Privacy Policy

Information pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR).

General Information

The protection of personal data is important to us. This website processes personal data only to the extent required for functional and user-friendly operation.

Controller

The controller responsible for data processing on this website is:

E-mail: [email protected]

Data Collected When Visiting the Website

When this website is accessed, the browser used automatically transmits certain information, which is stored temporarily in what are known as server log files. This may include:

• IP address of the requesting device
• Date and time of access
• Referrer URL (previously visited page, where available)
• Browser type and version
• Operating system of the device

This data is processed to ensure the stability and security of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).

Hosting

This website is operated on Vercel Inc., with delivery from the Frankfurt am Main data centre location. Vercel processes the access data described above as a processor under a contract pursuant to Art. 28 GDPR.

Vercel Inc. is based in the United States. Where personal data is transferred to a third country, this takes place on the basis of the European Commission's Standard Contractual Clauses.

Vercel's privacy policy: https://vercel.com/legal/privacy-notice

Content Delivery Network

A content delivery network operated by Cloudflare, Inc. sits in front of this website. All requests are routed through Cloudflare's servers first, in the course of which the IP address of the requesting device is processed. It is used for delivery speed and to mitigate attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).

Cloudflare, Inc. is based in the United States. Where personal data is transferred to a third country, this takes place on the basis of the European Commission's Standard Contractual Clauses.

Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Audience Measurement

Plausible Analytics is used for audience measurement. The analysis is designed to work without recognising individual people:

• Only aggregated metrics are collected
• No personal identifiers are used and no cross-device profiles are built
• No cookies are set

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in data-minimising audience measurement).

Plausible's privacy policy: https://plausible.io/data-policy

Waitlist

When joining the waitlist, the e-mail address provided is transmitted in order to give notice of the PropBlizz launch. No further information is collected.

The signup is confirmed by double opt-in: after the form is submitted, an e-mail containing a confirmation link is sent. The address is initially stored as unconfirmed; consent is given only once that link is opened.

Delivery is handled by MailerLite Limited, 88 Harcourt Street, Dublin 2, Ireland, as a processor pursuant to Art. 28 GDPR.

Data is stored in the Netherlands. No transfer to a third country takes place.

The legal basis is consent pursuant to Art. 6 (1) (a) GDPR.

Consent may be withdrawn at any time with effect for the future, for example via the unsubscribe link in every e-mail or informally to the contact address given above. The lawfulness of processing carried out before withdrawal remains unaffected.

MailerLite's privacy policy: https://www.mailerlite.com/legal/privacy-policy

User Accounts and Sign-In

Supabase is used for signing in to protected areas. This involves processing the e-mail address, the credentials and the information required for session management.

The legal basis is Art. 6 (1) (b) GDPR (taking steps prior to entering into a contract and performance of the usage agreement).

Data is stored in the London region (United Kingdom). An adequacy decision of the European Commission is in place for the United Kingdom.

Supabase's privacy policy: https://supabase.com/privacy

Cookies

This website uses only strictly necessary and functional cookies. No cookies are used for advertising or tracking purposes.

• NEXT_LOCALE stores the selected language
• Session cookies for sign-in, set only after signing in

As these are cookies strictly necessary for the service explicitly requested, no consent is required under Section 25 (2) no. 2 TDDDG.

Local Storage of the Theme Preference

The selected light or dark appearance is stored in the browser's local storage. This entry remains on the device and is not transmitted to us.

Retention Period

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. Server log files are deleted automatically after a short period. Waitlist entries are stored until consent is withdrawn.

Rights of Data Subjects

Data subjects have the following rights vis-à-vis the controller:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

An informal message to the contact address given above is sufficient to exercise these rights.

Competent Supervisory Authority

The competent supervisory authority for data protection is:

Website: https://www.lda.brandenburg.de/

Last Updated

This privacy policy was last updated on 28 July 2026.