Data Protection

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally. Detailed information on the subject of data protection can be found in our Privacy Policy below.

Data Collection on This Website

Who Is Responsible for Data Collection on This Website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this Privacy Policy.

How Do We Collect Your Data?

Some data is collected when you provide it to us. This may include, for example, information that you enter into a contact form.

Other data is collected automatically by our IT systems or after you have given your consent when visiting the website. This primarily includes technical data (e.g. internet browser, operating system, or the time a page was accessed). This data is collected automatically as soon as you enter this website.

What Do We Use Your Data For?

Some of the data is collected to ensure the proper and error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated through the website, the transmitted data will also be processed for contract offers, orders, or other business inquiries.

Copilot said:

What Rights Do You Have Regarding Your Data?

You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you may revoke this consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

If you have any questions regarding this or any other data protection matters, you may contact us at any time.

Analytics Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analyzed. This is carried out primarily through the use of analytics programs.

Detailed information about these analytics programs can be found in the Privacy Policy below.

2. Hosting

We host the content of our website with the following provider:

Raidboxes

The provider is Raidboxes GmbH, Hafenstr. 32, 48153 Münster, Germany (hereinafter referred to as “Raidboxes”). When you visit our website, Raidboxes collects various log files, including your IP address.

For more information, please refer to Raidboxes’ Privacy Policy: https://raidboxes.io/legal/privacy/

The use of Raidboxes is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Copilot said:

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

When you use this website, various personal data is collected. Personal data refers to any information that can be used to identify you personally. This Privacy Policy explains what data we collect, how we use it, and for what purpose. It also explains how and why such processing takes place.

Please note that data transmission over the Internet (e.g., communication by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Controller

The controller responsible for data processing on this website is:

ASSVOR GmbH
Managing Director: Marcus Krüll
Arnheimer Straße 19
40489 Düsseldorf
Germany

Phone: +49 211 54761560
Email: datenschutz@assvor.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, or similar information).

Retention Period

Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining your personal data (e.g., retention periods required under tax or commercial law). In such cases, the data will be deleted once those grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have given your consent to the processing of your data, we process your personal data on the basis of Article 6(1)(a) GDPR and, where special categories of personal data are involved, Article 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, processing is also carried out on the basis of Article 49(1)(a) GDPR.

If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data where this is necessary to comply with a legal obligation in accordance with Article 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Information on the specific legal basis applicable in each individual case is provided in the following sections of this Privacy Policy.

Information on Data Transfers to Non-Secure Third Countries and to U.S. Companies Not Certified Under the DPF

Among other services, we use tools provided by companies based in third countries that are not considered to provide an adequate level of data protection, as well as U.S.-based tools whose providers are not certified under the EU-U.S. Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to and processed in these countries.

Please note that in countries without an adequate level of data protection, a level of protection comparable to that of the European Union cannot be guaranteed.

Please also note that the United States is generally considered a secure third country if the recipient is certified under the EU-U.S. Data Privacy Framework (DPF) or provides appropriate additional safeguards. Information regarding transfers to third countries, including the recipients of such data, can be found in this Privacy Policy.

Data Protection Officer

We have appointed a Data Protection Officer:

Manfred Just
Am Ritterskamp 21
40489 Düsseldorf
Germany

Phone: +49 163 6915030
Email: datenschutz@just-support.de

Recipients of Personal Data

As part of our business activities, we cooperate with various external parties. In some cases, this requires the transfer of personal data to those external parties.

We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so (for example, disclosure to tax authorities), where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the transfer of data.

When using data processors, we transfer personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement will be concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent already given at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

If data processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data. This also applies to any profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling insofar as it is related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive the data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format and to have it transferred to yourself or to a third party. Where you request the direct transfer of data to another controller, this will only be carried out where technically feasible.

Access, Rectification, and Erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of data processing. You may also have the right to have this data corrected or erased. If you have any questions regarding personal data, you may contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right.

The right to restriction of processing applies in the following circumstances:

• If you contest the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification process, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data has been or is being carried out unlawfully, you may request the restriction of processing instead of the deletion of your data.

If we no longer require your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing of your personal data instead of its deletion.

If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests between your interests and ours must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may, apart from being stored, only be processed with your consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the padlock symbol displayed in your browser.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

The use of contact details published in accordance with legal notice requirements for the purpose of sending unsolicited advertising and informational materials is hereby expressly prohibited.

The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.

4. Data Collection on This Website

Cookies

Our website uses so-called “cookies.” Cookies are small data files and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted when you leave the website. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of specific third-party services within websites, such as cookies used for payment processing services.

