Privacy Policy of Immobilienvisionäre GmbH

Last updated: 08 January 2026

1. Data Controller

As a responsible body within the meaning of the General Data Protection Regulation
(GDPR) and other national data protection laws of the member states as well as other
data protection regulations, the company is:

Immobilienvisionäre GmbH

Europaallee 33

67657 Kaiserslautern

Managing Director: Sven Blauth

Phone: +49 631 534 974 - 87

Email: info@immobilienvisionaere.de

2. Scope and purposes of data processing

2.1 Principles of our data processing

We process personal data only to the extent necessary for the provision of a functional website as well as our content and services. As a rule, the processing of personal data of our users is only carried out after consent. An exception applies in cases where prior consent is not possible for factual reasons and the processing of the data is permitted
by law.

2.2 Specific categories of data and processing purposes

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide our contractual services and to respond to inquiries. In detail, we process:

  • Contact details (e.g. name, address, e-mail address, telephone number)
    We process this data for the purpose of processing purchase enquiries, for making appointments for viewings and for communication in the context of contract processing.
    Legal basis: Art. 6 (1) (b) GDPR (for the implementation of pre-contractual measures and for the performance of a contract). Storage period: Until the final processing of the request and then for a maximum of 12 months to enable possible queries or follow-up requests.
    appointments for viewings and for communication in the context of contract
    processing.
  • Real estate-related information (e.g. purchase price, desired living space, property preferences)
    We use this data to broker suitable real estate offers, to plan viewing appointments
    and to document customer preferences. Legal basis: Art. 6 (1) (b) GDPR. Storage period: Until the conclusion of a contract or the revocation of the request. Subsequent retention in accordance with legal obligations, if necessary.
  • Reservation data (e.g. reserved objects, time of reservation, cancellations). This data is processed for the purpose of managing property reservations as well as for the purpose of proving contacts with interested parties.
    Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR (for the fulfilment of statutory retention periods).
    Storage period: Until the conclusion of a contract or the revocation of the reservation by the interested party. Subsequently, storage takes place in accordance with statutory retention periods for commercial and business letters
    (usually 6 years).
  • Financing and creditworthiness data (e.g. proof of income, credit reports, financing requests)
    We collect and process this data exclusively with your prior express consent in order to check the financing eligibility for a real estate project and, if necessary, to enable mediation with financing partners. Legal basis: Art. 6 para. 1 lit. a GDPR (consent). Storage period: As long as necessary for the examination of financing eligibility and, if applicable, for mediation and thereafter for a maximum of 6 months, provided that there are no legal retention obligations or consent for longer storage has been obtained.
  • Technical usage data (e.g. IP address, browser type and version, operating system, time of the server request)
    We collect this data to ensure IT security and the technical functionality of our website as well as to prevent misuse.
    Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and functional website). Storage period: The data is stored anonymously or pseudonymously and is regularly deleted as soon as it is no longer required for the aforementioned purposes.
  • Recipients of personal data
    Your personal data will only be passed on if this is permitted or required by law or if you have given your prior consent.
    Recipients can be financing partners, notaries, IT service providers, hosting providers and processors in accordance with Art. 28 GDPR. As a matter of principle, personal data will not be transferred to a third country
    (outside the EU/EEA). If such a transfer is necessary in exceptional cases, it will only take place in compliance with the special requirements of Art. 44 et seq. GDPR.
  • Technical-organizational measures (TOMs)
    To protect your personal data, we use appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. These include, in particular, access restrictions, encryption methods, security updates, secure hosting and internal data protection regulations.
  • In accordance with Art. 15 et seq. GDPR, you have the right to information at any time about the personal data stored by us, its origin and recipients as well as the purpose of the processing. In addition, you have the right to rectification, deletion, restriction of processing, objection to processing and a right to data portability. If the processing is based on your consent, you can revoke it at any time with effect for the future.
  • Revocation of consent
    Insofar as we process data on the basis of your consent, you can revoke it at any time without giving reasons with effect for the future. The lawfulness of the processing carried out up to the revocation remains unaffected.
  • Communication data (e.g. e-mail content, chat requests, telephone notes)
    We process this data to process inquiries, support cases and to document communication processes. Legal basis: Art. 6 (1) (b) GDPR. Storage period: Until the final processing of the request and thereafter for a maximum of 12 months, unless there are statutory retention periods.
  • Marketing and tracking data (e.g. newsletter registrations, click behaviour, tracking cookies)
    We process this data for marketing purposes, for reach measurement and for the optimisation of our online offer. The collection and processing of this data is only carried out on the basis of your expressly given consent. Legal basis: Art. 6 para. 1 lit. a GDPR (consent) and, if applicable, Art. 6 para. 1 lit. f GDPR (legitimate interest in optimising the offer). Storage period: Until the consent is revoked or after the expiry of statutory
    retention periods.

