Privacy policy

Thank you for your interest in our commercial spaces. Protecting your personal data matters to us. Below we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) which data we process when you visit this website and when you send us an enquiry through our form, for what purpose, and what rights you have. In short: without your explicit consent we set no cookies and transmit no data to third parties. Fonts are served from our own server; we embed no maps, videos or social media plug-ins. Analytics only starts once you have agreed in the banner (section 3). We process data only when you actively contact us.

1. Controller

No data protection officer has been appointed, as the statutory conditions requiring such an appointment are not met.

2. Hosting and server log files

This website is hosted on a server operated by us (eigener Server im Rechenzentrum der Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Standort Falkenstein/Vogtland, Deutschland). When the website is accessed, the web server automatically processes information transmitted by your browser (server log files): IP address, date and time of access, the page or file requested, the volume of data transferred, the HTTP status code, the referrer URL as well as browser type and operating system.

This processing serves to deliver the website and to ensure its stability and security (e.g. defence against attacks, error analysis) on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in secure and trouble-free operation. Log files are deleted after 14 days unless a security-relevant incident requires longer retention. The connection is encrypted via TLS (HTTPS).

We administer the server ourselves; the data centre and hardware are provided by Hetzner Online GmbH. A data processing agreement under Art. 28 GDPR is in place with Hetzner. Data is processed exclusively in Germany; no transfer to third countries takes place.

3. Cookies, analytics, embedded services

We embed no third-party content – no external fonts, no maps, no videos, no social media plug-ins. The fonts used are served from our own server. For technical reasons your browser may store settings locally (for example your language choice and your decision about analytics); such data never leaves your device.

3.1 Google Analytics 4 – only with your consent

For audience measurement we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We want to understand how prospective tenants find this site, which of the units attracts interest and whether the enquiry form is used.

Nothing is loaded before you consent. As long as you have not agreed in the consent banner, no code is retrieved from Google, no connection to Google is established and no cookie is set. Only after your consent does the analytics code load, set cookies (in particular _ga and _ga_*, stored for up to two years) and transmit usage data to Google.

The data processed includes: truncated IP address, pages visited and times, time on page, referrer, device type, browser, operating system, screen resolution and approximate location at city level. Google truncates the IP address before any storage. We have disabled the advertising features: Google signals, personalised advertising and sharing with advertising products are switched off, and the corresponding Consent Mode settings remain permanently set to “denied”.

Legal basis is your consent under § 25 (1) TDDDG for storing and reading information on your device and Art. 6 (1) (a) GDPR for the subsequent processing. A data processing agreement under Art. 28 GDPR is in place with Google. Transfer to the USA cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission under Art. 45 GDPR applies. The standard contractual clauses apply in addition. Retention of usage data at Google: 14 months.

Withdrawal: you may withdraw your consent at any time with effect for the future – the lawfulness of processing carried out until then is unaffected. One click is enough:

Agree

Further information: Google’s privacy policy. Independently of this, you can prevent collection using the Google Analytics opt-out browser add-on.

3.2 Google Search Console

We use Google Search Console to see which search terms bring up this website in the results. The service evaluates only data that arises at Google itself; no code is executed on this website for it, no cookies are set and no data from your device is collected. No consent is required for this.

4. Enquiry and appointment form

You can use the “Request a viewing” form to send us an enquiry about the commercial spaces. In doing so we process the data you enter:

• name (required) and email address (required)
• optional: company/project, telephone number, your message or intended use
• the unit selected and any preferred date
• technical data: the time of the enquiry and your IP address (to prevent abuse and limit the request rate)

Purpose and legal basis. The processing serves to handle your enquiry, arrange a viewing appointment and initiate a lease. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract); collecting the IP address to prevent abuse is based on Art. 6 (1) (f) GDPR. Insofar as you additionally give us your consent when submitting the form, the legal basis is Art. 6 (1) (a) GDPR; you may withdraw it at any time with effect for the future.

Transmission via an email service (processing on our behalf). Your enquiry is delivered from our server by email to our mailbox rent@aoc-home.com. For sending we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the content of the enquiry and your email address on our behalf under a data processing agreement pursuant to Art. 28 GDPR. As Resend is a company based in the USA, a transfer to a third country may take place. Such transfer is based on the EU standard contractual clauses agreed with Resend (Art. 46 (2) (c) GDPR) as part of the data processing agreement. Further information: resend.com/legal/privacy-policy. Resend retains delivery logs only for as long as necessary for sending and for providing evidence of delivery.

Retention period. We store your enquiry for as long as it is required to handle it and to initiate a tenancy. If no contract is concluded, we delete the data no later than six months after the end of the correspondence, unless you ask us to keep you on file for longer. If a lease is concluded, the retention periods under commercial and tax law apply (§ 257 HGB, § 147 AO: six and eight years respectively).

Provision of data. Providing your name and email address is necessary for us to answer your enquiry; without them the form cannot be submitted. All other details are voluntary. Alternatively you can contact us at any time directly by email or telephone.

5. Contact by email or telephone

If you contact us by email or telephone, we process your details (name, contact data, content of the message) in order to deal with your request on the basis of Art. 6 (1) (b) GDPR or – for general enquiries – Art. 6 (1) (f) GDPR. Our mailbox is operated on our own servers. The data is deleted once the matter has been conclusively dealt with and no statutory retention obligations prevent deletion.

6. Disclosure to third parties

Your data is disclosed to third parties only where this is necessary to initiate a contract (for example to our tax adviser upon conclusion of a lease), where we are legally obliged to do so, or where you have consented. Service providers acting on our behalf (hosting, email delivery) are contractually bound under Art. 28 GDPR. Your data is never sold.

7. Your rights

You have the following rights in relation to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to rent@aoc-home.com or to the postal address given above is sufficient to exercise your rights.

Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

8. No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access: encrypted transmission (TLS), restricted access to our systems, regular updates of the server software and rate limiting to counter automated abuse.

10. Changes to this policy

We adapt this privacy policy when the legal situation or our processing activities change. The version published on this page at the time applies. Last updated: November 2026.

11. Language

This English text is a courtesy translation. In the event of any discrepancy, the German version prevails.