Privacy Policy
Last updated: October 2026. This is a translation provided for convenience; only the German version is legally binding.
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information can be found in the sections below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Controller” and in the legal notice.
How do we collect your data?
Some of your data is collected when you provide it to us, e.g. by e-mail, telephone or contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. web browser, operating system, time of page access).
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors and securely. We use data you provide to us to deal with your request.
What rights do you have regarding your data?
You have the right at any time to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
2. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Fritsch & Co Gewerbeimmobilien GmbH
Karlsplatz 3
80335 Munich, Germany
Phone: +49 89 7 400 800
E-mail: kontakt@fritschco.de
Represented by the managing directors Thomas J. Fritsch and Robert A. Neuberger.
3. Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, website access data and other data generated via a website.
The host is used in the interest of providing our online offering securely, quickly and efficiently (Art. 6(1)(f) GDPR) and, where requests relate to a contractual relationship, for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR). We have concluded a data processing agreement with our host (Art. 28 GDPR).
4. General information and mandatory disclosures
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. Statutory retention periods (in particular under commercial and tax law) remain unaffected.
Withdrawal of your consent
Many data processing operations are only possible with your consent. You can withdraw consent you have given at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING (OBJECTION UNDER ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Your further rights
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing (Art. 15 GDPR) and, where applicable, a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can contact us at any time at the contact details given above regarding this and any other questions on data protection.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.
5. Data collection on this website
Cookies and access to your device
Our website may use cookies and similar technologies. These are small data packets stored on your device. Information is only stored on or accessed from your device insofar as this is strictly necessary to provide the services you have expressly requested (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR) or you have given your prior consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw consent you have given at any time with effect for the future.
You can set your browser to inform you about cookies being set, to allow cookies only in individual cases or to exclude them in general. If cookies are deactivated, the functionality of this website may be limited.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation, security and optimisation of our website.
Contact form
If you send us enquiries via the contact form, the details you provide in the form, including the contact details you enter, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
Processing is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR). The data remains with us until you ask us to delete it or the purpose for storing it no longer applies. Statutory retention periods remain unaffected.
Enquiries by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of dealing with your request. The legal basis is Art. 6(1)(b) or (f) GDPR. The data remains with us until the purpose for storage no longer applies; statutory retention periods remain unaffected.
6. Plugins and tools
Fonts (hosted locally)
The fonts used on this website are loaded locally from our own server. No connection to servers of Google or other font providers is established.
Jetpack
This website uses the WordPress plugin Jetpack. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack connects our website with WordPress.com and serves the security, administration and technical optimisation of our website. Technical data, in particular IP addresses, may be transmitted to Automattic servers in the USA.
It is used on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in a secure and technically flawless website. Where information that is not strictly necessary is stored on or read from your device, this only takes place with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Automattic is certified under the EU-US Data Privacy Framework (DPF); data transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR). Further information: https://automattic.com/privacy/
Wordfence
To protect against attacks, we use the security plugin Wordfence. The provider is Defiant Inc., USA. Wordfence checks access to our website in order to detect and prevent attacks and misuse. In particular, IP addresses are processed and, where applicable, compared with the provider’s threat intelligence. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website and our users. Further information: https://www.wordfence.com/privacy-policy/
E-mail delivery via Microsoft 365
E-mails sent from this website – in particular messages from the contact form – are handed over via the WP Mail SMTP plugin to our e-mail system Microsoft 365 (Exchange Online) and delivered from there. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The content of your enquiry and the contact details you provide (e.g. name, e-mail address, telephone number) are processed. The data is generally processed in data centres within the EU; a transfer to the USA cannot be completely ruled out. Microsoft is certified under the EU-US Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. The legal basis is Art. 6(1)(b) GDPR (handling your enquiry) or Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable delivery of e-mails. The provider of the WP Mail SMTP plugin does not receive any content of your messages. Further information: https://privacy.microsoft.com/en-gb/privacystatement
onOffice (property listings)
To present our property listings, we use software from onOffice GmbH, Charlottenburger Allee 5, 52068 Aachen, Germany. The property data (descriptions, floor areas, prices) is retrieved from our onOffice database via the WordPress plugin “onOffice for WP-Websites” and displayed on our website. Property photos are loaded directly from servers of onOffice GmbH (image.onoffice.de); in the process, your IP address is transmitted to onOffice.
Enquiry forms: If you send an enquiry via the form on a property page or request documents (e.g. a brochure), your details (e.g. name, company, address, telephone number, e-mail address, message and the property concerned) are transmitted to our onOffice system, stored there and used by us to process your enquiry and, where applicable, to send the requested documents.
Maps: To show the location of our properties, we embed maps based on OpenStreetMap (map data © OpenStreetMap contributors, ODbL licence). The map library (Leaflet) is loaded from our own server; the map tiles are retrieved from a server of onOffice GmbH (tiles.onoffice.de). In the process, your IP address is transmitted to onOffice. To our knowledge, no data is transmitted to the OpenStreetMap Foundation.
The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry serves to initiate a rental agreement, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in presenting our offers attractively and handling enquiries efficiently. Where consent has been requested, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent can be withdrawn at any time. A data processing agreement (Art. 28 GDPR) is in place with onOffice GmbH. The data remains with us until the purpose of storage no longer applies or you ask us to delete it; statutory retention periods remain unaffected. Further information: https://onoffice.com/datenschutz/