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not operate without them (for example, shopping cart functionality or the display of videos). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are required for carrying out electronic communications, providing specific functions requested by you (e.g., shopping cart functionality), or optimizing the website (e.g., audience measurement cookies) are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services.

Where consent has been requested for the storage of cookies or comparable recognition technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and enable the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

Information on any additional cookies and services used on this website can be found in this Privacy Policy.

Consent Management with Usercentrics

This website uses Usercentrics consent technology to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies and to document such consent in compliance with data protection regulations.

The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany (hereinafter referred to as “Usercentrics”):
https://usercentrics.com/

When you access our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or withdrawal of consent

Your IP address

Information about your browser

Information about your device

Date and time of your visit to the website

Geolocation data

Usercentrics also stores a cookie in your browser in order to assign and manage the consents you have granted or withdrawn.

The data collected in this manner will be stored until you request its deletion, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this processing is Article 6(1)(c) GDPR.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with the provider of the above-mentioned service. This is a legally required contract ensuring that Usercentrics processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:

Browser type and browser version

Operating system used

Referrer URL

Hostname of the accessing device

Time of the server request

IP address

This data is not combined with other data sources.

The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website. For this purpose, the collection of server log files is necessary.

Contact Form

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you submit, will be stored by us for the purpose of processing your inquiry and for any follow-up questions.

For information regarding the disclosure of your data in connection with our real estate brokerage activities, please refer to the separate section entitled “Data Sharing in the Course of Brokerage Activities.”

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data entered in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions, particularly retention periods required by law, remain unaffected.

Inquiries by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry, including all personal data resulting from it (such as your name and the content of your inquiry), will be stored and processed by us for the purpose of handling your request.

For information regarding the disclosure of your data in connection with our real estate brokerage activities, please refer to the separate section entitled “Data Sharing in the Course of Brokerage Activities.”

Processing of Data from Email, Telephone, or Fax Inquiries

The processing of this data is based on Article 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you send to us through inquiries remains with us until you request its deletion, withdraw your consent to its storage, or the purpose for its storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Registration on This Website

You may register on this website to make use of additional functions and services. We use the data entered during registration solely for the purpose of providing the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we may refuse your registration.

For important changes, such as changes to the scope of services offered or technically necessary modifications, we use the email address provided during registration to inform you accordingly.

The processing of data entered during registration is carried out for the purpose of establishing and maintaining the user relationship created by the registration and, where applicable, for the initiation of further contracts (Article 6(1)(b) GDPR).

The data collected during registration will be stored for as long as you remain registered on this website and will be deleted thereafter. Statutory retention periods remain unaffected.

5. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking, analytics, and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It merely serves to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent may be withdrawn at any time.

Google is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to complying with these data protection standards. Further information is available at:

https://www.dataprivacyframework.gov/participant/5780

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage statistics, including page views, time spent on pages, operating systems used, and the user’s origin. This data is assigned to the user’s respective device. It is not associated with a specific user ID.

In addition, Google Analytics may record mouse movements, scrolling behavior, and clicks. Google Analytics also uses various modeling approaches to supplement collected datasets and employs machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing their behavior (e.g., cookies or device fingerprinting). Information collected by Google regarding the use of this website is generally transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. Details can be found at:

https://business.safety.google/adscontrollerterms/sccs/

Google is certified under the EU-U.S. Data Privacy Framework (DPF). Additional information is available at:

https://www.dataprivacyframework.gov/participant/5780

IP Anonymization

IP anonymization is activated for Google Analytics. As a result, your IP address is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide additional services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at:

https://tools.google.com/dlpage/gaoptout?hl=en

More information about how Google Analytics handles user data can be found in Google’s Privacy Policy:

https://support.google.com/analytics/answer/6004245

Data Processing Agreement

We have concluded a Data Processing Agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3 Elia Zammit Street, St Julians STJ 1000, Malta, Europe (https://www.hotjar.com).

Hotjar is a tool used to analyze user behavior on this website. Among other things, Hotjar enables us to record mouse movements, scrolling behavior, and clicks. Hotjar can also determine how long users remain at a specific position on a page. Based on this information, Hotjar creates so-called heatmaps, which help identify which areas of the website visitors view most frequently.

We can also determine how long users remain on a page and when they leave it. Furthermore, we can identify at which point users abandon entries in a contact form (so-called conversion funnels).

In addition, Hotjar allows website visitors to provide direct feedback. This functionality helps improve the website operator’s online services.

