Privacy policy

Thank you for your interest in our commercial spaces. Protecting your personal data matters to us. Below we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) which data we process when you visit this website and when you send us an enquiry through our form, for what purpose, and what rights you have. In short: this website sets no cookies, uses no tracking and loads no external fonts or services. We process data only when you actively contact us.

1. Controller

No data protection officer has been appointed, as the statutory conditions requiring such an appointment are not met.

2. Hosting and server log files

This website is hosted on a server operated by us ([Hosting-Anbieter / Rechenzentrum, Standort]). When the website is accessed, the web server automatically processes information transmitted by your browser (server log files): IP address, date and time of access, the page or file requested, the volume of data transferred, the HTTP status code, the referrer URL as well as browser type and operating system.

This processing serves to deliver the website and to ensure its stability and security (e.g. defence against attacks, error analysis) on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in secure and trouble-free operation. Log files are deleted after 14 days unless a security-relevant incident requires longer retention. The connection is encrypted via TLS (HTTPS).

3. Cookies, tracking, embedded services

We use no cookies and no analytics or tracking tools, and we embed no third-party content (no external fonts, no maps, no videos, no social media plug-ins). The fonts used are served from our own server. Consent under § 25 TDDDG is therefore not required and no cookie banner is displayed. For technical reasons your browser may store settings locally (for example the draft state of the enquiry form); such data never leaves your device.

4. Enquiry and appointment form

You can use the “Request a viewing” form to send us an enquiry about the commercial spaces. In doing so we process the data you enter:

• name (required) and email address (required)
• optional: company/project, telephone number, your message or intended use
• the unit selected and any preferred date
• technical data: the time of the enquiry and your IP address (to prevent abuse and limit the request rate)

Purpose and legal basis. The processing serves to handle your enquiry, arrange a viewing appointment and initiate a lease. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract); collecting the IP address to prevent abuse is based on Art. 6 (1) (f) GDPR. Insofar as you additionally give us your consent when submitting the form, the legal basis is Art. 6 (1) (a) GDPR; you may withdraw it at any time with effect for the future.

Transmission via an email service (processing on our behalf). Your enquiry is delivered from our server by email to our mailbox rent@aoc-home.com. For sending we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the content of the enquiry and your email address on our behalf under a data processing agreement pursuant to Art. 28 GDPR. As Resend is a company based in the USA, a transfer to a third country may take place. Such transfer is based on the EU standard contractual clauses agreed with Resend (Art. 46 (2) (c) GDPR) as part of the data processing agreement. Further information: resend.com/legal/privacy-policy. Resend retains delivery logs only for as long as necessary for sending and for providing evidence of delivery.

Retention period. We store your enquiry for as long as it is required to handle it and to initiate a tenancy. If no contract is concluded, we delete the data no later than six months after the end of the correspondence, unless you ask us to keep you on file for longer. If a lease is concluded, the retention periods under commercial and tax law apply (§ 257 HGB, § 147 AO: six and eight years respectively).

Provision of data. Providing your name and email address is necessary for us to answer your enquiry; without them the form cannot be submitted. All other details are voluntary. Alternatively you can contact us at any time directly by email or telephone.

5. Contact by email or telephone

If you contact us by email or telephone, we process your details (name, contact data, content of the message) in order to deal with your request on the basis of Art. 6 (1) (b) GDPR or – for general enquiries – Art. 6 (1) (f) GDPR. Our mailbox is operated on our own servers. The data is deleted once the matter has been conclusively dealt with and no statutory retention obligations prevent deletion.

6. Disclosure to third parties

Your data is disclosed to third parties only where this is necessary to initiate a contract (for example to our tax adviser upon conclusion of a lease), where we are legally obliged to do so, or where you have consented. Service providers acting on our behalf (hosting, email delivery) are contractually bound under Art. 28 GDPR. Your data is never sold.

7. Your rights

You have the following rights in relation to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to rent@aoc-home.com or to the postal address given above is sufficient to exercise your rights.

Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

8. No automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

9. Data security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access: encrypted transmission (TLS), restricted access to our systems, regular updates of the server software and rate limiting to counter automated abuse.

10. Changes to this policy

We adapt this privacy policy when the legal situation or our processing activities change. The version published on this page at the time applies. Last updated: September 2026.

11. Language

This English text is a courtesy translation. In the event of any discrepancy, the German version prevails.