Information pursuant to Art. 13 of the GDPR

I. Scope of Application

1. This privacy notice provides information about the processing of your personal data (hereinafter “you” or “your”) by BUWOG Immobilien Treuhand GmbH (hereinafter “we” or “us”) and its affiliated companies within the Vonovia Group” (“we” or “us”), in accordance with the EU General Data Protection Regulation (hereinafter “GDPR”) and the German Federal Data Protection Act (hereinafter “BDSG”).

If you are acting as a legal entity in this context, the rights set forth in this privacy notice apply only to a limited extent (the GDPR applies only to the rights of natural persons).

2. You may access, save, and print this Privacy Notice at any time free of charge.

 

II. Data Controller

The entity responsible for data processing on this website is:

BUWOG Immobilien Treuhand GmbH

Universitätsstraße 133

44803 Bochum

Germany

Email: datenschutz@veveus.com

BUWOG Immobilien Treuhand GmbH is an affiliated company of the Vonovia Group pursuant to Section 15 of the German Stock Corporation Act (AktG). A joint Group Data Protection Officer has been appointed for all companies in the Vonovia Group. If you have any questions regarding data protection or the exercise of your data protection rights, you may contact him at any time:

The Group Data Protection Officer responsible for your data protection-related questions for all companies in the Vonovia Group is:

Dr. Stefan Drewes

c/o Vonovia SE

Universitätsstraße 133

44803 Bochum

Email: datenschutz@vonovia.de

We expressly point out that when you use this email address, the content will not be reviewed exclusively by our Data Protection Officer. If you wish to exchange confidential information, we therefore ask that you first contact us directly via this email address without providing a detailed description of the matter.

 

III. Processing of Personal Data

When you contact us via email or by phone, we collect and process the personal data you provide (e.g., name, email address, message) in order to process and respond to your inquiry. The processing is carried out in accordance with Article 6(1)(b) of the GDPR (pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest in responding to your inquiry).

 

2. Business Relationship

Upon the establishment of a business relationship, we store and process the necessary personal data (e.g., name, contact information, contract details) to ensure the execution and fulfillment of the contract. Processing is carried out in accordance with Article 6(1)(b) of the GDPR (performance of a contract) and, where applicable, Article 6(1)(c) of the GDPR (legal obligations).

 

IV. Retention Period

The data collected via email will be deleted after your inquiry has been fully processed, provided that no further business relationship arises, no legal retention obligations exist, or you have given separate consent to the storage of such data.

Data collected in the context of a business relationship will be stored for the duration of that relationship and deleted upon its termination, provided that no legal retention obligations exist.

 

V. Disclosure of Data / Recipients of Your Data

We transfer your personal data to third parties in the context of data processing on our behalf, as well as within the framework of an intra-group process based on the division of labor for the preparation, execution, and, where applicable, fulfillment of contracts within the Vonovia Group (Art. 6(1), sentence 1, lit. b) GDPR). This transfer is based on our legitimate interest in carrying out internal administrative activities efficiently and through a division of labor, in accordance with Art. 6(1), sentence 1, lit. f) of the GDPR.

As part of our processes, we use IT service providers who, among other things, provide us with platforms, databases, or tools for our services (e.g., our website), various contact options, or marketing measures, and who process personal data on our behalf.

The service providers we engage have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly monitored by us. All systems in which your personal data is stored and to which service providers have access are password-protected and accessible only to a specific group of individuals who require the data to process the purposes you have authorized. In this context, for all data transfers to and processing by service providers, we ensure—in accordance with legal provisions—that the data is processed, used, and, if necessary, transferred in the manner agreed upon here.

Furthermore, we transfer your personal data only to the extent that a legal obligation requires such disclosure. The transfer is based on Art. 6(1), Sent. 1, lit. c) of the GDPR.

 

VI. Cookies

 

1. Definitions

Our websites use so-called “cookies.” Cookies are small text files that are transferred from our websites to the hard drive of your computer or mobile device and stored there when you visit our websites. This allows us to record your actions (e.g., which web pages you visit, which posts and topics you view, how long you stay on the website, the number of pages viewed per day, etc.) and your preferred settings (e.g., login, language, and other display settings) during your browsing session or for your next visit to our websites. When you visit our websites again, this information is sent back to the server. Your computer or mobile device is automatically recognized. This offers you the advantage of not having to reconfigure your preferred settings every time you visit our website. We use cookies to statistically analyze usage data regarding our websites in order to improve our offerings, our website, and our advertising—in terms of content, design, and technology—to better meet your needs.

