Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the "Information about the Responsible Party" section of this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us. This may include data you enter in a contact form.

Other data is collected automatically or with your consent when visiting the website through our IT systems. This is mainly technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions about data protection.

Analysis Tools and Third-Party Tools

When visiting this website, your surfing behavior can be statistically evaluated. This is done primarily with so-called analysis programs.

Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting

Amazon Web Services (AWS)

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The use of the hoster is for the purpose of contract fulfillment towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

We use the following hoster:

Amazon Web Services (AWS)
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
L-1855 Luxemburg
Server location: Frankfurt, Germany

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Facebook Pixel

This website uses Facebook's visitor action pixel for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Microsoft Clarity

We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes. Microsoft Privacy Statement.

4. fluss.ai

Our property valuation page embeds a widget from fluss.ai (operator: Tobias Brauchle, Waldeyerstr. 6, 10247 Berlin, Germany; VAT ID DE355864431; hereinafter "fluss.ai") to offer the property valuation function. When you open this page, the widget is automatically loaded as a JavaScript component from fluss.ai's servers and integrated into our page (not as an iFrame). In doing so, fluss.ai may process, among other things, your IP address, browser and device information, and the data you enter in the valuation form. The data processing carried out as part of the valuation you requested is based on pre-contractual measures pursuant to Art. 6 Para. 1 lit. b GDPR and on our legitimate interest in providing a user-friendly valuation offer pursuant to Art. 6 Para. 1 lit. f GDPR. Details on data processing can be found in fluss.ai's privacy policy.

5. Propstack CRM

For processing customer inquiries and managing our sales and brokerage processes, we use the CRM system of:

Propstack GmbH
Invalidenstr. 65
10557 Berlin, Deutschland

Propstack is a cloud-based real-estate CRM for brokers. Through Propstack, we collect and process contact requests, prospect and property data, correspondence, and other personal data arising in the course of our brokerage activities. Processing is carried out on the basis of GDPR and a data processing agreement concluded with Propstack pursuant to Art. 28 GDPR.

Data Collected and Purposes

The data processed via Propstack includes, among others: name, postal address, email address, phone number, property data, communication contents, and contract data. Processing is based on the initiation and execution of a contract (Art. 6 Para. 1 lit. b GDPR), on the fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR), and on our legitimate interest in efficient customer management (Art. 6 Para. 1 lit. f GDPR). Where required, we obtain your consent pursuant to Art. 6 Para. 1 lit. a GDPR.

Data Transmission and Security

Propstack hosts data on servers located within the European Union. More information about data protection at Propstack can be found at: https://propstack.de/datenschutz/

Information about the Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

6. OpenAI (Voice Transcription and Form Fill in the Internal Admin Area)

In the password-protected admin area used by our employees, we offer a voice dictation feature for property data entry. Audio recordings are processed by OpenAI as a sub-processor for two purposes: speech-to-text transcription (model gpt-4o-transcribe) and structured extraction of the dictated information into the corresponding form fields (model gpt-5-mini). This feature is only available to authenticated employees and is not used for visitors of the public website.

Provider

OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

Data Processed

Audio recordings (up to 30 minutes per session) made by the employee using the dictation feature, plus the resulting transcript. Audio is uploaded to AWS S3 in our Frankfurt region and is then streamed to OpenAI via a server-side AWS Lambda function. The transcript and the structured form values derived from it are written back to our own database.

Purposes and Legal Basis

Processing is based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in efficiently capturing property data during agent visits. OpenAI processes the audio under a data processing agreement concluded pursuant to Art. 28 GDPR. OpenAI does not use this data to train its models when accessed through the API tier we use.

Retention

Audio recordings are retained in our AWS S3 bucket for 90 days and then automatically deleted via an S3 lifecycle rule. The resulting transcripts and the structured form data extracted from them are retained as part of the property record on our own systems. OpenAI itself retains API request data only for the limited time set out in its API data usage policies.

More Information

Details of OpenAI's privacy practices are available at: https://openai.com/policies/privacy-policy