Privacy Policy

Pei-Hsun Wang Bahnhofstr. 20 71111 Waldenbuch Germany Email: info@immotwde.com Phone: +49 176 3455 1833

No data protection officer has been appointed. Please contact the controller directly for privacy requests.

Consultation intake form: name, email, mobile (optional), language, property goals and preferences, budget, and related notes (stored in Google Sheets). Name and email are required to book an appointment; without them a consultation cannot be scheduled. Google Calendar booking: name and email (processed by Google as the scheduling provider) Cloudflare Turnstile: device and browser technical signals to prevent automated form abuse (not used for marketing) Technical data: IP address, browser type, access logs (hosting with Vercel) Usage statistics: page path, referrer, device and browser type, collected in de-identified form via Vercel Web Analytics (no cookies, no personal identifiers)

Handling your consulting, brokerage and property-management enquiries Preparing for your consultation based on your property needs Scheduling appointments via Google Calendar Preventing form abuse and automated submissions (Turnstile) Operating and securing the website (hosting, server logs) Understanding website usage via Vercel Web Analytics (cookieless)

Contract performance and pre-contractual steps (intake form, booking, consulting, brokerage or management mandate): Art. 6(1)(b) GDPR Legitimate interests in IT security and abuse prevention (Turnstile, server logs): Art. 6(1)(f) GDPR Legitimate interests in operating the website: Art. 6(1)(f) GDPR Legitimate interests in cookieless reach measurement (Vercel Web Analytics): Art. 6(1)(f) GDPR Technically necessary language and theme storage: Art. 6(1)(f) GDPR together with § 25(2) no. 2 TDDDG

Google LLC (USA) — Google Calendar, Google Sheets; transfers under Google’s DPA and mechanisms such as the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses Cloudflare Inc. (USA) — Turnstile bot protection; processed under Cloudflare DPA / Standard Contractual Clauses Vercel Inc. (USA) — website hosting, API execution, and Web Analytics (cookieless); processing agreement and appropriate transfer safeguards HISCOX SA (Luxembourg/Germany) — professional indemnity; only where needed for claims or the insurance contract

Intake and consultation data: typically up to 3 years after consultation, or until you request deletion (whichever applies sooner and lawfully); statutory retention (e.g. tax law) remains unaffected Vercel Web Analytics: per Vercel’s standard retention Server logs: per Vercel’s standard retention Turnstile signals: processed by Cloudflare per their Turnstile privacy notice

Some providers are located in the USA or other third countries. We use them only where appropriate safeguards exist, such as EU Standard Contractual Clauses (SCCs), Data Processing Agreements (DPAs), and where applicable the EU-US Data Privacy Framework (DPF).

Access, rectification, erasure Restriction of processing Data portability Object (including to processing based on legitimate interests) Withdraw consent (without affecting prior lawful processing) Complaint to the supervisory authority: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW) Lautenschlagerstraße 20 70173 Stuttgart https://www.baden-wuerttemberg.datenschutz.de

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

Language: NEXT_LOCALE cookie (strictly necessary to keep your chosen language) Dark/light mode: localStorage (strictly necessary) Notice-banner status: localStorage (strictly necessary) Blog preview login: session cookie only after editor login Cloudflare Turnstile: security check on the booking form, strictly necessary (not marketing) Google Calendar: after you submit the intake form, Google’s scheduler is embedded; Google may then set its own cookies to provide the booking service you requested No analytics cookies and no Google Analytics Website analysis via Vercel Web Analytics (cookieless)