Privacy Policy

The data controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is: Marek Hasselder c/o MDC#265 Welserstraße 3 87463 Dietmannsried Germany Email: privacy@immo-manager.io If you have any questions about data protection at Immo Manager, please contact our data protection team at the address above. We take the protection of your personal data very seriously and treat it confidentially and in accordance with statutory data protection regulations.

We collect and process personal data only to the extent necessary to provide a functional property management platform. The data we process includes: Account Data: When you register, we collect your name, email address, company name, and password (stored in hashed form). This data is required to create and maintain your user account. Property Data: Information about properties you manage, including addresses, descriptions, rental amounts, and related documents. This data is processed solely to provide the core functionality of the platform. Contact and Tenant Data: Names, email addresses, phone numbers, and related communication records for contacts and tenants that you add to the system. Usage Data: Server log files including IP address, browser type, pages visited, date and time of access, and referrer URL. This data is collected automatically when you access our website and is used to ensure the stability and security of our services. Payment Data: When you subscribe to a paid plan, payment information is collected and processed by our payment provider Stripe. We do not store full credit card numbers on our servers. Email Integration Data: If you connect email accounts via IMAP/SMTP, your email credentials are encrypted using AES-256-GCM before storage. Email messages synced through the platform are stored to provide email management features. Communication Data: When you contact us via the contact form, your name, email address, and message content are processed to respond to your inquiry.

We process your personal data on the following legal bases under the GDPR: Contract Performance (Art. 6(1)(b) GDPR): Processing necessary for the performance of our service agreement with you, including account creation, property management features, and subscription billing. Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for the purposes of our legitimate interests, such as improving our services, ensuring platform security, preventing fraud, and conducting analytics to optimize user experience. Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, for example for newsletter subscriptions or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing performed before withdrawal. Legal Obligation (Art. 6(1)(c) GDPR): Processing necessary for compliance with legal obligations, such as tax record-keeping and regulatory requirements.

Our website uses cookies and similar technologies to ensure the proper functioning of the platform and to improve your experience. Essential Cookies: These cookies are strictly necessary for the operation of our platform. They include session cookies for authentication, CSRF protection tokens, and language preference cookies. These cookies cannot be disabled as they are required for the platform to function. Google Analytics: We use Google Analytics 4 (Google Ireland Limited) to analyze website usage. Google Analytics uses cookies (_ga, _gid, _gat) to collect anonymized usage data. IP anonymization is enabled. Data may be transferred to the US under Standard Contractual Clauses. Google Analytics is only loaded with your explicit consent. Google Ads: If enabled, we use Google Ads Conversion Tracking to measure the effectiveness of our advertising. This is only loaded with your consent. Meta Pixel: If enabled, we use the Meta Pixel (Meta Platforms Ireland Limited) for conversion measurement. Hashed email addresses and conversion data are transmitted to Meta. This is only loaded with your consent. Cloudflare Turnstile: Our contact and newsletter forms use Cloudflare Turnstile as a CAPTCHA alternative for spam protection. Turnstile may set cookies necessary for its operation. Cloudflare processes data in accordance with their privacy policy. You can configure your browser to reject all or certain cookies. However, please note that disabling essential cookies may limit the functionality of the platform.

We use the following third-party services to operate our platform: Stripe (Stripe, Inc.): Payment processing for subscription billing. Stripe processes payment card data and is certified as a PCI Level 1 Service Provider. Stripe may transfer data to the United States under Standard Contractual Clauses (SCCs). For details, see Stripe's privacy policy at stripe.com/privacy. Email Providers: When you connect your email account via IMAP/SMTP, your email data is transmitted between our servers and your email provider. Credentials are encrypted at rest using AES-256-GCM. Marketplace Integrations: If you use marketplace export features (ImmobilienScout24, Immowelt), property data you choose to publish is transmitted to the respective platform in accordance with their terms of service. Cloudflare: We use Cloudflare for DNS, CDN, and Turnstile CAPTCHA services. Cloudflare may process IP addresses and request metadata. Google Analytics (Google Ireland Limited): We use Google Analytics 4 for website usage analysis and server-side conversion tracking. Processing only occurs with your consent. Data may be transferred to the US under Standard Contractual Clauses. For details, see policies.google.com/privacy. Google Ads (Google Ireland Limited): If enabled, we use Google Ads Conversion Tracking. Processing only occurs with your consent. Meta Pixel (Meta Platforms Ireland Limited): If enabled, we use the Meta Pixel for server-side conversion tracking. Hashed email addresses are transmitted to Meta. Processing only occurs with your consent. Data may be transferred to the US under Standard Contractual Clauses. Sentry (Functional Software, Inc.): If enabled, we use Sentry for error detection and performance monitoring of our application. Technical data such as error messages, browser information, and session data may be processed. Processing only occurs with your consent. Sentry may transfer data to the US under Standard Contractual Clauses. OpenFreeMap: Our application uses OpenFreeMap for displaying interactive maps. When loading map tiles, your IP address is transmitted to OpenFreeMap servers. Hosting: All application data is stored on servers located in Germany. We do not transfer your core application data outside the European Economic Area (EEA) unless explicitly stated above and supported by appropriate safeguards such as Standard Contractual Clauses.

Under the GDPR, you have the following rights regarding your personal data: Right of Access (Art. 15 GDPR): You have the right to request information about whether we process your personal data, and if so, to receive a copy of that data along with information about how it is processed. Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data or the completion of incomplete data. Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where there is no compelling reason for its continued processing. This includes the right to have your account and all associated data deleted. Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing in certain circumstances, for example while we verify the accuracy of your data. Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests. Upon objection, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests. Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw your consent at any time. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Germany depends on the federal state in which we are established. To exercise any of these rights, please contact us at privacy@immo-manager.io. We will respond to your request within one month.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account Data: Retained for the duration of your active account. Upon account deletion, your personal data will be erased within 30 days, except where retention is required by law. Property and Tenant Data: Retained for the duration of your active account. All property management data is deleted when you delete your account. Payment Records: Transaction records are retained for 10 years in accordance with German commercial and tax law (HGB, AO). Server Logs: Access logs are retained for a maximum of 90 days for security and troubleshooting purposes. Email Data: Synced email data is retained for the duration of your active account. Encrypted email credentials are deleted immediately upon disconnection of the email account. Contact Form Inquiries: Communication records are retained for up to 12 months after the last interaction unless a longer retention period is required for ongoing business relationships. Newsletter Subscriptions: Your email address is retained until you unsubscribe. Unsubscribe links are included in every newsletter.

If you have any questions about this privacy policy, your personal data, or wish to exercise your data subject rights, please contact us: Marek Hasselder Email: privacy@immo-manager.io We strive to respond to all data protection inquiries within one month of receipt. If your request is particularly complex, we may extend this period by an additional two months and will inform you accordingly. You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your personal data violates data protection regulations.