Privacy policy

Version: August 2026 · English convenience translation — the German version is legally binding.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Sven Grosse · Real estate broker · Alte Fernstraße 24 · 97074 Würzburg · Germany
E-mail: sven@grosse.immobilien
No data protection officer has been appointed, as the statutory requirements of Art. 37 GDPR in conjunction with § 38 German Federal Data Protection Act (BDSG) are not met.

2. General information on data processing

We process personal data only to the extent necessary to provide a functional website and to handle your enquiries. Legal bases are Art. 6 (1) (a) GDPR (consent), (b) (contract / pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest). Personal data is deleted or blocked as soon as the purpose of storage ceases to apply and no statutory retention obligations (in particular §§ 147 German Fiscal Code (AO), 257 German Commercial Code (HGB): 6 or 10 years) stand in the way.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Processing takes place on servers in Germany / the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in the secure and efficient provision of this website. Further information: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

4. Server log files

Each time this website is accessed, the system automatically records data and information: IP address of the requesting device, date and time of access, page/file accessed, volume of data transferred, notification of successful retrieval, browser type and version, operating system, referrer URL. This data is not merged with other data sources and serves to ensure trouble-free operation, system security and the prevention of misuse (Art. 6 (1) (f) GDPR). Log files are deleted after no more than 7 days.

5. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in the browser bar. With encryption enabled, the data you transmit to us cannot be read by third parties.

6. Contact form and e-mail contact

If you send us enquiries via the contact form, your details (name, e-mail address, selected topic, message text) are stored by us for the purpose of handling the enquiry and follow-up questions and transmitted by e-mail to our mailbox. The same applies to enquiries by e-mail. We do not pass this data on without your consent.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures; otherwise Art. 6 (1) (f) GDPR (legitimate interest in the effective handling of enquiries addressed to us).

The data is deleted as soon as it is no longer required to achieve the purpose — for contact enquiries generally after final processing, unless statutory retention obligations (e.g. upon initiation of a brokerage contract) stand in the way.

7. Cookies, local storage and consent management

This website currently uses no cookies and no services for tracking, analytics or marketing purposes (no Google Analytics, no social media plug-ins, no advertising tracking). Fonts are served locally from our own server.

On first visit a consent dialogue appears with three categories: Necessary (technically required, cannot be deselected), Statistics and External media. The latter two are deactivated by default; currently no service is integrated in these categories. Should a statistics or media service be added in future, it will be loaded only after your active consent and described here.

Your selection is stored in a single entry in your browser’s local storage (key “gi-consent”: selected categories and timestamp, no personal data, no transmission to us or third parties). This is exempt from consent as technically necessary within the meaning of § 25 (2) no. 2 German Telecommunications Digital Services Data Protection Act (TDDDG). You can change your selection at any time via the “Cookie settings” link in the footer or delete the entry using your browser functions.

8. Fonts (self-hosted)

This website uses the fonts “Manrope” and “Instrument Sans”. The font files are obtained once when the website is built and subsequently served exclusively from our own server (self-hosting via Next.js Font Optimization). When the website is accessed, no connection to Google servers or other font providers is established; your IP address is not transmitted to third parties in this respect.

9. Data processing in the context of brokerage

If you contact us regarding the brokerage or introduction of property, we process the data required to perform the brokerage contract (contact details, property and financing information, communication) on the basis of Art. 6 (1) (b) GDPR. As an obliged entity under the German Money Laundering Act (§ 2 (1) no. 14 GwG) we are legally required, in the event of serious purchase interest, to collect identification data and retain it for five years (Art. 6 (1) (c) GDPR in conjunction with §§ 10, 11, 8 GwG).

10. Recipients of data

Your data is transferred to third parties only where necessary for the performance of a contract (e.g. to owners, prospective purchasers, notaries), where a legal obligation exists or where you have consented. Processors (hosting, e-mail) are contractually bound pursuant to Art. 28 GDPR. No transfer to third countries outside the EU/EEA takes place.

11. Your rights as a data subject

You have the following rights vis-à-vis us regarding the personal data concerning you:
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR)

An informal message to sven@grosse.immobilien is sufficient to exercise these rights.

12. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, phone +49 981 180093-0, poststelle@lda.bayern.de, www.lda.bayern.de.

13. No automated decision-making

No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.

14. Obligation to provide data

The website can be used without providing personal data. Providing the data specified in each case is necessary for handling enquiries and performing brokerage contracts; without it we cannot process the enquiry or the contract.

15. Changes to this privacy policy

We reserve the right to amend this privacy policy to adapt it to changes in the legal situation or changes to the service. The version published here at the relevant time applies.