Privacy Policy
This notice explains, in accordance with Art. 13 and 14 GDPR, which personal data is processed when you use this website, for what purpose, and what rights you have in this regard.
This is a courtesy translation. The German version of this privacy policy is the legally binding one.
Contents
1. Data controller
The controller responsible for data processing within the meaning of the GDPR is:
Saša Kostadinović
Harkortstraße 5, 12105 Berlin, Germany
Email: sasa@kostadinovic.de
Phone: +49 30 40 98 23 15
2. General information on data processing
We process our users' personal data only to the extent necessary to provide a functioning website and to process rental inquiries. Depending on the processing activity, the legal basis is in particular Art. 6(1)(b) GDPR (pre-contractual inquiries regarding a possible lease) and Art. 6(1)(f) GDPR (legitimate interest, e.g. in the secure operation of the website).
3. Provision of the website / server log files
When you visit this website, our hosting provider automatically collects information in so-called server log files, which your browser transmits automatically. This includes:
- IP address of the accessing device (possibly truncated/anonymised)
- date and time of access
- file requested, referrer URL
- browser type and version, operating system used
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the stability and security of the website). This data is not combined with other data sources. The specific hosting provider and retention period will be added here once the final hosting contract is in place.
4. Contact form / Register your interest
If you contact us via the "Register your interest" form or by email, the data you provide (name, email address, apartment of interest, message text) is stored for the purpose of processing your inquiry and forwarded to us by email. The legal basis is Art. 6(1)(b) GDPR (pre-contractual inquiry regarding a possible lease). Consent to processing is required to submit the form.
The form is processed by a server-side script (PHP) on our own hosting server and delivered directly by email — no data is transmitted to an external third-party provider. A hidden field, invisible to human visitors, is used solely for automated spam-bot detection and is not evaluated if left blank.
6. Embedded fonts (Google Fonts)
This site embeds fonts from Google Fonts, which are currently loaded from Google servers (Google Ireland Ltd. or Google LLC, USA) when the page is accessed. This transmits your device's IP address to Google. The legal basis is Art. 6(1)(f) GDPR.
Recommendation: these fonts should be self-hosted on our own server before going live, so that no connection to Google servers and no transfer of IP addresses to Google takes place.
7. Your rights as a data subject
You have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent given, with future effect (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is:
Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany
8. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption for the transmission of confidential content. Will be enabled at the hosting level; recognisable by "https://" in the address bar.
9. Changes to this notice
We will update this privacy policy whenever data processing on this website changes. The version current at the time of your visit applies.