Privacy Policy

1. Data controller

Responsible for the data processing on this website:

Mannheim Real Estate
Managing Director: Nahren Gewargis
Business Bay, Dubai, United Arab Emirates
Phone / WhatsApp: +971 58 504 0742
Email: info(at)immobilien-vae.com

2. Scope and principles of data processing

We process personal data only to the extent required to provide this website, respond to inquiries, and initiate a contractual relationship. We use appropriate technical and organisational measures to protect your data.

We do not keep production log files or text files containing personal data on the server. Contact form submissions are forwarded immediately by email to our team addresses and are not persisted thereafter.

3. Hosting and server location

Our website is hosted in Germany by Mittwald CM Service GmbH & Co. KG, Koenigsberger Strasse 4-6, 32339 Espelkamp. When you visit the site, technically necessary data (IP address, date and time, browser type, operating system, requested resource, referrer URL) is processed. This data is needed to deliver the page, mitigate attacks, and ensure stability, and is automatically deleted after a short period.

A data processing agreement (DPA) under Art. 28 GDPR is in place with Mittwald.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure provision of the service).

4. Contact form and WhatsApp inquiries

When you use our contact form or message us via WhatsApp, we process the following data:

• Name
• Email address
• Phone / WhatsApp number
• Answers regarding investment timing, purpose, financing, and budget
• Free text / property wishlist (optional)

Purpose: to answer your inquiry, prepare a suitable brochure, and initiate a consultation.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (a) GDPR (consent).

Retention period: we keep your data only as long as needed to handle your inquiry and any follow-up consultation. You can request erasure at any time.

5. WhatsApp communication

If you contact us via WhatsApp, the privacy terms of WhatsApp Ireland Ltd. and Meta Platforms, Inc. apply in addition. We process your phone number and the exchanged messages solely for advisory purposes. More information: whatsapp.com/legal/privacy-policy-eea.

6. Google reCAPTCHA

To protect our contact form against automated requests (spam, abuse), we use Google reCAPTCHA (Google Ireland Ltd., Ireland). Information such as IP address, browser data, and interaction behaviour is transmitted to Google and analysed.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in spam protection).

More information: policies.google.com/privacy and policies.google.com/terms.

7. Cookies and cookie consent

We use only strictly necessary cookies, plus additional cookies (analytics, marketing) after your consent. On your first visit a consent banner asks for your permission. You can change or withdraw this consent at any time via the Cookie settings link in the footer.

We use the open-source tool orestbida/cookieconsent; the consent record is stored locally in your browser and is not transmitted to our server.

8. Web analytics with Google Analytics 4

With your consent we use Google Analytics 4 (Google Ireland Ltd.) for statistical analysis of website usage. We have IP anonymisation activated (anonymize_ip: true) so that your IP address is truncated before storage.

Legal basis: Art. 6 (1) (a) GDPR (consent).

Google privacy: policies.google.com/privacy.

9. TikTok Pixel

With your consent the TikTok Pixel (TikTok Technology Ltd., Ireland) may be loaded to measure the performance of our marketing campaigns.

Legal basis: Art. 6 (1) (a) GDPR (consent).

Privacy: tiktok.com/legal/page/eea/privacy-policy/en.

10. YouTube embedded videos

We embed videos using the enhanced privacy mode (youtube-nocookie.com). A connection to YouTube is only established once you click play. Privacy: policies.google.com/privacy.

11. Maps and OpenStreetMap

On the page Properties & Map we use the open-source library Leaflet (BSD-2 license) and the Leaflet.markercluster plugin. The libraries themselves are served via the public CDN unpkg.com; on load your IP address is transmitted to unpkg.com (operated by Cloudflare/USA).

Map tiles are loaded from CARTO (based on OpenStreetMap) and, as an alternative, from the ArcGIS World Imagery Service (Esri, satellite view). When the map is opened, technically necessary data (IP address, browser data, requested tile URLs) is transmitted to these providers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in functional location visualisation).

Privacy: carto.com/privacy · OSM Foundation · Esri Privacy.

12. Fonts

We use the typefaces Inter and Playfair Display. Both are licensed under the SIL Open Font License (OFL) and are served exclusively from our own server. There is no connection to Google Fonts or any other external font provider.

13. Your rights (data subject rights)

You have the following rights:

• Right to access the data we hold about you (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, a simple email to info(at)immobilien-vae.com or a WhatsApp message is sufficient.

14. International transfers (third countries)

When the services listed above are used (YouTube, Google reCAPTCHA, Google Analytics, TikTok, unpkg/Cloudflare, Esri), data may be transferred to the USA or other third countries. Such transfers take place on the basis of the EU Standard Contractual Clauses, the EU-US Data Privacy Framework, and/or your consent.

15. Categories of recipients

Your personal data is only shared with the following categories of recipients, and only to the extent necessary:

• Daniel Schmal & Mannheim Real Estate, as provider and executing brokerage
• Licensed developers in the UAE, only with your explicit consent and only in the context of a specific property inquiry
• Mittwald CM Service GmbH & Co. KG (Germany), as hosting processor under Art. 28 GDPR
• Google Ireland Ltd., for reCAPTCHA spam protection (legitimate interest) and Google Analytics (only with consent)
• TikTok Technology Ltd., only with active consent, for reach and conversion measurement
• CARTO, Esri, unpkg/Cloudflare, as map and CDN providers on the properties page

Data is not shared with any other third parties. We do not sell personal data.

16. Encryption and data security

We apply technical and organisational measures to protect your data, in particular end-to-end TLS/HTTPS encryption, regular security updates, strict access controls, and backup strategies. No log files with sensitive content are kept on production systems.

17. No automated decision-making

This website does not carry out fully automated decision-making or profiling with legal effect on data subjects within the meaning of Art. 22 GDPR. All advisory and brokerage decisions are made by a natural person (Daniel Schmal).

18. Protection of minors

The content and services on this website are aimed exclusively at adults (at least 18 years old). We do not knowingly collect personal data from children or young people under the age of 16. If a parent or legal guardian becomes aware of such data collection, please contact us immediately; the data will be deleted without delay.

19. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority of your habitual residence or place of work is in particular competent:

• Germany, the state data protection authority responsible for your federal state (overview: bfdi.bund.de)
• Austria, Data Protection Authority (dsb.gv.at)
• Switzerland, Federal Data Protection and Information Commissioner (edoeb.admin.ch)
• UAE, UAE Data Office or the competent emirate authority under PDPL

20. Updates to this policy

This privacy policy is updated as needed to reflect changes to the website or to applicable law.

Last updated: 10 June 2026