Privacy Notice

Privacy Policy

IntReal International Real Estate Kapitalverwaltungsgesellschaft mbH (hereinafter referred to as “we” or “INTREAL”) welcomes you to its website. We appreciate your interest in our company and aim to make your visit to our website as pleasant as possible. Responsible handling of your data in full compliance with legal requirements is a matter of course for us. Below, we explain how we process your personal data and provide further relevant information in this context.

Scope

INTREAL operates the website www.intreal.com. This Privacy Policy therefore applies to this website and its associated subdomains.

Who is responsible for processing your personal data?

IntReal International Real Estate Kapitalverwaltungsgesellschaft mbH
Ferdinandstraße 61
20095 Hamburg
Tel.: +49 40 377077 – 000
Fax: +49 40 377077 – 899

is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”).

Data Protection Officer

If you have any questions regarding the processing of your personal data or the exercise of your rights under the GDPR, you may contact our Data Protection Officer at:
datenschutz@intreal.com

When and on what legal basis do we collect your data and share it with third parties?

We only process your data if one of the following legal bases applies:

  • You have given us your consent pursuant to Art. 6(1)(a) GDPR.
  • Processing is necessary for the performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
  • Processing is necessary for compliance with a legal obligation pursuant to Art. 6(1)(c) GDPR (e.g. disclosure to supervisory or law enforcement authorities).
  • Processing is necessary for the purposes of legitimate interests pursuant to Art. 6(1)(f) GDPR.
  • We use service providers (processors) in accordance with Art. 28 GDPR and have concluded data processing agreements with them.

We transfer personal data to third countries only where the European Commission has confirmed an adequate level of data protection or where appropriate safeguards (e.g. contractual agreements) are in place.

Specific Data Processing Activities

Accessing our website / server log files

Each time you access our website, your web browser transmits usage data. This includes your IP address and the URL of the content accessed. Without the collection and temporary storage of this data for the duration of the session, it is not possible to establish a connection to our server or use the website.

Depending on your browser configuration, additional data may be transmitted, such as browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, and IP address.

After the end of use, we store technical access data (non-personal data) in so-called server log files (e.g. file name requested, date and time of access, amount of data transferred, requesting provider).

This processing is carried out to ensure the smooth operation and optimization of the website and constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.

Contact and Communication

Please note that data transmission over the Internet (e.g. via email communication) may have security vulnerabilities. Complete protection of data against third-party access is not possible.

We delete personal data processed through contact or communication once the purpose for which you provided the data has been fulfilled, unless we are legally entitled or obliged to retain it.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the change from “http://” to “https://” in your browser’s address bar and by the lock symbol.

Contact Forms

On certain pages, you may enter personal data in input fields for:

  • INTREAL (if selecting “General”, “Investor Complaints INTREAL” or “Press”),
  • IntReal Luxembourg S.A. (if selecting “Investor Complaints Luxembourg”),
  • Applications (“Career” or via the INTREAL career portal: https://intrealkarriere.career.softgarden.de).

In the case of applications, your data will be forwarded to HIH Real Estate GmbH (HR department of the HIH Group, to which INTREAL belongs) and softgarden e-recruiting GmbH (service provider). A data processing agreement has been concluded with softgarden.

Data is processed solely for the purpose for which you provided it (e.g. handling inquiries or contacting you). The legal basis is Art. 6(1)(f) GDPR. If your request relates to a contract, Art. 6(1)(b) GDPR applies.

Data entered in contact forms will be deleted upon request or once the purpose ceases to apply, subject to statutory retention obligations.

Email, Telephone, Fax

If you contact us by email, phone, or fax, your inquiry including personal data will be stored and processed for the purpose of handling your request.

Legal basis:

  • Art. 6(1)(b) GDPR (contract/pre-contractual measures), or
  • Art. 6(1)(f) GDPR (legitimate interest in effective processing).

Additional Recipients

Depending on the content of your inquiry, personal data may also be shared with the following affiliated companies:

  • IntReal Solutions GmbH
  • IntReal Legal Advisory GmbH
  • Reax Advisory GmbH

Processing is carried out within the stated purposes and legal bases.

Cookies

Our website uses cookies. Cookies are small text files stored by your browser on your device. They make our website more user-friendly, effective, and secure.

Some cookies are “session cookies” and are deleted automatically after your browser session ends. Others remain stored until you delete them.

Essential Cookies

These cookies are necessary for technical operation or requested features (e.g. language settings). Legal basis: Art. 6(1)(f) GDPR and Section 25(2) TTDSG.

Borlabs Cookie

Stores cookie consent preferences.
Duration: 1 year
Provider: Borlabs GmbH, Hamburg
https://de.borlabs.io/datenschutz/

WPML

Stores selected website language.
Cookie: _icl_visitor_lang_js
Duration: 1 year
Provider: OnTheGoSystems Limited, Hong Kong
https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/

External Media

External media content (video/social platforms) is blocked by default and only activated upon consent (Art. 6(1)(a) GDPR). Consent can be adjusted via “Cookie Settings”.

Google Maps

Used to display maps. May transmit data to Google servers (including the USA).
Legal basis: consent.
Google is certified under the EU-US Data Privacy Framework (DPF).
Privacy policy: https://policies.google.com/privacy

YouTube

If consent is given, YouTube videos are embedded.
Cookies may be used for functionality, analytics, advertising, and tracking.
Provider: Google Ireland Limited
Privacy policy: https://business.safety.google/privacy/
Cookie policy: https://policies.google.com/technologies/cookies

Statistics

Google Analytics

Used only with consent (Art. 6(1)(a) GDPR).

IP anonymization is activated.
Cookies: _ga, _gat, _gid
Duration: 2 years
Provider: Google Ireland Limited

Data transfers to the USA are based on Standard Contractual Clauses and DPF certification.
We have concluded a data processing agreement with Google.

Users may object via browser settings or opt-out mechanisms.

Google Tag Manager

Tag management system used to manage tracking codes.
Cookie: dc_gtm_*
Duration: 1 minute
Provider: Google

Marketing

Marketing cookies are only set with consent (Art. 6(1)(a) GDPR).

LinkedIn Insight Tag & Conversion Tracking

When visiting our website, LinkedIn may set a cookie and collect data such as URL, referrer URL, IP address (shortened/hashed), device and browser characteristics, and timestamp.

We receive aggregated reports only (no personal identification).

Data is pseudonymized within 7 days and deleted within 180 days.

Provider: LinkedIn Ireland Unlimited Company
Privacy policy: https://de.linkedin.com/legal/privacy-policy

Your Rights

You have the following rights under GDPR:

  • Art. 15 – Right of access
  • Art. 16 – Right to rectification
  • Art. 17 – Right to erasure
  • Art. 18 – Right to restriction of processing
  • Art. 20 – Right to data portability
  • Art. 21 – Right to object (including direct marketing)
  • Art. 7(3) – Right to withdraw consent

You also have the right to lodge a complaint with a supervisory authority.

The exercise of these rights is free of charge.

Necessity of Providing Personal Data

Providing personal data is neither legally nor contractually required. However, it is necessary for contacting us. If only essential cookies are permitted, certain website functions may be restricted.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time (e.g. due to legal changes or new services). The current version is available on our website. Please review it regularly. The date of the last update is indicated at the end of this document.

Miscellaneous

You may print or save this Privacy Policy using your browser’s print or save function.

Last updated: 11 February 2026.