Privacy Policy

1. Controller

Andreas Hinderberger (Mietkaufnest)
Bahnhofstraße 63, 87477 Sulzberg, Germany
Email: info@mietkaufnest.de

No data protection officer has been appointed, as the legal requirements for doing so are not met.

2. The key points

• We do not use analytics or advertising tools and do not load content from third parties such as font CDNs.
• We only use cookies where they are technically necessary, for example for logging in.
• We never see your ID document. A verification service carries out the identity check; we only receive the result.
• Land register extracts are only seen by you, your authorised agency if any, and our review team.

3. Hosting and server log files

The website is hosted by [hosting provider, registered office, server location] . When you visit, your IP address, time, page requested, browser type and referrer are stored in log files to keep the service running and fend off attacks (Art. 6 (1)(f) GDPR). We delete log files after 14 days unless they are needed to investigate an incident. We have a data processing agreement with the host.

4. Cookies and local storage

We set a session cookie and a cookie that protects forms against misuse (CSRF). Both are strictly necessary for operation (Section 25 (2) no. 2 TDDDG) and expire at the end of the session or after two hours at the latest. The checklist in the guide stores your ticks only in your browser's storage; this data never reaches us.

5. Account

For an account we process your first and last name, email address, password (only as a hash) and, optionally, your phone number in order to provide the platform (Art. 6 (1)(b) GDPR). We store the data until you delete your account, unless statutory retention obligations apply.

6. Identity verification

Before submitting a listing and before sending enquiries, you verify your identity via Stripe Identity, a service of Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. This involves processing your ID document and a matching photo; biometric data only with your explicit consent, which you give in the verification flow (Art. 9 (2)(a) GDPR). Stripe may also process data in the USA; Stripe is certified under the EU-US Data Privacy Framework. We ourselves only store status, verification level, time and the verified name in order to prevent fraud and spam (Art. 6 (1)(b) and (f) GDPR).

7. Listings and proof of ownership

We publish the content of listings on the platform (Art. 6 (1)(b) GDPR). We only show the exact address if you choose to. We process the land register extract to check that you are the owner or act on the owner's behalf (Art. 6 (1)(b) and (f) GDPR). A review system we operate automatically compares the registered name with the verified identity; the decision is always made by a person. Location of this system: [state the server location of Paperclip; for processing outside the EU, safeguards under Art. 44 et seq. GDPR]. We delete land register extracts [set a period, e.g. six months after the listing ends].

8. Enquiries to providers

When you send an enquiry, we pass your name, email address, message and, optionally, your phone number to the provider, for agency listings to the responsible agency with a copy to the owner (Art. 6 (1)(b) GDPR). The provider is responsible for how they use the data afterwards.

9. Saved listings and searches

We store saved listings and saved searches in your account until you remove them (Art. 6 (1)(b) GDPR).

10. Reports of illegal content

For reports under the Digital Services Act, we process your information, your name and your email address in order to review the report and tell you our decision (Art. 6 (1)(c) GDPR in conjunction with Art. 16 DSA). We keep reports and decisions for documentation purposes [set a period, e.g. three years]. We do not disclose your identity to the reported provider unless this is strictly necessary for the review.

11. Payments and invoices

We process payments via Stripe Payments Europe, Ltd. (Art. 6 (1)(b) GDPR). We do not receive card details. We keep invoices and accounting records for eight or ten years under Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code (Art. 6 (1)(c) GDPR).

12. Sending emails

We send system messages such as confirmations and notifications via [email service, registered office, data processing agreement] (Art. 6 (1)(b) GDPR). We do not send marketing emails.

13. Your rights

You have the right to

• access your data (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

An email to info@mietkaufnest.de is all it takes.

14. Complaints to the supervisory authority

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

15. No automated decisions

Decisions on approving or blocking listings and accounts are always made by a person. No profiling takes place.