Privacy Policy

1. Data controller

Stephan Wühr – Immobilien Wühr, Ruhmannsdorf 9, 94267 Prackenbach, Germany

Phone / WhatsApp: +49 170 93 29 706

Email: immobilien.wuehr@gmail.com

2. Hosting and technical infrastructure

This website is hosted by Vercel Inc. The database, user accounts and file storage (e.g. uploaded ID copies) run through Supabase. A data processing agreement under Art. 28 GDPR should be in place with both providers.

3. Cookies

This website currently uses only one strictly necessary cookie to remember your language choice (German/English). No tracking or usage analysis takes place. Strictly necessary cookies do not require consent under German law (§25(2) TTDSG).

4. What data we collect and why

• Rental application form: name, date and place of birth, nationality, contact details, passport/ID copy, proof of university enrollment and a current profile photo — to assess and prepare a rental agreement (Art. 6(1)(b) GDPR, pre-contractual measures). Uploaded documents and the profile photo are checked automatically for plausibility (e.g. whether a readable document or a face is recognisable); the result is only a hint, and the decision on your application is always made by a person.
• Quick application/reservation: name, contact details, date of birth, ID details — to temporarily hold a room (Art. 6(1)(b) GDPR).
• Waitlist: name, email address, optionally a desired move-in date — to notify you once a room becomes available (Art. 6(1)(a) GDPR, consent given by signing up).
• Contact form/chat: name, email, optionally a phone number, your message — to respond to your inquiry (Art. 6(1)(f) GDPR, legitimate interest in communicating with prospective tenants).
• Reviews: name, country of origin, star rating, comment and optionally a photo — published on the room page once the landlord has approved the review (Art. 6(1)(a) GDPR, consent given when submitting; the photo only with separate consent). You can ask for your review to be deleted at any time by email.
• Usage statistics: page views and clicks are counted without cookies and without your IP address (only the page path, the clicked label and a random session identifier) — to see which pages are used (Art. 6(1)(f) GDPR). Individual persons cannot be identified from this.

5. Recipients / processors

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• Resend — only if configured by the operator (confirmation and notification emails)
• DeepL — only if configured by the operator (automatic chat message translation)
• Stripe — only if payment links are used (deposit/rent payment processing)
• Anthropic — automated plausibility check of uploaded documents and profile photos (see section 4); the images are only transmitted briefly for the check and are not stored there permanently

6. Retention period

Data from rejected or abandoned applications is deleted 12 months after the process concludes. Data of current and former tenants is kept for the duration of the tenancy plus statutory retention periods (commercial/tax law, typically 6–10 years).

7. Your rights

You have the right to access, rectify, erase, and restrict processing of your personal data, as well as to data portability and objection. Contact us at the address above to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.