Privacy Policy

1. Responsible Party

The party responsible for data processing on this platform is the operator named in the Legal Notice (hereinafter "Operator"). The Operator determines the purpose and means of processing personal data.

2. Technical Service Provider

The technical platform "Roomz" is provided by Bredow Systems, Jan Christopher Bredow, Wandsbeker Chaussee 74, 22089 Hamburg.

Under the hosted version, Bredow Systems processes personal data on behalf of the Operator (data processing agreement pursuant to Art. 28 GDPR). Bredow Systems handles hosting and regular data backup.

With a self-hosted version, Bredow Systems has no access to the processed data. Full responsibility for data processing lies with the Operator.

3. Data Collected

The following data may be collected during platform use:

Server Log Data

When visiting this website, technical information is automatically collected: IP address, browser type, operating system, pages visited, date and time of access. This data is required for ensuring operation and troubleshooting.

Inquiry and Application Data

When submitting an inquiry or application, the data you enter is stored: name, contact details, desired property, uploaded documents, and other information. This data is used exclusively for processing your inquiry by the Operator.

Uploaded Documents

As part of an application, documents (e.g., ID copies, salary statements, credit reports) may be uploaded. These are stored encrypted and used exclusively for reviewing the application by the Operator.

4. Purpose of Data Processing

Your data is processed for:

• Providing and displaying available rental properties
• Processing your inquiry or application by the Operator
• Communication during the application process
• Ensuring the technical operation of the platform
• Fulfilling legal retention obligations

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in providing the platform).

5. Hosting and Storage

For the hosted version, data is stored on servers of Bredow Systems or their infrastructure providers within the European Union. Appropriate technical and organizational measures are taken to protect the data.

For a self-hosted version, responsibility for the storage location and security of the data lies entirely with the Operator.

6. Disclosure to Third Parties

Personal data is only disclosed to third parties insofar as this is necessary for contract fulfillment, the Operator is legally obligated to do so, or you have expressly consented. The Technical Service Provider (Bredow Systems) receives access to data as part of data processing, insofar as this is necessary for the operation of the platform.

7. Storage Duration

Personal data is deleted as soon as the purpose of storage ceases to exist, unless legal retention obligations prevent deletion. Application data from rejected inquiries is automatically deleted after the period configured by the Operator.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access to stored data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact the Operator named in the Legal Notice.

You also have the right to lodge a complaint with a data protection supervisory authority.

9. Cookies

This platform uses technically necessary cookies for operation (e.g., session management, language settings, dark mode preference). No tracking cookies or advertising cookies are used.

10. Changes

This privacy policy may be updated at any time. The current version is always available on this page.