Privacy Policy

1. General Information and Mandatory Notices

Grand City Property Ltd – German Branch takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this Privacy Policy.

When you use this website, various personal data are collected. Personal data are data relating to an identified or identifiable natural person. This includes, for example, your name, address, and IP address. This Privacy Policy explains which data we collect and for what purpose. It also explains how and why this happens.

Responsible Entity

Grand City Property Ltd – German Branch
Wittestraße 30, Building F
13509 Berlin
Tel.: +49 (0)30 346 55 777
Email: post@grandcityproperty.de

The Data Protection Officer can be reached at:
Email: datenschutzbeauftragter@ext.grandcityproperty.de
Postal address: Wittestraße 30, Building F, 13509 Berlin

The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2. Data Processing When Using Property Portals

We cooperate with various property portals, including Immobilienscout24, Immowelt, Immonet, eBay Kleinanzeigen, Woledo, WG-Gesucht. If you submit an inquiry via such a portal, the portal transmits the following personal data to us:

Name
Email address
Telephone number
Data about the rental property
Any inquiry text

We process these data exclusively for the purpose of responding to your inquiry. The legal basis for data processing is Art. 6(1)(a), (b) GDPR.
The data will be deleted within 3 months after responding to the inquiry unless they are still needed (e.g., for scheduling a viewing). Data will not be shared with third parties.

3. Use of the Website

3.1 SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the website operator. You can recognize an encrypted connection by the browser’s address line changing from “http://” to “https://” and by the lock symbol in your browser line. When SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

3.2 Data Collection on Our Website

If you visit our website without using the services offered and without providing personal data, we may automatically collect the following information in so-called server log files. These may include personal data in limited cases. Your browser automatically transmits the following information:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the service request
IP address
Location data

Legal basis: Art. 6(1)(b) GDPR for data necessary to provide our services; otherwise Art. 6(1)(f) GDPR (legitimate interest in secure and effective website use).
Location data are processed based on your consent (Art. 6(1)(a) GDPR). Consent is voluntary and can be revoked anytime via browser settings.
Automatically collected personal data are stored for 3 months and then deleted.

3.3 Contact Form

If you send inquiries via the website contact form, the information you provide, including your contact details, will be stored for processing and follow-up questions. These data will not be shared without your consent.
Legal basis: Art. 6(1)(b) GDPR. Data are stored for 3 months after the inquiry is completed and then deleted.

3.4 Tenant Portal

Data entered during registration for our tenant portal (name, tenant number, address, email, date of birth, optional phone number, optional preferred language) are used for service provision (Art. 6(1)(b) GDPR). Users may receive service-related notifications via email.
Data are stored as long as your account exists. If you delete your account or your tenancy ends, data are deleted unless legal retention obligations apply.

4. Social Media, Plugins and Tools

We use social plugins and tools (Facebook, Instagram, Pinterest, XING, Kununu, LinkedIn, YouTube) under the “2-click solution” to protect your data. Plugins are only activated when you consent.
Legal basis: Art. 6(1)(a), (f) GDPR.
For details on each provider’s data processing, please refer to their respective privacy policies:

Facebook: https://www.facebook.com/about/privacy/
Instagram: https://instagram.com/about/legal/privacy/
Pinterest: http://pinterest.com/about/privacy/
XING/Kununu: https://privacy.xing.com/de/datenschutzerklaerung
LinkedIn: http://www.linkedin.com/legal/privacy-policy
YouTube/Google: https://policies.google.com/privacy

5. Analytics and Advertising

We use Google Analytics, Google Ads, AdSense, and related tools for website analysis and advertising.
Legal basis: Your consent (Art. 6(1)(a) GDPR).
You can revoke consent anytime via our Consent Manager or browser settings.
For details:

Google Analytics: https://support.google.com/analytics/answer/6004245
Google Ads: https://www.google.de/policies/privacy/

6. Newsletter

You can subscribe to our newsletter via double opt-in. We use MailChimp for distribution.
Legal basis: Art. 6(1)(a) GDPR.
MailChimp Privacy Policy: https://mailchimp.com/legal/privacy/

7. Press Releases

You can register for press releases by emailing presse@grandcityproperty.de.
Legal basis: Art. 6(1)(a) GDPR.

8. Communication

We process personal data during communication (email, phone, SMS, fax, social media).
Service providers: SendGrid (Twilio), Placetel, SocialHub.
Legal basis: Art. 6(1)(b), (f) GDPR; Art. 28 GDPR for processors.

9. Tenant and Applicant Data

We process personal data for tenancy applications and employment applications.
Legal basis: Art. 6(1)(b), (c), (f) GDPR; § 26 BDSG for employment.
SCHUFA checks may be performed for creditworthiness.

10–13. Service Providers, IT Security, Third-Country Transfers

Data may be shared with service providers under Art. 28 GDPR. Transfers to third countries are secured by adequacy decisions or EU Standard Contractual Clauses.

14. Storage Period

Data are stored only as long as necessary for the stated purposes or as required by law.

15. Your Rights

You have the following rights under GDPR:

Access to your data
Rectification, erasure, restriction
Data portability
Withdrawal of consent
Objection to processing
Complaint to supervisory authority

16. Changes

We reserve the right to update this Privacy Policy at any time in compliance with data protection laws.

For questions, please contact:
E-Mail: datenschutzbeauftragter@ext.grandcityproperty.de