Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data here refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Goldschild Immobilien GmbH, Behrstraße 90, 73240 Wendlingen, Germany, Tel.: 01736634866, Email: marketing@goldschild-immobilien.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 During the purely informational use of our website, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referral from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to review the server log files retrospectively should concrete indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the padlock icon in your browser address bar.

3) Hosting & Content Delivery Network

To host our website and display the site content, we use a provider that delivers its services either directly or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers, unless other data recipients are specified below for particular data processing operations.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your end device. Some of these cookies are automatically deleted after you close the browser (so-called "session cookies"), while others remain on your device longer and allow site preferences to be saved (so-called "persistent cookies"). In the latter case, you can find the retention period in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies deployed by us, this processing is carried out pursuant to Art. 6 (1) (b) GDPR either for the performance of the contract, pursuant to Art. 6 (1) (a) GDPR in the event of granted consent, or pursuant to Art. 6 (1) (f) GDPR to safeguard our legitimate interests in optimal website functionality and a customer-friendly, effective site visit experience.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or you can exclude the acceptance of cookies for certain cases or generally.

Please note that refusing cookies may restrict the functionality of our website.

5) Contacting Us

5.1 WhatsApp Business

You have the option of contacting us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. For this purpose, we use the "business version" of WhatsApp.

If you contact us via WhatsApp regarding a specific transaction (e.g., an order placed), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name in accordance with Art. 6 (1) (b) GDPR to process and respond to your inquiry. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to assign your inquiry to a specific case.

If you use our WhatsApp contact for general inquiries (such as about our range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will only ever be used to respond to your request via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book exclusively stores the WhatsApp contact details of users who have actually contacted us via WhatsApp.

This ensures that every individual whose WhatsApp contact details are stored in our address book already consented, when first using the app on their device by accepting the WhatsApp terms of service, to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) (a) GDPR. The transmission of data belonging to users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore precluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your respective rights and configuration options for protecting your privacy, please refer to WhatsApp's privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits unauthorized disclosure to third parties.

As part of the processing operations mentioned above, data transfers to servers of Meta Platforms Inc. in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

5.2 Personal data is collected when you contact us (e.g., via contact form or email). Which data is collected when using a contact form can be seen from the respective contact form itself. This data is stored and used solely for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your request has been fully processed. This is the case when it can be inferred from the circumstances that the relevant matter has been definitively clarified, provided that no statutory retention obligations prevent deletion.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking a corresponding link.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP), as well as the date and time of registration, in order to trace any potential misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used solely for advertising purposes via the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named at the beginning. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further use your email address for advertising purposes beyond this, which is permitted by law and about which we inform you in this policy.

Following an unsubscription from the newsletter, your email address may be stored in a suppression list and cross-checked against recipient lists of future newsletters to technically prevent the renewed sending of newsletters requiring consent. This processing is carried out based on our legitimate interest in avoiding unsolicited promotional mailings pursuant to Art. 6(1)(f) GDPR.

6.2 Dispatch of the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services to those already purchased from our range by email. In accordance with Section 7(3) UWG (German Act Against Unfair Competition), we do not need to obtain separate consent from you for this. To this extent, data processing takes place solely on the basis of our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, no email dispatch will take place on our part.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will cease immediately.

7) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text files on your terminal device and collect certain information. This information also includes your IP address, which is, however, shortened by Google by the last digits to exclude any direct personal identification.

The information is transmitted to Google servers and processed further there. Transmissions to Google LLC based in the USA are also possible in this context.

Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website usage and internet usage. The shortened IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. The data collected within the scope of using Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the terminal device used, only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Additional legal information regarding Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special feature "demographic characteristics" and can use it to create statistics that provide statements about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the "Personalized advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en

User IDs
As an extension to Google Analytics 4, the "User IDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, set up an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

8) Retargeting/ Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the service "Meta Pixel" provided by: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta")

If a user clicks on an advertisement placed by us on Facebook and/or Instagram, a parameter is added to the URL of our linked page using "Meta Pixel". This URL parameter is then written into the user's browser after redirection via a cookie set by our linked page itself.

On the one hand, this enables Meta to determine the visitors to our online offering as a target group for the presentation of advertisements (so-called "ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Meta (so-called "Custom Audiences").

On the other hand, "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they take there (so-called "conversion tracking").

In addition to "Meta Pixel", which transmits data via your browser to Meta, the "Meta Conversions API" may also be deployed. When used, information about specific actions on our website (so-called "events", e.g., page views, adding products to the shopping cart, initiating the checkout process, or completing an order) is transmitted directly from our server to Meta's servers via an interface, rather than via your browser. This serves to make the performance measurement of our advertisements more reliable, for example when browser-based transmission is not possible or only incomplete due to technical limitations. Within the scope of the "Meta Conversions API", the following data in particular may be transmitted to Meta: type and timestamp of the event, URL visited, information on ordered products and their value, your IP address, information on your browser and device (user agent), and the identifiers stored in Meta cookies. To prevent duplicate tracking of the same information by "Meta Pixel" and the "Meta Conversions API" in these cases, an identifier is assigned to each event, which Meta uses to match and merge the transmissions.

The data collected is anonymous to us, meaning it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Meta, making a connection to the respective user profile possible, and Meta can use the data for its own promotional purposes.

