Last Updated: 15 August 2026
At Emlak24 ("Platform" or "We"), we attach the highest importance to the security and confidentiality of your personal data. This Privacy Policy explains how your personal data is collected, processed, protected, and shared when you use our platform (website and mobile applications). Our data processing activities are carried out in full compliance with all applicable data protection legislation, in particular the European Union General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Data Controller (Verantwortlicher)
Pursuant to Article 4(7) GDPR, Emlak24 is the legal entity responsible for the processing of your personal data. You may contact our data protection officer (Datenschutzbeauftragter) at any time with questions about our data protection practices or to exercise your rights.
2. Personal Data Collected
When you use our Platform, the following categories of data may be collected:
- Registration and Account Information: First name, last name, email address, phone number, password, and (where applicable) company information (VAT ID no., etc.).
- Listing and Content Data: Real estate information, photos, videos, descriptions, and messaging history that you upload to the Platform.
- Usage and Technical Data: IP address, browser type and version, operating system, pages visited, date and time of access, referring URL.
- Payment Information: Billing information processed when paid services are purchased (credit card data and similar information is not stored by Emlak24 but processed directly by licensed payment infrastructure providers).
3. Purposes and Legal Bases of Processing (Zwecke und Rechtsgrundlagen)
Your personal data is processed only for specific, explicit, and legitimate purposes on the following legal bases:
- Performance of a Contract (GDPR Article 6(1)(b)): Account creation, listing publication, provision of messaging infrastructure between buyers and sellers, and processing of payments.
- Legitimate Interests (GDPR Article 6(1)(f)): Ensuring Platform security, fraud prevention, analysis and improvement of our services, and remediation of technical errors.
- Explicit Consent (GDPR Article 6(1)(a)): Activities such as newsletter subscriptions, marketing communications, and targeted advertising (via cookies) are carried out only on the basis of your prior explicit consent.
- Legal Obligation (GDPR Article 6(1)(c)): Compliance with statutory retention periods under tax and commercial law (e.g. under the German Commercial Code (HGB) and Fiscal Code (AO)).
4. Transfer of Data to Third Parties (Weitergabe von Daten)
Your personal data will not be sold to third parties without your consent. However, to provide our services, your data may be shared with the following categories of recipients:
- Service Providers (Auftragsverarbeiter): Hosting companies, cloud computing providers, customer support services, and IT security specialists (bound by data processing agreements pursuant to GDPR Article 28).
- Payment Providers: To complete transactions for paid services.
- Legal Authorities: Official authorities in accordance with court orders, prosecution requests, or legal obligations.
Note: As a rule, your data is processed within the European Economic Area (EEA). If transfer outside the EEA is required, such transfer takes place only within the framework of appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCC).
5. Data Retention Period (Speicherdauer)
Your personal data is stored for as long as required by the purpose of processing. When you delete your account, your data is deleted immediately or anonymized. However, invoice and contract data that must be retained under commercial or tax law (e.g. Section 257 of the German Commercial Code or Section 147 of the Fiscal Code) is kept locked until the end of the statutory period (generally 6–10 years) and processed only for legal compliance purposes.
6. Cookies and Tracking Technologies
We use cookies to ensure the proper functioning of our Platform, optimize user experience, and perform analytics:
- Essential Cookies: Required for core Platform functions (e.g. login, security) and cannot be rejected.
- Analytics and Marketing Cookies: Used only on the basis of explicit consent given through the Cookie Consent Tool (Cookie Banner).
7. User Rights (Ihre Rechte als betroffene Person)
Under the GDPR, you have the following rights:
- Right of Access (Auskunftsrecht – Article 15): To learn which of your data is being processed.
- Right to Rectification (Recht auf Berichtigung – Article 16): To request correction of inaccurate or incomplete data.
- Right to Erasure (Recht auf Löschung/Vergessenwerden – Article 17): To request deletion of your data where conditions are met.
- Right to Restriction (Recht auf Einschränkung – Article 18): To request limitation of processing of your data.
- Right to Data Portability (Recht auf Datenübertragbarkeit – Article 20): To receive your data in a structured, commonly used, and machine-readable format.
- Right to Object (Widerspruchsrecht – Article 21): To object at any time to processing based on legitimate interests (in particular direct marketing).
- Right to Withdraw Consent (Widerruf der Einwilligung – Article 7(3)): To withdraw consents you have given at any time with effect for the future.
To exercise your rights, you may contact our support team via the Platform. You also retain the right to lodge a complaint with the competent supervisory authority (Aufsichtsbehörde) (GDPR Article 77).
8. Data Security (Datensicherheit)
We implement technical and organizational security measures at current industry standards to protect your data against unauthorized access, loss, or manipulation. All data transfers on our website and Platform are encrypted using SSL/TLS technology.
9. Policy Changes
Emlak24 reserves the right to amend this Privacy Policy due to updates in legislation or new Platform features. Material changes will be announced to registered users by email or via a notice on the website.