Privacy Policy

1. Overview

This Privacy Policy explains how BayernWelt Immobilien Verwaltungs GmbH (“we”, “us”) processes personal data when you visit this website or get in touch with us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data is any information relating to an identified or identifiable natural person, such as your name, e-mail address or IP address.

2. Controller

The controller responsible for data processing on this website is:

The company is represented by its managing director, Martina Schott-Neumaier. If you have any questions about data protection, you can contact us at any time using the details above.

3. Legal bases

We process personal data only where a legal basis applies, in particular:

• Art. 6(1)(a) GDPR — you have given your consent;
• Art. 6(1)(b) GDPR — processing is necessary to perform a contract with you or to take steps at your request before entering into a contract;
• Art. 6(1)(c) GDPR — processing is necessary to comply with a legal obligation, for example retention duties under commercial and tax law;
• Art. 6(1)(f) GDPR — processing is necessary for our legitimate interests, provided your interests or fundamental rights do not override them.

4. Hosting and server log files

This website is hosted by an external service provider on our behalf. When you access the website, the server automatically records information transmitted by your browser (“server log files”):

• IP address of the requesting device,
• date and time of the request,
• page or file requested and amount of data transferred,
• referrer URL (the page you came from),
• browser type and version, operating system,
• HTTP status code.

This data is required to deliver the website securely and reliably and to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free and secure operation of the website. Log files are deleted after a short period — usually within 14 days — unless longer retention is required to investigate a specific security incident. Where required, we conclude a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

5. Contacting us

If you contact us by e-mail or telephone, we process the data you provide (for example your name, e-mail address, telephone number and the content of your message) in order to handle your enquiry and any follow-up questions.

Our contact form does not send any data to a server. When you submit it, your own e-mail program opens with a pre-filled message, which you then send yourself. The data is therefore only transmitted to us by e-mail once you actively send the message.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR — our legitimate interest in responding effectively to enquiries addressed to us. We delete the data once your enquiry has been conclusively dealt with, unless statutory retention obligations apply (for example for business letters under § 257 HGB and § 147 AO, generally six or ten years).

6. Web fonts (Bunny Fonts)

To display typography consistently, this website loads fonts from Bunny Fonts, a service provided by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (European Union). When a page is loaded, your browser connects to the provider’s servers; for technical reasons your IP address is processed in the process. According to the provider, no cookies are set and no personal data is logged or stored.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a uniform and appealing presentation of the website. Further information is available in the provider’s privacy policy at bunny.net/privacy.

7. Cookies and browser storage

We do not use tracking, analytics or advertising cookies. This website only stores two small technical entries in your browser: one remembers that you have acknowledged the cookie notice (local storage), the other remembers during your visit that the intro animation has already been shown (session storage).

These entries are strictly necessary to provide the service you have requested (§ 25(2) no. 2 TDDDG) and are never transmitted to us. Details can be found in our Cookie Policy.

8. External links

Our website contains links to external websites, for example a route planner link on our contact page. Such links are only activated when you click them; only then does the respective provider receive data from your browser, under its own responsibility and privacy policy.

9. Job applications

If you send us an application, we process the data you provide in order to decide on establishing an employment relationship (Art. 6(1)(b) GDPR). If no employment relationship results, your application data will be deleted no later than six months after the application process has been concluded, unless you have consented to longer storage or a legal dispute requires longer retention.

10. Recipients and third countries

We only pass personal data to third parties where this is necessary — for example to our hosting and e-mail providers, tax advisors, banks, notaries or public authorities, insofar as this is required to process your request or to comply with legal obligations. We do not intend to transfer personal data to countries outside the European Union or the European Economic Area.

11. Storage period

Unless a more specific storage period is stated in this policy, we keep personal data only for as long as it is required for the respective purpose. Where statutory retention obligations apply, the data is restricted and deleted once the retention period has expired.

12. Your rights

Under the GDPR you have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds.

To exercise your rights, simply contact us at bayernweltimmobver@inbox.eu.

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

14. Data security

We use appropriate technical and organisational measures to protect your data. This website should be delivered via an encrypted connection (TLS/HTTPS), which you can recognise by the lock symbol in your browser’s address bar. Please note that ordinary e-mail is not end-to-end encrypted; do not send highly confidential documents by unencrypted e-mail.

15. Changes to this policy

We may update this Privacy Policy if our website or the legal framework changes. The version published on this page applies. Last updated: 28 September 2026.