Privacy notice

Version 2026-10-04 · Updated 2026-10-04

Privacy notice

Version 2026-10-04 · Updated 2026-10-04

Controller

Denis Panic is responsible for Immovaro account, contact and operational data. The address and contact are below. Third-party data you store within your own responsibility is also subject to the roles and duties in the AVV (data processing agreement).

Account and sign-in

We process your verified email, display name, identity-provider identifier and internal account and portfolio assignments. Passwords and recovery are handled by the separate Immovaro Keycloak identity service. Processing to provide agreed use relies on GDPR Article 6(1)(b); necessary security measures also serve the legitimate interest in secure operation under Article 6(1)(f).

Property and financial data

Property addresses, values, loans, rental data, expenses, profiles, Deals and scenarios you enter are processed to store, display and calculate your analyses. Your own contract data is processed under GDPR Article 6(1)(b). Server access is restricted to your account or owned portfolio.

Document function and third-party data

Document uploads are currently disabled. No external document storage is used for this function. Your structured rental and contract records may already contain third-party personal data; the roles and duties in the AVV apply to those records. Store only data you may lawfully process and avoid information unnecessary for your analysis. Before document uploads are activated, provider details, processing scope and the relevant information will be updated.

Cookies and browser storage

Storage supports requested sign-in and security, your explicitly selected language and calculator transfer you initiate. Cookie information lists purposes and known durations. Strictly necessary access is covered by section 25(2) TDDDG (German end-device privacy law). Subsequent processing of personal data also requires its respective GDPR legal basis.

Voluntary usage analysis

Only with separate consent under GDPR Article 6(1)(a) do we record successful property creation and first Deal analysis with your account and the time. Consent is voluntary and can be withdrawn in privacy settings at any time. Withdrawal stops future collection and removes associated optional usage events and activity summaries. Earlier processing remains lawful to the extent it was lawful when performed.

Feedback and legal requests

When you submit feedback, we store category, message, account association, time, contact choice and notification status. The message is emailed to the product mailbox for handling. Contract requests serve contract performance; other requests serve our legitimate interest in responding. Contract withdrawal is recorded with declaration, contact and receipt time, and acknowledged by email. Legally required records rely on GDPR Article 6(1)(c).

Recipients and service providers

Contabo GmbH, Welfenstraße 22, 81541 Munich, provides the VPS in Frankfurt am Main, Germany, for the application, database and self-hosted Keycloak identity service. STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, provides domain/DNS and email services. Email is used for enquiries, contract confirmations and receipt acknowledgements. Authorised operators also have access where needed for operations, security or handling your request. A provider’s registered address alone does not identify the booked server location. Transfers to third countries must have a lawful basis under GDPR Chapter V; information about applicable safeguards and a copy can be requested through kontakt@immovaro.de. Portfolio content is not shared for advertising.

Retention and erasure

Account, portfolio and analysis data are stored for the duration of the usage relationship. After verified termination or an erasure request, affected active data is deleted unless statutory retention or necessary preservation of evidence applies. Enquiries and email correspondence are retained until final handling and beyond that only to fulfil such duties or pursue or defend specific claims. Contract and consent evidence is restricted to its evidentiary purpose and treated separately from active use. Security logs are needed only for as long as detecting and handling security incidents requires them. Backups serve restoration only; erasures and account blocks must be reapplied before restored data is made available again. The specific erasure date depends on completion of the relevant purpose, applicable statutory periods and any unresolved proceedings. Contact kontakt@immovaro.de for information about your data.

Your rights

You may request access, rectification, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests for reasons related to your particular situation. Consent can be withdrawn for the future. Contact kontakt@immovaro.de. We normally respond within one month and protect your data through appropriate identity verification.

Complaints and automated decisions

You may complain to a supervisory authority, particularly where you habitually reside, work or where the alleged infringement occurred. In Baden-Württemberg this is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit (state privacy commissioner). Mathematical calculators support your decisions; they issue no lending commitment or binding decision about you.

Operator and controller

Denis Panic

Fuchshofstr. 45

71638 Ludwigsburg