Privacy policy

This is a translation for your convenience. The legally binding version is the German Datenschutzerklärung; in case of doubt the German version applies.

1. Controller

Bastian Benteler Immobilienservice, Bastian Benteler, Krukenhorst 12, 33161 Hövelhof, Germany, e-mail: [email protected], phone: +49 156 7880 2118.

2. Principle

We do not load fonts or scripts from third parties. We only use marketing tools (Meta Pixel, see section 13) if you agree in the notice on your first visit. We store your decision in your browser's local storage. You can change it at any time via “Cookie settings” in the footer.

3. Hosting

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When you visit it, Cloudflare processes technically necessary data such as IP address, time and requested page in order to deliver the page and protect it against attacks. The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework. Data from the form is stored in a Cloudflare database.

4. Investment check and budget calculator

The calculation takes place in your browser. Your details are only transmitted when you submit your contact details. To improve the investment check we count anonymously how often the individual steps are reached. No cookies are set and no personal data or IP addresses are stored (Art. 6(1)(f) GDPR).

5. Enquiry via the contact form

When you submit the form, we store your name, e-mail, phone number, postcode, your answers, the inputs and result of the calculator, your preferred language and, where applicable, the campaign parameters of the link you came from. We use this data to send you your result, to advise you and to present suitable properties to you. The legal basis is pre-contractual measures at your request (Art. 6(1)(b) GDPR). We contact you about your enquiry by e-mail, phone or WhatsApp. You can object to this at any time.

First call: In the first call we also ask about your employment, your household net income as a rough range (no exact figure), whether you are looking for individual flats or whole buildings and whether Leipzig is an option for you. The answers are voluntary. We store them with your enquiry to assess whether our offers suit you and to prepare the consultation (Art. 6(1)(b) GDPR). If you do not have German citizenship, we also ask about your residence permit and since when you have been living and working in Germany. This helps us assess whether financing is possible.

Budget form (self-disclosure): If you fill in the budget form, we also store your details on occupation, income, household, expenses, equity and existing loans or properties. From this we automatically calculate your budget and a tax model calculation for suitable properties (Art. 6(1)(b) GDPR). The calculation is a non-binding orientation. There is no automated decision with legal effect; we discuss the assessment with you in person.

Details for the bank: In the optional second part of the self-disclosure we also store personal details, address, details on your employer, assets and liabilities so that financing can be requested (Art. 6(1)(b) GDPR). If you wish, you can also provide ID details, tax ID and IBAN there so that the bank does not have to ask for them again. We store these details only in encrypted form; only the owner of KapitalAnlageImmo and your responsible adviser can see them. We never use them in e-mails or messages. We only pass these details on to banks or financing platforms if you have expressly consented there (Art. 6(1)(a) GDPR, see also section 11). You can withdraw your consent at any time by e-mail to [email protected].

Registration as a business partner: If you register as a business partner, we store company, contact person, e-mail, phone, region, details of the property portfolio, the calendar link and your message in order to prepare the contract and contact you about it (Art. 6(1)(b) GDPR).

We delete your data when it is no longer needed for the consultation, at the latest three years after the last contact, unless there are statutory retention obligations (e.g. under the Money Laundering Act or commercial and tax law in the case of a purchase).

6. E-mail

We send and receive e-mails via Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin, Ireland). We have a data processing agreement with Microsoft.

Tips by e-mail: Only if you tick “Tips by e-mail” in the budget check or calculator and confirm the link in our e-mail (double opt-in) do we occasionally send you tips on property investment and new suitable flats by e-mail (Art. 6(1)(a) GDPR). We store the time of your confirmation. You can withdraw your consent at any time via the unsubscribe link in every e-mail.

7. Appointment booking

For phone appointments we use a scheduling tool at termine.kapitalanlageimmo.de (SimplyMeet). There you enter your name, e-mail and phone number for the appointment. The legal basis is Art. 6(1)(b) GDPR.

8. WhatsApp

If you have consented or write to us via WhatsApp yourself, we communicate with you via WhatsApp (WhatsApp Ireland Limited, Dublin, Ireland). We use Meta's WhatsApp Business Platform for this (Meta Platforms Ireland Limited, Dublin, Ireland). Your phone number, your WhatsApp profile name and the messages are processed and stored with us in the history of your enquiry. We use it to send you appointment confirmations, reminders and questions about your enquiry. Reply “STOP” to end automatic messages at any time. You can also talk to us by e-mail or phone instead.

9. Video calls

For video calls we use the Jitsi server of Freifunk München (meet.ffmuc.net, Freifunk München e. V.). You enter the room via a link of the form kapitalanlageimmo.de/raum/… and need no account and no app. The name you enter, picture and sound and, technically, your IP address are processed, only for the duration of the call. You can switch off camera and microphone at any time. The legal basis is Art. 6(1)(b) GDPR.

