Privacy policy

General Information

As the operator of this website and as a company, we come into contact with your personal data. This refers to any data that provides information about you and by which you can be identified. In this privacy policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

The party responsible for data processing on this website and in our company is:

Full House Real Estate GmbH

Simpli – Markgrafenstr. 2

04109 Leipzig

Germany

Phone: +49 151 42064437

Email: service@fullhouse-realestate.de

General Notes

SSL or TLS Encryption

Whenever you enter data on websites, place online orders, or send emails via the internet, you must always consider that unauthorized third parties may access your data. Complete protection against such access is not possible. However, we do our utmost to protect your data and close any security gaps to the best of our ability.

A key security mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon next to the website address in your browser and the fact that our URL begins with “https://” rather than “http://”.

Encrypted Payment Transactions

Payment data—such as account or credit card numbers—require special protection. Therefore, all payments made using standard payment methods are encrypted via SSL or TLS.

How long do we store your data?

At certain points in this privacy policy, we inform you about how long we or companies processing data on our behalf store your data. Where such information is missing, we store your data until the purpose of the data processing ceases, you object to the data processing, or you withdraw your consent.

However, in the case of an objection or withdrawal of consent, we may still process your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (only for objections not related to direct marketing).
Data processing is required for the establishment, exercise, or defense of legal claims (not applicable to objections against direct marketing).
We are legally obligated to retain your data.

In such cases, we will delete your data as soon as the relevant conditions cease to apply.

Data Transfers to the USA

We use tools on our website from companies that may transfer your data to the USA and store or process it there. The European Commission has adopted an adequacy decision for the EU-U.S. Data Privacy Framework. This decision confirms that the USA ensures an adequate level of data protection for EU personal data transferred to U.S. companies. This is based on new guarantees and measures introduced by the U.S. government to comply with data protection standards. The decision includes restrictions and safeguards regarding access by U.S. intelligence services, such as limiting access to what is necessary and proportionate, enhancing oversight mechanisms, and establishing an independent redress mechanism for EU citizens.

Thus, European companies can transfer data to certified U.S. companies without needing additional safeguards. You can view a list of certified companies here:

👉 https://www.dataprivacyframework.gov/s/participant-search

Changes to the adequacy decision by the European Commission cannot be ruled out.

Your Rights

Right to Object to Data Processing

IF THIS PRIVACY POLICY STATES THAT WE PROCESS YOUR DATA BASED ON LEGITIMATE INTERESTS UNDER ART. 6(1)(f) GDPR, YOU HAVE THE RIGHT TO OBJECT UNDER ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THIS LEGAL BASIS. YOU MUST PROVIDE REASONS ARISING FROM YOUR PARTICULAR SITUATION. HOWEVER, NO JUSTIFICATION IS REQUIRED IF YOU OBJECT TO DIRECT MARKETING.

IF YOU OBJECT, WE MUST CEASE PROCESSING YOUR DATA UNLESS:

WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS; OR
PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

THESE EXCEPTIONS DO NOT APPLY TO OBJECTIONS AGAINST DIRECT MARKETING OR RELATED PROFILING.

Additional Rights

Right to Withdraw Consent: You may withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).
Right to Lodge a Complaint: You have the right to file a complaint with a supervisory authority under Art. 77 GDPR.
Right to Data Portability: You can request that we provide data processed based on your consent or a contract in a commonly used machine-readable format.
Right to Access, Rectification, or Erasure: You may request access to your stored data (Art. 15 GDPR), rectification (Art. 16 GDPR), or deletion (Art. 17 GDPR).
Right to Restriction of Processing: In certain cases under Art. 18 GDPR, you may request limited processing of your data.

Hosting and CDN

Our website is hosted by:

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

Germany

A Data Processing Agreement (DPA) has been signed.

The host stores all data necessary to operate this website, including IP addresses, page views, contact requests, and metadata. Processing is based on Art. 6(1)(b) and Art. 6(1)(f) GDPR.

Data Collection on This Website

Cookies:

We use technically necessary and functional cookies (Art. 6(1)(f) GDPR), and all other cookies only with your consent (Art. 6(1)(a) GDPR).

Consent Management (Legal Cockpit):

Provider: Legalcore AG, Reinhardtstr. 7, 10117 Berlin

DPA in place.

More info: https://cockpit.legal/datenschutz/

Legal basis: Art. 6(1)(c) GDPR.

Server Log Files:

Collected data: IP address (anonymized), browser type, OS, referrer, etc.

Purpose: Error analysis and optimization

Legal basis: Art. 6(1)(f) GDPR

Contact Form:

Data submitted via form is stored to process your inquiry.

Legal basis: Art. 6(1)(b) or (f) GDPR, or (a) GDPR if consent was given.

Analytics and Advertising

Google Analytics:

Provider: Google Ireland Ltd.

Data may be transferred to the U.S. under the EU-U.S. Data Privacy Framework.

IP anonymization is enabled.

Retention period: 14 months

Legal basis: Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR (consent)

Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de

Google Web Fonts (Local Hosting):

No connection to Google servers.

More info:

https://developers.google.com/fonts/faq

https://policies.google.com/privacy?hl=de

Own Services

Handling of Applicant Data:

We collect and process applicant data to assess job applications (Art. 6(1)(b) GDPR, §26 BDSG-new, or Art. 6(1)(f) GDPR for retention).

Retention: Up to 6 months post-application unless legal obligations require otherwise.

Data Processing on Social Media

We maintain publicly accessible profiles on social networks.

Shared Responsibility:

When you visit our profiles, we are jointly responsible with the platform provider for data processing.

Your data may be processed based on Art. 6(1)(f) GDPR for business presence.

Facebook & Instagram (Meta Platforms Ireland Ltd.):

Data may be transferred to the U.S.

Ad settings: https://www.facebook.com/settings?tab=ads

Instagram settings: https://www.instagram.com/accounts/privacy_and_security/