Thank you for your interest in HausBuddy, a service offering for tenants, owners, property managers, and service providers of Deutsche Hausverwalter.de. The protection of your personal data is an important concern for us and a key prerequisite for the success of our online offering. In the following, we, Deutsche Hausverwalter 24 GmbH, inform you as a user about the collection, processing, and use of your personal data.

1. Subject Matter of Data Protection

The subject matter of data protection is personal data, meaning individual information about personal or factual circumstances of natural persons. This includes information such as name, address, email address, telephone number, or bank account details. Further legal bases for data protection can be found in the Telemedia Act (TMG) and the EU General Data Protection Regulation (GDPR). All personal data is collected, processed, and used in accordance with the provisions of the relevant laws. A transfer to third parties only takes place within the scope of the manner described below, according to the principle of data minimization, and in accordance with legal regulations.

The responsible party for the collection, processing, and use of personal data via the internet platform deutschehausverwalter.de (hereinafter referred to as "Platform") is Deutsche Hausverwalter 24 GmbH, Ostra-Allee 9, 01067 Dresden. You can save and print this privacy policy using your browser. For further questions regarding the handling of personal data, please contact us by phone or by email at [email protected].

2. Server Log Files

To improve the quality of the platform, we store data about every single access to our pages for statistical purposes. This data record consists of:

• the page from which the file was requested

• the name of the file

• the date and time of the server request

• the amount of data transferred

• the access status (file transferred, file not found)

• the operating system used

• the web browser used

• the IP address or hostname of the requesting computer

A consolidation of this data with other data sources is not carried out. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

3. Registration Process

The use of our online offering is generally possible without providing personal data (registration). Within the scope of the registration process, we collect and process the following data:

• User type (tenant, owner, property manager, service provider)

• Email

• Password

• Agreement to the General Terms and Conditions and this privacy promise

• IP address

• Date and time

To gain access to the user profile, an email is sent to the user. This contains an authentication link that the user must click on. Only then is it possible for the user to access their personal user profile. This ensures that unauthorized persons do not gain access to the profile.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. An informal notification by email to [email protected] is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation. We store the data collected during registration for the period you are registered on our website. Your data will be deleted should you cancel your registration. Statutory retention periods remain unaffected.

4. Cookies

Cookies are small files that make it possible to store specific, device-related information on the users' access device (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus the users (e.g., storage of login data); on the other hand, they serve to collect statistical data of website use and to be able to analyze this for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option with which the storage of cookies is restricted or completely prevented (aboutcookies.org). However, it is pointed out that the use and in particular the user comfort will be restricted without cookies.

You can manage many online ad cookies from companies via the US site aboutads.info/choices or the EU site youronlinechoices.com/uk/your-ad-choices. The setting of cookies that are necessary to carry out electronic communication processes or to provide certain functions desired by you (e.g., login) takes place on the basis of Art. 6 para. 1 lit. f GDPR. As an operator, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services.

Important note regarding Google Analytics: We use Google Analytics on this platform, which places cookies on your device to collect usage data. Before Google Analytics cookies are set, we obtain your explicit consent via our cookie consent banner in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time. Please refer to Section 5 (Google Analytics) below for full details.

5. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar tracking technologies to collect and analyze information about how visitors interact with our platform. The information generated by the cookie about your use of this website (including your IP address) is transmitted to and stored by Google on servers, which may also include servers in the United States. Before Google Analytics cookies are set, we obtain your explicit consent via our cookie consent banner in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time.

The data collected by Google Analytics includes:

• Visited pages and time spent on each page

• Referring URLs and traffic sources

• Device type, browser, and operating system

• Approximate geographic location (country/city level)

• User interactions such as clicks, scrolling, and events

• Anonymized IP address

IP Anonymization: We have activated IP anonymization (also known as IP masking) in Google Analytics. This means that your IP address will be truncated by Google within member states of the EU/EEA before transmission. Only in exceptional cases will the full IP address be transmitted to Google servers in the USA and truncated there. The anonymized IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data provided by Google.

Legal Basis: The use of Google Analytics is based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You are asked for this consent via our cookie consent banner when you visit our platform for the first time. You can revoke your consent at any time with effect for the future. The revocation does not affect the legality of the processing prior to the revocation.

Data Storage: We have configured Google Analytics so that user- and event-level data is stored for 14 months. After this period expires, the data is automatically deleted.

Data Processing Agreement: We have concluded a data processing agreement (DPA) with Google in accordance with Art. 28 GDPR. Google is contractually obligated to process data only upon our instruction and to comply with applicable data protection law. Details on Google's privacy practices can be found at: https://policies.google.com/privacy.

