Privacy Policy
Information on the processing of personal data pursuant to Art. 13 and 14 GDPR
This is a convenience translation. Only the German version is legally binding.
1. Overview
Protecting your personal data is important to us. We process your data exclusively on the basis of statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Below we explain which data we collect when you visit this website, for what purpose we process it and what rights you have.
2. Controller
CRT Immobilien UG (haftungsbeschränkt)Wiesenweg 16
85435 Erding, Germany
Phone: +49 (0) 179 7864229
Email: info@crt.company
For data protection matters you can also reach us at datenschutz@crt.company.
3. Personal data
Personal data means any information relating to an identified or identifiable natural person – for example name, address, email address or telephone number. You can generally use our website without providing personal data. Processing takes place only where it is technically necessary to provide the website or where you actively submit data to us.
4. Hosting
This website is hosted by a service provider in Germany. The provider processes data arising when the website is accessed on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place. The legal basis is our legitimate interest in providing our online offering securely and efficiently (Art. 6 (1) (f) GDPR).
5. Server log files
When you access our website, the server automatically collects information transmitted by your browser: the page or file requested, date and time of access, volume of data transferred, browser type and version, operating system, referrer URL and IP address. This data cannot be attributed to specific individuals and is not merged with other data sources. Processing serves to ensure trouble-free operation and to defend against attacks (Art. 6 (1) (f) GDPR). Log files are deleted after seven days at the latest unless a security incident requires longer retention.
6. Contact and forms
If you contact us via the contact form, the investor profile form or by email, we process the details you provide (in particular name, email address, telephone number, country and your message) exclusively to handle your enquiry and for any follow-up questions.
The legal basis is your consent (Art. 6 (1) (a) GDPR) and, where your enquiry is aimed at concluding or performing a contract, Art. 6 (1) (b) GDPR. You may withdraw your consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal. We delete the data as soon as it is no longer required, at the latest upon expiry of statutory retention periods.
7. Cookies and local storage
This website does not use tracking cookies. Your privacy settings are stored in your browser's local storage. This information remains on your device and is not transmitted to us. The legal basis for technically necessary storage is § 25 (2) no. 2 TDDDG. Should optional cookies for statistics or marketing be used in future, this will only happen with your express consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).
8. Newsletter
If you subscribe to a newsletter, we use the email address you provide solely to send the newsletter. Registration uses the double opt-in procedure. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can unsubscribe at any time via the link in every email or by contacting us.
9. Security
This website uses SSL/TLS encryption, recognisable by "https://" in your browser's address bar and the padlock symbol. In addition we take appropriate technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access. Please note that data transmission over the internet – in particular unencrypted email – can have security gaps.
10. Disclosure of data
Your data is passed on to third parties only where this is necessary to perform a contract, where you have expressly consented, where we are legally obliged to do so, or where it is necessary to enforce our rights. Processors are engaged solely on the basis of an agreement pursuant to Art. 28 GDPR.
11. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.
12. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The version current at the time of your visit applies.
Last updated: August 2026