Privacy Policy
1. Who we are and what this policy covers
This Privacy Policy informs you how we – Berlin Real Estate – handle your personal data when you use our website or contact us.
Personal data means any information relating to an identified or identifiable person, such as your name, email address or IP address.
2. Controller
The controller responsible for data processing on this website is:
Berlin Real Estate
Grünewald & Ruland GbR
Meinekestraße 8
10719 Berlin
Germany
Partners: Fabian Grünewald and Nicolas Ruland
Email: [email protected]
Phone: +49 (0)30 75435818
Website: www.berlin-realestate.com
3. Legal bases for processing
We process your data only where there is a legal basis for doing so. The most important legal bases are:
Consent pursuant to Art. 6(1)(a) GDPR: You have expressly given us your consent, for example via our cookie banner.
Performance of a contract pursuant to Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract or for pre-contractual measures.
Legal obligation pursuant to Art. 6(1)(c) GDPR: We are legally obliged to process the data.
Legitimate interest pursuant to Art. 6(1)(f) GDPR: We have a legitimate interest in the processing, provided that your interests do not override ours.
Where we use cookies or comparable technologies that are not technically necessary, Section 25 TDDDG additionally applies. Such technologies may only be used with your consent.
4. Storage and deletion
We store your data only for as long as necessary for the respective purpose or as required by statutory retention obligations, for example under tax law for up to 10 years. Once the purpose no longer applies and no retention obligation exists, the data will be deleted or anonymised.
Specific retention periods can be found in the individual sections of this Privacy Policy.
5. Security measures
Our website is transmitted exclusively via HTTPS (SSL/TLS). We use technical and organisational measures to protect your data against unauthorised access, loss or misuse.
6. Your rights as a data subject
You have the following rights vis-à-vis us:
Right of access pursuant to Art. 15 GDPR: You may request information about which data we process about you.
Right to rectification pursuant to Art. 16 GDPR: You may request the correction of inaccurate data.
Right to erasure pursuant to Art. 17 GDPR: You may request the deletion of your data, provided there are no retention obligations preventing this.
Right to restriction of processing pursuant to Art. 18 GDPR: You may request that we temporarily restrict processing.
Right to data portability pursuant to Art. 20 GDPR: You may receive your data in a machine-readable format.
Right to object pursuant to Art. 21 GDPR: You may object to processing based on legitimate interests.
Withdrawal of consent: You may withdraw any consent you have given at any time with effect for the future.
To exercise your rights, please contact: [email protected]
Right to lodge a complaint: You have the right to lodge a complaint with the competent supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
10969 Berlin
Germany
Website: www.datenschutz-berlin.de
7. Website hosting
7.1 Jimdo — hosting provider
This website is hosted by Jimdo. When you access our pages, Jimdo automatically processes the following technical data and stores it in server log files:
Browser type and version used
Operating system of the user
Internet service provider of the user
IP address of the user
Date and time of access
Website from which access to our site was made, known as referrer URL
The log files are stored to ensure the operation and security of the website. This data is not combined with other personal data. Storage takes place for a maximum of 7 days, after which the data is deleted or anonymised.
Provider: Jimdo GmbH, Stresemannstraße 375, 22761 Hamburg, Germany
Purpose: Provision and operation of the website
Storage period: Log files: maximum 7 days; thereafter deletion or anonymisation
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in stable website operation
Opt-out / Privacy Policy: https://www.jimdo.com/de/datenschutz/
7.2 Cloudflare — DDoS protection
To protect our website against overload attacks, known as DDoS attacks, and to ensure availability, we use Cloudflare. In this process, your IP address is forwarded to Cloudflare servers. Cloudflare sets a technically necessary cookie named __cf_bm.
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
Purpose: Protection of the website against attacks, load balancing
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in IT security; Section 25(2) No. 2 TDDDG, technically necessary cookie
Opt-out / Privacy Policy: https://www.cloudflare.com/de-de/privacypolicy/
Third-country transfer: EU Standard Contractual Clauses + DPF certification
8. Cookies and consent management
Cookies are small text files stored in your browser. We distinguish between:
Technically necessary cookies: These are required for the operation of the website and do not require consent pursuant to Section 25(2) No. 2 TDDDG.
Analytics, marketing and third-party cookies: These are only set if you have consented via our cookie banner.
When you first visit our website, a cookie banner appears in which you can grant or refuse consent for the individual categories. You may withdraw your consent at any time by accessing the cookie banner again via the link in the footer of the website.
