Skip to content
    FRITZTOWER

    Privacy Policy

    We take the protection of your personal data seriously and treat your data confidentially in accordance with statutory data protection regulations (GDPR, German Federal Data Protection Act, TTDSG) and this privacy policy. The legally binding version of this policy is the German one.

    1. Controller

    The controller within the meaning of the GDPR is the provider of this website named in the Imprint. For data protection questions you can reach us at mail@fritztower.berlin.

    2. Overview

    You can use this website without providing personal information. We process personal data when you send us an inquiry, write to us by email, enter your details for the rental contract in the guest portal, or sign the rental contract online. Each step is described below.

    3. Data from the inquiry form

    Through the inquiry form we process: first and last name, email address, phone number (optional), planned move-in and move-out dates, number of guests, purpose of stay, message text, and optionally how you heard about us. For technical reasons we additionally store the language of the submission and the user-agent of your browser (for spam prevention). The data is not passed on to third parties for advertising purposes.

    4. Purpose and legal basis

    Processing is carried out exclusively to respond to your inquiry and to initiate a rental contract. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures) and additionally Art. 6 (1)(a) GDPR (consent), which you provide by submitting the form. Your data is not used for marketing, profiling, or third-party advertising.

    5. Guest portal and rental contract

    Once we have made you an offer, you receive a personal link to your guest portal. There you enter the details we need for the rental contract: name or company, address, phone number, optionally date of birth, nationality and occupation for private individuals, contact person and VAT ID for companies, plus the number of occupants, purpose of stay and your notes. The portal also shows your payment details (deposit, first rent) and move-in information. The link is not publicly discoverable and is meant for you only. The legal basis is Art. 6 (1)(b) GDPR (pre-contractual measures and performance of the contract). We match incoming payments against our bank account; we only process your account details as far as they appear in your transfer.

    6. Online signing (Firma.dev)

    You can sign the rental contract online. For this we use the service Firma.dev, which processes your name, email address, the contract and the evidence belonging to the signature (time, IP address, browser details, audit trail). The result is an advanced electronic signature under eIDAS. Firma.dev processes the data on our behalf (Art. 28 GDPR) on servers in the EU. The legal basis is Art. 6 (1)(b) GDPR. We also keep a copy of the signed contract.

    7. Email communication

    When you write to us or reply to our emails, we process your email address and the content of your message. Our mailbox is hosted by STRATO AG, Berlin. Replies to an inquiry are automatically filed with the respective case so we can keep track of the conversation. The legal basis is Art. 6 (1)(b) GDPR, for general questions Art. 6 (1)(f) GDPR (legitimate interest in answering). For a booked stay we also inform the building's front desk of the move-in and move-out dates and your name (for keys, mail and parcels), and our cleaning company of the move-out date. The legal basis is Art. 6 (1)(b) GDPR.

    8. Server log files

    When you visit this website, our hosting provider automatically collects information in server log files (IP address, date/time, page accessed, referrer URL, browser type, operating system). This data is used to ensure trouble-free operation and to fend off attacks (Art. 6 (1)(f) GDPR) and is deleted after a short time.

    9. Hosting and processors

    The website runs on Lovable; database and file storage (inquiries, guest portal, contracts) are provided by Supabase. We send and receive email through STRATO AG, and online signing runs through Firma.dev. Data processing agreements under Art. 28 GDPR are in place with all providers. Where data may be transferred to countries outside the EU, this is based on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

    10. Retention period

    Inquiries that do not lead to a rental contract are deleted no later than 12 months after the last contact. Data relating to a rental contract (contract, tenant details, payments, correspondence) is kept for the duration of the tenancy and then until the statutory retention periods expire (typically 6 or 10 years under German tax and commercial law).

    11. Your rights

    You have the following rights: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You can withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority — for us this is the Berlin Commissioner for Data Protection and Freedom of Information.

    12. Cookies and visitor statistics

    This website does not set marketing or tracking cookies and does not embed third-party analytics services. Technically necessary storage (e.g. language preference, short-term cache of availability) is permitted without consent under § 25 (2) TDDDG. To see which pages are read, we count page views with our own simple method: we store the page viewed, language, referring page, browser identifier and a random ID that exists only in memory for the current visit. No cookies are set, nothing is stored on your device and no IP addresses are kept. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in improving our offer).

    13. SSL encryption

    For security reasons, this website uses SSL/TLS encryption. Data you submit through the inquiry form or the guest portal is protected against being read by third parties during transmission.

    14. Currency of this privacy policy

    Last updated: October 2026. As the website evolves or legal requirements change, it may be necessary to amend this policy. The current version is always available on this page.