Data Transfers to the USA: Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of protection for personal data transferred to the United States in accordance with Art. 45 GDPR. Data transfers to the USA are additionally secured by Standard Contractual Clauses (SCCs) of the European Commission.

Opt-Out Options: You can prevent the collection of your data by Google Analytics by:

• revoking your cookie consent at any time via our cookie consent banner

• adjusting your browser settings to block or delete cookies

• activating the "Do Not Track" setting in your browser

6. Google Maps

Our website uses the service of "Google Maps", operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your company headquarters or residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). On the website, Google Maps is integrated via the Google API to visualize location information and display it in the form of a map. The files required for this are requested via the Google domains maps.googleapis.com, maps.gstatic.com, fonts.googleapis.com, and/or fonts.gstatic.com. To display the map, the processing of the IP address by Google Maps is technically necessary.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following data is transmitted:

• the IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• the amount of data transferred

• the website from which the request comes (so-called referrer)

• Type and version of the browser used as well as the language version used

• Type and version of the operating system used as well as the interface used

This information (including your IP address) is transmitted directly by your browser to a Google server in the USA and stored there. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish for this assignment to your profile on Google, you must log out of your Google profile before using our website. The data transfer to the USA takes place on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke the consent granted for data processing at any time. The security and privacy principles of Google can be found at https://policies.google.com/privacy. We have concluded an agreement with Google on joint processing regarding Google Maps.

7. Google Ads

Our website uses Google Ads. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements in the Google search engine or on third-party sites when the user enters certain search terms on Google (keywords and keyword targeting). Additionally, targeted advertisements can be displayed based on user data available at Google (e.g., location data, interests, or technology) (audience targeting). As website operators, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many ads led to corresponding clicks. The use of Google Ads takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the most effective marketing possible of its services and products.

8. Google Conversion Tracking

Our website uses Google Conversion Tracking. The provider here is also Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google Conversion Tracking, we and Google can recognize whether the user has performed certain actions, for example, whether a form was submitted. This information is used to create conversion statistics. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification. The use of Google Conversion Tracking takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been requested (e.g., consent to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. More information about Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en.

9. Encryption

To protect your data, which you share with us when using this site, from unwanted access, we use an encryption method. Your information is then transmitted over the internet via an SSL-encrypted line (Secure Socket Layer) from your computer to our server and vice versa. You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

10. Contact Form

You can contact us at any time via a contact form if you have any questions or suggestions. In order to answer your questions or provide you with feedback, we need the following information: Name and email address or telephone number. We use this data exclusively for the purpose of contacting you. This data will not be passed on without your consent. The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already granted consent is possible at any time. An informal notification by email to [email protected] is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data transmitted via the contact form remains with us until you request us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

11. Third-Party Content

Third-party content (e.g., YouTube videos or videos from other providers, Google Maps, RSS feeds, etc.) may also be integrated into our websites. The providers of this content usually store cookies on the users' computers. You can prevent this through appropriate settings in your browser, but this may lead to this content not being displayed correctly. In addition, many (third-party) providers store the users' IP address in order to be able to send the corresponding content to the user's browser. We have no influence on the use of the IP address by the (third-party) provider.

12. Your Rights under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right to Information (Art. 15 GDPR): You have the right at any time to receive information about the personal data stored about you, to review it, to have it corrected, or to object to its storage and use. Excluded from this are billing data and data that we are required to retain due to legal regulations. Please address the objection to Deutsche Hausverwalter 24 GmbH, Ostra-Allee 9, 01067 Dresden, Germany or to [email protected].

• Right to Rectification (Art. 16 GDPR): You have the right to request the rectification of incorrect personal data that we have stored about you.

• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You have the right to request the erasure of your personal data, subject to applicable statutory retention obligations.

• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request from us, under certain circumstances, the restriction of the processing of your personal data.

• Right to Data Portability (Art. 20 GDPR): You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to third parties in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

• Right to Object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interests). We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

• Right to Withdraw Consent (Art. 7 para. 3 GDPR): If the processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal. An informal notification by email to [email protected] is sufficient.

13. Right to Complain

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection violation (Art. 77 GDPR). The competent supervisory authority for data protection issues is the State Data Protection Officer of the federal state in which our company has its registered office. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

14. Changes to this Privacy Policy

We reserve the right to update this privacy policy from time to time to reflect changes in our data processing activities, legal requirements, or service features. The current version is always available on our platform. We recommend reviewing this policy regularly. Significant changes will be communicated to registered users by email.

Deutsche Hausverwalter 24 GmbH • Ostra-Allee 9, 01067 Dresden • [email protected]