Version: 12 October 2026 (translation for convenience – the German version is authoritative)
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
ProLeisure Business Development GmbH
Managing partner: Axel Donald Sauer
Wiedstraße 2
53547 Roßbach-Wied
Germany
Phone: +49 2638 299 3110
Email: ads@proleisure.eu
Commercial register: Montabaur Local Court, HRB 24138
2. Overview: what we process and what we don't
This website is an information site. We do not operate a newsletter, do not create user accounts and do not create user profiles. Fonts and the calendar run on our own server; Google Maps is only loaded after you click. We process personal data only to the extent necessary for the technical operation of the website, for security and for answering your enquiries (email, phone, contact form). The individual processing operations – including the few third-party providers (Google Tag Manager, Google Maps, the court rulings window from ibr-online) – are described below.
3. Hosting and server log files
This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access our pages, the STRATO AG server automatically processes information transmitted by your browser (server log files): IP address, date and time of access, page or file accessed, amount of data transferred, message about successful retrieval, browser type and version, operating system and the previously visited page (referrer). This data is not merged with other data sources.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, the security and the optimisation of our website. Log files are deleted in accordance with the hosting provider's specifications, usually after a few weeks. We have concluded a data processing agreement with STRATO AG pursuant to Art. 28 GDPR.
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar and the padlock symbol.
5. Contact by email or phone
If you contact us by email or phone, we process the data you provide (e.g. name, email address, phone number, content of the enquiry) to handle your request and for possible follow-up questions. The legal basis is Art. 6 (1) (b) GDPR if the enquiry relates to the initiation or performance of a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data remains with us until you ask us to delete it, the purpose no longer applies or statutory retention periods (in particular under commercial and tax law) expire.
5a. Contact form
On our contact page you can send us a message via a form. Mandatory fields are name, email address, phone number and your message. The form (WordPress plugin "WPForms") runs on our server; your entries are not stored in a database but are transmitted exclusively by email to ads@proleisure.eu and processed there like an email enquiry. To protect against automated entries (spam), the form uses a server-side check without involving external services.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to the initiation or performance of a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We delete your data as soon as your request has been fully processed and no statutory retention obligations stand in the way. The email is sent via the mail server of our hosting provider STRATO AG (processor, see section 3).
6. Cookies and consent management (Complianz)
Our website uses only technically necessary cookies, for example to store your cookie settings. To manage your consent we use the WordPress plugin "Complianz | GDPR/CCPA Cookie Consent" (Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands). The plugin runs entirely on our server and does not transmit any data to Complianz. It stores cookies in your browser (e.g. "cmplz_consented_services", "cmplz_policy_id", "cmplz_marketing", lifetime up to 365 days) in which your selection is recorded. The legal basis is Art. 6 (1) (c) GDPR (legal obligation to obtain and document consent) in conjunction with Section 25 (2) of the German TDDDG.
You can change your selection at any time via the "Cookie settings" or "Manage consent" link at the bottom of the page. Details of the cookies used can be found in our Cookie Policy (EU).
7. Fonts (locally hosted Google Fonts)
For the uniform display of fonts, this website uses fonts from the "Google Fonts" range. The font files are stored locally on our own server and are loaded from there (plugin "OMGF"). When our pages are accessed, no connection to Google servers is established; no data is transmitted to Google.
8. Google Maps
On the homepage, the "News" page and in the legal notice we offer a map from the Google Maps service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to show our location. The map is initially not active: when the page is loaded you only see a placeholder with our address, and no data is transmitted to Google. Only when you click on "Load map (Google Maps)" is the map loaded from Google; your IP address and browser information are then transmitted to Google, and Google may set cookies. Transfer to the USA is possible (Google is certified under the EU-US Data Privacy Framework). The legal basis is the consent you give by clicking, Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG; it applies only to the respective page view and can be revoked at any time by leaving the page. Alternatively, you can view our location via the "Open in Google Maps" link in a new window. Further information: https://policies.google.com/privacy.
8a. Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Tag Manager is a technical tool for centrally managing scripts ("tags") on a website. It does not set cookies itself and does not create user profiles; however, when the Tag Manager script is loaded, your IP address is transmitted to Google. The legal basis for integrating Tag Manager is Art. 6 (1) (f) GDPR (legitimate interest in central, low-error management of website functions); where consent is required, Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG.
Any services delivered via Tag Manager that require consent (e.g. analytics or marketing tags) are activated only if you have agreed to the respective category in the cookie banner (Google Consent Mode). Without your consent, no such services are executed. Further information: https://policies.google.com/privacy.
8b. Court rulings window from ibr-online (id-Verlags-GmbH)
On the "News" page we embed the "Urteilsfenster" (court rulings window) of the legal information service ibr-online (id-Verlags-GmbH, Heinrich-von-Stephan-Str. 3, 68161 Mannheim, Germany). This is a content frame (iFrame) that displays current court decisions on real estate and construction law. When the "News" page is accessed, your browser establishes a connection to the servers of ibr-online.de; your IP address, browser information and the page accessed are transmitted. To our knowledge, no transfer to third countries takes place; the provider is based in Germany.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing our visitors with current specialist information on real estate law directly on our site. You can object to the processing by not accessing the "News" page or by blocking content from ibr-online.de in your browser. Further information can be found in the provider's privacy policy: https://www.ibr-online.de/ID-Verlag/datenschutz.php.
9. Security and backups (Wordfence, UpdraftPlus)
To protect the website against attacks we use the security plugin "Wordfence Security" (Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA). Wordfence checks access for malicious patterns and may process IP addresses and access data for this purpose and, in the event of attack patterns, compare them with Defiant's servers. The legal basis is Art. 6 (1) (f) GDPR (security of the website and defence against attacks). Defiant Inc. is certified under the EU-US Data Privacy Framework. Further information: https://www.wordfence.com/privacy-policy/.
We create regular backups of the website with the plugin "UpdraftPlus". The backups contain the content of the website and are stored exclusively on our server or with our hosting provider. The legal basis is Art. 6 (1) (f) GDPR (resilience).
10. Links to external websites and social networks
Our website contains numerous links to third-party websites, such as event organisers, studies, podcasts (e.g. Spotify, YouTube) and the LinkedIn profiles of our team. These are simple links without embedded content; merely visiting our pages does not transmit any data to these providers. Only when you click a link do you leave our website, and the privacy policy of the respective provider then applies.
11. Events calendar and calendar files
Our events calendar runs entirely on our server. The search and filters work in your browser; no search terms are transmitted to us or third parties. If you save an event via "Calendar (iCal / Outlook)", you download a calendar file (.ics) from our server; processing then takes place in your calendar app. The "Google Calendar" link leads to Google, where Google's privacy policy applies.
12. Recipients and transfer to third countries
Recipients of personal data are our hosting provider (STRATO AG) as processor and the providers named in this policy (Google Ireland Limited for Tag Manager and – after your click – Google Maps, Defiant Inc./Wordfence, id-Verlags-GmbH/ibr-online). Where data is transferred to the USA, we base this on the providers' certification under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023) or on EU standard contractual clauses.
13. Storage period
We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations. The data is then deleted or anonymised. Specific details can be found under the individual processing operations.
14. Your rights
You have the following rights towards us with regard to the personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on Art. 6 (1) (e) or (f) GDPR (Art. 21 GDPR)
- Right to withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, an informal message to ads@proleisure.eu.
Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
15. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.
16. No automated decision-making
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
17. Changes to this privacy policy
We will adapt this privacy policy as soon as the legal situation or the services used change. The version published here applies in each case.