Skip to content
+49 (0)8123 88 300 10 Enquiry
  1. Home
  2. Privacy policy

Privacy policy

STRATON Real Estate Advisory UG (haftungsbeschränkt) & Co. KG · As at: September 2026

1. Controller

Tobias Streckel
STRATON Real Estate Advisory UG (haftungsbeschränkt) & Co. KG
Schmiedweg 5, 85457 Wörth
Telephone: +49 (0)8123 88 300 10
Email: contact@realestate-advisory.de

2. General information

We take the protection of your personal data seriously. Your data is processed confidentially and in accordance with the statutory data protection provisions and with this privacy policy. We do not embed external content such as maps, video embeds or third-party scripts; fonts are served from our own server. No reach measurement or analysis of your usage behaviour takes place on this website.

This privacy policy relates to this website. For processing in a data room operated by us, No. 8 applies in addition.

3. Hosting and server log files

This website is operated on the servers of a German hosting provider. When it is accessed, data is automatically stored in server log files: IP address, date and time, the name of the file retrieved, referrer, browser and operating system. This data is processed exclusively to ensure operation and to defend against attacks (Article 6(1)(f) GDPR) and deleted after 14 days, automatically deleted.

4. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in the browser address bar.

5. Enquiry form

If you contact us via the enquiry form, your details (form of address, name, company, role, email address, telephone number, occasion, desired start, property or portfolio details, estimated scope, message) as well as the time and IP address of transmission are stored in order to process your enquiry. You will receive an automatic acknowledgement of receipt by email. The legal basis is Article 6(1)(b) GDPR (steps taken prior to entering into a contract) and Article 6(1)(f) GDPR (evidence and prevention of misuse). To protect against automated submissions we use an invisible form field and a time check; we do not use external services such as reCAPTCHA. The data are deleted as soon as the enquiry has been dealt with conclusively and no statutory retention obligations prevent this; if no engagement comes about, six months later at the latest.

6. File uploads via the enquiry form

You may voluntarily attach documents to the enquiry form (up to five files, each no larger than 100 MB). The files are stored on the same server as the website and cannot be retrieved directly via the internet; access is exclusively by way of a signed, time-limited link that we receive by email, and via the protected administration area. Common document, image and archive formats are permitted; executable files are rejected. Every file is automatically scanned for malware before it is stored.

The legal basis is Article 6(1)(b) GDPR (initiation and performance of a contract) and Article 6(1)(f) GDPR (security of our systems). Please transfer only documents that you are entitled to disclose. Where the files contain personal data of third parties (for example tenants, purchasers or employees), we process such data solely in order to deal with your enquiry and any engagement arising from it. The files are deleted as soon as the enquiry has been dealt with conclusively and no statutory retention obligations stand in the way; if no engagement comes about, after six months at the latest.

7. Contact by email or telephone

If you contact us by email or telephone, your enquiry including all personal data arising from it is stored for the purpose of processing it (Article 6 (1) (b) GDPR). Our email is sent via a mail server operated in Germany.

8. Operating a data room as a processor

If we operate a data room for you, we process the content uploaded there and the personal data it contains solely on your instructions. You remain the controller within the meaning of Article 4(7) GDPR; we are the processor under Article 28 GDPR. Before processing begins we conclude a data processing agreement with you which sets out the subject matter, duration, nature and purpose of the processing, the categories of data subjects, the technical and organisational measures under Article 32 GDPR, the sub-processors used and the deletion policy.

Operation takes place on our own infrastructure in a data centre in Germany. No transfer to third countries takes place. The contents of the data room are not analysed by us, not used for our own purposes and not used to train artificial intelligence models.

In addition to the content, we process usage data relating to data room access (login name, email address, time and type of access, IP address). These logs serve the traceability of access and the security of the system; they are available to the controller. Retention and deletion are governed by the data processing agreement.

9. Processing in the context of advisory and support engagements

If we additionally take on the build, the population with documents or the support of a data room, we process the documents transmitted to us and the personal data contained in them exclusively for the performance of the engagement (Article 6(1)(b) and (f) GDPR, or on instruction pursuant to No. 8). After completion of the engagement, the data is retained in accordance with the retention periods under commercial and tax law (Section 257 HGB, Section 147 AO) and then deleted. On request we conclude a confidentiality agreement in advance.

10. Cookies and consent management

We set technically necessary cookies only to the extent that they are required for the operation of the website (Article 6 (1) (f) GDPR, Section 25 (2) TDDDG). These include session cookies in the administration area, which do not affect visitors to the website.

Cookies oder Dienste, die eine Einwilligung erfordern, setzen wir derzeit nicht ein. Weder findet eine Reichweitenmessung statt, noch sind Analyse-, Werbe- oder Social-Media-Dienste eingebunden. Aus diesem Grund wird auch kein Cookie-Hinweis eingeblendet.

Für den Fall, dass wir künftig einwilligungspflichtige Dienste einbinden, ist eine Einwilligungsverwaltung (Plugin Complianz) vorbereitet. Die betreffenden Skripte würden dann erst nach Ihrer Einwilligung geladen (Art. 6 Abs. 1 lit. a DSGVO, § 25 Abs. 1 TDDDG), und Sie könnten Ihre Auswahl jederzeit mit Wirkung für die Zukunft widerrufen.

Which cookies are used in detail, with what duration and for what purpose, is set out in our Cookie policy listed.

11. Your rights

You have the following rights in relation to your personal data:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection to processing (Article 21 GDPR)

If your request concerns data that we process as a processor in a data room (no. 8), please contact the relevant controller. We forward requests without undue delay and support the controller in responding to them.

To exercise your rights, please contact: contact@realestate-advisory.de

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Competent authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, the Bavarian data protection supervisory authority), Promenade 27, 91522 Ansbach.