Privacy Policy

Thank you for visiting our website www.nuville-frankfurt.de („website“) and for your interest in our company. When you visit our website, we also process your personal data („data“) in the sense of Art. 4 (1) of the General Data Protection Regulation („GDPR“). We are aware of the importance of the data you entrust to us. Protecting your privacy when processing your data is of great importance to us and we always take this into account in our business processes. Your data will be handled in accordance with the legal provisions governing data protection.

1. Controller and data protection officer

The controller within the meaning of Art. 4 (7) GDPR for the processing of your data relating to this website is:

Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH („NH” or „we”)

Schaumainkai 47
60596 Frankfurt am Main
Phone.: 069/678674-0
Email: kontakt[at]​naheimst.de

You can reach NH’s data protection officer at the following address:

Dr Dennis Voigt
UBG mbH
Im Breitspiel 21
69126 Heidelberg
Phone: 069/6530006-23
Email: datenschutz[at]​naheimst.de

2. Purpose of data processing, legal basis, storage period, recipients, and transfer to third countries

Your data may be processed on a different legal basis depending on the purpose of processing. When operating our website, we are supported in part by contract processors who handle your data on our behalf and in accordance with our instructions and are therefore recipients of your data („service providers“). Your data may also be disclosed to other companies.

Below we set out the different purposes for which your data may be processed on our website, stating the relevant legal basis as well as indicating the retention period. We also provide you with information about whether the company is a service provider and whether any transfer of your data will take place outside the EU or the European Economic Area („EEA“).

a. Accessing our website and the server logfile

It is strictly necessary from a technical perspective for the web server hosting our website to process data from you in order to display our website on your terminal device. For this purpose, we process your IP address together with the date and time of access, name and URL of the accessed file, referrer URL (website from which access is made), the amount of data transferred and loading time in a server log file. A service provider assists us with hosting. 

The legal basis for storing information in the form of cookies or in the server log file on your terminal device or accessing this information on your terminal device is Section 25(2) No. 2 of the German Telecommunications and Teleservices Data Protection Act (TTDSG).

Your data is processed in accordance with Art. 6(1)(f) GDPR. It is necessary to process your IP address in order to protect our legitimate interests with regard to the accessibility and correct presentation of our website. Storing your data in a server log file in addition to this serves to protect our legitimate interests in operating our website securely and without errors and in being able to recognise, limit and eliminate faults and errors. 

Your data stored in our server logfile will be automatically deleted 1 month after your visit to our website.

b. Contact

Our website gives you the opportunity to contact us about a variety of topics.

If you use our contact form to contact us, the mandatory information you have to provide is marked as such. This information is required in order to process your request. All other information is voluntary and will only be used to answer your enquiry more precisely. You can also contact us by telephone, e-mail, post, or fax. The data we process from you in this context may vary depending on the communication channel, but we generally collect your first and last name, your address, your telephone number, your e-mail address, and your fax number. A service provider assists us with the contact form. Furthermore, the following data are collected:

  • Identifier of the last selected flat („flat ID“)
  • Identifiers of other selected flats („favourites“), where applicable
  • URL of the navigator accessed
  • The language selected in the navigator
  • Browser user agent data

If the purpose of your contact is to find out more about the freehold flats offered on our website, we will forward your enquiry to the relevant sales representative, who will contact you and provide a comprehensive response to your request.

The legal basis for accessing information in your terminal device is Section 25(2) No. 2 TTDSG.

If the purpose of your contact is to conclude a contract or is related to a contract, we process your data on the basis of Art. 6(1)(b) GDPR. If the purpose of your contact is of a general nature, we process your data in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interests in answering your enquiry about our company and/or our service offering individually and in the most appropriate manner.

Where your data are related to a contractual relationship, we will delete them only after the expiry of any retention obligations under commercial or tax law, which may be up to 6 years from the end of the year in which you contacted us. We will delete all other data when your enquiry has been finally clarified and we are not subject to any legal obligation to retain the relevant data.

c. Communication by post

If you contact us with a view to concluding a contract or in connection with a contract, we may subsequently use the information you have given us to contact you by post.

