Privacy policy

1. Controller

Achtland Real Estate Ltd. (Platzhalter), Musterstraße 1, 0000 Musterstadt (Platzhalter), email: kontakt@example.com

2. When you visit the website

Our hosting provider processes technically necessary connection data (IP address, time, requested address, browser identifier) to deliver and secure the pages. The legal basis is Art. 6(1)(f) GDPR. We do not use analytics or marketing cookies, see the cookie policy.

2a. Cookie-free audience measurement and usage recording

To understand how the website is used we record per visit: pages viewed, time and dwell time, device category and screen size, country of origin, referring website, clicks, mouse movement, scroll depth and a replay of the visible page (session replay). Input into form fields is masked and never stored. Several pages are linked to one visit via a random identifier in your browser's session storage, which expires when the tab closes; no cookie is set, the IP address is not stored in clear text and “Do Not Track” is respected. To prevent abuse we limit requests per sender: for this we store, instead of the IP address, a hash formed with a secret key for a 10-minute window and delete it after one hour at the next automatic clean-up. The legal basis is Art. 6(1)(f) GDPR (our interest in a clear, working and secure website). Recordings are deleted after 30 days, metrics after 180 days. To object, open any page once with the suffix ?wa_optout=1; your browser then remembers the opt-out.

2b. Error reports

If a technical error occurs on the website or in the back office, an error report is sent to Sentry (Functional Software Inc., storage in Europe (EU)). It contains the type of error, the place in the program code, the page address without parameters, the browser type and the time. It does not contain input, cookies or your IP address: your browser sends the report to our server, which passes it on without your IP address; email addresses and phone numbers in error messages are removed beforehand. Access from the USA is possible; this is covered by the EU-US Data Privacy Framework. Reports are deleted after 90 days. The legal basis is Art. 6(1)(f) GDPR (our interest in a website that works without errors).

3. Property and contact enquiries

When you send an enquiry we process your name, email address, message, the reference number where applicable and the referring page. The sole purpose is handling your enquiry and passing it to our partner in the target country. The legal basis is Art. 6(1)(b) GDPR.

4. WhatsApp

The enquiry button opens WhatsApp with a prepared message. If you continue the conversation there, the terms of WhatsApp Ireland Ltd. additionally apply. Chat content and metadata are processed by WhatsApp and may be transferred to third countries. To avoid this, write to us at kontakt@example.com instead.

5. Recipients

6. Third-country transfers

For transfers to the USA we rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

7. Retention

We keep enquiries for as long as necessary to handle them and to meet statutory retention periods, and delete them afterwards.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact kontakt@example.com. You may also lodge a complaint with a data protection supervisory authority.

9. Security

Transmission is encrypted via HTTPS. Enquiries are stored server-side only. Row-level permissions on the database ensure that submitted enquiries cannot be read via the website. Against automated submissions we use a per-connection rate limit and a hidden check field.