Hotjar uses technologies that enable the recognition of users for the purpose of analyzing user behavior, such as cookies and device fingerprinting.

Where consent has been obtained, the use of this service is based exclusively on Article 6(1)(a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time. Where consent has not been obtained, the service is used on the basis of Article 6(1)(f) GDPR, as the website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and advertising.

Disabling Hotjar

If you wish to disable data collection by Hotjar, please visit the following link and follow the instructions provided:

https://www.hotjar.com/policies/do-not-track/

Please note that Hotjar must be disabled separately for each browser and device.

Further information about Hotjar and the data it collects can be found in Hotjar’s Privacy Policy:

https://www.hotjar.com/privacy

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

WP Statistics

This website uses the analytics tool WP Statistics to statistically evaluate visitor access. The provider is Veronalabs, Tatari 64, 10134 Tallinn, Estonia (https://veronalabs.com).

WP Statistics enables us to analyze the use of our website. Among other things, WP Statistics collects log files (IP address, referrer, browser used, user origin, search engine used) and actions performed by website visitors on the site (e.g., clicks and page views).

The data collected by WP Statistics is stored exclusively on our own server.

The use of this analytics tool is based on Article 6(1)(f) GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our website and our advertising. Where corresponding consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent may be withdrawn at any time.

6. Newsletter

Newsletter Data

If you would like to subscribe to the newsletter offered on this website, we require an email address from you as well as information that enables us to verify that you are the owner of the email address provided and consent to receiving the newsletter. No further data is collected unless provided voluntarily.

Newsletter distribution is managed through our CMS and CRM software, onOffice (see the separate section of this Privacy Policy). Your registration data is stored in the onOffice CRM system on servers located in Germany and is used exclusively for the distribution of our newsletter. Your data will not be shared with any other third parties.

After registering, you will receive a confirmation email containing an activation link. You will only be added to our newsletter distribution list after clicking this link (double opt-in procedure). This ensures that only the actual owner of the email address can subscribe to the newsletter.

The processing of data entered into the newsletter registration form is carried out solely on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of your data, your email address, and its use for newsletter distribution at any time, for example by clicking the “unsubscribe” link included in every newsletter. The legality of any data processing already carried out remains unaffected by the withdrawal.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe and will be removed from the mailing list after cancellation of the subscription or once the purpose no longer applies. We reserve the right to delete or block email addresses from our mailing list at our own discretion based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter, your email address may be stored in a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. Data stored in the blacklist is used solely for this purpose and is not combined with other data. This serves both your interests and our interest in complying with legal requirements regarding newsletter distribution (legitimate interest pursuant to Article 6(1)(f) GDPR). Storage in the blacklist is not time-limited. You may object to such storage if your interests outweigh our legitimate interest.

7. Plugins and Tools

YouTube with Enhanced Privacy Mode

This website embeds videos from YouTube. The service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page on our website that contains an embedded YouTube video, a connection is established to YouTube’s servers. In doing so, YouTube is informed which of our pages you have visited. If you are logged into your YouTube account, YouTube may associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in Enhanced Privacy Mode. According to YouTube, videos played in Enhanced Privacy Mode are not used to personalize browsing activity on YouTube. Advertisements displayed in Enhanced Privacy Mode are also not personalized. No cookies are set in Enhanced Privacy Mode. Instead, so-called Local Storage elements are stored in the user’s browser. These can contain personal data and may be used for recognition purposes in a manner similar to cookies.

Details regarding Enhanced Privacy Mode can be found here:

https://support.google.com/youtube/answer/171780

Please note that additional data processing operations may be triggered after activating a YouTube video, over which we have no control.

The use of YouTube is based on our legitimate interest in presenting our online content in an appealing manner pursuant to Article 6(1)(f) GDPR. Where consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Further information about YouTube’s privacy practices can be found at:

https://policies.google.com/privacy

Google is certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available at:

https://www.dataprivacyframework.gov/participant/5780

Google reCAPTCHA

We use Google reCAPTCHA (“reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to determine whether data entered on this website (e.g., in a contact form) is entered by a human user or by an automated program. To do this, reCAPTCHA analyzes website visitor behavior based on various characteristics.

This analysis begins automatically as soon as a visitor enters the website. For analysis purposes, reCAPTCHA evaluates various types of information, such as the visitor’s IP address, the amount of time spent on the website, and mouse movements made by the user. The data collected during the analysis is transmitted to Google.

The reCAPTCHA analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.