2.3 Data processing during initial telephone contact

In the case of initial telephone contacts with interested parties, we process the following personal data:

  • Phone number (if not suppressed)
  • Name (if provided)
  • Content information (e.g. property preferences, budget, schedule)
  • Notes on the course of the conversation

Legal basis:

  • Art. 6 (1) (b) GDPR (pre-contractual measures)
  • Art. 6 (1) (f) GDPR (legitimate interest in customer service)

Processing purposes:

✓ Submission of offers

✓ Coordination of appointments

✓ Documentation of customer requests

✓ Follow-up of contact requests

Storage period:

  • 12 months after last contact (for follow-up requests)
  • 6 years at the time of conclusion of the contract (§ 257 HGB)

Rights of data subjects:
You can request information about stored telephone notes at any time (Art. 15 GDPR) or request their deletion (Art. 17 GDPR), provided that there are no statutory retention obligations to the contrary.

2.4 Data processing at first contact

When you visit our office and sales container, we record:

  • Name & Contact Details (if provided)
  • Contents of the conversation (property requests, budget)
  • Time of visit

Procedure:

1. After the conversation, you will automatically receive by e-mail via our CRM
system OnOffice:

a. Our Privacy Policy
b. Consent form
c. Revocation option
d. T&Cs
e. Agreement Commission

2. We only process your data after active consent.


3. Disclosure of data to third parties

3.1 Principle of data minimization

As a matter of principle, your personal data will only be passed on to third parties if this is necessary for the performance of the contract, if you have given your express consent or if there is a legal obligation.

3.2 Specific recipient groups

a) Necessary contractual partners

The companies belonging to the HAHN BAU GROUP, represented by Hahn Service GmbH and BauTeam Hahn GmbH:

  • Hahn Service GmbH
    Hommelstraße 2
  • 55743 Idar-Oberstein
    Commercial Register: HRB 24411
    Registration court: Bad Kreuznach District Court
    Represented by: Oliver Hahn
    Phone: +49 6781 93295 - 0
    Fax: +49 6781 93295 - 99
    E-mail: kontakt@hahn-bau-gruppe.de
    https://www.hahn-bau-gruppe.de/datenschutz
    Purpose: Services - trademark management,
  • BauTeam Hahn GmbH
    Hommelstraße 2
    55743 Idar-Oberstein
    Commercial Register: HRB 22834
    Registration court: Bad Kreuznach District Court
    Represented by: Oliver Hahn
    Phone: +49 6781 93295 - 0
    Fax: +49 6781 93295 - 99
    E-mail: kontakt@hahn-bau-gruppe.de
    https://www.hahn-bau-gruppe.de/datenschutz
    Purpose: Property developer - Coordination of construction planning and
    execution.

The other project partners:

  • PG Neue Mitte Weilerbach GmbH
    Hommelstraße 2
    55743 Idar-Oberstein
    Commercial Register: HRB 24489
    Registration court: Bad Kreuznach District Court
    Managing Directors: Oliver Hahn and Sebastian Recktenwald
    M.+49 151 148 139 87
    T. +49 6781 93295-0
    F. +49 6781 93295-99
    www.hahn-bau-gruppe.de
    Purpose: Project development - Reservation and management of construction projects, coordination of purchase options, coordination of handover dates and contract processing.
  • Volker Barth Consult GmbH
    Villenstraße 6
    67657 Kaiserslautern
    Commercial Register Kaiserslautern HRB 30326
    VAT ID No. DE 257573976
    Managing Directors: Volker Barth and Annette Küntzler-Barth
    E-mail: info@vb-c.eu
    http://vb-c.eu/datenschutz
    Purpose: Project management - contact for buyer support, coordination and implementation of sampling, acceptance and handover appointments;
    Preparation and implementation/support of notarial deeds, etc.
  • GANDS Immobilien GmbH
    Marktstraße 104
    76829 Landau i. d. Pfalz
    Commercial Register: HRB 33496
    Registration court: Landau
    District Court Represented by: Dr. Sebastian Johann
    Phone: +49 6341 5590 505
    E-Mail: info@gands-immobilien.de
    Purpose: Client representation - handling and coordination of construction
    projects, communication with project participants and representation of the client vis-à-vis external third parties
  • Blauth & Team Versicherungsvisionäre GmbH
    Europaallee 33
    67657 Kaiserslautern
    Commercial Register: HRB33806
    Registration Court: District Court Kaiserslautern
  • Represented by: Sven Blauth
    Phone: +49 631 534974-80
    https://www.versicherungsvisionaere.de/datenschutz
    Purpose: Insurance and financing - credit checks, obtaining insurance offers, as well as mediation and processing of financing solutions. The object of the company is the provision of services as an insurance intermediary, loan intermediary and financial investment intermediary within the meaning of §34d GewO
  • Notare
    Karl Felix Dietrich
    Ingo Oltmanns
    Stiftsplatz 6-7
    67655 Kaiserslautern

b) External service providers

To ensure our business operations and for certain technical services, we engage
external service providers who process personal data on our behalf. Contractual
agreements in accordance with Art. 28 GDPR exist with all processors that ensure an
appropriate level of data protection.

  • Webflow Inc.
    Service: Hosting of our website
    Special feature: Server locations within the EU
    Basis of contract: Data processing agreement in accordance with Art. 28 GDPR
  • Google Ireland Limited
    Services: Google Analytics (web analysis), Google Maps (location display)
    Data protection: IP anonymization activated
  • IONOS SE
    Service: Hosting Services Special
    feature: Server location Germany
    Legal basis: Data processing agreement (Art. 28 GDPR).

3.3 Other possible recipients

In addition, personal data may be transferred to the following entities to the extent
necessary to comply with legal obligations or on the basis of legitimate interests:

  • Tax consultants, auditors and lawyers
    Purpose:
    Fulfilment of commercial and tax obligations, legal advice and
    enforcement of legal claims
  • Public bodies and authorities
    Purpose:
    Fulfilment of statutory duties to notify and provide information
  • Payment service providers and banks
    Purpose:
    Processing payment processes in the context of reservations or
    purchases
  • Construction companies
    Purpose:
    To increase the quality of advice by providing information on possiblespecial requests or the like.

4. Rights of data subjects under the GDPR

4.1 Scope of your rights

As a data subject, you have the following rights vis-à-vis us in relation to your personal
data:

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure ("right to be forgotten", Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

4.2 Practical exercise of your rights

To assert your rights, it is sufficient to send an informal message to:

E-Mail: info@immobilienvisionaere.de
Post: Immobilienvisionäre GmbH, Europaallee 33, 67657 Kaiserslautern

Note: For identification, we may ask you to provide further information to prevent misuse.


4.3 Storage period and deletion

We only store personal data for as long as is necessary for the respective processing purposes or where required by law. After the respective purpose has ceased to exist or statutory retention periods have expired, the data will be routinely deleted.

The specific storage periods for certain types of data are as follows:

If there are statutory retention obligations (e.g. according to § 257 HGB or § 147 AO), the data in question will be stored for the duration of these obligations and then deleted. These include, in particular, contract-relevant documents and business letters.