To store your consent decision, the cookie system of our hosting provider Jimdo sets technically necessary cookies, including ckies_cookielaw, with a lifespan of up to one year.
9. Contact and enquiries
9.1 Contact forms
If you write to us via a contact form on our website, we process the data you enter, including your name, email address, telephone number and message, in order to handle your enquiry and, where applicable, to provide you with an offer for our estate agency services.
Storage period: We store your message until your enquiry has been finally answered. In the event of a mandate, statutory retention periods apply, up to 10 years.
Legal basis: Art. 6(1)(b) GDPR, pre-contractual measures at your request.
9.2 Free online property valuation
On our property valuation page, wertermittlung.berlin-realestate.com, you can request a free, personal property value assessment. The information you enter, including address, property type and contact details, is transmitted exclusively to us and used only to process your valuation enquiry.
Storage period: We store your message until your enquiry has been finally answered. In the event of a mandate, statutory retention periods apply, up to 10 years.
Legal basis: Art. 6(1)(b) GDPR, pre-contractual measures; Art. 6(1)(f) GDPR, legitimate interest.
9.3 Telephone and email
If you contact us by telephone or email, we process your contact details and the content of your message in order to handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR.
9.4 WhatsApp
Our website contains a WhatsApp link. If you click this link and send us a message, your contact details are transmitted to Meta Platforms Ireland Ltd. (WhatsApp). The WhatsApp privacy terms apply to this communication. We use WhatsApp exclusively for communication and not for advertising.
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Purpose: Text messages, voice and video calls, sending images, videos and documents, group chat function
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in contemporary communication
Opt-out / Privacy Policy:
https://www.whatsapp.com/legal/privacy-policy
https://www.whatsapp.com/legal
Third-country transfer: EU Standard Contractual Clauses + DPF certification
10. Web analytics with Google Analytics
10.1 Google Analytics
We use Google Analytics 4 to understand how visitors use our website, for example which pages are visited, length of stay, device type and the visitor’s approximate location. The analyses are anonymised and help us improve our website.
For EU data traffic, IP address data is used exclusively to derive geolocation data before being immediately deleted. It is not logged, is not accessible and is not used for any other purposes.
Google Analytics is only loaded if you have consented to the “Performance” category in the cookie banner. Without your consent, no tracking data is collected. This has been technically verified by us.
Integration takes place via Google Tag Manager. Google Tag Manager itself does not process any personal data of website visitors.
Provider: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland; parent company: Google LLC, USA
Purpose: Analysis of user behaviour for website optimisation. Property ID: G-J7RDPZB7YH.
Cookies: _ga — 2 years, _ga_* — 2 years, _gid — 24 hours. IP anonymisation is active by default in GA4.
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent via cookie banner
Opt-out / Privacy Policy:
Opt-out: https://tools.google.com/dlpage/gaoptout
Privacy Policy: https://policies.google.com/privacy
Third-country transfer: EU Standard Contractual Clauses + DPF certification
10.2 Google Signals
Google Signals is an optional GA4 function that recognises visitors across devices, provided they are logged into a Google account and have enabled “Web & App Activity” there.
Provider: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland; parent company: Google LLC, USA
Purpose: Cross-device analysis of user behaviour; enrichment of remarketing audiences with demographic data from Google accounts
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent via cookie banner, category “Performance”
Opt-out / Privacy Policy: Users can deactivate Signals at: https://myaccount.google.com/activitycontrols
Third-country transfer: EU Standard Contractual Clauses + DPF certification
11. Online advertising with Google Ads
We place advertisements on Google. For this purpose, we use Google Ads Conversion Tracking to measure whether an advertisement led to contact being made, and Google Remarketing to specifically address people who have visited our website on other platforms.
These services are only activated if you have consented to the “Marketing / Third Party” category in the cookie banner.
Provider: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland; parent company: Google LLC, USA
Purpose: Conversion tracking: measuring whether website visitors carry out a contact action after clicking on a Google advertisement. Remarketing: re-addressing website visitors with Google advertisements on other platforms.
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent
Opt-out / Privacy Policy:
https://adssettings.google.com
https://policies.google.com/privacy
Third-country transfer: EU Standard Contractual Clauses + DPF certification
12. Customer reviews
12.1 ProvenExpert
We display customer reviews from ProvenExpert on our website. If the ProvenExpert widget is actively embedded with your consent via the cookie banner, a connection to ProvenExpert servers is established when the page loads and your IP address is transmitted.
