Privacy policy

This is currently the case

DDORF WOHNEN provides free information, calculations and work templates. Google Analytics, Google Ads and Meta Pixel are not loaded in this operation. No advertising target groups are set up and no individual usage histories are created.

Public provider profiles, property listings, provider activation and the forwarding of property enquiries are deactivated. Using our tools does not send an enquiry to any estate agency. Contact by email and reports about content remain possible.

Optional saved working drafts

For rental adverts, property descriptions, checklists and handover templates, you can choose to save the draft in your browser tab. Only after this click are your entries and, where applicable, the current step saved in sessionStorage under ddorf:draft. Photos are not saved. This tool does not send the draft to our server; the saved content is not used for advertising or usage analytics.

You can also choose to save your next step, whether the property is let, and your preparation scenario in this tab. These choices are saved under ddorf:draft:purpose only after you click “Save draft in this tab”. They are not sent to our server, and the general click counter does not include them.

A previously saved draft is restored when you reopen the tool in the same tab session. The remove button deletes only the saved copy, not your current entries. Browsers may restore tab sessions, so do not rely solely on closing the tab. Explicitly remove the saved draft on shared devices. The purpose is to save your work at your request (§ 25(2) no. 2 TDDDG; Article 6(1)(b) GDPR).

Business information: further details

Information about the processing of business details, including information under Article 14 GDPR, is available in the privacy notice for listing providers. In research mode, business profiles and listing features remain in closed testing.

1. Data controller

Email: kontakt@ddorfwohnen.de. We have not appointed a data protection officer.

Technical error diagnosis

For operational reliability, we record technical errors in the browser, failed image and API requests, and server and processing errors. The diagnostic data include the time, the affected page or endpoint type without search parameters, error type, status, duration and technical code locations. A random request identifier is used only to match an error; no persistent visitor ID is created. Form content, cookies and login credentials are not collected for diagnostics. Before storage, error messages are truncated and stripped of recognised login credentials, contact details and address parameters. The diagnostic data are not used for advertising or to create usage profiles. Where personal data are processed, the legal basis is our legitimate interest in a secure, functioning service (Art. 6(1)(f) GDPR).

The technical records are access-protected on our server in Germany. Short error messages with service, type of error and request identifier are sent to the operator via Telegram; no form content or complete error texts are transferred there. Telegram may process technical connection data outside the EU; Information from the provider. After 30 days, the continued need for diagnostic records will be assessed; required safety and incident evidence can be retained for longer. The rights of those affected and the possibility of objection remain.

2. Hosting and technically necessary processing

The website and its application databases run on an IONOS SE server in Germany. IONOS SE is located at Elgendorfer Str. 57, 56410 Montabaur. Processing by IONOS is governed by the agreed data-processing terms under Article 28 GDPR.

When you access the page, the IP address, requested address, date and time as well as browser information are collected. Retrieval and error logs are used to ensure safe operation. Personal access and preview tokens are masked in the API access logs. The legal basis is Art. 6 paragraph 1 lit. f DSGVO.

To protect against misuse, time-limited, IP-based request counters are kept in memory. Depending on the endpoint, the time windows are up to one hour. Expired entries are cleared with subsequent requests; a process restart discards the memory. These counters are not included in the research statistics.

3. Technical request counts and voluntary surveys

We also count selected tool actions, calculation service responses and internal page transitions in daily aggregates. These counters contain only fixed event names, public page categories and language, or tool, city and response status. They do not store inputs, addresses or visitor identifiers and do not create individual usage histories. Test data is marked separately.

We count HTML requests in daily aggregates according to German local time. The counters contain public pages or summarized categories, rough origin categories and an unverified bot category. They do not store IP addresses, complete user agents, cookies, search parameters, visitor IDs or individual access times. Retrievals cannot be equated with clearly counted people.

Voluntary surveys store answer counts by question, choice and calendar day, without contact details or a permanent visitor identifier. Starts and completions of the valuation calculator are also counted by day; inputs and result values are not included in these counters. No personal click paths are created. Technical connection data is not linked to answer counts to form visitor profiles.

The purpose is to monitor operations and plan useful information services. Where personal data is received, Article 6(1)(f) GDPR provides the legal basis. Telegram reports contain only aggregated metrics; no names, contact details, property addresses, form texts or visitor identifiers are sent for this purpose. Provider information: Telegram-Datenschutz. Technical connection data can be processed outside the EU. The anonymous counters are not transmitted to Google or Meta.

