Data protection

1) Introduction and Contact Information of the Responsible Party

1.1 We’re delighted to have you visit our website and appreciate your interest. Below, we provide details on how we handle your personal data when you use our website. Personal data includes any information that can identify you personally.

1.2 The responsible party for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is Christoph Doldi, Doldi Real Estate, Dr.-Loeffellad-Str. 8, 86609 Donauwörth, Germany, Tel.: +49 (0)151 72103697, Email: info@doldi-immobilien.de. The entity responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, meaning you don’t register or send us information in other ways, we only collect data that your browser sends to our server (known as “server log files”). When you visit our website, we gather the following data necessary to display the site to you:

• Our visited website
• Date and time of access
• Amount of data sent, in bytes
• Source/reference from which you arrived at the site
• Browser used
• Operating system used
• IP address used (possibly anonymized)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to review the server log files later if there are specific indications of unlawful use.

2.2 This website uses SSL and TLS encryption for security purposes and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can identify an encrypted connection by the “https://” prefix and the padlock icon in your browser’s address bar.

3) Hosting & Content-Delivery-Network

For hosting our website and displaying page content, we use a provider that delivers services either directly or through selected subcontractors, exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have an agreement with the provider to ensure the protection of our visitors’ data and prevent unauthorized sharing with third parties.

4) Cookies

To make your visit to our website more enjoyable and to enable certain features, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device longer to save your site preferences (so-called “persistent cookies”). In the latter case, you can find the storage duration in your browser’s cookie settings overview.

If any of the cookies we use process personal data, this is done in accordance with Art. 6 (1) lit. b GDPR for contract execution, in accordance with Art. 6 (1) lit. a GDPR if consent has been given, or in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests in the best functionality of the website and a user-friendly and effective design of the site visit.

You can adjust your browser settings to be informed about cookie placement and to decide individually on their acceptance, or to exclude the acceptance of cookies for specific cases or generally.

Please be aware that not accepting cookies may limit the functionality of our website.

5) Contact

5.1 WhatsApp-Business

You can reach out to us using the messaging service WhatsApp, operated by WhatsApp Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We utilize the ‘Business Version’ of WhatsApp for this purpose.

If you contact us via WhatsApp in connection with a specific transaction (e.g., an order you have placed), we will store and use the mobile phone number you use for WhatsApp and, if provided, your first and last name in accordance with Art. 6 (1) (b) GDPR for the purpose of processing and responding to your request. On the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) in order to be able to assign your request to a specific transaction.

If you use our WhatsApp contact for general inquiries (like service scope, availability, or our website), we’ll save and use the mobile number you used on WhatsApp, and—if provided—your first and last name, under our legitimate interest in efficiently and promptly providing the requested information according to Art. 6 (1) (f) GDPR.

Your data is solely used to respond to your inquiry via WhatsApp. It is not shared with third parties.

Please be aware that WhatsApp Business accesses the address book of the mobile device we use for this purpose, and any phone numbers stored there are automatically transferred to a server of its parent company, Meta Platforms Inc. in the USA. We operate our WhatsApp Business account using a mobile device whose address book only holds contact data of users who have interacted with us via WhatsApp.

This ensures that anyone whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from their chat contacts’ address books by accepting WhatsApp’s terms of use upon first using the app on their device, in accordance with Article 6 Paragraph 1 Letter a GDPR. Data transfer of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For details on the purpose and scope of data collection, and further processing and use of data by WhatsApp, as well as your related rights and options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacypolicy

We have entered into a data processing agreement with the provider, which protects the data of our site visitors and prohibits sharing with third parties.

As part of the aforementioned processing activities, data may be transferred to servers of Meta Platforms Inc. located in the USA.

For data transfers to the USA, the provider has subscribed to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision by the European Commission.

5.2 When contacting us (e.g., via contact form or email) personal data is collected. The specific data gathered when using a contact form can be seen from the contact form itself. This data is stored and used solely for the purpose of responding to your inquiry or for making contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been completely processed. This occurs when it is clear from the circumstances that the matter concerned has been conclusively resolved and provided there are no statutory retention obligations.

6) Use of customer data for direct advertising

6.1 Signing Up for Our Email Newsletter

If you sign up for our email newsletter, we’ll send you regular updates about our offers. The only required information for receiving the newsletter is your email address. Providing additional information is optional and is used to address you personally. We use a double opt-in method for sending the newsletter. This means we’ll only send you an email newsletter once you’ve explicitly confirmed that you wish to receive it. We’ll send a confirmation email asking you to click a link to confirm your subscription to the newsletter.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When you sign up for the newsletter, we store the IP address entered by your internet service provider (ISP) as well as the date and time of registration to track any potential misuse of your email address later on. The data collected during newsletter registration is used solely for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending a message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner permitted by law, about which we inform you in this statement.