Provider: Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, Germany
Purpose: Display of customer reviews and quality seals
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in proof of quality; Section 25(1) TDDDG, consent via cookie banner, category “Marketing / Third Party”
Opt-out / Privacy Policy: https://www.provenexpert.com/datenschutzerklaerung/
12.2 ImmobilienScout24
We display an ImmobilienScout24 review widget on our website. In this process, a connection to ImmobilienScout24 servers is established and your IP address is transmitted.
Provider: Immobilien Scout GmbH, Invalidenstraße 65, 10557 Berlin, Germany
Purpose: Display of provider reviews on the website
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in proof of trustworthiness for international prospective clients; Section 25(1) TDDDG, consent via cookie banner, category “Functional”
Opt-out / Privacy Policy: https://www.immobilienscout24.de/agb/datenschutz.html
12.3 Wer kennt den besten
We maintain a profile on the platform “Wer kennt den besten” at wkdb.de. Links to review platforms on our website lead directly to the respective external platform. When you click such links, you leave our website and the privacy notices of the respective provider apply. Merely providing the link does not cause any data to be transmitted by us to the platforms.
13. Embedded third-party content
On various pages, we embed content from external providers. These providers receive your IP address when the content is loaded. The content is only loaded if you have consented via the cookie banner.
13.1 YouTube videos
We embed videos via YouTube. For this purpose, we use the privacy-friendly embedding option via youtube-nocookie.com. In this mode, YouTube only stores cookies on your device once you actively play a video.
Provider: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland
Purpose: Embedding property videos and explainer videos. Integration via youtube-nocookie.com in enhanced privacy mode.
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent, category “Marketing / Third Party”
Opt-out / Privacy Policy: https://policies.google.com/privacy
Third-country transfer: EU Standard Contractual Clauses + DPF certification
13.2 Google Maps
We embed Google Maps to display our location and location information for properties.
Provider: Google Ireland Ltd., Gordon House, Barrow St., Dublin 4, Ireland
Purpose: Map display for location presentation
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent, category “Functional”
Opt-out / Privacy Policy: https://policies.google.com/privacy
Third-country transfer: EU Standard Contractual Clauses + DPF certification
13.3 OpenStreetMap
On some pages, we use map material based on data from OpenStreetMap. Where this involves a direct call to OpenStreetMap servers, your IP address is transmitted.
Provider: OpenStreetMap Foundation, OSMF, St Johns Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom
Purpose: Display of map material
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in location presentation; Section 25(1) TDDDG, consent where cookies are set
Opt-out / Privacy Policy: https://osmfoundation.org/wiki/Privacy_Policy
13.4 immoviewer — virtual viewings
For virtual 360° property viewings, we use immoviewer. The virtual tours are displayed directly on our website as embedded content.
Provider: 45info GmbH, Karl-Liebknecht-Straße 21-22, 14482 Potsdam, Germany
Purpose: Display of virtual 360° property tours
Legal basis: Art. 6(1)(f) GDPR, legitimate interest; Section 25(1) TDDDG, consent, category “Functional”
Opt-out / Privacy Policy: https://www.immoviewer.com/datenschutz/
13.5 POWr.io — website plugins
On some pages, we use plugins from the provider POWr.io for interactive website functions. POWr.io is a US-based service.
Provider: POWr Inc., 340 Pine St. Suite 500, San Francisco, CA 94104, USA
Purpose: Provision of interactive website functions, plugin framework
Legal basis: Art. 6(1)(a) GDPR; Section 25(1) TDDDG, consent, category “Functional”
Opt-out / Privacy Policy: https://www.powr.io/privacy-policy
Third-country transfer: Data transfer based on EU Standard Contractual Clauses
14. Our presence on social networks
We maintain profiles on LinkedIn and Xing in order to provide information about our services. If you visit these platforms, the privacy terms of the respective providers also apply. Please note that data may be processed outside the EU.
For a detailed description of the respective forms of processing and options to object, known as opt-out, please refer to the privacy policies and information provided by the operators of the respective networks.
LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland — https://www.linkedin.com/legal/privacy-policy
Xing: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany — https://privacy.xing.com/de/datenschutzerklaerung
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in corporate communication.
15. Changes to this Privacy Policy
We update this Privacy Policy if legal requirements change or if we use new services. The current version is available on this page at any time.
Last updated: May 2026