Privacy policy
What this site processes, why, and for how long.
Controller
The controller for data processing on this website within the meaning of the GDPR is:
Hoorakhsh Pourbahrami
Immobilien Media
Holländerstraße 71
13407 Berlin
Germany
Telephone: +49 163 1323738
Email: legal@immobilienmedia.com
There is no statutory requirement to appoint a data protection officer. Please direct data protection enquiries to the email address above.
Principle
This site is deliberately built to collect as little as possible. It sets no cookies, uses no tracking or advertising services, loads no fonts from third-party servers and embeds no third-party video. For audience measurement we use a cookieless method with no recognition of returning visitors, described below. We process personal data only where you actively send it to us, and in the technically necessary operation of the server.
Legal bases are, depending on the operation, Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual steps), (c) (legal obligation) and (f) (legitimate interests). The basis that applies is named with each processing operation below.
Hosting and server log files
The website is hosted with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The domain is managed through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; Cloudflare answers DNS queries and serves the pages over its network. Data processing agreements under Art. 28 GDPR are in place with both providers.
When the pages are called up, the server automatically collects information your browser transmits: the address requested, date and time, volume of data transferred, referrer, browser type and version, operating system and IP address. This data is technically necessary to deliver the page.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the technically sound and secure operation of the site. Log files are deleted after seven days at the latest, unless they are needed longer to investigate a specific security incident.
Contact form
If you use the enquiry form we process the details you enter: name, email address, optionally a telephone number, optionally the property address and optionally your message. Mandatory fields are marked as such.
The form is transmitted technically via the Formspark service, which acts as a processor on our behalf. Transmission is encrypted. The message then reaches us by email; our mailbox is operated by DreamHost, LLC, 2 Harbor Boulevard, Suite 205, Brea, CA 92821, USA. Data processing agreements under Art. 28 GDPR are in place with both providers.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is directed at concluding a contract, and otherwise Art. 6(1)(a) GDPR on the basis of the consent you give in the form. You can withdraw that consent at any time with future effect, informally by email.
We keep the enquiry until it has been dealt with. If no engagement follows, we delete it no later than six months after the last contact. If it leads to an engagement, the commercial and tax retention periods of six and ten years respectively apply.
The form contains a hidden field to deter automated submissions. It is evaluated locally in your browser, transmitted to no one, and stores nothing on your device.
Contact by email and telephone
If you contact us by email or telephone we process your details to deal with the matter. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR with our legitimate interest in replying.
The same deletion periods apply as for the contact form.
Appointment booking
For calls we link to Cal.com. It is a link, not an embed: unless you click it, nothing is sent to Cal.com and nothing is stored on your device.
If you click the link you leave this website. From that point Cal.com’s privacy policy applies. We use the EU instance of the service.
Cookies and access to your device
This website sets no cookies and does not access information on your device. Nothing is written to localStorage or sessionStorage, no tracking pixels are loaded and no device identifiers are created.
Consent under § 25(1) TDDDG is therefore not required, and for the same reason you see no cookie banner here.
One exception: when you switch language, the page briefly records your scroll position in your browser’s sessionStorage so that you carry on reading in the same place afterwards. That entry contains no personal data, never leaves your device and is deleted immediately after the page loads. It is strictly necessary under § 25(2)(2) TDDDG to provide the service you requested.
Audience measurement
We use Vercel Web Analytics and Vercel Speed Insights, services of Vercel Inc., to see which pages are visited and how quickly they load. Both are operated by our hosting provider under the data processing agreement already in place.
Neither sets cookies or stores anything on your device. No persistent identifier is assigned; a value is derived from IP address and browser signature that changes daily and cannot be traced back to you. There is no recognition beyond the day, no cross-device linking and no profiling. The IP address is not stored.
Because nothing is stored on or read from your device, no consent under § 25 TDDDG is required. The legal basis for the processing is Art. 6(1)(f) GDPR; our legitimate interest is improving the site and detecting faults. You may object to this processing under Art. 21 GDPR.
Fonts, images and video
All fonts are served from our own server. There is no connection to Google Fonts or any other font provider, and your IP address is not transmitted to any third party.
Images and video are likewise held on our server. There are no YouTube, Vimeo or comparable embeds, and no map is embedded.
Recipients and transfers outside the EU
We pass on personal data only where necessary to perform the contract or because of a legal obligation. Recipients acting as processors are Vercel (hosting), Cloudflare (domain and delivery), Formspark (contact form) and DreamHost (email). Where an engagement exists, tax advisers and payment service providers are added. We use no advertising or tracking services.
These providers are established in the United States, so a transfer to a third country takes place. The basis is the European Commission’s adequacy decision on the EU-US Data Privacy Framework where the provider participates in it, and otherwise the standard contractual clauses under Art. 46(2)(c) GDPR. Data is never sold.
Your rights
You have the right to information about the data held about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21).
Where you have consented to processing, you may withdraw that consent at any time with future effect. The lawfulness of processing up to that point is unaffected.
An informal message to legal@immobilienmedia.com is enough to exercise these rights. No automated decision-making, including profiling, takes place.
Right to complain
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin, Germany
Changes to this policy
We update this policy when the legal position or the processing on this site changes. The version published here at the time applies. Last updated: 2026.