Privacy policy

1. responsible person

Responsible for the data processing on this website is:

Konstantin Gastmann
goenzcom photography berlin
Friedrich-Junge-Straße 13
10245 Berlin
Germany

Phone: +49 (0) 30 8633 6540
Email: info@immobilienfotograf-berlin.com

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications and Digital Services Data Protection Act (TDDDG).

Personal data refers to any information relating to an identified or identifiable natural person. This may include, in particular, names, contact information, IP addresses, and information about the use of a website.

3. hosting and server log files

This website is hosted by the following provider:

cyberwebhosting.de
Owner: Marcel Stiller
Grevenweg 72
20537 Hamburg
Germany

When you visit this website, your browser automatically sends data to the web server. This information may be stored in what are known as server log files. This may include, in particular:

  • IP address of the accessing device

  • Date and time of access

  • Page or file accessed

  • Amount of data transferred

  • Referrer URL

  • Browser type and browser version

  • Operating system used

  • Hostname of the accessing device

  • Notification of a successful or failed retrieval

Data is processed to provide the website from a technical standpoint, ensure its stability and security, defend against attacks, and analyze technical errors.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring the secure, stable, and proper operation of this website.

The log data will be deleted as soon as it is no longer needed for these purposes, unless longer retention is required to investigate a security incident or to comply with legal obligations.

4. Contact via email, phone, or the contact form

If you contact us by email, phone, or through a contact form, we will process the data you provide to handle your inquiry and for any follow-up questions.

These may include, in particular:

  • Name

  • Email address

  • Phone number

  • Content of your message

  • Information about the property in question or the requested assignment

  • Other voluntarily provided information

To the extent that your inquiry relates to the initiation or performance of a contract, the processing is based on Art. 6, para. 1 lit. Article 6 of the GDPR.

For other inquiries, processing is based on Art. 6, para. 1 lit. f GDPR. Our legitimate interest lies in properly processing and responding to your inquiry.

The data will be deleted once your request has been fully processed and there are no legal retention requirements or other legitimate reasons for further storage. If a contractual relationship is established, the data may be stored in accordance with the statutory retention periods under commercial and tax law.

Providing your data is not required by law or by contract. However, without the necessary contact information, we may not be able to process or respond to your inquiry.

5. Cookies and Similar Technologies

This website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Similar technologies may read or store information from your browser or device.

Some of these technologies are technically necessary for the website and consent management to function. Other services are activated only after you have given your explicit consent.

Services requiring consent may include, in particular:

  • Google Analytics

  • Google Maps

  • Google reCAPTCHA

  • Matterport

  • MPskin

The legal basis for storing or retrieving information on your device that is not technically necessary is § 25(1) of the TDDDG. The subsequent processing of personal data is based on your consent pursuant to Art. 6( 1 lit. a GDPR.

Technically necessary cookies and technologies are used in accordance with § 25(2)(2) of the TDDDG. The associated processing of personal data is carried out, where applicable, in accordance with Art. 6( 1 lit. c or lit. f GDPR.

You may change or withdraw your consent at any time, effective for the future, through the cookie settings on this website. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

6. Consent Management with Borlabs Cookie

We use the Borlabs Cookie consent management system. The software provider is:

Borlabs GmbH
Hamburger Straße 11
22083 Hamburg
Germany

The Borlabs cookie allows you to select which services and categories you wish to consent to. Your selection is stored in a technically necessary cookie named “borlabs-cookie.”

In particular, the following information may be stored in this cookie:

  • consents granted or denied

  • Date or Period of Validity of the Decision

  • Version of the Consent Settings

  • Website domain and path

  • a randomly generated identifier

The consent information is stored in your browser and on our web server. According to the provider, visitors’ consent data is not transmitted to Borlabs.

This processing is necessary so that your selection is retained when you revisit the page and so that we can verify that you have given your consent.