6.2 WhatsApp-Newsletter

If you sign up for our WhatsApp Newsletter, we’ll regularly send you updates about our offers via WhatsApp. Required information for the newsletter is sent solely to your mobile number.

To receive the newsletter, add our provided mobile number to your phone’s contacts and send us the message “Start” via WhatsApp. By sending this WhatsApp message, you consent to the use of your personal data according to Article 6(1)(a) GDPR for the purpose of newsletter delivery. We will then include you in our newsletter distribution list.

The data collected during newsletter signup is used exclusively for promotional communications via the newsletter. You can unsubscribe at any time by sending us the message “Stop” via WhatsApp. Once you unsubscribe, your mobile number will be promptly removed from our newsletter list, unless you have expressly consented to further use of your data or we reserve a legally permitted use, which we inform you about in this statement.

Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose, and the stored phone numbers are automatically transmitted to a server of its parent company, Meta Platforms Inc., in the USA.

For sending our WhatsApp newsletter, we use a mobile device where only the WhatsApp contact details of our newsletter subscribers are stored in the address book. This ensures that each person, whose WhatsApp contact information is saved in our address book, has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting the WhatsApp terms of use upon first using the app on their device, according to Art. 6 para. 1 lit. a GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For details on the purpose and scope of data collection, further processing, and use of data by WhatsApp, as well as your rights and options for safeguarding your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacypolicy

We have entered into a data processing agreement with WhatsApp to protect the data of our newsletter subscribers and prevent sharing with third parties.

As part of the aforementioned processes, data may be transferred to servers of Meta Platforms Inc. in the USA.

The provider has subscribed to the EU-US Data Privacy Framework for data transfers to the USA, which complies with the European Commission’s adequacy decision.

7) Web Analytics Services

7.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which facilitates the analysis of your interaction with our website.

By default, Google Analytics 4 places cookies on your device when you visit the website. These small text files collect certain information, including your IP address, which Google truncates by the last digits to prevent direct identification of individuals.

The information is sent to Google servers for further processing, which may include transfers to Google LLC located in the USA.

Google uses the collected information on our behalf to analyze your website usage, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted and truncated by your browser as part of Google Analytics is not merged with other Google data. The data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, particularly the setting of cookies on your device, only occurs if you have given us your explicit consent pursuant to Article 6(1)(a) of the GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your right to withdraw, please disable this service using the ‘Cookie-Consent-Tool’ provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our site visitors’ data and prevent unauthorized transfer to third parties.

For more legal information about Google Analytics 4, visit
https://business.safety.google/intl/de/privacy/,
https://policies.google.com/privacy?hl=de&gl=de und unter
https://policies.google.com/technologies/partner-sites

Demographic Features
Google Analytics 4 uses the unique ‘demographic features’ function to generate statistics that provide insights into the age, gender, and interests of site visitors. This is achieved through ad analysis and third-party information. This helps identify target audiences for marketing activities. However, the collected data cannot be linked to any specific individual and is deleted after being stored for two months.

Google Signals
As an extension of Google Analytics 4, this website can use Google Signals to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google can, with your consent under Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. To stop cross-device analysis, you can disable the “Personalized Advertising” feature in your Google Account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information
about Google Signals, visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the ‘UserIDs’ feature can be utilized on this website. If you have consented to the use of Google Analytics 4 under Art. 6 Abs. 1 lit. a DSGVO, created an account on this website, and logged in with this account across different devices, your activities, including conversions, can be analyzed across devices.

To facilitate data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which guarantees compliance with the European data protection standards based on an adequacy decision by the European Commission.

7.2 Google Tag Manager

This website uses the ‘Google Tag Manager’, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google’).

The Google Tag Manager provides a technical foundation to consolidate various web applications, including tracking and analytics services, which can be calibrated, controlled, and conditioned through a unified user interface. The Google Tag Manager itself does not store or extract information from user devices nor conduct independent data analyses. However, when a page is loaded, your IP address may be transmitted to Google and potentially stored. Transmission to Google LLC servers in the USA is also possible.

This processing only occurs if you provide consent in accordance with Art. 6 para. 1 lit. a your explicit consent under the GDPR is required for this. Without this consent, the Google Tag Manager will not be used during your visit to the site. You can withdraw your consent at any time with future effect. To exercise your withdrawal, please disable this service using the ‘Cookie Consent Tool’ provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our site visitors’ data and prevent unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision by the European Commission.