10. Use of artificial intelligence (AI)

For some tasks we use AI models from Anthropic. Our contractual partner is Anthropic Ireland, Limited (Dublin, Ireland); processing also takes place at Anthropic, PBC in the USA. Anthropic acts as our processor under Art. 28 GDPR and does not use the transmitted data to train its models. We use AI for these purposes:

Conversations and replies via WhatsApp and e-mail: When you write to us, an AI can prepare a reply or reply directly. For some new enquiries an AI also conducts the first conversation and the consultation via WhatsApp, including the questions about your self-disclosure, pension and tax burden. For this it receives your messages, the previous history and the details of your enquiry needed for the conversation. Automatic messages are marked as such. The investment strategy session and the purchase are always handled by a person.
Checking your documents: If you upload a document for financing in the client portal, an AI briefly checks whether it is the right document and whether it is legible, complete and recent enough. We only store the result of the check (for example “fits”), no content from the document. We do not check your identity card with AI.
Bank documents: If our financing partner places a bank document about your financing in the portal (for example a loan offer), an AI evaluates it to mark the places where you need to sign and to briefly explain the key data. Only this key data and the marked version are stored.
Supporting our advisers: For example calculations and questions about the consultation, an AI can use details from your self-disclosure, without your name.

The AI does not make decisions with legal effect about you (Art. 22 GDPR). A person confirms in the end whether a document fits. The transfer to the USA is based on the EU Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which are part of Anthropic's Data Processing Addendum. The legal basis is Art. 6(1)(b) GDPR, as this concerns handling your enquiry and preparing your financing, and our legitimate interest in quick answers and a complete document check (Art. 6(1)(f) GDPR).

11. Advice by partners and disclosure

For first calls and consultations we also work with independent, vetted advisers. If such an adviser takes over your call, they receive the details from your enquiry needed for it: name, contact details, appointment and your details from the investment check or self-disclosure. You find out who your contact person is before the appointment. The legal basis is Art. 6(1)(b) GDPR, because you requested the call. The advisers may only use your data for your consultation and are bound to confidentiality.

If you want to buy a specific property or request financing, we only pass your data on to the respective seller, notary or financing partner after agreeing this with you beforehand.

12. Enquiries to private sellers

When we write to owners about a publicly advertised property, we process the details from the advert (for example name, contact channel and details of the property) and our correspondence. The purpose is the purchase enquiry for this property. The legal basis is our legitimate interest in the enquiry (Art. 6(1)(f) GDPR). If no purchase comes about, we delete the data six months after the refusal. You can object to the processing at any time, simply by replying to our message or to [email protected].

13. Meta Pixel, Conversions API and instant forms

Only if you agree do we integrate the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. It helps us measure which ads on Facebook and Instagram lead to enquiries and show ads to people with similar interests. Meta sets cookies and processes e.g. IP address, browser data and visited pages, possibly also in the USA (Meta is certified under the EU-US Data Privacy Framework). If you have agreed and submit an enquiry, we additionally send the “Lead” event directly from our server to Meta, with encrypted (hashed) details of e-mail, phone and name, so that Meta can attribute the enquiry to an ad. We are jointly responsible with Meta for this processing (Art. 26 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time via “Cookie settings”.

Showing ads again (retargeting). With your consent we can show you our ads again on Facebook and Instagram if you have visited our website or started the check. For this, Meta forms audiences from the pixel data (Website Custom Audiences), for example “website visitors” and “check started without enquiry”. We do not see individual people, only the size of the group. You remain in the audience for 30 days after your last visit. The legal basis is your consent as above; if you withdraw it, the pixel no longer sends any data.

Enquiry via an instant form on Facebook or Instagram. If you write to us directly in an ad via a Meta form (Lead Ads), Meta collects your details in this form (first name, last name, e-mail, phone, postcode and your answers on goal, employment, start time and preferred time for the call back) and provides them to us. We retrieve them via Meta's interface and store them like an enquiry via our website (sections 4 and 11). We do not ask about income or assets in the form. We are jointly responsible with Meta for the collection in the form (Art. 26 GDPR); what Meta itself does with the data is described in Meta's privacy policy, possibly also with processing in the USA (EU-US Data Privacy Framework). The legal basis is handling your enquiry (Art. 6(1)(b) GDPR) and, for contact by e-mail, phone and WhatsApp, your consent in the form (Art. 6(1)(a) GDPR), which you can withdraw at any time.

14. Explainer video

An explainer video is embedded on the German home page. It is stored on our own web server (Cloudflare, see hosting) and is only loaded when you click on the preview image. No connection is made to third parties such as YouTube.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) as well as the right to withdraw consent with effect for the future. An e-mail to [email protected] is enough. You can also complain to a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

As of October 2026