5. Technical and organizational security measures

5.1 Protection Objectives of Our Security Precautions

We have taken comprehensive technical and organizational measures to ensure the protection of your data in accordance with the requirements of the GDPR. These serve in particular:

  • The confidentiality of your data
  • The integrity and availability of our systems
  • Rapid recoverability in the event of disruptions

6. Cookies and Tracking Technologies

6.1 Basics of cookie use

Our website uses cookies – small text files that are stored on your device. These serve:

  • The technical functionality of the site (necessary cookies)
  • The analysis of user behaviour (statistical cookies)
  • Content personalization (marketing cookies)

6.2 Detailed cookie overview

a) Necessary cookies

b) Analysis cookies (only with consent)

  • Google Analytics:

    Special feature: IP anonymization by shortening the last octets

c) Marketing-Cookies

  • Facebook Pixel:
    Control: Via Facebook Settings
    Purpose: Remarketing to interested users

Cookie management:
You can adjust your consent at any time via our cookie settings center or delete cookies directly in your browser.

7. Use of Google Maps

7.1 Features and Integration

We use the Google Maps API map service of Google Ireland Limited (Gordon House,
Barrow Street, Dublin 4, Ireland) to show you interactive maps directly on our website.
This feature allows you to:

  • The easy localization of our real estate listings
  • Route planning for viewing appointments
  • The integration of location information into exposés

7.2 Scope of data transmission

When using Google Maps, the following data is transmitted to Google:

Automatically transmitted data:

a. Your IP address

b. Date and time of access

c. Browser and operating system used

d. Language settings

If location sharing is turned on:

a. GPS data of your device

b. Viewed map sections

Special feature: This transfer takes place regardless of whether you have a Google Account or are logged in.

7.3 Legal basis and control options

  • Legal basis: Art. 6 para. 1 lit. a GDPR (consent via cookie banner
  • Deactivation options:
      - Directly in your Google Account under
      https://adssettings.google.com
      - By not activating the service in the cookie banner
      - Via browser plugins such as "Google Maps Blocker"

Note: If you disable it, card functions will no longer be available.

8. Newsletter management

8.1 Registration procedure (double opt-in)

1. Registration:

a. Enter your e-mail address in the registration form

b. Receive a confirmation email with an activation link

2. Logging:

a. Saving the time of registration

b. IP address for abuse prevention

c. Chronology of all deliveries

8.2 Content and Tracking

  • Dispatch frequency: Monthly or for new real estate offers
  • Elements included:
    • Current project presentations
    • Market analyses
    • Event information
  • Opening tracking:
    • Use of transparent 1 x 1 pixel images
    • Recording of opening times
    • Deactivation: By loading without images in the email client

8.3 Unsubscribe options

Each newsletter contains:

9. Web analysis with Google Analytics

9.1 Implementation Details

  • Version: Google Analytics 4 (GA4)
  • Configuration:
    • Enabled IP anonymization (last octets truncated)
    • Data streams separate for web and app
    • Cookie lifespan: 14 months

9.2 Metrics Collected

9.3 Data protection guarantees

  • Data shortening: IP addresses are not fully stored
  • Opt-out options:
    • Browser Plugin (https://tools.google.com/dlpage/gaoptout)
    • Cookie deactivation in our settings
    • Use of browsers with tracking protection (e.g. Brave)

10. Social Media Engagements

10.1 Platforms used

  • LinkedIn: Subject-related content
  • Facebook: Integration of project updates
  • Instagram: Visualization of construction progress

10.2 Data protection mechanisms

  • Shariff solution: Plugins are only loaded after they have been activated
  • Two-step procedure:
    • Display as static preview image
    • After-Click: Loading the Actual Plugin

10.3 Alternative Zugangswege 10.3 Alternative access routes

For full privacy control, we recommend:

  • Direct visit to our profiles via:
    • Facebook
    • Instagram
    • LinkedIn
  • Subscription to our newsletter (see section 8)

11. Online advertising

11.1 Systems used

11.2 Custom Audiences

  • Formation of target groups:
    • Users interested in buying
    • Visitors to specific project pages
    • Newsletter subscribers
  • Exclusion criteria:
    • Contracts already concluded
    • Objections to advertising

11.3 Transparency measures

  • Each ad contains the note "Ad"
  • Clear labeling of testimonials
  • Separate landing pages for advertising campaigns