4. Valuation calculator and address search

Apartment calculation results are stored on our server with the city, postcode where provided, property characteristics and model version. New entries contain neither street nor house number; the resolved address is also excluded. These details are not linked to a user account, but their combination may allow a property to be inferred.

Your selected city is remembered for navigation in this tab under ddorf:preferred-city (sessionStorage). Only the city identifier is stored, with no address or visitor identifier. Closing the tab clears this storage. Pages about a specific city continue to use their own city.

A list of recent results may be stored in your browser under ddorf:recent (localStorage). The apartment calculator does this only after you click the save button, without the street or house number. The rent-index calculator remembers its latest result automatically. The list is visible on the home page; “Delete list” removes it from this browser. Older saved entries may contain addresses, which are no longer displayed or linked in this list.

For the requested address search and DDORF estimate, our server forwards your address and property details to our own valuation service WertPilot, operated by the person responsible above. Your IP address will not be passed on. The entries are not linked to you personally and are used for the calculation; the legal basis is Art. 6 paragraph 1 lit. b DSGVO for the requested service.

The apartment calculator retains your inputs and results in sessionStorage so you can return to earlier steps; closing the tab clears this storage. Section 25(2), no. 2 TDDDG applies. The house calculator keeps your inputs only in the open view and creates no new server-side valuation history. An estimate requires no account, email address or phone number. It does not replace a formal market-value appraisal; no automated decision with legal effect under Article 22 GDPR is made.

5. Local templates and your files

Property descriptions, checklists, handover templates and rental-listing drafts are edited in your browser. Your texts, meter readings and local photos are not sent to our server for these tools. The views do not save your draft automatically; use the available copy, download or print function before closing.

In the rental-listing draft, selected photos appear only as a local preview. JSON and text files contain no photos. A draft file you explicitly open is read locally; downloads and PDF output occur at your request. You decide whether to share these files later. This does not publish anything, create an electronic signature or send anything to providers.

6. Maps, external links and access storage

Fonts and symbolic illustrations are on our server. The land benchmark map will only load tiles from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom after you click the load button. This involves IP address and technical connection data. The legal basis is your consent by clicking (Art. 6 para. 1 lit. a DSGVO); you can revoke this for future access by closing the map view. Information: OpenStreetMap-Datenschutz. There is an adequacy decision from the EU Commission for the United Kingdom.

If you follow an external link, their data protection information applies on the target page. A link is not an automatic transmission of your draft or valuation result.

Technically necessary Secure/HttpOnly cookies are used only for explicitly requested protected access: ddorf_owner for at most eight hours, ddorf_preview for at most 30 days, and ddorf_partner for at most 30 days or until access expires earlier. They are not used for advertising. The legal bases are section 25(2), no. 2 TDDDG and Article 6(1)(b) or (f) GDPR, as applicable. Public visitors need no such access.

7. Email and content reports

If you email us, we process your address and message to handle your enquiry (Article 6(1)(b) or (f) GDPR, as applicable). IONOS operates the mailbox in Germany. Completed correspondence is deleted unless retention is required or there is a specific continuing need.

For a content report, we store the reported URL, category, reasons, any contact details you voluntarily provide, and the processing and delivery status so that we can review and respond. The legal basis is Article 6(1)(c) GDPR where legal duties apply, or Article 6(1)(f) GDPR for investigating possible rights infringements. Message content is not sent to Telegram or advertising networks. After 90 days, we manually review whether retention is still necessary; legal duties or specific disputes may require longer retention.

8. Previously saved data and operational changes

Disabling a feature does not automatically delete previously stored data. Where such data exists, access restrictions, data-subject rights and retention reviews remain in place. For previous enquiries, a review is scheduled after 12 months, and event data after 14 months, and consent records no later than after 3 years. Specific retention obligations or legal disputes are taken into account separately.

Activation of advertising, provider offers or inquiries will be checked separately and this declaration will be adjusted beforehand. For processing that requires consent, a corresponding selection is offered beforehand. Participation in a survey does not constitute consent to advertising or contact sharing.

9. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, data portability and withdrawal of consent (Articles 15–20 and Article 7(3)). You may object to processing based on legitimate interests for reasons relating to your particular situation (Article 21). Contact kontakt@ddorfwohnen.de. Anonymous counters cannot be assigned to a specific person.

You can complain to a data protection supervisory authority (Article 77), particularly at your place of residence. Responsible for us: Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, www.lda.bayern.de.