Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is EG Immobilien GmbH, Brüsseler Str. 1-3, 60325 Frankfurt am Main, Germany. Email: help@egimmob.com. Further details can be found in our Imprint.

2. General information

Protecting your personal data is important to us. You can generally use our website without providing personal data. Where individual functions require processing of personal data, we obtain your consent unless there is another legal basis.

3. Collection of general data (server log files)

Each time the website is accessed we automatically collect technical information: browser type and version, operating system, the previously visited page (referrer), subpages visited, date and time of access, and the IP address. This data is used to deliver content correctly, ensure system security and produce statistics. No conclusions are drawn about you personally. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies

We use technically necessary cookies (e.g. for login/session and language) and one anonymous recognition cookie for visit statistics. You can restrict or disable cookies at any time in your browser settings; full functionality of the website may then be limited. There is no cross-site tracking by third parties.

5. Registration and user account

When you register we process your name, email address and password (stored only as a hash). This data is required to provide the account, favourites and chat functions. The legal basis is contract performance (Art. 6(1)(b) GDPR).

6. Contact and chat

When you contact us via chat or email we process the information and messages you provide (including photo, video and voice attachments) to handle your request. Data is not shared with third parties. Legal basis: Art. 6(1)(b) or (f) GDPR.

7. Booking and payment

For a booking we process the selected property, period and amount. Payment is made by bank transfer (IBAN); confirmation is manual. We do not store full third-party payment/account data beyond what is necessary for matching the payment. After payment, you will receive only digital copies of the images.

8. Rights of the data subject

Under the GDPR you have in particular the following rights:

• Right to confirmation and access to the data processed (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (‘right to be forgotten’, Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority

9. Legal bases

We process personal data on the basis of Art. 6(1)(a) (consent), (b) (contract/pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests, in particular security and statistics) GDPR.

10. Retention

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Account data is stored until you delete your account, which you can do yourself in your profile at any time.

11. Security

Passwords are stored only as a cryptographic hash (bcrypt). Data transmission is encrypted (TLS/HTTPS).

12. Automated decision-making

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

13. Supervisory authority

Competent supervisory authority: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.