The processing of your data is based on Art. 6(1)(b) GDPR.

We may only delete your data after the expiry of commercial or tax retention obligations, which can be up to 6 years from the end of the year in which you contacted us.

d. Strictly necessary cookies

Cookies are small files that are sent by us to your terminal's browser when you visit our website and are stored there. We use strictly necessary cookies on our website to ensure the basic functions of our website. The cookies contain a what is known as a session ID, which can be assigned to various requests made by your terminal device during your visit to our website. 

The legal basis for storing information in the form of cookies on your terminal device or accessing this information on your terminal device is Section 25(2) No. 2 of the German Telecommunications and Teleservices Data Protection Act (TTDSG).

The legal basis for the associated processing of your data is Art. 6(1)(f) GDPR. The use of strictly necessary cookies is required to protect our legitimate interests with regard to the accessibility and correct presentation of our website and to ensure its full functionality. 

Strictly necessary cookies are deleted at the latest after you have closed the browser you are using.

If you do not wish cookies to be set on your terminal device, you can manage this centrally in the browser you use. You can also delete cookies via your browser. 

However, blocking or deleting them may result in a noticeable restriction of the usability of our website for you.

e. Consent management

Our website also makes use of cookies that are not strictly necessary for technical purposes and other technologies for a variety of purposes, which we list below.

If you are visiting our website for the first time, we will ask you for your consent for the use of such services, which involve the use of cookies that are not strictly necessary. In order to manage your consent, i.e., whether you have given consent or not, we store your selection in a cookie so that we can recognise you when you visit our website again. The legal basis for storing information on your terminal device and accessing it is Section 25(2) No. 2TTDSG. In doing so, we process your IP address, the time of your visit to our website, information about your browser and information about your terminal device.

The associated processing of your data is based on Art. 6(1)(f) GDPR and serves our legitimate interest in providing you with the most enjoyable user experience possible when using our website, as well as for the defence against legal claims that may arise in connection with the use of such services that use cookies and other technologies that are not deemed strictly necessary.

The cookie is valid for 365 days unless you delete it from your browser before then.

f. Matomo

Our website uses the web analytics tool Matomo (formerly Piwik) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, („InnoCraft Ltd.”).

Matomo is an open-source tool for web analytics. Cookies are used for this purpose, which are stored on your computer, and which enable a pseudonymous analysis of the way you use our website. The IP address is abridged immediately after it is acquired and before it is stored. If you consent to web analysis using Matomo, the following data will be collected when you access individual pages on our website:

  • The user's IP address, with the last three bytes removed (anonymised)
  • The particular page called and the time of retrieval
  • The page from which the user accessed our website (referrer)
  • Which browser is used with which plug-ins, together with the operating system and screen resolution
  • The duration of the visit to our website
  • The pages that are visited from the actual page accessed

If you consent to the use of Matomo, cookies will be set on your terminal device, for which the legal basis is Section 25(1) TTDSG. Any subsequent processing of data is based on your consent given to us in accordance with Art. 6(1)(a) GDPR.

The data collected by Matomo will remain active from the end of the browser session up to 13 months and is used to recognise the user of the website for statistical purposes, to store attribution information and to store a unique visitor ID.

You can find Matomo's privacy policy at: https://matomo.org/docs/privacy/.

We host Matomo exclusively on our own servers so that all analytical data remains with us and are not shared.

g. Google Analytics

We use the Google Analytics tool from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google Ireland“) on our website.

Google Analytics enables us to analyse and evaluate the use of our website in order to compile reports on the website activities of our visitors based on this information. Google Analytics also creates pseudonymised user profiles of website visitors. The use of Google Analytics involves the use of technically non-essential cookies and online identifiers (including cookie identifiers), IP addresses and your device identifiers. We only use Google Analytics with the „Anonymise-IP“ extension, which deletes part of your IP address before it is transmitted to Google. Google Ireland is a service provider for the use of Google Analytics.

We have also activated the Google Analytics advertising functions „Demographic features“. This enables us to analyse visitors to our website according to age (18-24, 25-34, 35-44, 45-54, 55-64, 65+), gender (male, female), affinity categories (lifestyle similar to TV target groups, e.g. technology enthusiasts, sports fans and amateur cooks), segments with target groups that are ready to buy (interested in buying products) and other categories and to create remarketing target groups based on this. According to Google Ireland (https://support.google.com/analytics/answer/2799357?hl=en&sjid=14556252424240060233-EU#zippy=%2Cthemen-in-diesem-artikel%2Cin-this-article), this data comes from DoubleClick third-party cookies, an Android advertising ID or iOS Identifier for Advertisers (IDFA). We cannot allocate which visitor is assigned to a specific group mentioned above. We do not know whether Google Ireland can identify you personally.

We use Google Analytics with the „Google Signals“ extension. Google Signals allows us to analyse your use of our website across devices. However, this requires that you have a Google account, that you are logged into this account when you visit our website and that you have activated the „Personalised advertising“ function in your Google account. You can find out how to switch on this function at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155451?visit_id=638360751971146661-857784845&rd=1&hl=en&sjid=14556252424240060233-EU. If this is the case, your location, your search history, your YouTube history and data on websites of Google partners may also be processed according to Google's own presentation.

If you consent to the use of Google Analytics, cookies will be placed on your end device. The legal basis for this is Section 25(1) TTDSG. Any subsequent processing of data is based on your consent declared to us in accordance with Art. 6(1)(a) GDPR.

The cookies used by Google Analytics have a lifespan of between one minute and two years and are used to reduce the request rate, differentiate between users, identify the user and display personalised advertising to the user.

The information collected through the use of Google Analytics is deleted after 9 or 18 months (https://policies.google.com/technologies/ads?hl=en). When using Google Analytics, Google Ireland acts as a service provider; you can access the contract for order processing that also applies to Google Analytics at the following link: https://privacy.google.com/businesses/processorterms/?hl=en. Should Google Ireland offer a contract for joint responsibility in the future, we will conclude this.

The use of Google Analytics may result in the transfer of your data to the USA. The data transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

You can also prevent the transfer of data to Google Ireland by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

h. Google Tag Manager

We use the Google Tag Manager tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, („Google Ireland“) on our website.

By means of the Google Tag Manager, we can set and manage so-called tags on our website. Tags enable us to determine more precisely which offers and services you are interested in on our website and how you interact with our website. We further process this information using Google Analytics when you trigger a tag on our website. Through the use of Google Tag Manager, technically non-essential cookies as well as online identifiers (including cookie identifiers) and your IP addresses are used. Google is a service provider in the context of the use of the Google Tag Manager.

The use of the Google Tag Manager is based on your consent declared to us in accordance with Art. 6(1)(a) GDPR.

The information collected through the use of the Google Tag Manager will be deleted after 9 or 18 months (https://policies.google.com/technologies/ads). When using the Google Tag Manager, Google acts as a service provider. You can access the contract for order processing that also applies to the Google Tag Manager under the following link: https://privacy.google.com/businesses/processorterms/?hl=en.

The use of Google Tag Manager may result in the transfer of your data to the USA. The data transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

You can also prevent a transfer of data to Google Ireland by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

i. Google Ads

We use Google Ads provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google Ireland“) on our website.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played out based on the user data available at Google (e.g. interests) (audience targeting). We can evaluate this data quantitatively by analyzing, for example, how many ads have led to corresponding clicks and which search terms have led to the playout of our ads.

The use of Google Ads is based on your consent declared to us in accordance with Art. 6(1)(a) GDPR.

Google Ireland receives the data as an independently responsible party and precisely not as a service provider.

The information collected through the use of Google Ads is deleted after 9 or 18 months (https://policies.google.com/technologies/ads?hl=en).

The use of Google Ads may result in the transfer of your data to the USA. The data transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

Further information and the privacy policy can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=en.

