Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

TOGETHER GmbH
Albert-Einstein-Str. 1
95028 Hof
Germany

Telephone: +49 9267 914 2990
Email: info@1-euro-haus.de

2. Data protection officer

Jürgen Klausmann
Albert-Einstein-Str. 1
95028 Hof
Germany

Telephone: +49 9267 914 2990
Email: info@together-gmbh.com

3. Hosting and server log files

Hosting provider

We host this website with Hostinger International Limited, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The provider processes data in connection with the provision and security of web hosting. Where Hostinger processes personal data on our behalf, this is carried out under a data processing agreement pursuant to Article 28 GDPR.

Further information is available in Hostinger's privacy policy.

Server log files

When you access the website, technically necessary information is transmitted to the web server and processed in server log files. This may include in particular:

the IP address of the accessing device,
the date and time of access,
the page or file requested and the amount of data transferred,
the HTTP status code,
the referrer URL, where transmitted by the browser,
the browser type, browser version and operating system.

This processing is necessary to deliver the website, ensure its stability and security and identify attacks or technical errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of this website.

4. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide. This may include your name, contact details, the content of your enquiry and technical information relating to the communication. The information is processed to handle your enquiry and any subsequent questions.

Where the enquiry concerns a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in handling enquiries appropriately pursuant to Article 6(1)(f) GDPR.

No contact form is integrated into this website. Email links merely open the email application configured on your device. Simply clicking a link does not send us a message or the contents of the prepared email.

Please do not send special categories of personal data, payment passwords or full bank or credit-card details by unencrypted email.

5. Ordering the digital guide

The home page contains an email link that opens a prepared order for the digital €1 House Guide. The information is initially prepared only in your own email application. We receive it only when you send the message yourself.

Depending on the information you provide, we process in particular:

your first and last name and, where applicable, company name,
billing address and country,
VAT identification number, if provided,
email address for the invoice and delivery of the PDF,
the requested language version and payment method,
order contents, price, order status and payment status,
declarations concerning the start of performance and the right of withdrawal,
any other information you provide voluntarily in your message.

We process this data to review your order, accept the contract and issue the order confirmation, process payment, prepare the invoice, provide the PDF, communicate with you and handle possible warranty or withdrawal matters. The legal basis is Article 6(1)(b) GDPR. We process accounting, tax and documentary evidence required by law pursuant to Article 6(1)(c) GDPR. Retention for the establishment, exercise or defence of legal claims may also be based on Article 6(1)(f) GDPR.

If you provide a VAT identification number, we may verify it together with the necessary company and country information through the official systems provided for this purpose, in particular the European Commission's VAT Information Exchange System or the competent tax authority. This serves to determine the correct tax treatment of the order.

We cannot process the order without the information required for the contract, invoice and delivery. Additional voluntary information is not required.

6. Payment processing

The website currently contains no embedded payment service. Once we have reviewed and accepted the order, you will receive the payment information by email. You can choose between PayPal and bank transfer.

PayPal

If you choose PayPal, we may send a personal payment request to the email address you provided. The data required for the payment – in particular the email address, recipient, amount, currency, payment reference and transaction data – is transmitted to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal processes payment data under its own responsibility. The legal basis for our transmission is Article 6(1)(b) GDPR.

Further information is available in PayPal's privacy statement.

Bank transfer

If you pay by bank transfer, we process the information transmitted with the payment, in particular the account holder's name, the IBAN shown in the transaction details, the amount, booking date and payment reference. The banks involved also act within the scope of their respective statutory and contractual duties. The legal basis is Article 6(1)(b) GDPR; payment and accounting records required by law are processed pursuant to Article 6(1)(c) GDPR.

7. Cookies and consent management

Cookies and similar technologies can store information on your device or access information already stored there. Unless this is strictly necessary for technical reasons, it takes place only with your prior consent pursuant to Section 25(1) TDDDG. Where personal data is processed in this context, the legal basis is Article 6(1)(a) GDPR.

Necessary preference cookie

Once you have made a selection, our consent manager stores the following technically necessary cookie:

Name: one_euro_haus_consent_v1
Provider: 1-euro-haus.de
Purpose: Storing and documenting your choice regarding optional advertising
Information stored: Consent status, time of decision and version of the consent request
Retention period: 180 days, unless you delete it earlier through your browser

The cookie is set for the path / with SameSite=Lax and, when HTTPS is used, additionally with Secure. The cookie itself does not transmit data to Google. It is required so that your selection can be applied on other pages and documented. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(c) and (f) GDPR.

Changing or withdrawing your selection

You can change your decision at any time using the “Privacy settings” button at the bottom of the website. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal. If AdSense has already been loaded, the page is reloaded after advertising is disabled so that no further AdSense requests are made.

We currently use neither Google Analytics nor any other audience measurement tools. If an analytics or additional marketing service is added later, it will be activated only after legal and technical review, and this policy will be updated accordingly.

8. Google AdSense

We intend to integrate Google AdSense to finance our information service. The processing described below takes place only once AdSense has been fully configured and is actually loaded after you have given your consent. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense is used to select, deliver and measure advertisements and to detect fraud and misuse. When AdSense is active, the following data in particular may be processed:

IP address and approximate location,
page viewed, referrer, date and time,
device, browser and operating-system information,
advertisement impressions, viewability and interactions,
consent and privacy signals,
cookie, device or other advertising identifiers.

