Datenschutzerklärung

1. Data protection at a glance

Allgemeine Hinweise

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy set out below this text.

Datenerfassung auf dieser Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You will find the operator's contact details in the "Information on the data controller" section of this privacy policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may, for example, be data you enter into a contact form.

Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This consists primarily of technical data (e.g. your web browser, operating system or the time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of this data is collected to ensure the website is provided without errors. Other data may be used to analyse how you use the site.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be rectified or erased. If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this, as well as any further questions you may have on the subject of data protection.

Analyse-Tools und Tools von Drittanbietern

When you visit this website, your browsing behaviour may be analysed statistically. This is done primarily using what are known as analytics programs.

You will find detailed information about these analytics programmes in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

We host the content of our website with the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter Hetzner).

For further details, please refer to Hetzner's privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz.

Hetzner is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Auftragsverarbeitung

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Cloudflare

We use the “Cloudflare” service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Cloudflare provides a globally distributed Content Delivery Network with DNS. Technically, the transfer of information between your browser and our website is routed through Cloudflare's network. This enables Cloudflare to analyse the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic from the internet. In doing so, Cloudflare may also use cookies or other technologies to recognise internet users, although these are used solely for the purpose described here.

Cloudflare is used on the basis of our legitimate interest in providing our website as securely and free of errors as possible (Art. 6(1)(f) GDPR).

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. You will find further details here: https://www.cloudflare.com/privacypolicy/.

You can find further information on the subject of security and data protection at Cloudflare here: https://www.cloudflare.com/privacypolicy/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information on this from the provider via the following link: https://www.dataprivacyframework.gov/

Auftragsverarbeitung

3. General information and mandatory disclosures

Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various items of personal data are collected. Personal data is any data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how, and for what purpose, this is done.

We would point out that data transmission over the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Hinweis zur verantwortlichen Stelle

The party responsible for data processing on this website is:

ESTAYA Real Estate GmbH
Moritzstraße 13
D-09212 Limbach-Oberfrohna

Telephone: +49 (0) 3722 8929300
Email: info@estaya.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses or similar).

Speicherdauer

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for erasure or withdraw consent to data processing, your data will be erased, provided we have no other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, erasure will take place once these grounds no longer apply.

General information on the legal bases for data processing on this website

If you have consented to the processing of your data, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, where special categories of data under Art. 9(1) GDPR are processed. In the event of express consent to the transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of Section 25(1) TTDSG. Your consent may be withdrawn at any time. Where your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data where it is required for compliance with a legal obligation, on the basis of Art. 6(1)(c) GDPR. The data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal basis applicable in each individual case is set out in the following paragraphs of this privacy policy.

Notice on the transfer of data to third countries that are not secure under data protection law, and on transfers to US companies that are not DPF-certified

Among other things, we use tools from companies based in third countries that do not have an adequate level of data protection, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to these countries and processed there. We would point out that, in third countries without an adequate level of data protection, no level of data protection comparable to that of the EU can be guaranteed.

We would point out that the USA, as a secure third country, generally has a level of data protection comparable to that of the EU. A transfer of data to the USA is therefore permissible where the recipient holds certification under the “EU-US Data Privacy Framework” (DPF) or provides suitable additional safeguards. Information about transfers to third countries, including the data recipients, can be found in this privacy policy.

Empfänger von personenbezogenen Daten

In the course of our business activities, we work with various external parties. In some cases, this also requires personal data to be transferred to these external parties. We only pass personal data on to external parties where this is necessary to fulfil a contract, where we are legally obliged to do so (for example, passing data on to the tax authorities), where we have a legitimate interest in the disclosure under Art. 6(1)(f) GDPR, or where some other legal basis permits the disclosure of data. When using processors, we pass on our customers' personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of the data processing carried out up until the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in particular cases and to direct marketing (Art. 21 GDPR)

Wenn die Datenverarbeitung auf Grundlage von Art. 6 Abs. 1 lit. e oder f DSGVO erfolgt, haben Sie jederzeit das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, gegen die Verarbeitung Ihrer personenbezogenen Daten Widerspruch einzulegen; dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling. Die jeweilige Rechtsgrundlage, auf denen eine Verarbeitung beruht, entnehmen Sie dieser Datenschutzerklärung. Wenn Sie Widerspruch einlegen, werden wir Ihre betroffenen personenbezogenen Daten nicht mehr verarbeiten, es sei denn, wir können zwingende schutzwürdige Gründe für die Verarbeitung nachweisen, die Ihre Interessen, Rechte und Freiheiten überwiegen oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen (Widerspruch nach Art. 21 Abs. 1 DSGVO).

