Legal
Privacy policy
1. Controller
The controller within the meaning of the GDPR is: Sapiro Real Estate GmbH, Hohenzollerndamm 95, 14199 Berlin, Germany. Phone: +49 30 440 440 313, e-mail: elina@sapirorealestate.com.
2. General
We process personal data strictly within the scope of the applicable law (GDPR, BDSG, TDDDG). This website does not use advertising or tracking cookies and does not build cross-device usage profiles.
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, Vercel processes technically necessary connection data (IP address, date and time of access, requested file, transferred data volume, browser type/version) in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely and reliably).
Transfers to the USA are safeguarded by Vercel's certification under the EU-US Data Privacy Framework and by EU standard contractual clauses. Log data is retained only as long as required for operation and security.
4. Cookie-less analytics
For anonymous reach measurement we use our own cookie-less counter. It processes the visited page, the referring page and — server-side — your IP address and browser identifier (user agent), stored in aggregated form (Google Sheets, see section 7). No cookies are set and no usage profiles are created. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the reach of our website). You may object to this processing at any time with future effect (contact: section 1).
5. Contact and valuation forms, e-mail and phone
If you contact us via the forms on this website (e.g. property valuation, buyer registration), by e-mail or by phone, we process the data you provide (name, contact details, property details, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent), where given in the form.
Your data is stored until your enquiry has been dealt with conclusively, or for the duration of statutory retention periods, and is deleted afterwards.
6. Handling of enquiries
Form enquiries are stored on a server in Germany (netcup GmbH, Karlsruhe) operated on our behalf. From there we receive your enquiry by e-mail (sent via Google Workspace, see section 7) and as a notification via a self-hosted push service on the same server. This transmits the contact details and message you provided. To protect against abusive mass submissions we also process your IP address, browser identifier and the time taken to complete the form. We keep enquiries as long as required to handle them and to meet statutory retention duties. Legal basis: Art. 6(1)(b) GDPR (handling your enquiry) and, for abuse protection, Art. 6(1)(f) GDPR.
7. Google Workspace (processing on our behalf)
For sending enquiry e-mails, organising enquiries and aggregated analytics we use Google services (Google Workspace, Google Sheets) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. Data processing agreements are in place with Google; any transfer to the USA is safeguarded via the EU-US Data Privacy Framework and EU standard contractual clauses.
8. Local storage
This website occasionally stores technically necessary information in your browser's local storage (e.g. that you have dismissed a notice). This storage is required to provide the function you use (§ 25(2) no. 2 TDDDG) and is not used for tracking.
9. External links and social media
Our website links to external services, including Instagram, LinkedIn and WhatsApp. No social media plugins are embedded; you only leave our website when you click such a link. The respective providers are solely responsible for data processing there (e.g. Meta Platforms Ireland Ltd. for Instagram and WhatsApp, LinkedIn Ireland Unlimited Company).
10. Your rights
Within the statutory limits you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent at any time with future effect.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
11. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
12. Version
This privacy policy is dated July 2026. We will update it whenever the legal situation or the website's functionality changes.