Privacy policy

Controller

The controller for the processing of personal data is Oliver Brecht, business owner, Markkleeberger Straße 20, 04416 Markkleeberg, Germany. Email: info@propidado.com.

Hosting with ALL-INKL

Our website is hosted by ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL provides the technical infrastructure for operating our website. Further information: ALL-INKL privacy information.

When our website is accessed, technically necessary connection data is processed, in particular the IP address, time of access, requested page or file, amount of data transferred, technical status messages and, where applicable, browser, operating system and referring website. The processing serves to provide the website, for security and for error analysis. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in secure and reliable operation.

We store this log data only for as long as is necessary for these purposes and delete it afterwards, unless a specific security incident requires longer storage.

Cookies, local storage and consents

This website does not set cookies for analytics, advertising or marketing purposes and does not integrate any tracking services. No cookies are set when you visit the public pages (home page, projects, contact, legal notice, privacy policy) or when those pages call their interfaces. Only the following information is stored on your device:

• Your privacy choice (entry propidado-consent in your browser’s local storage). It contains your decisions on external maps and on “Comfort”, the version of the query and the time. It is only written once you make a choice. Storage is necessary to respect and be able to prove your decision (Section 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).
• Your Comfort choice (entries propidado-popup:…, only after your consent to “Comfort”): If you allow “Comfort”, your browser remembers small decisions, for example that an announcement shown as a notice window on this website or on a project page should not be displayed again or should only reappear after a set waiting time. Storage takes place exclusively in your browser, in local storage (for “do not show again” and for a waiting time) or in session storage (until the end of the browser session): one entry per announcement with its identifier and an identifier of its content version, plus the value “remembered” or the time of closing. No data is transmitted to us or to third parties. The legal basis is your consent (Art. 6(1)(a) GDPR; Section 25(1) TDDDG). Without your consent nothing is stored; announcements then appear again on every visit. Announcements on project pages are content of the respective customers; the customer is responsible for text, image and content.
• Login to the customer area: After you log in, your browser stores a session identifier (cookie accessToken) so that you stay logged in, as well as the cookies userData and userAbilityRules (details about your account, for example name and role, and your permissions for displaying the interface) and interface settings (for example language and appearance). On the public pages, the access cookie is only used to show “Profile” instead of “Log in”. These cookies are not set without a login (Section 25(2) no. 2 TDDDG; Art. 6(1)(b) GDPR).
• Login page of the customer area: When this page is opened, our server sets two technically necessary cookies: a session identifier (laravel_session) and a protection against forged form submissions (XSRF-TOKEN). They contain no information about you and expire after two hours (Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR).
• Memory functions in projects (entries in your browser’s storage, not transmitted to us): If you mark an apartment in a project (“Like”, wish list), your browser stores this selection in local storage (entries propidado-merkliste-… and propidado-liked-…). The music setting (propidado-music) and the selected place groups of the location view (propidado-poi-groups:…) remain in session storage until the end of the browser session; an entry propidado-boot-icon in local storage remembers the icon of the loading screen. These entries are only created by your actions or to display the project you opened, and you can delete them in your browser at any time (Section 25(2) no. 2 TDDDG).

Optional functions only start after your consent. Currently these are “External maps” (map services that load content from external providers) and “Comfort” (remembering small decisions in your browser). The legal basis is Art. 6(1)(a) GDPR and, where your device is accessed, Section 25(1) TDDDG. The choice is voluntary; without consent the website remains fully usable, maps are then replaced by a notice and announcements appear on every visit. You can change or withdraw your consent at any time with effect for the future: via the “Privacy settings” link at the end of every page or via the button at the top. If you withdraw “Comfort”, the remembered entries are deleted from your browser the next time you open a page with announcements; a previously hidden announcement may then appear again. The lawfulness of the processing carried out until then remains unaffected. Your choice stays stored in your browser until you change it or delete the website data; it is not transmitted to us.

Contact form and email

When you contact us, we process the details you submit: name and email address (required fields), your message (required field) and, voluntarily, company, phone number and topic of the enquiry. Required fields are marked with * in the form; without them we cannot answer your enquiry. Attachments cannot be sent via the form.

Enquiries received via the contact form are stored in our application and can be viewed there by us. We also store which page the enquiry came from. Enquiries are currently not forwarded by email; your details are therefore not passed on by email to third parties or mailboxes. If you write to us by email yourself, your message counts as an enquiry to the address given.