Werden Ihre personenbezogenen Daten verarbeitet, um Direktwerbung zu betreiben, so haben Sie das Recht, jederzeit Widerspruch gegen die Verarbeitung Sie betreffender personenbezogener Daten zum Zwecke derartiger Werbung einzulegen; dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht. Wenn Sie widersprechen, werden Ihre personenbezogenen Daten anschließend nicht mehr zum Zwecke der Direktwerbung verwendet (Widerspruch nach Art. 21 Abs. 2 DSGVO).

Beschwerderecht bei der zuständigen Aufsichtsbehörde

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. This right to complain applies without prejudice to any other administrative or judicial remedy.

Recht auf Datenübertragbarkeit

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. Should you request the direct transfer of the data to another controller, this will only take place where it is technically feasible.

Auskunft, Berichtigung und Löschung

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing, and, where applicable, a right to have this data rectified or erased. You may contact us at any time regarding this matter and any further questions relating to personal data.

Recht auf Einschränkung der Verarbeitung

You have the right to request that the processing of your personal data be restricted. You may contact us at any time to do so. The right to restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, this data may – aside from being stored – only be processed with your consent, or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL and TLS encryption

For security reasons, and to protect the transmission of confidential content such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to promotional emails

We hereby object to the use of contact data published in fulfilment of our legal disclosure obligations for the purpose of sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising being sent, for example by means of spam emails.

4. Data collection on this website

Cookies

Our web pages use what are known as “cookies”. Cookies are small data packets and cause no harm to your terminal device. They are stored on your terminal device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies make it possible to integrate certain services provided by third-party companies within websites (e.g. cookies used to process payment services).

Cookies serve a variety of purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket or the display of videos). Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. the shopping basket function) or to optimise the website (e.g. cookies used to measure the web audience) are classed as necessary cookies and are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies in order to provide its services in a technically error-free and optimised manner. Where consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out solely on the basis of that consent (Art. 6(1)(a) GDPR and Section 25(1) TTDSG); this consent may be withdrawn at any time.

You can set your browser so that you are informed when cookies are set and allow cookies only in individual cases, decline the acceptance of cookies for certain cases or in general, and enable the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website from this privacy policy.

Consent-Management / Cookie-Einstellungen

Auf dieser Website setzen wir ein eigenes, selbst gehostetes Consent-Management ein, um Ihre Einwilligung zur Speicherung nicht notwendiger Cookies bzw. zum Einsatz von Statistik- und Marketing-Technologien einzuholen und zu dokumentieren. Beim ersten Aufruf der Website erhalten Sie ein Auswahlfenster, in dem Sie den Kategorien „Statistik“ und „Marketing“ einzeln zustimmen oder diese ablehnen können. Notwendige Cookies sind für den Betrieb der Website erforderlich und einwilligungsfrei.

Ihre Auswahl wird ausschließlich in einem First-Party-Cookie („estaya_consent“) in Ihrem Browser gespeichert (Speicherdauer: 1 Jahr), damit das Auswahlfenster bei Folgebesuchen nicht erneut erscheint. Dabei werden keine Daten an Dritte übertragen. Sie können Ihre Einwilligung jederzeit mit Wirkung für die Zukunft über den Link „Cookie Einstellungen“ im Seitenfuß ändern oder widerrufen.