All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For the collection of data via the "Meta Pixel" and its transmission to Meta, we are jointly responsible with Meta (Art. 26 GDPR). For this purpose, we have concluded a joint controllership agreement with Meta, the essential content of which you can access under https://www.facebook.com/legal/controller_addendum .

For evaluating the data, assigning it to predefined events, and preparing measurement and analysis reports, Meta acts as our processor in accordance with Art. 28 GDPR and is committed to protecting the data of our website visitors and clients pursuant to the data processing agreement accessible under https://facebook.com/legal/terms/dataprocessing .

The information generated by Meta is generally transmitted to a Meta server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

9) Website Functionalities

9.1 Integration of the Instagram feed via Elfsight

On our website, we use the services of Elfsight S.L., C. de la Constitució 17, AD700 Escaldes-Engordany, Andorra, to display preview images of our Instagram profile. In doing so, cookies are used, which are small text files stored locally in the cache of your internet browser.

Through the widget, a connection to the servers of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland ("Instagram") is established when visitors browse our website. As a result, Instagram receives certain browser information, including your IP address. In individual cases, transfer to servers of Meta Platforms Inc. based in the USA is also possible.

9.2 Google Maps

This website uses an online map service provided by: Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive (land) maps in order to visualize geographic information. Using this service displays our location to you and makes it easier to plan your route.

As soon as you access subpages that embed the Google Maps map, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether an account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

Collection, storage, and evaluation take place pursuant to Art. 6(1)(f) GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. In this case, Google Maps and thus the map display on this website cannot be used.

Where legally required, we have obtained your consent for the processing of your data described above pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the procedure for lodging an objection described above.

Further information on data privacy at Google can be found here: https://business.safety.google/intl/en/privacy/

9.3 Weglot

This website uses the translation service of the following provider via an API integration: Weglot SAS, 7 cité Paradis, 75010 Paris, France

In order for the translation of your chosen national language to be displayed automatically, the browser you use establishes a connection to the provider's servers. In doing so, the provider uses so-called "cookies", which are text files placed on your computer to help analyze how you use the website. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transmitted to a provider server and stored there.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

9.4 Job applications by email

On our website, we advertise current vacancies in a dedicated section, for which interested parties may apply by email to the provided contact address.

Applicants must provide all personal data required for an informed assessment, including general information such as name, address, and contact details, as well as performance-related certificates and, where applicable, health-related information. Details regarding the application can be found in the job advertisement.

Upon receipt of the application by email, the data will be stored and evaluated solely for the purpose of processing the application. For any inquiries, we use either the applicant's email address or telephone number. The processing is based on Art. 6(1)(b) GDPR (or Section 26(1) BDSG), under which conducting the application process is considered the initiation of an employment contract.

To the extent that special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information regarding severe disability status) are requested from applicants during the application process, the processing is carried out pursuant to Art. 9(2)(b) GDPR so that we can exercise the rights and perform the duties arising from employment law and social security and social protection law.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9(2)(h) GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant's working capacity, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.

If the applicant is not selected or withdraws their application prematurely, their transmitted data and all electronic correspondence, including the application email, will be deleted no later than 6 months after corresponding notification. This retention period is based on our legitimate interest in answering any follow-up questions regarding the application and, where applicable, fulfilling our burden of proof under equal treatment regulations for applicants.

In the event of a successful application, the data provided will be processed pursuant to Art. 6(1)(b) GDPR (in the case of processing in Germany in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.

9.5 Online applications via a form

On our website, we advertise current vacancies in a dedicated section, for which interested parties can apply using an application form.

Upon submitting the form, applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us, and evaluated solely for the purpose of processing the application. The processing is based on Art. 6(1)(b) GDPR (or Section 26(1) BDSG), under which conducting the application process is considered the initiation of an employment contract.

If the applicant is not selected or withdraws their application prematurely, their data transmitted via the form and all electronic correspondence, including the application email, will be deleted no later than 6 months after corresponding notification. This retention period is based on our legitimate interest in answering any follow-up questions regarding the application and, where applicable, fulfilling our burden of proof under equal treatment regulations for applicants.

10) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when accessing the site in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted via checkboxes. Through the use of this tool, all cookies/services requiring consent are only loaded if the respective user grants corresponding consent by ticking the box. This ensures that such cookies are only placed on the user's end device once consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. As a general rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in a legally compliant design of our website.

Another legal basis for the processing is Art. 6(1)(c) GDPR. As the data controller, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user consent.

Where required, we have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and configuration options of the Cookie Consent Tool can be found directly within the corresponding user interface on our website.

11) Rights of the Data Subject

11.1 Applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller regarding the processing of your personal data, with reference made to the specified legal basis for the respective requirements for exercise:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw granted consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF, WITHIN THE SCOPE OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of Personal Data Storage

The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and—where applicable—additionally on the respective statutory retention period (e.g., commercial and tax retention periods).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you revoke your consent.

If statutory retention periods exist for data processed within the framework of legal or quasi-legal obligations based on Art. 6(1)(b) GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or we have no ongoing legitimate interest in further storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise indicated in the specific processing situations outlined in this privacy policy, stored personal data is deleted once it is no longer required for the purposes for which it was collected or otherwise processed.