Skip to content
+49 (0)8123 88 300 10 Enquiry
  1. Home
  2. Privacy policy

Privacy policy

STRATON Real Estate Advisory UG (haftungsbeschränkt) & Co. KG · As at: September 2026

1. Controller

Tobias Streckel
STRATON Real Estate Advisory UG (haftungsbeschränkt) & Co. KG
Schmiedweg 5, 85457 Wörth
Telephone: +49 (0)8123 88 300 10
Email: info@imdocs.de

2. General information

We take the protection of your personal data seriously. Your data is processed confidentially and in accordance with the statutory data protection provisions and this privacy policy. We do not embed external content such as maps or embedded videos; we serve fonts from our own server. Web analytics takes place solely with your consent (No. 11); without consent the analytics script is not loaded.

This privacy policy relates to this website. For processing in a data room operated by us, No. 8 applies in addition.

3. Hosting and server log files

This website is operated on the servers of a German hosting provider. When it is accessed, data is automatically stored in server log files: IP address, date and time, the name of the file retrieved, referrer, browser and operating system. This data is processed exclusively to ensure operation and to defend against attacks (Article 6(1)(f) GDPR) and deleted after 14 days, automatically deleted.

4. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in the browser address bar.

5. Enquiry form

If you contact us via the enquiry form, your details (form of address, name, company, role, email address, telephone number, occasion, desired start, property or portfolio details, estimated scope, message) as well as the time and IP address of transmission are stored in order to process your enquiry. You will receive an automatic acknowledgement of receipt by email. The legal basis is Article 6(1)(b) GDPR (steps taken prior to entering into a contract) and Article 6(1)(f) GDPR (evidence and prevention of misuse). To protect against automated submissions we use an invisible form field and a time check; we do not use external services such as reCAPTCHA. The data are deleted as soon as the enquiry has been dealt with conclusively and no statutory retention obligations prevent this; if no engagement comes about, six months later at the latest.

6. File uploads via the enquiry form

You may voluntarily attach documents to the enquiry form (up to five files, each no larger than 100 MB). The files are stored on the same server as the website and cannot be retrieved directly via the internet; access is exclusively by way of a signed, time-limited link that we receive by email, and via the protected administration area. Common document, image and archive formats are permitted; executable files are rejected. Every file is automatically scanned for malware before it is stored.

The legal basis is Article 6(1)(b) GDPR (initiation and performance of a contract) and Article 6(1)(f) GDPR (security of our systems). Please transfer only documents that you are entitled to disclose. Where the files contain personal data of third parties (for example tenants, purchasers or employees), we process such data solely in order to deal with your enquiry and any engagement arising from it. The files are deleted as soon as the enquiry has been dealt with conclusively and no statutory retention obligations stand in the way; if no engagement comes about, after six months at the latest.

7. Contact by email or telephone

If you contact us by email or telephone, your enquiry including all personal data arising from it is stored for the purpose of processing it (Article 6 (1) (b) GDPR). Our email is sent via a mail server operated in Germany.

8. Operating a data room as a processor

If we operate a data room for you, we process the content uploaded there and the personal data it contains solely on your instructions. You remain the controller within the meaning of Article 4(7) GDPR; we are the processor under Article 28 GDPR. Before processing begins we conclude a data processing agreement with you which sets out the subject matter, duration, nature and purpose of the processing, the categories of data subjects, the technical and organisational measures under Article 32 GDPR, the sub-processors used and the deletion policy.

Operation takes place on servers in a data centre in Germany. No transfer to third countries takes place. The content of the data room is not analysed by us, not used for our own purposes and not used to train artificial intelligence models.

In addition to the content, we process usage data relating to data room access (login name, email address, time and type of access, IP address). These logs serve the traceability of access and the security of the system; they are available to the controller. Retention and deletion are governed by the data processing agreement.

9. Processing in the context of advisory and support engagements

If we additionally take on the build, the population with documents or the support of a data room, we process the documents transmitted to us and the personal data contained in them exclusively for the performance of the engagement (Article 6(1)(b) and (f) GDPR, or on instruction pursuant to No. 8). After completion of the engagement, the data is retained in accordance with the retention periods under commercial and tax law (Section 257 HGB, Section 147 AO) and then deleted. On request we conclude a confidentiality agreement in advance.

10. Cookies and consent management

We set technically necessary cookies only to the extent that they are required for the operation of the website (Article 6 (1) (f) GDPR, Section 25 (2) TDDDG). These include session cookies in the administration area, which do not affect visitors to the website.

All cookies and services that are not strictly necessary – in particular the web analytics under No. 11 – are only set or loaded once you have given your consent in the cookie notice (Article 6(1)(a) GDPR, Section 25(1) TDDDG). Until then, the consent management blocks the scripts concerned; no call to the third-party provider takes place.

We use the Complianz plugin for consent management. It stores your choices in cookies on your device (including cmplz_statistics, cmplz_marketing, cmplz_banner-status); this information is not transferred to third parties. You can withdraw or adjust your consent at any time with effect for the future using the “Manage consent” button at the edge of the screen.

Which cookies are used in detail, with what duration and for what purpose, is set out in our Cookie policy listed.

11. Web analytics with Google Analytics

If you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is integrated via the Google Site Kit plugin.

Google Analytics sets cookies (including _ga und _ga_*), which are used to analyse your use of the website. The data processed comprises, in particular, the truncated IP address, device and browser data, pages viewed, time spent, the source of the visit and an approximate location at city or regional level. We use the analysis solely to understand the reach and use of the website and to improve the content; we do not combine it with other data and we do not identify individual persons.

The legal basis is your consent (Article 6(1)(a) GDPR, Section 25(1) TDDDG). Without consent the analytics script is not loaded and no analytics cookies are set. You can withdraw your consent via “Manage consent”; the lawfulness of the processing carried out up to that point remains unaffected.

The IP address is truncated by Google before it is stored. Processing by Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the standard contractual clauses of the EU Commission apply. The retention period for the usage data is determined by the period set in the Analytics property.

This processing relates solely to this website. No web analytics takes place in the data room itself and no third-party services are embedded.

You can find further information on the processing of data by Google in Google's privacy policy: policies.google.com/privacy.

12. Your rights

You have the following rights in relation to your personal data:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection to processing (Article 21 GDPR)

If your request concerns data that we process as a processor in a data room (no. 8), please contact the relevant controller. We forward requests without undue delay and support the controller in responding to them.

To exercise your rights, please contact: info@imdocs.de

13. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Competent authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, the Bavarian data protection supervisory authority), Promenade 27, 91522 Ansbach.