12. Integration of other third-party services

12.1 OnOffice CRM

  • Features:
    • Customer data management
    • Document generation
    • Calendar synchronization
    • Exposed-Versand
    • Revocation received
    • Get T&Cs
    • Commission Agreement Received
  • Data protection:
    • Server location: Frankfurt a.M.
    • Daily backups
    • Access logging

12.2 Video conferencing tools (Zoom/Teams)

For virtual tours we use:

  • End-to-end encryption
  • Password-protected rooms
  • Optional recording only after explicit consent

12.3 ImmoScout24

Functions:

To market our real estate projects, we use the online platform ImmoScout24 of Immobilien Scout GmbH, Andreasstraße 10, 10243 Berlin. Interested parties can contact us directly via this platform and submit personal data, including:

  • Contact details (name, email address, phone number)
  • Information about the desired property
  • Financing data (e.g. proof of income, credit bureau information), if voluntarily submitted by the interested party

Purpose of processing:

  • Processing of real estate enquiries
  • Appointments
  • Sending of exposés and further information
  • Pre-qualification for viewings and contract discussions

Legal basis:

  • Art. 6 (1) (b) GDPR (pre-contractual measures when contacting)
  • Art. 6 (1) (a) GDPR (consent if particularly sensitive information such as income or creditworthiness data is transmitted)

Special feature:

The transmission of financing and creditworthiness data (e.g. credit bureau information, salary statements) is always voluntary and with separate consent via the ImmoScout24 forms or directly to us. This data is used exclusively to check the creditworthiness and to refer to financing partners.

Data protection at ImmoScout24:

For further information on data processing by ImmoScout24, please refer to the provider's privacy policy at:https://www.immobilienscout24.de/agb/datenschutz.html

13. International Data Transfers

13.1 Third countries concerned

  • USA (Google, Meta)

13.2 Safeguarding mechanisms

  • EU Standard Contractual Clauses
  • Additional technical measures:
    • Pseudonymization before transmission
    • Reduction of sensitive data fields
    • Transport encryption via TLS 1.3

13.3 Rights of information

You will receive on request:

  • A list of all beneficiaries in third countries
  • Copies of the contractual clauses used
  • Information on existing complaint channels

14. Data Breach Procedure

14.1 Escalation Management

1. Detection:

a. Automated IDS/IPS systems

b.Employee Notifications

2. Reaction:

a. Immediate risk assessment

b. Notification of the supervisory authority within 72 hours

3. Communication:

a. Those affected will be informed if there is a high risk

b. Transparency about countermeasures taken

14.2 Preventive measures

  • Monthly Security-Awareness-Trainings
  • Quarterly penetration tests
  • Encrypted data carriers for mobile devices

15. Final Provisions

15.1 Reservation of adjustment

We reserve the right to change this Privacy Policy to adapt it to changing laws or services. The current version can be found at: https://www.immobilienvisionaere.de/datenschutz

15.2 Place of jurisdiction

For all data protection disputes, only the court at the company's headquarters in Kaiserslautern shall be deemed to have been agreed.

Data processing in applicant management

Separate regulations apply to applications:

  • Storage period: 6 months after cancellation (according to AGG)
  • Deletion option: Early deletion possible on request
  • Disclosure: Only to internal decision-makers

Profiling and automated decision-making

We do not use fully automated decision-making systems that have legal effect. Partially used analysis tools (Google Analytics) are used exclusively for:

  • Campaign optimization (without individual evaluation of people)
  • Market research (e.g. identification of popular real estate features)

Special categories of personal data

As a matter of principle, we do not process any special categories according to Art. 9 GDPR (e.g. health data, religious affiliation). If processing is necessary in individual cases (e.g. accessibility requirements for real estate), this can only be done with:

  • Necessity for the performance of a contract (Art. 9 para. 2 lit. b GDPR)
  • Explicit consent (Art. 9 para. 2 lit. a GDPR)

Protection of children and young people

Our services are not directed to anyone under the age of 16. If we inadvertently collect information from minors, we will delete it immediately upon becoming aware of it.

Record of processing (Art. 30 GDPR)

Last updated: 06 January 2026

Responsible in terms of media law: Immobilienvisionäre GmbH