Thank you for your interest in HausBuddy, a service offering for tenants, owners, property managers, and service providers from DeutscheHausverwalter.de. The protection of your personal data is of great concern to us and an important prerequisite for the success of our online offering. In the following, we, Deutsche Hausverwalter 24 GmbH, inform you as a user about the collection, processing, and use of your personal data.

Subject Matter of Data Protection

The subject of data protection is personal data, i.e., individual details about the personal and factual circumstances of natural persons. This includes information such as name, address, email address, telephone number, or bank account details. Further legal bases of data protection can be found in the Telemedia Act (TMG) as well as in the EU General Data Protection Regulation (GDPR). All personal data is collected, processed, and used in accordance with the provisions of the relevant laws. A transfer to third parties only takes place within the scope of the manner described below according to the principle of data minimization as well as according to legal regulations. The responsible body for the collection, processing, and use of personal data via the internet platform deutschehausverwalter.de (hereinafter referred to as "Platform") is Deutsche Hausverwalter 24 GmbH, Ostra-Allee 9, 01067 Dresden. You can save and print this privacy policy via your browser. If you have further questions regarding the handling of personal data, please contact us by phone or by email at info@deutschehausverwalter.de.

Server Log Files

To improve the quality of the platform, we store data about every single access to our pages for statistical purposes. This data set consists of:

• the page from which the file was requested
• the file name
• the date and time of the server request
• the transferred data volume
• the access status (file transferred, file not found)
• the operating system used
• the web browser used
• the IP address or host name of the requesting computer

There is no merging of this data with other data sources. The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures.

Registration Process

The use of our online offering is generally possible without providing personal data (registration). As part of the registration process, we collect and process the following data:

• User type (tenant, owner, property manager, service provider)
• Email
• Password
• Consent to the terms and conditions and this privacy promise
• IP address
• Date and time.

To gain access to the user profile, an email is sent to the user. This contains an authentication link that the user must click. Only then is it possible for the user to access their personal user profile. This ensures that unauthorized persons do not gain access to the profile. The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. A GDPR). A revocation of your already given consent is possible at any time. An informal notification by email to info@deutschehausverwalter.de is sufficient for the revocation. The legality of the data processing already carried out remains unaffected by the revocation. We store the data collected during registration for the period you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

Cookies

Cookies are small files that make it possible to store specific information related to the device on the user's access device (PC, smartphone, or similar). They serve on the one hand the user-friendliness of websites and thus the users (e.g. storage of login data), and on the other hand to collect statistical data of website usage and analyze them in order to improve the offer. Users can influence the use of cookies. Most browsers have an option with which the storage of cookies is restricted or completely prevented (aboutcookies.org). However, it is pointed out that the use and especially the ease of use will be restricted without cookies. You can manage many online advertising cookies from companies via the US site aboutads.info/choices or the EU site youronlinechoices.com/uk/your-ad-choices. The setting of cookies that are necessary to carry out electronic communication processes or to provide certain functions you desire (e.g. logging in) is based on Art. 6 Para. 1 lit. f GDPR. As an operator, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar tracking technologies to collect and analyze information about how visitors interact with our platform. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored by Google on servers, which may also include servers in the United States. Before Google Analytics cookies are set, we obtain your explicit consent via our cookie consent banner in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time.

The data collected by Google Analytics includes:

• Visited pages and time spent on each page
• Referring URLs and traffic sources
• Device type, browser, and operating system
• Approximate geographic location (country/city level)
• User interactions such as clicks, scrolling, and events
• Anonymized IP address

IP Anonymization: We have activated IP anonymization (also known as IP masking) in Google Analytics. This means that your IP address is shortened by Google within member states of the EU/EEA prior to transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

Legal Basis: The use of Google Analytics is based on your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You are asked for this consent via our cookie consent banner when you visit our platform for the first time. You can revoke your consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing prior to the revocation.

Data Storage: We have configured Google Analytics so that user and event-level data is stored for 14 months. After this period, the data is automatically deleted.

Data Processing Agreement: We have concluded a data processing agreement (DPA) with Google in accordance with Art. 28 GDPR. Google is contractually obligated to process data only on our instructions and to comply with applicable data protection law. Details on Google's privacy practices can be found at: https://policies.google.com/privacy.

Data Transfers to the USA: Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of protection for personal data transferred to the United States in accordance with Art. 45 GDPR. Data transfers to the USA are additionally secured by Standard Contractual Clauses (SCCs) of the European Commission.

Opt-Out Options: You can prevent the collection of your data by Google Analytics by:

• Revoking your cookie consent at any time via our cookie consent banner
• Adjusting your browser settings to block or delete cookies
• Activating the "Do Not Track" setting in your browser

Google Maps

Our website uses the "Google Maps" service operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps is integrated into the website via the Google API to visualize location information and display it in the form of a map. The files required for this are requested via the Google domains maps.googleapis.com, maps.gstatic.com, fonts.googleapis.com and/or fonts.gstatic.com. To display the map, the processing of the IP address by Google Maps is technically necessary. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following data is transmitted:

• the IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• the transferred data volume
• the website from which the request comes (so-called referrer)
• Type and version of the browser used as well as the language version used
• Type and version of the operating system used as well as the interface used

This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. If you are logged into Google, your data is assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out of your Google profile before using our website. Data transmission to the USA is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent to data processing at any time. Google's security and privacy principles can be found at https://policies.google.com/privacy. We have entered into a joint processing agreement with Google regarding Google Maps.