The legal basis is § 25(2)(2) of the TDDDG and Art. 6( 1 lit. c and lit. f GDPR. Our legitimate interest lies in ensuring that our consent management is legally compliant, user-friendly, and technically reliable.

You can find the respective retention periods and further details about the services used in this website’s cookie settings.

7. Language Selection with WPML

This website is multilingual and uses WPML software from OnTheGoSystems Limited for this purpose.

WPML may use technically necessary cookies or browser-based storage technologies to save the language you have selected and display the appropriate language version when you visit the site again.

The processing is carried out solely for the purpose of technically providing the multilingual website.

The legal basis is § 25(2)(2) of the TDDDG and Art. 6( 1 lit. f GDPR. Our legitimate interest lies in providing our services in a user-friendly and technically reliable manner in multiple languages.

8. Google Analytics 4

If you have given your consent, we use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

As part of the processing, data may also be transferred to Google LLC and other companies in the Google Group in the United States.

Google Analytics is technically integrated via the WordPress plugin Rank Math SEO. The Analytics code is blocked by the Borlabs cookie until you give your consent. Google Analytics will not load without your consent.

Google Analytics helps us understand how visitors use our website. This allows us to evaluate the website’s reach, usage, and technical functionality and improve our services.

In particular, the following data may be processed:

  • Pages and files accessed

  • Date and Duration of the Visit

  • Source or Referrer URL

  • approximate geographic region

  • Browser type and browser version

  • Operating System and Device Category

  • Screen Resolution and Language Settings

  • Interactions and Events on the Website

  • randomly generated online identifiers

  • Information About Your Decision to Give Consent

Google Analytics uses, in particular, the “_ga” and “ga*” cookies. These may be stored on your device for up to two years, unless you revoke your consent or delete the cookies beforehand.

IP anonymization is enabled for this integration. According to Google, IP addresses of users from the European Union are used only to determine an approximate geographic region and are subsequently discarded.

The retention period for user- and event-related data is set to 14 months in our Google Analytics property. Aggregated statistical analyses may not be affected by this.

The legal basis for the processing is your consent pursuant to Art. 6, para. 1 lit. a GDPR and § 25(1) TDDDG.

Google LLC is certified under the EU-U.S. Data Privacy Framework. To the extent that data is transferred to the United States, such transfers may be made on the basis of the European Commission’s adequacy decision. In addition, the standard contractual clauses approved by the European Commission may be used.

You can withdraw your consent at any time via the cookie settings on this website.

For more information, please see Google’s privacy policy.

9. Google Maps

This website may include maps from Google Maps. The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

As part of the processing, data may also be transferred to Google LLC and other companies in the Google Group in the United States.

Google Maps is blocked by Borlabs’ cookie and will not load until you have explicitly consented or specifically enabled the relevant map content.

When loading and using a card, the following data, in particular, may be processed:

  • IP address

  • Browser and device information

  • Date and time of the call

  • page accessed

  • Location and Map Data

  • Interactions with the Map

  • Cookies and Similar Identifiers

If you are signed in to a Google Account at the same time, Google may be able to associate the processing with your Google Account. We have no control over Google’s further processing of the data.

The legal basis is your consent pursuant to Art. 6, para. 1 lit. a GDPR and § 25(1) TDDDG.

Google LLC is certified under the EU-U.S. Data Privacy Framework. To the extent that data is transferred to the United States, such transfer may be based on the relevant adequacy decision. Standard contractual clauses may also be used.

You can withdraw your consent at any time via the cookie settings.

For more information, please see Google’s privacy policy.

10. Google reCAPTCHA

To protect our contact forms from automated submissions and misuse, we use Google reCAPTCHA with your consent. The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google reCAPTCHA analyzes certain aspects of website usage to determine whether an entry is made by a human or by an automated program.

