As little data as possible. As much clarity as necessary.

01

Data controller

02

Website provision and server logs

The website is hosted through OpenAI Sites using Cloudflare infrastructure. When you visit, technically necessary connection data is processed, including IP address, time, requested URL, transferred data volume, browser and device information and, where applicable, the referring page. The public website does not require an account.

The purpose is to deliver the website securely, reliably and without errors, prevent misuse and analyse technical faults. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in providing a secure and functional website. Where processing is carried out on behalf of the controller, it is based on Article 28 GDPR.

The technical provider in the European Economic Area is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Further information is available in the OpenAI Privacy Policy.

03

Contact by email

Contacting us is voluntary. Without a reply address and the information needed for your enquiry, we cannot reply or prepare a suitable offer. No decision with legal or similarly significant effects is made solely by automated means.

When you contact us by email, the information you provide — generally your email address, name, message content and message metadata — is processed in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns steps prior to entering into a contract or performance of a contract; otherwise, it is Article 6(1)(f) GDPR. The legitimate interest lies in responding appropriately to business enquiries.

For telephone enquiries, we process the contact details and information you provide for the same purposes and on the same legal bases as for email enquiries.

The business mailbox is hosted by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. An email link opens your email application. A message is transmitted only when you send it yourself.

Email is not a completely confidential means of communication. Please do not send identity documents, land-register extracts, contractual documents, bank details or similarly sensitive information unless specifically requested.

04

Digital real estate assistant

The assistant is an automated system, not a human. It provides non-binding initial guidance only and does not make legally or commercially binding decisions. In particular, it does not replace legal, tax, financing, planning-permission or property-valuation advice.

Rule-based standard mode

Unless AI classification is enabled, your current message is assigned to a topic solely on the website server using predefined terms. The visible chat history remains in your browser’s working memory for the duration of the session. Bianca Katharina Barth does not maintain a separate database for the chat and does not permanently store the conversation. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and otherwise Article 6(1)(f) GDPR.

The assistant currently uses predefined rules on the website server only. AI classification through the OpenAI API is not enabled.

05

Accessibility preferences and local storage

If you select a personal display using the ‘Accessibility tools’ button, your browser stores only these preferences — larger text, contrast, link highlighting, text spacing and reduced motion — under the key bkb-accessibility-preferences in local storage. The setting contains no identifier, is not transmitted to Bianca Katharina Barth and can be deleted using ‘Reset all settings’.

This storage is necessary for the function you expressly requested. It is carried out pursuant to Section 25(2)(2) TDDDG and, insofar as personal data may be involved, additionally on the basis of Article 6(1)(f) GDPR.

This website uses no analytics or advertising cookies. Essential hosting security remains active. Accessibility preferences are saved only when you choose them.

Cookies & privacy

The bkb_cookie_notice cookie remembers your choice for 180 days without an individual identifier. As no optional cookies are currently used, neither option enables tracking. You can change your choice at any time through “Cookie settings” in the footer. Chosen accessibility preferences remain in local browser storage under bkb-accessibility-preferences until you reset them or clear browser data.

§ 25 Absatz 2 Nummer 2 TDDDG

06

Recipients and data transfers

Data is received only by parties that require it for the stated purposes: hosting and IT service providers, the provider used for your email and — solely where AI consent has been enabled — OpenAI Ireland Limited. Data is not disclosed for advertising purposes.

For technical services, processing outside the European Economic Area cannot be ruled out entirely. According to the respective provider, such transfers are based on adequacy decisions or appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses under Article 46 GDPR.

07

Retention period

Personal data is retained only for as long as necessary for the relevant purpose. Email enquiries are deleted once they have been fully dealt with, unless statutory retention, evidentiary or limitation periods require otherwise. Documents relevant to contracts and business transactions may have to be retained for longer under commercial and tax law. Technical log data is deleted or anonymised in accordance with the periods applicable to the hosting service. The visible chat history ends when you leave or reload the page.

08

Your data-protection rights

You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Please use the email address below.

Subject to the statutory requirements, you have the right to:

• access under Article 15 GDPR,
• rectification under Article 16 GDPR,
• erasure under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR, and
• object to processing under Article 21 GDPR.

You may withdraw consent at any time with effect for the future. An email to the following address is sufficient: kontakt@barth-immobilien-rheingau.de. The lawfulness of processing carried out before the withdrawal remains unaffected.

You may also lodge a complaint with a data-protection supervisory authority. The competent authority is, in particular, the Hessian Commissioner for Data Protection and Freedom of Information, Wilhelmstraße 7, 65185 Wiesbaden, datenschutz.hessen.de.

09

Security and changes

The hosting providers’ privacy notices explain the bases for international transfers and how to request information about safeguards: OpenAI · Cloudflare.

Data is transmitted in encrypted form using HTTPS/TLS. Appropriate state-of-the-art technical and organisational measures protect the data; however, no one can guarantee entirely risk-free internet communication. This notice will be updated if functions, providers or the legal situation change.