Protecting your personal data is an important concern for us. We handle your data confidentially and in accordance with legal data protection regulations as well as this privacy policy.

---

General Information

The use of our website is generally possible without providing personal data. However, certain features or forms may require the input of personal information. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telemedia Act (TMG). This privacy policy informs you about the nature, scope, and purpose of data processing, as well as your rights as a data subject.

---

1. Responsible Entity

AREAL Grundstücks- und Bauträgergesellschaft mbH
Managing Director: Dirk Schubert
Brückenstraße 17
50667 Cologne, Germany
Phone: +49 221 20233-0
Email: zentrale@areal.de

Data Protection Officer:
Frank Faulhaber
Email: datenschutzbeauftragter@areal.de

---

2. Website Hosting via Webflow

Our website is hosted by Webflow, Inc. (398 11th Street, 2nd Floor, San Francisco, CA 94103, USA). When you visit the website, certain information is automatically collected and transmitted by your browser, such as: IP address, date and time of the request, referrer URL, browser type, version, and operating system. These data are stored on Webflow’s servers in the USA. The transfer of personal data to the USA is based on the EU Standard Contractual Clauses under Art. 46 GDPR. A Data Processing Agreement (DPA) with Webflow has been concluded.

For more details, please refer to Webflow’s privacy policy:
https://webflow.com/legal/privacy
Legal basis: Art. 6 (1)(f) GDPR – legitimate interest in a secure and functional website.

---

Use of Locally Hosted Fonts

To ensure consistent typography, we use only locally hosted font files stored on our own server. No connection is established to third-party servers, especially those operated by Google LLC (e.g., fonts.googleapis.com or fonts.gstatic.com). Fonts are loaded directly from our web server, meaning no personal data is transferred to external services.

Legal basis:  Art. 6 (1)(f) GDPR – our legitimate interest in a visually appealing and secure website experience.

---

Contact Form

When you contact us via form, your submitted information (name, email address, message) is stored for the purpose of processing your inquiry. Additionally, the timestamp and IP address are logged to prevent misuse.

Legal basis:
Art. 6 (1)(a) GDPR – consent
Art. 6 (1)(b) and (f) GDPR – performance of a contract / legitimate interest

---

Google Maps

This website uses Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and, where applicable, location data may be transmitted to Google.

For more information:
https://www.google.com/policies/privacy

Legal basis:
 Art. 6 (1)(f) GDPR – legitimate interest

---

Your Rights

As a data subject, you have the following rights:

* Right of access (Art. 15 GDPR)
* Right to rectification (Art. 16 GDPR)
* Right to erasure (Art. 17 GDPR)
* Right to restriction of processing (Art. 18 GDPR)
* Right to data portability (Art. 20 GDPR)
* Right to object (Art. 21 GDPR)
* Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you have any questions or wish to exercise your rights, please contact us using the details provided above.

---

Data Security

All data transmissions are protected by SSL/TLS encryption. We have implemented both technical and organizational measures to safeguard your personal data to the best of our ability. However, we note that internet data transmission may still present security vulnerabilities.

---

Let me know if you would like this formatted as a downloadable PDF or directly implemented into your website layout.