Depending on your selection, data may also be used to personalise advertising and to create or use interest profiles. AdSense is loaded, and information is stored on or accessed from your device, only after you have given your consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

If you do not consent, Google AdSense is not loaded. You can still use the editorial content, property addresses and publicly listed contact persons on our website.

Certified consent management platform

For the actual use of AdSense in the European Economic Area, the United Kingdom and Switzerland, a Google-certified Consent Management Platform (CMP) must also be used. It displays the participating providers, purposes, legal bases and available choices. You can refuse consent, give consent and change your selection later. AdSense remains disabled until the certified CMP has been fully configured.

Further information from Google

Transfers to third countries

When Google services are used, processing may also take place outside the European Economic Area, particularly in the United States. Depending on the relevant processing operation, Google identifies adequacy decisions, including the EU–US Data Privacy Framework, and standard contractual clauses as possible transfer mechanisms. Details are available in Google's information about the legal frameworks for data transfers.

9. External links, OpenStreetMap and social media

OpenStreetMap

Our property pages contain links to locations on OpenStreetMap. No map is automatically embedded or loaded. Only when you click the link do you leave our website and your browser establishes a connection to the OpenStreetMap service. In particular, your IP address, browser information, the time and the page previously visited may then be transmitted to the operator.

The OpenStreetMap service is operated by the OpenStreetMap Foundation. Information about processing is available in its privacy policy.

Facebook and Instagram

The footer contains links to our Facebook and Instagram profiles. No social-media plugins, Meta Pixel or automatically loaded posts from these networks are embedded on our website. The external page opens only when you click a social-media link. The provider then processes connection and device data and may associate the visit with an existing user account where applicable.

Facebook and Instagram are provided in the European Economic Area by Meta Platforms Ireland Limited. Further information is available in Meta's Privacy Policy.

10. Local fonts, images and scripts

The fonts used to display the website are system fonts installed on the relevant device. No Google Fonts or other font files are loaded from external servers. Our stylesheets, JavaScript files and images are generally provided from our own domain. These design elements alone do not therefore establish a connection to an external provider.

Non-binding AI visualisations shown on property pages are delivered as locally stored image files. Simply viewing these images does not establish a connection to the service originally used to create them.

11. Recipients and transfers to third countries

Personal data is received only by the internal departments and external recipients that require it for the purposes stated. These may include in particular:

hosting, email and technical service providers,
PayPal and participating financial institutions for payment processing,
tax advisers, accounting providers and tax authorities where required,
official bodies used to verify VAT identification numbers,
Google and the advertising technology providers named in the certified CMP after you have given consent,
legal advisers, courts or public authorities where this is legally required.

Data is transferred outside the European Economic Area only where this is envisaged for the relevant service and the statutory requirements are met. Depending on the recipient, an adequacy decision, appropriate safeguards such as EU standard contractual clauses or another legal basis may apply. Further details are provided under the relevant service.

12. Retention periods

We store personal data only for as long as required for the relevant purpose or for as long as statutory retention obligations apply. The data is then deleted or, where deletion is not yet technically or legally possible, its processing is restricted.

The necessary preference cookie is retained for 180 days.
Contact enquiries are generally deleted once they have been fully handled and there are no statutory or legitimate grounds for further retention.
Server log data is deleted once it is no longer required for operation and security; a security incident may justify longer retention.
Contract, invoice, payment and accounting records are generally retained for six, eight or ten years in accordance with commercial and tax-law requirements, depending on the type and content of the document.
Evidence relating to contract formation, delivery, consent and withdrawal may be retained until the relevant limitation periods have expired.

Data processed independently by Google, PayPal, banks or other providers is subject to their respective deletion and retention rules.

13. Your data protection rights

Where the statutory requirements are met, you have the following rights in particular:

access to your personal data being processed pursuant to Article 15 GDPR,
rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR,
erasure of your data pursuant to Article 17 GDPR,
restriction of processing pursuant to Article 18 GDPR,
data portability pursuant to Article 20 GDPR,
withdrawal of consent with effect for the future pursuant to Article 7(3) GDPR,
objection to certain processing pursuant to Article 21 GDPR.

To exercise your rights, simply send a message to info@1-euro-haus.de or contact the data protection officer named above. If there are doubts about your identity, we may request additional information for identification purposes.

Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. In particular, you may contact the supervisory authority at your habitual residence, your place of work or the place of the alleged infringement. The following authority is generally responsible for us:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Telephone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

14. Security, provision of data and automated decision-making

We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. This website is transmitted using HTTPS encryption. Nevertheless, complete protection during data transmission over the internet cannot be guaranteed.

You do not need to provide us actively with any data merely to visit the website for information. Technical connection data is, however, required so that the web server can deliver the website. An order requires the contractual, billing and contact information described as necessary above. Without it, we cannot process the contract or provide the guide.

We do not make decisions based solely on automated processing that have legal or similarly significant effects within the meaning of Article 22 GDPR. After you have given consent, Google may use information and profiles to select advertisements automatically; this does not constitute such a decision by TOGETHER GmbH.

15. Changes to this privacy policy

We update this privacy policy when the website, services used, order or payment procedures, or legal requirements change. The version published on this page at the relevant time is authoritative.

Contents