Privacy Policy
Information pursuant to Art. 13, 14 GDPR
1. Data Controller
2. Legal Basis for Processing
- Art. 6 Abs. 1 lit. a DSGVO — Consent (e.g. newsletter)
- Art. 6 Abs. 1 lit. b DSGVO — Contract performance (listing management, subscription)
- Art. 6 Abs. 1 lit. c DSGVO — Legal obligation (tax, accounting)
- Art. 6 Abs. 1 lit. f DSGVO — Legitimate interests (operation & security of the portal)
3. What Data We Collect
3.1 User Data (Registration)
Email address, first name, last name, phone (optional), address (optional). Processing purpose: provision of platform services (subscription, listing management).
3.2 Listing Data
Property details, photos, advertiser contact information. This data is made publicly visible upon activation.
3.3 Contact Inquiries
Name, email, message content. Used for forwarding to the advertiser.
3.4 Server Logs
IP address, timestamp, requested URL, browser string. Retention period: 7 days. Legal basis: Art. 6(1)(f) GDPR (security).
3.5 Applications for rental listings
When you apply for a rental listing, we collect the mandatory data you provide (name, contact, household size, move-in date, pets) as well as voluntary details from the extended self-disclosure (employment status, income range, housing situation, credit confirmations). The legal basis is Art. 6(1)(b) GDPR (precontractual measure). The data is forwarded to the landlord of the relevant property — they become an independent controller under GDPR upon access. Retention: 90 days from submission, shortened to 7 days after a landlord rejection and to 30 days once the property is marked as rented. You may withdraw your application at any time via the deletion link in the confirmation email.
4. Payment Service Provider — Mollie B.V.
We use the payment service provider Mollie B.V. to process online payments.
Mollie B.V. is an independent data controller within the meaning of the GDPR (Art. 4 No. 7) and NOT a data processor. A data processing agreement (DPA) is therefore not required.
Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands
Data Transmitted
As part of the payment process, the following data is transmitted to Mollie: name, email address, selected subscription plan, payment amount, and the payment details required for the chosen payment method (e.g. IBAN for SEPA direct debit or credit card details).
Data processing is based on Art. 6(1)(b) GDPR (performance of contract — processing the payment you have chosen).
You can find Mollie's privacy policy at: https://www.mollie.com/privacy
5. Your Rights
- Access (Art. 15 GDPR): What data we have stored about you.
- Rectification (Art. 16 GDPR): Correction of inaccurate data.
- Erasure (Art. 17 GDPR): Deletion of your data, unless a legal retention obligation exists.
- Restriction (Art. 18 GDPR): Restriction of processing.
- Data Portability (Art. 20 GDPR): Receive your data in a machine-readable format.
- Objection (Art. 21 GDPR): Object to processing based on legitimate interests.
- Complaint (Art. 77 GDPR): With the competent supervisory authority — State Commissioner for Data Protection and Access to Information Brandenburg (LDA).
To exercise your rights, please contact: info@neuruppin.immobilien
7. Data Protection Officer
A data protection officer is not required pursuant to Art. 37 GDPR, as fewer than 20 persons are regularly involved in the automated processing of personal data.