Privacy Policy

Draft -- This translation is provisional and pending legal review.

As of: March 2026

1. Data Controller

The party responsible for data processing on this website is:

Softics GmbH
Beethovenstrasse 11
76676 Graben-Neudorf
Germany

Phone: +49 7255 3499618
Email: info@softics.de
Website: www.immoscoutonline.com

2. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data is processed only with the user's consent or when permitted by law.

The legal bases for data processing are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).

3. Collection of Access Data (Server Log Files)

Each time our website is accessed, the web server automatically collects information transmitted by your browser:

  • IP address of the requesting device (anonymized)
  • Date and time of access
  • Name and URL of the retrieved file
  • Data volume transferred and HTTP status code
  • Browser type, version, and operating system
  • Referrer URL (previously visited website)

The temporary storage of the IP address is technically necessary to enable delivery of the website. The data is deleted after no more than 7 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website).

4. Contact

When you contact us by email or via a contact form, the information you provide (name, email address, message content) is stored and processed to handle your inquiry and for follow-up questions.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). The data is deleted once your inquiry has been fully resolved and no statutory retention obligations apply.

5. Cookies

ImmoScoutOnline uses no tracking cookies, no analytics services, and no advertising cookies.

The platform uses exclusively technically necessary session cookies required for authentication and secure operation:

  • SuperAdminAuth -- Authentication for platform administration
  • TenantAuth -- Authentication for broker users within a tenant
  • ProspectAuth -- Authentication for prospects in the prospect portal

These cookies contain encrypted session information and are automatically deleted upon logout or session expiry. No personal data stored in these cookies is shared with third parties.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional authentication system). Pursuant to Section 25(2)(2) TDDDG, these cookies are exempt from the consent requirement as they are strictly necessary for providing the service.

6. External Services and Fonts

ImmoScoutOnline uses no external fonts (e.g., Google Fonts) and no external CDN services. All JavaScript libraries and resources are fully self-hosted on our own web server. No connection to external servers is made.

This ensures that no data is transmitted to third-party providers when visiting ImmoScoutOnline.

7. Account Data and Registration

When registering as a broker on ImmoScoutOnline, the following data is collected and stored:

  • Company name and contact person
  • Email address
  • Desired subdomain

Within a tenant, user accounts can be synchronized via Microsoft Entra ID (formerly Azure Active Directory). In this case, name, email address, and group memberships are retrieved from the broker company's directory. Processing takes place under a data processing agreement (DPA) pursuant to Art. 28 GDPR. The broker company remains the data controller for its employees' data.

The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

8. Email Notifications

ImmoScoutOnline sends email notifications in the following cases:

  • Notifications about new property listings to registered prospects
  • Forwarding of contact inquiries to the responsible broker
  • Notifications related to bidding processes (bid receipt, status changes)
  • System notifications (registration confirmation, password change)

The legal basis is Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in informing about relevant events).

9. Hosting

This website is hosted by a provider in Germany or the European Union. Processing is based on Art. 6(1)(f) GDPR and a data processing agreement pursuant to Art. 28 GDPR.

10. Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only share your personal data with third parties if:

  • You have given your express consent,
  • Disclosure is necessary for the performance of contractual relations with you,
  • We are legally obliged to do so, or
  • Disclosure is necessary for the assertion, exercise, or defense of legal claims.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority:

Der Landesbeauftragte fuer den Datenschutz und die Informationsfreiheit Baden-Wuerttemberg
Lautenschlagerstrasse 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

To exercise your rights, please contact: info@softics.de

12. Updates to this Privacy Policy

This privacy policy is currently valid as of March 2026. Due to the further development of our website and services or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version can always be accessed on this page.