Privacy Policy
Information pursuant to Art. 13, 14 GDPR
1. Data Controller
2. Legal Basis for Processing
- Art. 6 Abs. 1 lit. a DSGVO — Consent (e.g. newsletter)
- Art. 6 Abs. 1 lit. b DSGVO — Contract performance (listing management, subscription)
- Art. 6 Abs. 1 lit. c DSGVO — Legal obligation (tax, accounting)
- Art. 6 Abs. 1 lit. f DSGVO — Legitimate interests (operation & security of the portal)
3. What Data We Collect
3.1 User Data (Registration)
Email address, first name, last name, phone (optional), address (optional). Processing purpose: provision of platform services (subscription, listing management).
3.2 Listing Data
Property details, photos, advertiser contact information. This data is made publicly visible upon activation.
3.3 Contact Inquiries
Name, email, message content. Used for forwarding to the advertiser.
3.4 Server Logs
IP address, timestamp, requested URL, browser string. Retention period: 7 days. Legal basis: Art. 6(1)(f) GDPR (security).
3.5 Applications for rental listings
When you apply for a rental listing, we collect the mandatory data you provide (name, contact, household size, move-in date, pets) as well as voluntary details from the extended self-disclosure (employment status, income range, housing situation, credit confirmations). The legal basis is Art. 6(1)(b) GDPR (precontractual measure). The data is forwarded to the landlord of the relevant property — they become an independent controller under GDPR upon access. Retention: 90 days from submission, shortened to 7 days after a landlord rejection and to 30 days once the property is marked as rented. You may withdraw your application at any time via the deletion link in the confirmation email.
4. Payment Service Provider — Mollie B.V.
We use the payment service provider Mollie B.V. to process online payments.
Mollie B.V. is an independent data controller within the meaning of the GDPR (Art. 4 No. 7) and NOT a data processor. A data processing agreement (DPA) is therefore not required.
Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands
Data Transmitted
As part of the payment process, the following data is transmitted to Mollie: name, email address, selected subscription plan, payment amount, and the payment details required for the chosen payment method (e.g. IBAN for SEPA direct debit or credit card details).
Data processing is based on Art. 6(1)(b) GDPR (performance of contract — processing the payment you have chosen).
You can find Mollie's privacy policy at: https://www.mollie.com/privacy
5. Your Rights
- Access (Art. 15 GDPR): What data we have stored about you.
- Rectification (Art. 16 GDPR): Correction of inaccurate data.
- Erasure (Art. 17 GDPR): Deletion of your data, unless a legal retention obligation exists.
- Restriction (Art. 18 GDPR): Restriction of processing.
- Data Portability (Art. 20 GDPR): Receive your data in a machine-readable format.
- Objection (Art. 21 GDPR): Object to processing based on legitimate interests.
- Complaint (Art. 77 GDPR): With the competent supervisory authority — State Commissioner for Data Protection and Access to Information Brandenburg (LDA).
To exercise your rights, please contact: info@neuruppin.immobilien
7. Social Media
We maintain publicly accessible profiles on social networks to share information about our services. On these profiles we publish only our own marketing content (videos, images, and accompanying captions) via the official application programming interfaces (APIs) of the respective networks. Only this content created by us, together with our own access credentials, is transmitted to the network operator — no personal data of our website visitors. No social media pixels or tracking cookies of these networks are embedded on neuruppin.immobilien.
If you visit these profiles or interact with our posts (e.g. by viewing, liking, commenting, or sharing), the respective network operator processes the resulting data in accordance with its own privacy policy — depending on the platform, as an independent or joint controller. We have no influence over the nature and scope of this processing. The legal basis for our own publishing activity is Art. 6(1)(f) GDPR (legitimate interest in public presence and reach).
7.1 Facebook, Instagram, and Threads (Meta)
We post to these profiles via the application programming interfaces of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. For the statistical data ("Insights") collected when you interact with our Facebook and Instagram profiles, joint controllership pursuant to Art. 26 GDPR applies together with Meta. This publishing activity is separate from the Meta Conversions API described under section 6.3, which serves solely to measure advertising effectiveness.
You can find Meta's privacy policy at: https://www.facebook.com/privacy/policy
7.2 TikTok
We post to this profile via the TikTok Content Posting API. The operator is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. Processing may also take place outside the European Union; TikTok bases third-country transfers on the European Commission's Standard Contractual Clauses.
You can find TikTok's privacy policy at: https://www.tiktok.com/legal/page/eea/privacy-policy/en
8. Data Protection Officer
A data protection officer is not required pursuant to Art. 37 GDPR, as fewer than 20 persons are regularly involved in the automated processing of personal data.