You can prevent the transmission of data to Google Ireland by downloading and installing the browser plugin available under the following link: https://support.google.com/ads/answer/7395996?hl=en.

j. Google Ads Remarketing

We use Google Ads Remarketing of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google Ireland”) on our website.

Google Ads Remarketing analyses user behaviour on our website (e.g., clicking on certain products/ads), in order to assign you to specific advertising target groups. The Remarketing function allows us to present advertisements to the users of our website – which are based on their interests – on other websites within the Google network.

In addition, Google Ads Remarketing enables the linking of those advertising target groups that have been created with Google’s cross-device functions. This means that interest-based (and personalised) advertising that has been adapted to you on one of your end devices – depending on your previous usage and surfing behaviour – can also be displayed on another of your end devices.

If you agree to the use of Google Ads Remarketing, cookies will be set on your end device. The legal basis for this is Section 25(1) German Telecommunications-Telemedia Data Protection Act (TTDSG). Any subsequent data processing is based on your consent given to us in accordance with Art. 6(1)(a) GDPR. The cookies used by Google Ads have a lifespan of 15 minutes to 1 year and are used to check whether the browser allows cookies to be set, to assign an ID to the user and to track the advertising that has been clicked on.

Google receives the data as an independent data controller, and not as a service provider.

The information collected through the use of Google Ads Remarketing will be deleted after 9 or 18 months (https://policies.google.com/technologies/ads).

The use of Google Ads Remarketing may result in the transfer of your data to the USA. The data transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.

You can prevent the transmission of data to Google by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996. If you have a Google account, you can object to personalised advertising via the following link: www.google.com/settings/ads/onweb.

3. Data transfer to third countries

The use of the company mentioned under Section 2. g. to j. may result in a transfer of your data to a third country and thus outside the EEA. Details can be found in the illustration.

4. Data recipients

When you visit our website, the recipients of your data are initially only the service providers and companies named above. In addition, service providers commissioned by us assist us with maintaining, enhancing, and further developing our website; these service providers only process your data on our instructions and on our behalf. Your data may also be passed on to other companies affiliated with us for internal administrative purposes.

Your data will only be disclosed beyond this on the basis of a legal obligation, such as to authorities or for the defence, assertion, exercise, or defence of legal claims.

5. Necessity of data collection

You are under no contractual or legal obligation to provide us with the information described in this Privacy Policy.

6. Data subject's rights

You have the following rights and claims against the controller under the GDPR: 

  • The right to information (Art. 15 GDPR)
  • The right to rectification (Art. 16 GDPR)
  • The right to erasure (Art. 17 GDPR)
  • The right to restriction of processing (Art. 18 GDPR)
  • The right to data portability (Art. 20 GDPR)

You have the right to revoke any consent given to us at any time with effect for the future. This also applies to consent for cookies and other technologies.

7. Data subject's right to object in accordance with Art. 21 GDPR

Art. 21 GDPR gives the data subject the right to object at any time, on grounds relating to their particular situation, to the processing of personal data relating to them that is performed on the basis of Art. 6(1)(f) GDPR with effect for the future.

The controller will then no longer process the data subject's personal data unless the controller can demonstrate compelling legitimate grounds for processing which override the data subject's interests, rights and freedoms, or processing is for the purpose of asserting, exercising, or defending legal claims.

The data subject may object to the processing of data for the purpose of direct marketing at any time with effect for the future. In the event of an objection, the controller will refrain from any further processing of the data for the purpose of direct marketing.

8. Right to complain to a supervisory authority

The data subject has the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. According to this provision, any data subject may, without prejudice to any other administrative or judicial remedy, lodge a complaint with a supervisory authority, in particular in the Member State where they reside, work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR.

The following data protection supervisory authority is responsible for us:

Commissioner for Data Protection and Freedom of Information in Hesse
Gustav-Stresemann-Ring
65189 Wiesbaden
You can find the online complaint form at:
https://datenschutz.hessen.de/service/beschwerde

You are also welcome to contact us first.

All apartments incl. purchase price