Statistik- und Marketing-Dienste (z. B. Google Analytics, Google Ads) werden technisch über den Google-Consent-Mode gesteuert und erst nach Ihrer ausdrücklichen Einwilligung aktiviert (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TTDSG). Rechtsgrundlage für das Consent-Management selbst ist Art. 6 Abs. 1 lit. c DSGVO (Erfüllung einer rechtlichen Verpflichtung zur Einholung von Einwilligungen).

Google Tag Manager

Wir setzen den Google Tag Manager ein. Anbieter ist die Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Der Google Tag Manager ist ein Werkzeug, mit dem wir Tracking- und Statistik-Tools sowie andere Technologien auf unserer Website einbinden und verwalten können. Der Google Tag Manager selbst erstellt keine Nutzerprofile, speichert keine Cookies und nimmt keine eigenständigen Analysen vor; er dient lediglich der Verwaltung und Ausspielung der über ihn eingebundenen Tools. Der Google Tag Manager erfasst jedoch Ihre IP-Adresse, die auch an Server von Google in den USA übertragen werden kann. Die über den Google Tag Manager eingebundenen Dienste (z. B. Google Analytics, Google Ads) werden erst nach Ihrer Einwilligung aktiviert (Google Consent Mode). Sofern eine Einwilligung abgefragt wurde, erfolgt der Einsatz ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG; andernfalls auf Grundlage unseres berechtigten Interesses (Art. 6 Abs. 1 lit. f DSGVO) an einer effizienten Einbindung und Verwaltung unserer Website-Tools. Die Einwilligung ist jederzeit widerrufbar.

Contact form

If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact details you enter there, will be stored by us for the purpose of handling your enquiry and in case of any follow-up questions. We will not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR, provided your enquiry relates to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of the enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been requested; consent may be withdrawn at any time.

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies (for example, once we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Anfrage per E-Mail, Telefon oder Telefax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We will not pass this data on without your consent.

The data you send us via contact enquiries remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Kommunikation via WhatsApp

To communicate with our clients and other third parties, we use, among other things, the WhatsApp instant messaging service. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication takes place via end-to-end encryption (peer-to-peer), which prevents WhatsApp or any other third party from gaining access to the content of the communication. WhatsApp does, however, gain access to metadata generated in the course of the communication (e.g. sender, recipient and time). We would also point out that, by its own account, WhatsApp shares personal data of its users with its US-based parent company, Meta. You will find further details on data processing in WhatsApp's privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective buyers and other business and contractual partners (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, the data is processed exclusively on the basis of that consent; it may be withdrawn at any time with future effect.

The communications exchanged between you and us via WhatsApp remain with us until you ask us to delete them, withdraw your consent to their storage, or the purpose for storing them no longer applies (for example, once we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

The company is certified under the “EU-US Data Privacy Framework” (DPF). You can obtain further information on this from the provider via the following link: https://www.dataprivacyframework.gov/

Google Forms

We have integrated Google Forms on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google).

Google Forms enables us to create online forms in order to capture messages, enquiries and other input from our website visitors in a structured way. All of the entries you make are processed on Google's servers. Google Forms stores a cookie in your browser that contains a unique ID (NID cookie). This cookie stores various pieces of information, such as your language settings.

Google Forms is used on the basis of our legitimate interest in establishing the nature of your enquiry as conveniently as possible (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

The data you enter in the form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies (for example, once we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Further information can be found in Google's privacy policy at https://policies.google.com/.

Microsoft Bookings

Our website allows you to arrange appointments with us. We use Microsoft Bookings to manage these bookings. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

To book an appointment, you enter the requested details and your preferred date and time into the form provided for this purpose. The data you enter is used to plan and conduct the appointment and, where applicable, to follow it up. The appointment data is stored on our behalf on the servers of Microsoft Bookings, whose privacy policy you can view here: https://privacy.microsoft.com/de-de/privacystatement.

The data you enter remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.

The legal basis for processing the data is Art. 6(1)(f) GDPR. The website operator has a legitimate interest in making it as easy as possible for prospective buyers and customers to arrange appointments. Where the relevant consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user's device (for example, for device fingerprinting) within the meaning of the TTDSG. This consent can be withdrawn at any time.

Gravatar

We have integrated Gravatar on this website. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (hereinafter Gravatar).