Further legal information about Google Tag Manager can be found at
https://business.safety.google/intl/de/privacy/ und
https://policies.google.com/privacy?hl=de&gl=de

8) Site Features

8.1 Google Maps

This website uses an online mapping service provided by: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ( “Google”).

Google Maps is a web service that displays interactive (land) maps to visually present geographical information. Using this service, our location is shown to you, making any travel plans easier.

When you access the subpages that contain the Google Maps integration, information about how you use our website (like your IP address) is transferred to Google’s servers and stored there. This may also involve transmission to Google LLC’s servers in the USA. This occurs regardless of whether Google provides a user account through which you’re logged in or whether an account exists. If you’re logged in with Google, your data is directly associated with your account. If you prefer not to have this association with your Google profile, please log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.

Collection, storage, and evaluation are carried out according to Art. 6 para. 1 lit. f GDPR based on Google’s legitimate interest in displaying personalized advertising, market research, and/or tailored design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.  If you’re not okay with your data being sent to Google when using Google Maps, you can completely turn off the Google Maps web service by disabling JavaScript in your browser. This means Google Maps and the map display on this website will not be available.

Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Art. 6(1)(a) of the GDPR. You can revoke your consent at any time with future effect. To withdraw your consent, please follow the procedure described above for objecting.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision by the European Commission.

Further information about Google’s privacy policies can be
https://business.safety.google/intl/de/privacy/

8.2 Google Web Fonts

This site uses web fonts from the following provider for consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When a page is loaded, your browser fetches the necessary web fonts into its cache to display text and fonts correctly, establishing a direct connection to the provider’s servers. During this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data when connecting with the font provider will only occur if you have expressly consented to it under Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with future effect by disabling this service using the ‘Cookie-Consent-Tool’ provided on the website. If your browser does not support web fonts, a default font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision by the European Commission.

Additional information on Google’s privacy policy can be found here:
https://business.safety.google/intl/de/privacy/

8.3 hCaptcha

On this website, we use the CAPTCHA service provided by the following company: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA

The service checks whether an input is made by a human or is abusively processed by machines and automated systems, blocking spam, DDoS attacks, and similar harmful automated access. To ensure an action is performed by a person and not an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits these for analysis to the provider’s servers.

The legal basis is our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.

We have entered into a data processing agreement with the provider to ensure the protection of our visitors’ data and to prevent unauthorized disclosure to third parties.

For transferring data to the USA, the provider relies on standard contractual clauses from the European Commission to ensure compliance with European data protection standards.

9) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a ‘Cookie-Consent Tool’ to gather effective user consents for cookies and cookie-based applications that require permission. When the page is accessed, the ‘Cookie-Consent Tool’ appears as an interactive interface, allowing users to grant consent for specific cookies and/or cookie-based applications by checking boxes. This tool ensures that all permission-required cookies/services only load when the user has given the necessary consent by ticking the boxes. This guarantees that such cookies are only placed on the user’s device when consent is given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed during this process.

If, in certain cases, personal data (such as the IP address) is processed for storing, assigning, or recording cookie settings, this is done under Article 6 (1) (f) GDPR, based on our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies, ensuring our website complies with legal standards.

Another legal basis for processing is Article 6 paragraph 1 letter c of the GDPR. As the responsible party, we are legally obliged to make the use of non-essential cookies dependent on user consent.

If necessary, we’ve entered into a data processing agreement with the provider to safeguard our visitors’ information and prevent unauthorized sharing with third parties.

You’ll find more details about the operator and settings for the cookie consent tool directly in the user interface on our website.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you the following rights with respect to the processing of your personal data by the controller (rights of access and intervention). For the specific conditions of exercise, please refer to the cited legal basis:

• Right of access according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restrict processing according to Art. 18 GDPR;
• Right to notification according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to withdraw consent according to Art. 7(3) GDPR;
• Right to lodge a complaint according to Art. 77 GDPR.

10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTERESTS AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

If you exercise your right to object, we will stop processing the relevant data. However, further processing may be reserved if we can demonstrate compelling legitimate reasons for processing that outweigh your interests, fundamental rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If your personal data is processed by us, in order to you have the right to object at any time to the processing of your personal data for direct marketing purposes. You can exercise this right as described above.

If you exercise your right to object, we will stop processing the relevant data for direct marketing purposes.

11) Duration of Storage of Personal Data

The duration for which personal data is stored depends on the respective legal basis, the purpose of processing, and, if applicable, any relevant statutory retention periods (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent under Art. 6(1)(a) GDPR, the data in question is stored until you withdraw your consent.

If there are legal retention periods for data processed based on contractual or similar obligations under Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer needed for contract fulfillment or initiation and/or we have no legitimate interest in continued storage.

For personal data processed under Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes under Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.

If the other information in this statement does not suggest otherwise regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.