Privacy Policy
Information pursuant to Art. 13, 14 GDPR
1. Data Controller
2. Legal Basis for Processing
- Art. 6 Abs. 1 lit. a DSGVO — Consent (e.g. newsletter)
- Art. 6 Abs. 1 lit. b DSGVO — Contract performance (listing management, subscription)
- Art. 6 Abs. 1 lit. c DSGVO — Legal obligation (tax, accounting)
- Art. 6 Abs. 1 lit. f DSGVO — Legitimate interests (operation & security of the portal)
3. What Data We Collect
3.1 User Data (Registration)
Email address, first name, last name, phone (optional), address (optional). Processing purpose: provision of platform services (subscription, listing management).
3.2 Listing Data
Property details, photos, advertiser contact information. This data is made publicly visible upon activation.
3.3 Contact Inquiries
Name, email, message content. Used for forwarding to the advertiser.
3.4 Server Logs
IP address, timestamp, requested URL, browser string. Retention period: 7 days. Legal basis: Art. 6(1)(f) GDPR (security).
4. Payment Service Provider — Mollie B.V.
We use the payment service provider Mollie B.V. to process online payments.
Mollie B.V. is an independent data controller within the meaning of the GDPR (Art. 4 No. 7) and NOT a data processor. A data processing agreement (DPA) is therefore not required.
Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands
Data Transmitted
As part of the payment process, the following data is transmitted to Mollie: name, email address, selected subscription plan, payment amount, and the payment details required for the chosen payment method (e.g. IBAN for SEPA direct debit or credit card details).
Data processing is based on Art. 6(1)(b) GDPR (performance of contract — processing the payment you have chosen).
You can find Mollie's privacy policy at: https://www.mollie.com/privacy
5. Your Rights
- Access (Art. 15 GDPR): What data we have stored about you.
- Rectification (Art. 16 GDPR): Correction of inaccurate data.
- Erasure (Art. 17 GDPR): Deletion of your data, unless a legal retention obligation exists.
- Restriction (Art. 18 GDPR): Restriction of processing.
- Data Portability (Art. 20 GDPR): Receive your data in a machine-readable format.
- Objection (Art. 21 GDPR): Object to processing based on legitimate interests.
- Complaint (Art. 77 GDPR): With the competent supervisory authority — State Commissioner for Data Protection and Access to Information Brandenburg (LDA).
To exercise your rights, please contact: info@neuruppin.immobilien
7. Data Protection Officer
A data protection officer is not required pursuant to Art. 37 GDPR, as fewer than 20 persons are regularly involved in the automated processing of personal data.