In this context, Google acts exclusively as a data processor within the meaning of Article 28 GDPR and does not use the collected data for its own purposes. The use of the tool is based on a Data Processing Agreement (DPA) concluded with Google.

The storage and analysis of the data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website against abusive automated access and spam. Where consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Google is certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available at:

https://www.dataprivacyframework.gov/participant/5780

8. Own Services

Handling Applicant Data

We offer you the opportunity to apply for positions with us (e.g., by email, post, or via an online application form). Below, we inform you about the scope, purpose, and use of personal data collected as part of the application process.

We assure you that your personal data will be collected, processed, and used in compliance with applicable data protection laws and all other relevant legal requirements and that your data will be treated with the strictest confidentiality.

Scope and Purpose of Data Collection

If you submit an application to us, we will process the personal data associated with your application (e.g., contact and communication data, application documents, notes from interviews, etc.) to the extent necessary for making a decision regarding the establishment of an employment relationship.

The legal basis for this processing is Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6(1)(b) GDPR (pre-contractual measures), and, where consent has been given, Article 6(1)(a) GDPR. Consent may be withdrawn at any time.

Your personal data will only be shared within our organization with individuals involved in processing your application.

If your application is successful, the data you submit will be stored in our data processing systems for the purpose of implementing the employment relationship on the basis of Section 26 BDSG and Article 6(1)(b) GDPR.

As part of the recruitment process, we may also conduct online research about you. This may include searches via Google, LinkedIn, and Xing. The legal basis for this type of processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in obtaining an overall impression of publicly available information about you.

Retention Period of Applicant Data

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you submitted for up to six months after the conclusion of the application process (rejection or withdrawal of the application) based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

After this period, the data will be deleted and any physical application documents will be destroyed. Retention serves, in particular, as evidence in the event of legal disputes.

If it is apparent that the data will be required after the six-month period has expired, for example due to a pending or anticipated legal dispute, the data will only be deleted once the purpose for further retention no longer applies.

Longer retention periods may also apply if you have given your consent pursuant to Article 6(1)(a) GDPR or if statutory retention obligations prevent deletion.

Inclusion in the Applicant Pool

If we are unable to offer you a position, we may offer you the opportunity to be included in our applicant pool. If accepted, all documents and information from your application will be transferred to the applicant pool so that we can contact you regarding suitable vacancies.

Inclusion in the applicant pool is based exclusively on your explicit consent pursuant to Article 6(1)(a) GDPR. Providing consent is voluntary and is not related to the ongoing application process. The data subject may withdraw their consent at any time.

In the event of withdrawal, the data will be permanently deleted from the applicant pool, provided there are no legal retention obligations.

Data stored in the applicant pool will be permanently deleted no later than two years after consent has been granted.

9. Additional Services

onOffice

This website is operated using the software onOffice smart site, provided by onOffice GmbH, Charlottenburger Allee 5, 52068 Aachen, Germany (hereinafter referred to as “onOffice”).

onOffice provides the following functions:

Property presentation (property listings and detail pages)

Delivery of property images and employee profile pictures via the servers image.onoffice.de and crm.onoffice.de

Map display on the contact page (map tiles provided by tiles.onoffice.de and rendered using the open-source Leaflet library)

Processing of contact, prospective buyer, and property owner forms

Owner login area with authentication via email address and password

Newsletter registration forms and processing of registration data

When you visit our website, personal data (including IP address, browser type, access time, and accessed content) is transmitted to onOffice servers.

Data voluntarily provided through our forms (e.g., name, address, email address, telephone number, search profile, and property-related data) is stored within the onOffice real estate software for the purpose of processing your request.

The legal basis for processing is Article 6(1)(b) GDPR (contract initiation and performance) and Article 6(1)(f) GDPR (legitimate interest in the smooth operation of the website).

Where you have expressly consented to the use of specific functions, processing is additionally based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

onOffice servers are located exclusively in Germany. We have concluded a Data Processing Agreement with onOffice in accordance with Article 28 GDPR.

Owner Login

On our website, we provide property owners with whom we have concluded a brokerage agreement access to a password-protected area (“Owner Login”).

Within this area, owners can view the current status of their property’s marketing activities, including the broker’s activity log, prospective buyer statistics, and weekly feedback reports.

Login is performed using individual access credentials. During this process, login credentials, session identifiers, and access logs are processed.

Processing is carried out on the basis of Article 6(1)(b) GDPR for the fulfillment of our brokerage agreement with you.

The functionality is technically provided through onOffice, with whom we maintain a Data Processing Agreement as described above.