In particular, the following information may be processed:

  • IP address

  • Browser and device information

  • Operating system

  • Referrer URL

  • Date and Duration of the Visit

  • Mouse movements, keyboard inputs, and other interactions

  • Cookies and Similar Identifiers

The reCAPTCHA code is blocked by the Borlabs cookie until you give your consent. Without activating reCAPTCHA, your ability to use or submit a contact form protected by this feature may be restricted.

The legal basis is your consent pursuant to Art. 6, para. 1 lit. a GDPR and § 25(1) TDDDG.

Google may also process the data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. Standard contractual clauses may also be used.

You can withdraw your consent at any time via the cookie settings.

For more information, please see Google’s privacy policy.

11. Virtual Tours with Matterport

This website features virtual 3D and 360° tours provided by Matterport. The provider is:

Matterport, LLC
352 East Java Drive
Sunnyvale, California 94089
USA

Matterport tours are blocked by Borlabs cookies and will not load until you have explicitly consented to the service or specifically enabled the tour in question.

When loading and using a Matterport tour, the following data in particular may be processed:

  • IP address

  • approximate geographic region

  • Browser and device information

  • Operating system

  • Screen Size and Language Settings

  • Date and time of access

  • page accessed

  • Interactions During the Tour

  • Technical Performance and Usage Data

According to Matterport, it does not use third-party tracking cookies for visitors who are not logged in. However, the service may use the browser’s local storage to save settings within a tour, for example.

Matterport also processes usage information through its own analytics service to improve the platform’s functionality and user-friendliness. This may include, among other things, an anonymized IP address, approximate location information, and device and interaction data.

The legal basis is your consent pursuant to Art. 6, para. 1 lit. a GDPR and § 25(1) TDDDG.

Processing in the United States cannot be ruled out. Matterport cites, among other things, the European Commission’s Standard Contractual Clauses as a possible basis for international data transfers.

You can withdraw your consent at any time via the cookie settings.

For more information, please see Matterport’s Privacy and Data Processing Notices.

12. Enhanced Virtual Tours with MPskin

Some virtual tours are available through the MPskin platform. The provider is:

MPskin GmbH/Srl
Boznerstraße 40
39057 Eppan
Italy

MPskin allows you to display enhanced Matterport tours with additional menus, information, design elements, and features.

Some of the MPskin content is hosted on our white-label subdomain

my.immobilienfotograf-berlin.com

integrated. Even if a domain from our website is displayed, the content is technically provided through the MPskin platform.

The MPskin content is blocked by Borlabs’ cookie and will not load until you have explicitly consented to the service or specifically enabled the respective tour.

The following data, in particular, may be processed during the loading process:

  • IP address

  • Browser and device information

  • Operating system

  • Date and time of access

  • page accessed

  • Technical usage and interaction data

A Matterport tour can then be loaded within the content provided by MPskin. This may also involve establishing a connection to Matterport and to technical service providers used by Matterport.

The legal basis is your consent pursuant to Art. 6, para. 1 lit. a GDPR and § 25(1) TDDDG.

MPskin is headquartered in Italy and is therefore located within the European Union. If Matterport or other providers from a third country are loaded during a tour, the information in the sections on Matterport and transfers to third countries also applies.

You can withdraw your consent at any time via the cookie settings.

For more information, please see MPskin’s Privacy Policy.

13. Linked Virtual Tours and External Links

Some overview pages display thumbnails or buttons that can be used to open virtual tours in a new browser tab.

Simply visiting our website does not establish a connection to the destination provider via such a standard link. Only when you click on the image or link do you leave our website or open the linked page.

From that point on, the privacy policy of the respective provider applies. In particular, your IP address, technical device information, and details about the content you accessed may be processed.

We have no control over how data is processed on external destination pages.

14. Social Media Links

This website may contain links to social media platforms, particularly LinkedIn.

Simply visiting our website does not, in principle, result in any personal data being transmitted to the respective network via a simple link. Only when you click on such a link will you be redirected to the third-party provider’s website.

