Privacy policy

1. Controller

Controller within the meaning of the GDPR and other national data protection laws as well as other data protection regulations:

UnicHomes GmbH
Frankfurter Straße 7
36043 Fulda
Email: info@unichomes.de

2. Access data / server log files

We, or rather our web host, collect data on access to the website on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) and store it as "server log files" on the website's server. The following data is logged: page visited, time of access, amount of data sent in bytes, source/referrer from which you reached the page, browser used, operating system used, IP address used (in anonymised form). The server log files are stored for a maximum of 7 days and then deleted.

3. Cookies and similar technologies

This website uses only strictly necessary cookies. These are required to operate the website (session management, security, language preference). Consent is not required for this (§ 25 (2) No. 2 TTDSG).

Should analytics or marketing cookies be used in the future, the website will display a consent banner and only set them after consent has been given.

4. Booking flow via my.oh-key.de

When you click a booking button you are forwarded to my.oh-key.de — a technical subdomain under our control, hosted on the LikeMagic platform of our processor. Data processing there (booking entry, payment, confirmation) takes place on the basis of your booking contract (Art. 6 (1) (b) GDPR). We have concluded a data processing agreement (DPA) with the provider under Art. 28 GDPR.

5. Apaleo (property management system)

Live availability and pricing on this website are sourced in real time from Apaleo GmbH (Schertlinstr. 8, 81679 Munich). When the page is loaded, only anonymised API requests are sent to Apaleo from our side — no personal data of website visitors. Your data is only transferred to Apaleo to perform the booking contract once a booking is completed in the LikeMagic IBE.

6. Your rights

You have the right at any time to information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR). To exercise these rights, contact us in writing or by email at the contact details listed under section 1.

You also have the right to lodge a complaint with the competent data protection supervisory authority (the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany).

7. Hosting

This website is hosted on third-party servers. A data processing agreement under Art. 28 GDPR has been concluded with the host.

[Note: This privacy policy is a pre-launch stub. Before going live it should be reviewed by a law firm specialising in GDPR, especially if additional third-party services (analytics, maps, marketing pixels) are added.]