-Ing. Bernhard Bischoff Öffentlich bestellter und vereidigter Sachverständiger für Bewertung von bebauten und unbebauten Grundstücken Beratender Ingenieur

More Related