From that point on, the privacy policy of the respective provider applies. We have no control over the data processing that takes place there.

15. Recipients of Personal Data

We only disclose personal data to third parties if it is permitted by law, necessary to fulfill a contract, based on a legitimate interest, or if you have given your consent.

Recipients or categories of recipients may include, in particular:

  • Hosting and IT Service Providers

  • Service provider for technical website maintenance

  • Email and Communication Service Providers

  • Providers of analytics and consent services

  • Providers of maps, security features, and virtual tours

  • Tax advisors, attorneys, and other professional consultants

  • Government agencies and public entities subject to a legal obligation

To the extent that service providers process personal data on our behalf, they do so in accordance with the legal requirements set forth in Article 28 of the GDPR.

16. Data Transfers to Third Countries

Some of the service providers used on this website are based in the United States or may also process data outside the European Union and the European Economic Area.

Data will only be transferred to a third country if the legal requirements set forth in Articles 44 et seq. of the GDPR are met.

The following, in particular, can serve as a basis:

  • an adequacy decision by the European Commission

  • valid certification under the EU-U.S. Data Privacy Framework

  • European Commission Standard Contractual Clauses

  • other appropriate guarantees

  • express consent, provided that the legal requirements are met

When data is processed in third countries, the level of data protection may differ from that within the European Union, despite these safeguards.

17. Retention Period

Unless a specific retention period is specified in this Privacy Policy, we store personal data only for as long as is necessary to fulfill the respective purpose.

Data is deleted when:

  • the purpose of the processing no longer applies,

  • You may revoke your consent,

  • You have the right to request the deletion of your data and

  • there is no other legal basis for continued storage.

Statutory retention requirements, as well as the storage of data for the purpose of asserting, exercising, or defending legal claims, remain unaffected.

18. Withdrawal of Consent

You may revoke any consent you have already given at any time, effective for the future.

You can change or revoke your consent for Google Analytics, Google Maps, Google reCAPTCHA, Matterport, MPskin, and other services that require consent via the cookie settings on this website.

The lawfulness of the processing carried out up to the time of revocation remains unaffected by the revocation.

19. Right to Object under Article 21 of the GDPR

When we process personal data on the basis of Art. 6, para. 1 lit. If we process your personal data pursuant to Article 6(e) or (f) of the GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

We will no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes, you may object to such processing at any time. Once you have objected, your data will no longer be used for direct marketing.

20. Your Other Data Protection Rights

Under the terms of the law, you have the following rights in particular:

  • Right of access pursuant to Article 15 of the GDPR

  • Right to rectification under Article 16 of the GDPR

  • Right to erasure under Article 17 of the GDPR

  • Right to restriction of processing under Article 18 of the GDPR

  • Right to Data Portability under Article 20 of the GDPR

  • Right to Object under Article 21 of the GDPR

  • Right to withdraw consent pursuant to Article 7(3) of the GDPR

To exercise your rights, you may contact us using the contact information provided in Section 1.

21. Right to File a Complaint with a Data Protection Supervisory Authority

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

In particular, you may contact the supervisory authority responsible for us:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

Phone: 030 13889-0
Email: mailbox@datenschutz-berlin.de

The right to appeal is without prejudice to any other administrative or judicial remedies.

22. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential information, this website uses SSL or TLS encryption.

You can recognize an encrypted connection, in particular, by the fact that the website address begins with “https://” and a padlock icon is displayed in your browser.

When encryption is enabled, data transmitted to us generally cannot be easily read by third parties.

23. Automated Decisions and Profiling

We do not engage in any fully automated decision-making, including profiling, as defined in Article 22 of the GDPR.

The statistical analysis of the website using Google Analytics does not constitute an automated decision with legal or similarly significant effects.

24. Current Status and Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, the services we use, or the technical design of this website change.

The version published on this website at any given time shall apply.

As of June 2026