Privacy Policy

This English version is provided for convenience. The German version is legally binding.

1. Privacy at a glance

The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally.

Who is responsible? Data processing on this website is carried out by the website operator, whose contact details are given under "Controller" below.

How do we collect your data? Some data is collected when you provide it to us, for example via a contact form. Other data, mainly technical data such as browser, operating system or time of access, is recorded automatically by our IT systems when you visit the website.

What do we use it for? Technical data ensures the website is delivered without errors. Form data is used to handle your enquiry. Your browsing behaviour is not analysed.

Your rights. You have the right to information about the origin, recipients and purpose of your stored data free of charge, and the right to rectification, erasure or restriction of processing. You can withdraw consent at any time with effect for the future and lodge a complaint with the competent supervisory authority.

2. Hosting

This website is hosted on Google Firebase Hosting, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). When you visit the website, Google processes the data listed under server log files, in particular your IP address, in order to deliver the website and protect it against attacks. Content is delivered via a worldwide server network, so a transfer to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework; the EU Commission's standard contractual clauses apply in addition. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable provision of the website. Data processing agreements under Art. 28 GDPR are in place with Google (Firebase Data Processing and Security Terms and Cloud Data Processing Addendum).

Submissions via the contact form and the property search form are received by a Google Cloud Functions service located in Frankfurt am Main, are not stored and are forwarded to us by email. Emails are sent via Resend, provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Emails are sent via Resend's Ireland region (eu-west-1) within the EU; Resend processes the form data solely to deliver it to us. A data processing agreement (Data Processing Addendum) is in place with Resend. Resend is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); the EU Commission's standard contractual clauses (Art. 46 (2) (c) GDPR) apply in addition. When the function is called, technical access data (including IP address and time) is also logged in Google Cloud Logging and deleted after no more than 30 days.

The legal basis is Art. 6 (1) (f) GDPR; we have a legitimate interest in presenting our website reliably. A data processing agreement under Art. 28 GDPR is in place with the provider.

3. General information and mandatory disclosures

Controller

LÈMANS Real Estate GmbH
Großer Burstah 44
20457 Hamburg, Germany

Phone: +49 (0) 40 5247289-30
Email: info@lemans.de

Storage period

Unless a more specific period is stated, your data remains with us until the purpose of processing no longer applies. If you request erasure or withdraw consent, your data will be deleted unless other legal grounds for storage apply (e.g. retention periods under tax or commercial law), in which case it will be deleted once those grounds cease.

Legal bases

We process data on the basis of your consent (Art. 6 (1) (a) GDPR), to perform a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), to fulfil legal obligations (Art. 6 (1) (c) GDPR) or on the basis of our legitimate interests (Art. 6 (1) (f) GDPR). The relevant basis is stated in the sections below.

Recipients

We only pass on personal data to external parties where this is necessary to perform a contract, where we are legally obliged to do so, where we have a legitimate interest under Art. 6 (1) (f) GDPR or where another legal basis permits it. Processors receive data only under a valid data processing agreement.

Withdrawal of consent

You can withdraw any consent you have given at any time. The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

Where processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation, including to profiling based on these provisions. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where data is processed for direct marketing, you may object at any time; your data will then no longer be used for that purpose.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg.

Data portability, access, rectification, erasure and restriction

You have the right to receive data that we process automatically on the basis of your consent or a contract in a common, machine-readable format, to access your stored data free of charge, and to request rectification, erasure or restriction of processing within the statutory framework.

SSL/TLS encryption

This site uses SSL/TLS encryption to protect the transmission of confidential content such as enquiries. You can recognise an encrypted connection by "https://" in the address bar and the lock symbol in your browser.

Objection to advertising emails

We hereby object to the use of the contact details published in our legal notice for sending unsolicited advertising and information material. We reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data collection on this website

No cookies, no tracking

This website does not set cookies and uses no analytics, tracking or marketing services. Your choice between light and dark display is stored only locally in your browser (local storage) and is not transmitted to us. This storage is strictly necessary for the function you request (Section 25 (2) no. 2 TDDDG) and can be deleted at any time in your browser settings.

Server log files

The provider automatically collects and stores browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. We do not analyse this data or combine it with other sources. The legal basis is Art. 6 (1) (f) GDPR; we have a legitimate interest in a technically error-free and optimised website.

Contact form and property search

If you send us an enquiry via the contact form or the property search form, your details, including your contact data and information on your space requirement, are stored to process the enquiry and in case of follow-up questions. It is not passed on to third parties; the service providers we use (Google, Resend, Propstack) act as processors. Name and email address are required to answer your enquiry; all other details are voluntary. The location search in the property search form only uses a list of places on our own server; your input is not sent to third parties (such as map services). The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract or pre-contractual measures, otherwise our legitimate interest in handling enquiries effectively (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (a) GDPR) where requested. The data remains with us until you request erasure, withdraw consent or the purpose no longer applies; statutory retention periods remain unaffected.

Enquiries by email, phone or fax

If you contact us by email, phone or fax, your enquiry including all resulting personal data is stored and processed to handle your request. Legal basis and storage period are the same as for the contact form.

Applications

If you apply to us, we process your name, contact details and the documents you submit (e.g. CV, certificates, cover letter) solely to handle the application process, on the basis of Art. 6 (1) (b) GDPR. Data is deleted after the process ends unless a statutory retention obligation applies or you have consented to longer storage. If you are hired, the data may be used to administer the employment relationship.

5. Plugins and tools

Propstack (CRM)

We use Propstack, Propstack GmbH, Walderseestraße 26, 13407 Berlin, Germany, as a CRM tool to process and store contact data and the other data described in this notice, in order to manage relationships with existing and potential clients and handle enquiries efficiently. More information: propstack.de/legal/datenschutzbestimmungen. The legal basis is Art. 6 (1) (b) GDPR, otherwise Art. 6 (1) (f) or (a) GDPR. Data is stored for as long as required for these purposes or by law, e.g. for tax and accounting.

Fonts and media (hosted locally)

The typeface used on this website (HK Grotesk), images, videos, the map of Germany and the 3D model are delivered exclusively via our hosting (see section 2). No content is loaded from other third parties such as Google Fonts or content delivery networks. Map services such as Google Maps are not embedded.

Links to social networks

Our website contains plain links to our profiles on LinkedIn, Instagram and X. No plugins are embedded; data is only transferred when you follow a link, and the respective provider is then responsible.