Gravatar is a tool that makes it possible to provide personal images (avatars) for the users of our website. The avatars serve as visual representations of the users and are displayed wherever a user interacts with the platform (for example, in forums or chats).

Gravatar is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in presenting its forums attractively. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

5. Social media

Facebook

This website incorporates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the data collected is also transferred to the USA and to other third countries.

You can find an overview of the Facebook social media elements here: https://developers.facebook.com/docs/plugins/.

When the social media element is active, a direct connection is established between your device and the Facebook server. This means Facebook receives the information that you have visited this website using your IP address. If you click the Facebook “Like” button while logged in to your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. We would point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or of how it is used by Facebook. You can find further information on this in Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

Where consent has been obtained, the above-mentioned service is used on the basis of Art. 6(1)(a) GDPR and Section 25 TTDSG. Your consent may be withdrawn at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in the broadest possible visibility on social media.

Instagram

This website integrates features of the Instagram service. These features are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. This allows Instagram to receive information about your visit to this website.

If you are logged in to your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or of how it is used by Instagram.

You can find further information on this in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time you access a page of this website that contains LinkedIn elements, a connection to LinkedIn's servers is established. LinkedIn is informed that you have visited this website using your IP address. If you click LinkedIn's “Recommend” button while logged in to your LinkedIn account, LinkedIn is able to associate your visit to this website with you and your user account. We would point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or of how it is used by LinkedIn.

You can find further information on this in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

6. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or carry out any independent analyses. It serves solely to manage and deliver the tools integrated through it. Google Tag Manager does, however, record your IP address, which may also be transmitted to Google's parent company in the United States.

Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the swift and straightforward integration and management of various tools on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.

Google Analytics

This website uses features of the Google Analytics web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, the operating systems used and where the user has come from. This data is assigned to the user's respective device. It is not linked to a user ID.

In addition, Google Analytics enables us to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the data sets it captures and employs machine-learning technologies in its data analysis.

Google Analytics uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (such as cookies or device fingerprinting). The information collected by Google about your use of this website is generally transferred to a Google server in the USA and stored there.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

IP anonymisation

Google Analytics IP anonymisation is enabled. This means that your IP address is truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You will find more information on how user data is handled in Google Analytics in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Microsoft Advertising

The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising programme operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Advertising enables us to display adverts in the Bing search engine or on third-party websites when a user enters certain search terms on Bing (keyword targeting). In addition, targeted adverts can be displayed based on the user data held by Microsoft (for example, location data and interests) (audience targeting).

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analysing how you use this website. Among other things, Hotjar allows us to record your mouse and scroll movements and your clicks. Hotjar can also determine how long you kept your cursor over a particular spot. From this information, Hotjar creates what are known as heatmaps, which reveal which areas of the website visitors prefer to look at.

Hotjar uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (for example, cookies or the use of device fingerprinting).

Where consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 TTDSG. Your consent may be withdrawn at any time.

Disabling Hotjar

If you would like to disable data collection by Hotjar, please click on the following link and follow the instructions provided there: https://www.hotjar.com/policies/do-not-track/

Clarity

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter “Clarity”).

Clarity is a tool for analysing user behaviour on this website. In particular, Clarity records mouse movements and produces a graphical representation of the parts of the website to which users scroll most often (heatmaps). Clarity can also record sessions, allowing us to review how the site is used in the form of videos.

Where consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 TTDSG. Your consent may be withdrawn at any time.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Targeted adverts can also be displayed based on the user data held by Google (such as location data and interests) (audience targeting).

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

Meta Pixel (formerly Facebook Pixel)

To measure conversions, this website uses the Facebook/Meta visitor action pixel. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the data collected is also transferred to the USA and to other third countries.

This makes it possible to track the behaviour of website visitors after they have been redirected to the provider's website by clicking on a Facebook advert. This allows the effectiveness of the Facebook adverts to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

You will find further information on the protection of your privacy in Facebook's privacy notices: https://de-de.facebook.com/about/privacy/.

7. Newsletter

Newsletterdaten

If you would like to receive the newsletter offered on the website, we require an email address from you together with information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

Mailchimp

This website uses the services of Mailchimp to send newsletters. The provider is The Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is a service that can be used, among other things, to organise and analyse the sending of newsletters. If you enter data for the purpose of subscribing to the newsletter (for example, your email address), it is stored on Mailchimp's servers in the USA.

Mailchimp allows us to analyse our newsletter campaigns. When you open an email sent via Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked.

If you do not wish Mailchimp to carry out any analysis, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose.

The data is processed on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of any data processing already carried out remains unaffected by the withdrawal.

For further details, please refer to Mailchimp's privacy policy at: https://mailchimp.com/legal/terms/.

8. Plugins and tools

YouTube with enhanced data protection

This website embeds videos from the YouTube website. The site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in its enhanced data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. The sharing of data with YouTube partners, however, is not necessarily ruled out by the enhanced data protection mode.

As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. In doing so, the YouTube server is informed which of our pages you have visited.

YouTube is used in the interest of presenting our online offerings attractively. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

You can find further information on data protection at YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

To ensure fonts are displayed consistently, this site uses what are known as Google Fonts, provided by Google. The Google Fonts are installed locally. No connection to Google's servers is made in the process.

You can find further information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the features of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this page has no influence over this data transfer.

Google Maps is used in the interest of presenting our online offerings attractively and making it easy to find the locations we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

You will find more information on how user data is handled in Google's privacy policy: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service.

We embed map material from OpenStreetMap, hosted on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is regarded as a third country with an adequate level of data protection. When the OpenStreetMap maps are used, a connection is established to the servers of the OpenStreetMap Foundation. In the course of this, your IP address and other information about your behaviour on this website may, among other things, be forwarded to the OSMF. To this end, OpenStreetMap may store cookies in your browser or use comparable recognition technologies.

OpenStreetMap is used in the interest of presenting our online offerings attractively and making it easy to find the locations we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

9. Online marketing and affiliate programmes

Affiliate-Programme auf dieser Website

We take part in affiliate partner programmes. In affiliate partner programmes, the advertisements of one company (the advertiser) are placed on the websites of other companies in the affiliate partner network (the publishers). If you click on one of these affiliate advertisements, you are redirected to the advertised offer. Should you then complete a particular transaction (a conversion), the publisher receives remuneration for this.

The storage and analysis of the data takes place on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in correctly calculating its affiliate remuneration. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time.

We take part in the following affiliate programmes:

Firstlead GmbH
Rosenfelder Str. 15-16
10315 Berlin
Germany
https://www.adcell.de/

10. Our own services

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by email, by post or via our online application form). Below, we inform you about the scope, purpose and use of the personal data collected from you during the application process. We assure you that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated in the strictest confidence.

Scope and purpose of data collection

If you send us an application, we will process the associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.) to the extent that this is necessary in order to decide whether to establish an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contract) and – where you have given your consent – Art. 6(1)(a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data is shared only with those persons involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.

Aufbewahrungsdauer der Daten

If we are unable to make you a job offer, if you decline a job offer or if you withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application). The data is then erased and the physical application documents are destroyed. The retention serves in particular as evidence in the event of a legal dispute. Where it is apparent that the data will be required after the 6-month period has expired (e.g. owing to an imminent or pending legal dispute), erasure will only take place once the purpose for the continued retention no longer applies.

Data may also be retained for longer if you have given your consent to that effect (Art. 6(1)(a) GDPR) or where statutory retention obligations prevent its deletion.

Inclusion in the applicant pool

If we do not make you a job offer, we may have the option of adding you to our applicant pool. If you are added, all documents and details from your application will be transferred to the applicant pool so that we can contact you in the event of suitable vacancies.

Inclusion in the candidate pool takes place exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR). Giving this consent is voluntary and bears no relation to the ongoing application process. The data subject may withdraw their consent at any time. Should this happen, the data will be irrevocably deleted from the candidate pool, provided there are no statutory grounds for its retention.

The data in the candidate pool will be irrevocably deleted no later than two years after consent has been given.

11. Einsatz von Künstlicher Intelligenz (KI)

Für einzelne Funktionen dieser Website setzen wir Systeme der künstlichen Intelligenz (KI) ein. Nachfolgend informieren wir Sie darüber, wo und wozu KI zum Einsatz kommt sowie über die damit verbundene Datenverarbeitung. Diese Hinweise ergänzen die übrigen Angaben in dieser Datenschutzerklärung und berücksichtigen die Transparenzpflichten aus Art. 50 der Verordnung (EU) 2024/1689 (KI-Verordnung).

KI-gestützte Immobilienbewertung

Bei der Nutzung unseres Bewertungstools erstellen wir mithilfe eines KI-Modells auf Grundlage der von Ihnen eingegebenen Objektdaten sowie öffentlich zugänglicher und interner Marktdaten eine automatisierte Markteinschätzung Ihrer Immobilie. Es handelt sich um eine unverbindliche Ersteinschätzung, die eine persönliche Wertermittlung vor Ort nicht ersetzt. Die Erstellung erfolgt auf Grundlage unseres berechtigten Interesses an einer schnellen und ressourcenschonenden Bearbeitung Ihrer Anfrage (Art. 6 Abs. 1 lit. f DSGVO) beziehungsweise auf Grundlage vorvertraglicher Maßnahmen (Art. 6 Abs. 1 lit. b DSGVO), sofern Sie eine Bewertung im Hinblick auf einen möglichen Verkaufsauftrag anfordern.

Sprachaufnahme und automatische Transkription

An einzelnen Stellen, etwa im Suchprofil-Assistenten, können Sie Ihre Angaben statt per Texteingabe auch per Sprachaufnahme übermitteln. Die Aufnahme wird ausschließlich auf Ihre aktive Betätigung des Mikrofon-Buttons hin erstellt und mittels eines KI-basierten Spracherkennungssystems automatisiert in Text umgewandelt. Die Nutzung der Sprachaufnahme ist freiwillig und kann jederzeit durch klassische Texteingabe ersetzt werden. Rechtsgrundlage ist Ihre Einwilligung durch aktive Nutzung der Funktion (Art. 6 Abs. 1 lit. a DSGVO) beziehungsweise unser berechtigtes Interesse an einer nutzerfreundlichen Bedienung unserer Formulare (Art. 6 Abs. 1 lit. f DSGVO).

Automatisierte Auswertung von Freitextangaben

Freitextangaben, die Sie uns beispielsweise im Rahmen eines Suchprofils oder einer Kontaktanfrage mitteilen, können wir mithilfe eines KI-Sprachmodells automatisiert auswerten, um Ihre Anfrage inhaltlich zu erfassen und passenden Ansprechpartnern oder Immobilienangeboten zuzuordnen. Rechtsgrundlage hierfür ist unser berechtigtes Interesse an einer effizienten Bearbeitung Ihrer Anfrage (Art. 6 Abs. 1 lit. f DSGVO) beziehungsweise die Erfüllung vorvertraglicher Maßnahmen (Art. 6 Abs. 1 lit. b DSGVO).

Keine ausschließlich automatisierte Entscheidung

Die genannten KI-gestützten Auswertungen führen zu keiner automatisierten Entscheidung mit rechtlicher oder ähnlich bedeutsamer Wirkung im Sinne von Art. 22 DSGVO. Insbesondere stellt die automatisiert erstellte Markteinschätzung keinen verbindlichen Kaufpreis, kein Vertragsangebot und keine Kreditentscheidung dar. Für eine persönliche Einordnung der Ergebnisse und Ihre weiteren Fragen steht Ihnen unser Team gerne zur Verfügung.

Kennzeichnung und Kontakt

Kommt an einer Stelle dieser Website ein KI-System zum Einsatz, das unmittelbar mit Ihnen interagiert (zum Beispiel ein Chat-Assistent), machen wir dies zu Beginn der Interaktion kenntlich. Fragen zum Einsatz von KI auf dieser Website richten Sie bitte an die im Abschnitt „Hinweis zur verantwortlichen Stelle“ genannten Kontaktdaten.