We process contract-related enquiries under Art. 6(1)(b) GDPR. For other enquiries the processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in handling your request. We delete the data as soon as it is no longer needed for handling and any necessary evidence and no statutory retention obligations apply. If you write to us directly by email, this applies equally to your message in our mailbox.

Customer account

We set up a customer account for you if you use Propidado as a customer; there is no self-registration. For this we process your login name, your email address, your name, your password (stored only as a check value, not in plain text), the time of your last login and your plan, as well as the content you create in the account (projects, apartments, media and contact persons). The purpose is to provide the service; the legal basis is performance of the contract (Art. 6(1)(b) GDPR). We store the data for as long as the customer relationship exists and statutory retention obligations require it; we delete a project and its content when the project is deleted. Logging in uses the cookies named under “Cookies, local storage and consents”. Contact persons entered by customers in a project appear with name, email address and telephone number on the project page; customers enter this information themselves.

Our own usage statistics for projects

This statistic runs in all projects published with Propidado: in the demo projects on our website as well as in projects that customers embed on their own websites. If you use such a project (for example apartment finder, tours, gallery), our application records simple usage events, such as “project viewed”, “apartment viewed”, “content opened” or “enquiry opened”. We store the type of event, project and, where applicable, apartment reference, the path of the page accessed without query parameters and fragment, selected details of the event (number of rooms, type of content opened or contact method) and the time. Local draft previews with blob addresses are not recorded. We use no cookies for this and store neither your IP address nor a visitor identifier in these statistics. The connection data of the access itself is processed by us as described under “Hosting”.

The purpose is to evaluate the use of the project presentation and to provide project operators with key figures. The operators of a project receive only counts for their own projects from this, no individual events and no information about visitors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in improving the presentation and demonstrating its effectiveness. This statistic is independent of third parties. You can object to the processing as described under “Your rights”. We keep the events for as long as they are needed for this evaluation; if a project is deleted, we also delete its events.

Fonts

The fonts used on our website (Inter and Fraunces) are provided from our own hosting. No connection to Google servers is established to retrieve them. Technical processing takes place as part of the provision of our website described under “Hosting”.

The same applies to the fonts of the project design in projects published with Propidado (font selection for project pages, apartment finder and location view): we deliver them ourselves as well; no connection is made to Google servers or other font providers.

Maps and external libraries

We deliver the Leaflet map library from our own server; there is no connection to a content delivery network for this. The map tiles on the other hand come from external map services and are therefore only loaded after your consent. Until then you see a notice instead of the map with the options “Always load maps”, “Load this time only” and “Settings”.

After your consent, your browser retrieves the map tiles directly from the respective provider. In particular your IP address, date and time, the requested tile (and thus the map section shown) and technical details of your browser are transmitted. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time in the privacy settings. In projects embedded on our customers’ websites, the notice and the choice appear within the project itself, and the map has a “Privacy” button for this purpose. For projects whose operator has switched off the query, the notice is omitted; the map loads there immediately.

• Project overview (“Projects” page): Map tiles from OpenStreetMap. The provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. OpenStreetMap Foundation privacy notices.
• Location view of embedded projects: depending on the project settings, map data from OpenFreeMap (openfreemap.org), MapTiler (privacy notices), aerial image tiles from Esri (privacy notices) or Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google privacy notices). With Google Maps, further interaction data may be processed and information may be assigned to an existing Google account. The providers receive the connection data mentioned above.

Where data reaches countries outside the European Economic Area in the process (for example the United Kingdom or the USA), this only happens with your consent and on the basis of the providers’ respective applicable safeguards under Chapter V GDPR (for example an adequacy decision of the European Commission or standard contractual clauses). You can obtain a copy of the safeguards via info@propidado.com.

Storage and your rights

We store personal data for as long as is necessary for the respective purpose or statutory obligations require retention. The criteria follow from the respective sections.

Under the statutory conditions you have the rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consents at any time with effect for the future.

Right to object: You may object to processing under Art. 6(1)(e) or (f) GDPR on grounds relating to your particular situation. You may object to direct marketing, including related profiling, at any time without giving such grounds. Contact: info@propidado.com.

You can lodge a complaint with a data protection supervisory authority, in particular at your habitual residence, your place of work or the place of an alleged infringement. The Saxon Data Protection and Transparency Commissioner is responsible for our registered office: Contact and options to lodge a complaint.

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR.