Privacy Policy

Protecting your personal data is important to us. We process your data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the applicable telemedia and telecom privacy rules.

1. Controller

The controller within the meaning of the GDPR is:
Daniel Petrov
“Velocity Real Estate”
Trautenaustr 11
10717 Berlin
Germany
Email: kontakt@velocity.immo
Phone: +49 30 55514306

2. Hosting and server log files

Our website is hosted by a service provider within the European Union. When you visit our site, the provider automatically collects and stores server log files, such as IP address, date and time of access, accessed URL, HTTP status code, referrer URL, browser type and operating system. We use these data to ensure the technical operation and security of the website.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the provision and security of our online offer. Log data are deleted automatically after a short period unless further storage is required for evidence purposes.

3. Contact requests

When you contact us by contact form, email or telephone, we process the personal data you provide (such as name, contact details and the content of your message) in order to handle your request and any follow-up questions.

If your request relates to the initiation or performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. In other cases, processing is based on our legitimate interest in properly handling incoming queries (Art. 6 (1) (f) GDPR). Where you give explicit consent to further contact, the legal basis is Art. 6 (1) (a) GDPR.

4. Property valuation and lead processing

Via our valuation service you can request a non-binding assessment of a property. For this purpose we process the information you provide about the property (for example type, location, size, features) as well as your contact details (name, email, phone) so that we can advise you regarding the valuation and, where appropriate, request further documents.

The legal basis is Art. 6 (1) (b) GDPR, as the processing takes place in order to carry out pre-contractual measures at your request. If we use your details to keep in touch or send matching offers, this is based on our legitimate interest in professional brokerage and client service (Art. 6 (1) (f) GDPR) and, where required, on your consent (Art. 6 (1) (a) GDPR).

4.1 Use of a CRM system for contact and process management

To organize contacts, property inquiries, valuation data and brokerage processes in a structured way, we use an external CRM system provided by a European service provider. Within this system we process the contact and property-related information you submit to us in order to handle inquiries efficiently, document activities and coordinate follow-ups.

We have concluded a data processing agreement with this provider in accordance with Art. 28 GDPR. Personal data is processed exclusively on our instructions, within the European Union and in compliance with the applicable data protection standards.

4.2 Temporary storage and technical queues for valuation requests

If interfaces are temporarily unavailable or technical issues occur, valuation and contact requests may be temporarily stored in an internal, encrypted queue. In this context, technical metadata (such as timestamps or checksums) as well as pseudonymised or encrypted information relating to your request may be processed so that it can be reliably transferred to our CRM once systems are restored.

This temporary storage is carried out solely to ensure the technical delivery of your request to our CRM and is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to process your request reliably even in the event of short-term system outages. The queues are regularly cleaned up automatically and are deleted at the latest after a defined retention period (e.g. 90 days).

5. Newsletter

If you subscribe to our newsletter, we process your email address and any optional information you provide in order to send you regular information on market reports, offers and services of Velocity Real Estate.

We generally use a double opt-in process. This means that you will only be added to the mailing list after you have confirmed your subscription via a link in a confirmation email.

The legal basis is your consent (Art. 6 (1) (a) GDPR in conjunction with the German Act Against Unfair Competition). You may revoke your consent at any time with effect for the future, for example via the unsubscribe link in each newsletter or by contacting us using the details above.

6. Cookies, Google services and consent management

We use cookies and similar technologies. Technically necessary cookies are required to operate the website and are based on Art. 6 (1) (f) GDPR in conjunction with the applicable telecommunication and telemedia rules.

6.1 Google Maps / Google Places / Geocoding

For address search and geolocation in our valuation service we use services of Google, such as the Maps Platform, Places API and Geocoding API. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It is possible that data are transferred to servers of Google LLC in the USA.

These optional services are only loaded after you have given your explicit consent via our consent banner. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via the cookie settings on our website.

6.2 Web analytics with Google Analytics (GA4)

We use Google Analytics in the current Google Analytics 4 version (“GA4”), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 enables us to analyse the use of our website in order to improve and optimise our online offer.

For this purpose Google uses cookies and similar technologies to recognise returning visitors and to compile usage statistics (for example page views, time spent on pages, devices used). We have configured Google Analytics so that IP addresses are only processed in truncated form (“IP anonymisation”), so that no direct personal reference is possible.

Processing only takes place if you have explicitly consented to the “Analytics” category via our consent banner. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with the applicable telecommunication and telemedia rules. You may withdraw your consent at any time with effect for the future via the cookie settings on our website.

It is possible that data are transferred to servers of Google LLC in the United States. For such transfers, Google relies on the mechanisms provided for in the GDPR for transfers to third countries (for example standard contractual clauses). For further details on data processing by Google please refer to Google’s privacy policy.

6.3 Spam and abuse protection

To protect our forms (such as contact forms, newsletter sign-ups and valuation requests), we use modern verification mechanisms designed to detect and prevent automated or abusive submissions. When a form is submitted, a short verification token is generated and validated on our server.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our systems, preventing misuse and ensuring the proper operation of our online forms. The technical information processed for this purpose is used solely for abuse detection and is not used for any other purpose.

7. Recipients and third countries

Depending on the individual case, recipients of personal data may include:

• IT and hosting providers
• CRM providers (external European service provider)
• Email and communication service providers
• Cooperation partners and interested parties where required for brokerage
• Authorities, courts and external advisors where there is a legal obligation or legitimate interest

Where we transfer data to recipients outside the EU/EEA (for example Google in the USA), we ensure an adequate level of data protection, for instance through EU adequacy decisions, standard contractual clauses and additional technical and organisational measures.

8. Storage period

We store personal data only as long as necessary for the relevant purposes or as required by statutory retention obligations. When the purpose no longer applies or mandatory retention periods expire, data are deleted in accordance with our deletion routines.

9. Your rights

Within the scope of the GDPR you have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing operations
• Right to withdraw consent with effect for the future

You may exercise these rights at any time by contacting us using the details above. You also have the right to lodge a complaint with a data protection supervisory authority.

This English translation is for information only. In case of doubt, the German version of our privacy notice shall prevail.

Last updated: November 2025