Google Ads

Our website uses Google Ads. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keywords and keyword targeting). In addition, targeted advertisements can be played out based on user data available at Google (e.g., location data, interests, or technology) (target group targeting). We, as the website operator, can quantitatively evaluate this data, for example, by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks. The use of Google Ads is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Google Conversion Tracking

Our website utilizes Google Conversion Tracking. The provider is also Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google Conversion Tracking, we and Google can recognize whether the user has performed certain actions, for example, whether a form has been submitted. This information is used to create conversion statistics. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification. The use of Google Conversion Tracking is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent was requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR - consent can be revoked at any time. More information about Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en.

Google Fonts

Our website uses Google Fonts. These are the "Google fonts" of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. You do not need to register or enter a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts/fonts) are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google account, you do not need to worry that your Google account data will be transmitted to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. When you visit our website, the fonts are reloaded via a Google server. Through this external call, data is transmitted to the Google servers. This is how Google recognizes that you or your IP address visits our website. The Google Fonts API is designed to limit the use, storage, and collection of end-user data to what is necessary for a proper provision of fonts. API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software sector. Google Fonts stores CSS and font requests securely at Google and is thus protected. Based on the collected usage figures, Google can determine how well individual fonts are received. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites use Google fonts. However, it should also be kept in mind that every Google Font request automatically transmits information such as language settings, IP address, browser version, browser screen resolution, and browser name to the Google servers. Whether this data is also stored cannot be clearly determined or is not clearly communicated by Google. Google stores requests for CSS assets for one day on its servers, which are mainly located outside the EU. This enables us to use the fonts with the help of a Google stylesheet. A stylesheet is a formatting template through which one can easily and quickly change e.g. the design or the font of a website. The font files are stored at Google for one year. Google thereby pursues the goal of fundamentally improving the loading time of websites. If millions of websites refer to the same fonts, they are cached after the first visit and appear immediately on all other subsequently visited websites. Google sometimes updates font files to reduce file size, increase language coverage, and improve design. The data that Google stores for a day or a year cannot simply be deleted. The data is automatically transmitted to Google when the page is called up. In order to delete this data prematurely, you must contact Google Support at https://support.google.com/? hl=en&tid=331771177310. In this case, you only prevent data storage if you do not visit our site. Unlike other web fonts, Google allows us unrestricted access to all fonts. We can therefore access an unlimited sea of fonts and thus get the best out of our website. More about Google Fonts and other questions can be found at < span style="font-weight: 400;">https://developers.google.com/fonts/faq?tid=331771177310. If you have consented to the use of Google Fonts, the legal basis for the corresponding data processing is this consent. According to Art. 6 Para. 1 lit. a GDPR (Consent), this consent represents the legal basis for the processing of personal data, as it can occur during collection by Google Fonts. From our side, there is also a legitimate interest in using Google Font to optimize our online service. The corresponding legal basis for this is Art. 6 Para. 1 lit. f GDPR (Legitimate interests). However, we only use Google Font insofar as you have given your consent. Google processes your data, among other things, also in the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure data transfer of personal data of EU citizens to the USA. More information on this can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60be03fcb0fddf_en . In addition, Google uses so-called standard contractual clauses (= Art. 46. Para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google commits to complying with the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among others, Here: https://eurlex.europa.eu/eli/dec_imp |/2021/914/oj?locale=en The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https:/business.safety.google/int/en/adsprocesorterms/. You can also read about what data is fundamentally collected by Google and what this data is used for at https://www.google.com/intl/en/policies/privacy/.

Encryption

To protect your data, which you transmit to us when using this site, against unwanted access, we use an encryption procedure. Your details are then transmitted from your computer to our server and vice versa via the Internet using an SSL-encrypted connection (Secure Socket Layer). You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Contact Form

You can contact us at any time with questions or suggestions via a contact form. In order to answer your questions or to be able to send you feedback, we require the following information: Name and email address or telephone number. We use this data exclusively for the purpose of contacting you. This data will not be passed on without your consent. The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). A revocation of your already given consent is possible at any time. An informal notification by email to info@deutschehausverwalter.de is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data submitted via the contact form will remain with us until you request us to delete it, revoke your consent to storage, or there is no longer a need for data storage. Mandatory statutory provisions - in particular retention periods - remain unaffected.

External Content

Third-party content (e.g., YouTube videos or videos from other providers, Google Maps, RSS feeds, etc.) may also be integrated on our web pages. The providers of this content generally store cookies on the user's computer. You can prevent this by configuring your browser accordingly, which, however, may result in this content not being displayed correctly. In addition, many (third-party) providers store the IP address of users in order to be able to send the corresponding content to the user's browser. We have no influence on the use of the IP address by the (third-party) provider.

Right to Information and Revocation

You have the right at any time - without giving reasons - to obtain information about your stored personal data, to control it, to have it corrected, or to object to its storage and use. Excluded from this are billing data and data that we are required to keep due to legal regulations. Please send your objection to Deutsche Hausverwalter 24 GmbH, Ostra-Allee 9, 01067 Dresden, Germany or to info@deutschehausverwalter.de. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority regarding data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers as well as their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to yourself or to a third party. The provision is made in a machine-readable format. If you request the direct transfer of data to another responsible party, this will only be done insofar as it is technically feasible.