Thank you for visiting our website www.nuville-frankfurt.de ("website") and for your interest in our company. When you visit our website, we also process your personal data ("data") in the sense of Art. 4 (1) of the General Data Protection Regulation ("GDPR"). We are aware of the importance of the data you entrust to us. Protecting your privacy when processing your data is of great importance to us and we always take this into account in our business processes. Your data will be handled in accordance with the legal provisions governing data protection.
1. Controller and data protection officer
The controller within the meaning of Art. 4 (7) GDPR for the processing of your data relating to this website is:
Nassauische Heimstätte Wohnungs- und Entwicklungsgesellschaft mbH ("NH” or “we”)
60596 Frankfurt am Main
You can reach NH’s data protection officer at the following address:
Dr Dennis Voigt
Im Breitspiel 21
2. Purpose of data processing, legal basis, storage period, recipients, and transfer to third countries
Your data may be processed on a different legal basis depending on the purpose of processing. When operating our website, we are supported in part by contract processors who handle your data on our behalf and in accordance with our instructions and are therefore recipients of your data ("service providers"). Your data may also be disclosed to other companies.
Below we set out the different purposes for which your data may be processed on our website, stating the relevant legal basis as well as indicating the retention period. We also provide you with information about whether the company is a service provider and whether any transfer of your data will take place outside the EU or the European Economic Area ("EEA").
a. Accessing our website and the server logfile
It is strictly necessary from a technical perspective for the web server hosting our website to process data from you in order to display our website on your terminal device. For this purpose, we process your IP address together with the date and time of access, name and URL of the accessed file, referrer URL (website from which access is made), the amount of data transferred and loading time in a server log file. A service provider assists us with hosting.
The legal basis for storing information in the form of cookies or in the server log file on your terminal device or accessing this information on your terminal device is Section 25 (2) (2) of the German Telecommunications and Teleservices Data Protection Act (TTDSG).
Your data is processed in accordance with Art. 6 (1) (f) GDPR. It is necessary to process your IP address in order to protect our legitimate interests with regard to the accessibility and correct presentation of our website. Storing your data in a server log file in addition to this serves to protect our legitimate interests in operating our website securely and without errors and in being able to recognise, limit and eliminate faults and errors.
Your data stored in our server logfile will be automatically deleted 1 month after your visit to our website.
Our website gives you the opportunity to contact us about a variety of topics.
If you use our contact form to contact us, the mandatory information you have to provide is marked as such. This information is required in order to process your request. All other information is voluntary and will only be used to answer your enquiry more precisely. You can also contact us by telephone, e-mail, post, or fax. The data we process from you in this context may vary depending on the communication channel, but we generally collect your first and last name, your address, your telephone number, your e-mail address, and your fax number. A service provider assists us with the contact form. Furthermore, the following data are collected:
- Identifier of the last selected flat ("flat ID")
- Identifiers of other selected flats ("favourites"), where applicable
- URL of the navigator accessed
- The language selected in the navigator
- Browser user agent data
If the purpose of your contact is to find out more about the freehold flats offered on our website, we will forward your enquiry to the relevant sales representative, who will contact you and provide a comprehensive response to your request.
The legal basis for accessing information in your terminal device is Section 25 (2) (2) TTDSG.
If the purpose of your contact is to conclude a contract or is related to a contract, we process your data on the basis of Art. 6 (1) (b) GDPR. If the purpose of your contact is of a general nature, we process your data in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interests in answering your enquiry about our company and/or our service offering individually and in the most appropriate manner.
Where your data are related to a contractual relationship, we will delete them only after the expiry of any retention obligations under commercial or tax law, which may be up to 6 years from the end of the year in which you contacted us. We will delete all other data when your enquiry has been finally clarified and we are not subject to any legal obligation to retain the relevant data.
c. Communication by post
If you contact us with a view to concluding a contract or in connection with a contract, we may subsequently use the information you have given us to contact you by post.
The processing of your data is based on Art. 6 (1) (b) GDPR.
We may only delete your data after the expiry of commercial or tax retention obligations, which can be up to 6 years from the end of the year in which you contacted us.
d. Strictly necessary cookies
Cookies are small files that are sent by us to your terminal's browser when you visit our website and are stored there. We use strictly necessary cookies on our website to ensure the basic functions of our website. The cookies contain a what is known as a session ID, which can be assigned to various requests made by your terminal device during your visit to our website.
The legal basis for storing information in the form of cookies on your terminal device or accessing this information on your terminal device is Section 25 (2) (2) of the German Telecommunications and Teleservices Data Protection Act (TTDSG).
The legal basis for the associated processing of your data is Art. 6 (1) (f) GDPR. The use of strictly necessary cookies is required to protect our legitimate interests with regard to the accessibility and correct presentation of our website and to ensure its full functionality.
Strictly necessary cookies are deleted at the latest after you have closed the browser you are using.
If you do not wish cookies to be set on your terminal device, you can manage this centrally in the browser you use. You can also delete cookies via your browser.
However, blocking or deleting them may result in a noticeable restriction of the usability of our website for you.
e. Consent management
The cookie is valid for 365 days unless you delete it from your browser before then.
Our website uses the web analytics tool Matomo (formerly Piwik) from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("InnoCraft Ltd.”).
Matomo is an open-source tool for web analytics. Cookies are used for this purpose, which are stored on your computer, and which enable a pseudonymous analysis of the way you use our website. The IP address is abridged immediately after it is acquired and before it is stored. If you consent to web analysis using Matomo, the following data will be collected when you access individual pages on our website:
- The user's IP address, with the last three bytes removed (anonymised)
- The particular page called and the time of retrieval
- The page from which the user accessed our website (referrer)
- Which browser is used with which plug-ins, together with the operating system and screen resolution
- The duration of the visit to our website
- The pages that are visited from the actual page accessed
If you consent to the use of Matomo, cookies will be set on your terminal device, for which the legal basis is Section 25 (1) TTDSG. Any subsequent processing of data is based on your consent given to us in accordance with Art. 6 (1) (a) GDPR.
The data collected by Matomo will remain active from the end of the browser session up to 13 months and is used to recognise the user of the website for statistical purposes, to store attribution information and to store a unique visitor ID.
We host Matomo exclusively on our own servers so that all analytical data remains with us and are not shared.
g. Google Ads Remarketing
We use Google Ads Remarketing of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google Ireland”) on our website.
Google Ads Remarketing analyses user behaviour on our website (e.g., clicking on certain products/ads), in order to assign you to specific advertising target groups. The Remarketing function allows us to present advertisements to the users of our website – which are based on their interests – on other websites within the Google network.
In addition, Google Ads Remarketing enables the linking of those advertising target groups that have been created with Google’s cross-device functions. This means that interest-based (and personalised) advertising that has been adapted to you on one of your end devices – depending on your previous usage and surfing behaviour – can also be displayed on another of your end devices.
If you agree to the use of Google Ads Remarketing, cookies will be set on your end device. The legal basis for this is Section 25 (1) German Telecommunications-Telemedia Data Protection Act (TTDSG). Any subsequent data processing is based on your consent given to us in accordance with Art. 6 (1) lit. a) GDPR. The cookies used by Google Ads have a lifespan of 15 minutes to 1 year and are used to check whether the browser allows cookies to be set, to assign an ID to the user and to track the advertising that has been clicked on.
Google receives the data as an independent data controller, and not as a service provider.
The information collected through the use of Google Ads Remarketing will be deleted after 9 or 18 months (https://policies.google.com/technologies/ads).
The use of Google Ads Remarketing results in a transfer of your data to the USA. There is no adequacy decision in place by the European Commission for data transfers to the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which we have concluded with Google in a data processing contract, which can be viewed at: https://privacy.google.com/businesses/controllerterms.
You can prevent the transmission of data to Google by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996. If you have a Google account, you can object to personalised advertising via the following link: www.google.com/settings/ads/onweb.
3. Data transfer to third countries
The use of the company mentioned under Point 2. g. may result in a transfer of your data to a third country and thus outside the EEA. Details can be found in the illustration.
4. Data recipients
When you visit our website, the recipients of your data are initially only the service providers and companies named above. In addition, service providers commissioned by us assist us with maintaining, enhancing, and further developing our website; these service providers only process your data on our instructions and on our behalf. Your data may also be passed on to other companies affiliated with us for internal administrative purposes.
Your data will only be disclosed beyond this on the basis of a legal obligation, such as to authorities or for the defence, assertion, exercise, or defence of legal claims.
5. Necessity of data collection
6. Data subject's rights
You have the following rights and claims against the controller under the GDPR:
- The right to information (Art. 15 GDPR)
- The right to rectification (Art. 16 GDPR)
- The right to erasure (Art. 17 GDPR)
- The right to restriction of processing (Art. 18 GDPR)
- The right to data portability (Art. 20 GDPR)
You have the right to revoke any consent given to us at any time with effect for the future. This also applies to consent for cookies and other technologies.
7. Data subject's right to object in accordance with Art. 21 GDPR
Art. 21 GDPR gives the data subject the right to object at any time, on grounds relating to their particular situation, to the processing of personal data relating to them that is performed on the basis of Art. 6(1)(f) GDPR with effect for the future.
The controller will then no longer process the data subject's personal data unless the controller can demonstrate compelling legitimate grounds for processing which override the data subject's interests, rights and freedoms, or processing is for the purpose of asserting, exercising, or defending legal claims.
The data subject may object to the processing of data for the purpose of direct marketing at any time with effect for the future. In the event of an objection, the controller will refrain from any further processing of the data for the purpose of direct marketing.
8. Right to complain to a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. According to this provision, any data subject may, without prejudice to any other administrative or judicial remedy, lodge a complaint with a supervisory authority, in particular in the Member State where they reside, work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR.
The following data protection supervisory authority is responsible for us:
Commissioner for Data Protection and Freedom of Information in Hesse
You can find the online complaint form at:
You are also welcome to contact us first. As we all know, a telephone call can clarify a lot of things.