Privacy policy

1. Controller

Controller within the meaning of the GDPR and other national data protection laws as well as other data protection regulations:

UnicHomes GmbH
Frankfurter Straße 7
36043 Fulda
Email: info@unichomes.de

2. Access data / server log files

We, or rather our web host, collect data on access to the website on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) and store it as "server log files" on the website's server. The following data is logged: page visited, time of access, amount of data sent in bytes, source/referrer from which you reached the page, browser used, operating system used, IP address used (in anonymised form). The server log files are stored for a maximum of 7 days and then deleted.

3. Cookies and similar technologies

This website uses strictly necessary cookies. These are required to operate the website (session management, security, language preference). Consent is not required for this (§ 25 (2) No. 2 TTDSG).

Beyond that, we only set analytics cookies after your explicit consent (see section 4). You can make your choice via our cookie banner and change or withdraw it at any time using the "Cookie settings" link in the footer.

4. Google Analytics 4 (only with consent)

With your consent (§ 25 (1) TTDSG, Art. 6 (1) (a) GDPR) we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics 4 uses cookies and similar technologies to analyse how the website is used and to help us improve our offering. Without your consent no Google tag is loaded and no analytics cookies are set.

We have enabled IP anonymisation; your IP address is truncated by Google within the EU/EEA and is not stored in full. We also use Google Consent Mode v2: as long as you have not consented, the storage signals for analytics and advertising are set to "denied".

You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer. Withdrawal does not affect the lawfulness of processing carried out up to that point.

US data transfer: the analytics infrastructure is provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). A transfer of personal data to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the EU Commission (Art. 45 GDPR) serves as the basis for the data transfer to the USA. We note that this adequacy decision is the subject of pending court proceedings and that a residual risk remains that US authorities could access transferred data without your having effective legal remedies to EU standards.

5. Booking flow via my.oh-key.de

When you click a booking button you are forwarded to my.oh-key.de — a technical subdomain under our control, hosted on the LikeMagic platform of our processor. Data processing there (booking entry, payment, confirmation) takes place on the basis of your booking contract (Art. 6 (1) (b) GDPR). We have concluded a data processing agreement (DPA) with the provider under Art. 28 GDPR.

6. Apaleo (property management system)

Live availability and pricing on this website are sourced in real time from Apaleo GmbH (Schertlinstr. 8, 81679 Munich). When the page is loaded, only anonymised API requests are sent to Apaleo from our side — no personal data of website visitors. Your data is only transferred to Apaleo to perform the booking contract once a booking is completed in the LikeMagic IBE.

7. Your rights

You have the right at any time to information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR). To exercise these rights, contact us in writing or by email at the contact details listed under section 1.

You also have the right to lodge a complaint with the competent data protection supervisory authority (the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany).

8. Hosting

This website is hosted on third-party servers. A data processing agreement under Art. 28 GDPR has been concluded with the host.

[Note: This privacy policy is a pre-launch stub. Before going live it should be reviewed by a law firm specialising in GDPR, especially if additional third-party services (analytics, maps, marketing pixels) are added.]