Further information is available in the onOffice Privacy Policy:

https://www.onoffice.com/datenschutz/

Data Sharing in the Course of Brokerage Activities

As a real estate agency, our core service is to act as an intermediary between sellers or landlords (hereinafter referred to as “Owners”) and prospective buyers or tenants (hereinafter referred to as “Interested Parties”).

To perform this service, it is necessary to share certain personal data between these groups.

Data of Interested Parties Shared with Owners

If, as an interested party, you contact us regarding a specific property through our forms, by email, or by telephone, or if you request a viewing appointment, we may share relevant information with the property’s owner, including:

Name

Contact details

Search profile

Any additional information voluntarily provided by you

This disclosure only occurs to the extent necessary for brokerage purposes.

Owners may access this information through the password-protected Owner Login area.

Data of Owners Shared with Interested Parties

Conversely, during the marketing of a property, we may provide selected interested parties with certain property-related information, including:

Property brochure information

Property address

Viewing appointments

Contact details for inquiries, where applicable

The legal basis for these disclosures is Article 6(1)(b) GDPR (implementation of pre-contractual measures at your request) and Article 6(1)(f) GDPR (legitimate interest in efficient brokerage services).

Personal data is shared only to the extent necessary for brokerage purposes.

Owners and interested parties act as independent recipients of the data and not as processors. Any subsequent processing is carried out under their own legal responsibilities.

No additional disclosure to third parties takes place unless you have expressly consented or we are legally required to do so.

Sprengnetter (Property Valuation Estimate)

For online property valuation services, we use the services of Sprengnetter Austria GmbH, Frauentaler Straße 100, 8530 Deutschlandsberg, Austria.

When you use our online property valuation tool, the information you provide (such as property type, location, living area, year of construction, and condition) is transmitted to Sprengnetter servers to calculate an estimated property value.

Additionally, your IP address and technical information relating to your browser and device are transmitted.

Valuations are generated using automated valuation models based on statistical methods and market data. The result is a non-binding property value estimate and not a professional appraisal.

Processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR and for pre-contractual measures under Article 6(1)(b) GDPR. Consent may be withdrawn at any time.

Data processing takes place on servers located within the European Union. A Data Processing Agreement pursuant to Article 28 GDPR has been concluded with Sprengnetter.

Further information can be found in Sprengnetter’s Privacy Policy:

https://www.sprengnetter.at/datenschutz/

Ogulo (360° Virtual Tours)

Some property detail pages on our website include 360-degree virtual tours provided by Ogulo GmbH, Im Mediapark 5d, 50670 Cologne, Germany.

When a page containing an embedded 360-degree tour is accessed, a connection is established with Ogulo’s servers.

During this process, your IP address, browser and device information, and usage data relating to the virtual tour (such as viewed rooms and duration of viewing) are transmitted to Ogulo.

Integration is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

We have entered into a Data Processing Agreement with Ogulo pursuant to Article 28 GDPR.

Further information can be found at:

https://ogulo.com/datenschutz/

Matterport (3D Tours)

Some property detail pages on our website include 3D property tours provided by Matterport Inc., 352 E. Java Drive, Sunnyvale, CA 94089, USA.

When accessing a page containing a Matterport tour, a connection is established with Matterport servers in the United States.

During this process, your IP address, browser and device information, location data, and interactions within the 3D tour (such as viewed rooms and duration of viewing) may be transmitted to Matterport.

The integration is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

Please note that a level of data protection equivalent to that of the European Union cannot be guaranteed in the United States and that U.S. authorities may, under certain circumstances, gain access to personal data.

Further information can be found in Matterport’s Privacy Policy:

https://matterport.com/legal/privacy-policy

Cloudimage (Image Optimization)

To optimize image delivery on our website, we use the Cloudimage service provided by Scaleflex SAS, StationF, 55 Boulevard Vincent Auriol, 75013 Paris, France.

When you access our website, images are delivered via Scaleflex servers.

During this process, your IP address, the URL of the accessed page, and technical information relating to your browser and device are transmitted to Scaleflex.

The data is retained for 30 days and subsequently deleted.

Processing takes place via servers located in France, the United Kingdom, the Netherlands, and the United States. Transfers to the United States are based on the European Commission’s Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

The use of Cloudimage is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the fast and reliable delivery of images on our website.

Where consent has been requested, processing is additionally based on Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information can be found in Scaleflex’s Privacy Policy:

https://privacy.scaleflex.it/go/scaleflex-privacy-center/en/privacy-by-design/