2. Type, Scope, and Purposes

We use various cookies on our websites:

a. Functional cookies enable our websites to function. They are necessary for the basic functions of our websites.

b. The use of tracking cookies allows us, among other things, to determine how many visitors access our websites and how visitors behave on our website—that is, which features they use. Tracking cookies also include analytical cookies, which are used to collect this information and evaluate it for statistical purposes.

c. So-called session cookies are stored only for the duration of your visit to our websites—that is, the current visit to one of our websites or a browser session.

d. Persistent cookies are stored on the hard drive of your computer or mobile device beyond the scope of a single visit to our websites or a browser session. They enable us to recognize you the next time you visit our websites and to make it easier for you to use our websites (e.g., by displaying the real estate listings you saved as favorites during your last visit).

e. Some cookies are set by us and are under our control. Other cookies are used by third-party providers on our websites (third-party cookies). We may not be aware of all third parties that place cookies via our websites. We may also not be aware of all cookies placed by third parties on our websites. We do not monitor the use of these third-party cookies; this excludes analytical cookies, which we use to analyze our websites.

3. Managing and Deleting Cookies and Exercising Your Right to Withdraw Consent

When you visit our websites, a banner appears informing you about the use of cookies on our websites. By clicking the consent button, you agree to the use of cookies on our websites.

You can withdraw your consent at any time by changing your browser settings and disabling cookies. If you wish to withdraw your consent regarding third-party cookies, please contact the provider of the relevant cookie. For more information, please refer to the privacy policies or cookie policies of the respective provider. To do so, please visit the links listed in the table in the appendix to this Cookie Privacy Notice.

Most browsers automatically accept the use of cookies. You can manage the use of cookies through your browser settings. If you do not want cookies to be automatically stored on your computer’s hard drive or on your mobile device, you can change your browser settings accordingly and disable cookies. In your browser settings, you can also choose whether you want to be notified when a website uses cookies. For detailed instructions on how to change your browser settings, please refer to the instructions or help function of the browser you are using.

Please note that you can continue to visit and use our websites even after disabling cookies by changing your browser settings. However, in some cases, disabling cookies may prevent you from fully utilizing the features of our websites.

4. Econda

On this website, we use the web analytics service provided by our service provider, Econda GmbH. This tool uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. We have enabled IP anonymization on this website. This shortens and anonymizes your IP address. On our behalf, our service provider will collect information about your recent visits to our website and how you navigate within it, and will use this information to evaluate your use of the website and to compile reports on website activity on our behalf.

We use the web analytics service to analyze the use of our website and thus better understand how visitors use our website, so that we can make it even more intuitive. We store and process the collected data for a period of 24 months. The legal basis for storing the cookie and further analyzing the collected data is the consent you have provided pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect in our cookie settings.

5. Further information can be found in the Cookiebot.

 

VII. Your Rights

You have the right to obtain information about your personal data processed by us, Art. 15 GDPR.

You may request the rectification of inaccurate data or the completion of incomplete data, Art. 16 GDPR.

You may request the erasure of your personal data, provided there are no legal grounds to the contrary, Article 17 of the GDPR.

You have the right to request the restriction of the processing of your data under certain conditions, Article 18 of the GDPR.

You may request that your data be provided to you in a structured, commonly used, and machine-readable format, or request that it be transferred to another controller, Article 20 of the GDPR.

You have the right to object to the processing of your data, provided that the processing is based on Article 6(1)(e) or (f) of the GDPR, Article 21 of the GDPR.

You may revoke any consent you have given for data processing at any time with future effect, Article 7(3) of the GDPR.

To exercise your rights, please contact us at the address listed above.

VII. Right to File a Complaint

You have the right to file a complaint with a supervisory authority if you believe that the processing of your data violates the GDPR, Article 77 of the GDPR. The competent supervisory authority is:

State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

 

Date of this notice: September 4, 2026