Privacy Policy

The service available at immobilienscout24.de (“ImmoScout24”, the “Service”, the “Website” or the “Platform”) is provided by Immobilien Scout GmbH, Invalidenstraße 65, 10557 Berlin, Germany, legally represented by its managing directors Dr Gesa Crockford and Daniel Hendel (“ImmoScout24”, “we”, “us” or “our”), as the controller within the meaning of applicable data protection law.

By means of the following information, we inform you about which personal data we collect and how we process such data when you use the ImmoScout24 services, and how we handle such data. We take the protection of your data seriously. If you have any questions regarding data protection, you may contact our data protection officer at any time. The contact details of our data protection officer can be found in section 2 (“Name and contact details of the controller and the data protection officer”). Section 7 of this Privacy Policy provides information about your rights under applicable data protection law. You can access this Privacy Policy at any time under the “Privacy” section on the website.

In addition to cookies, similar technologies (e.g., server-side data transmission) are also listed for processing information that makes our customers personally identifiable (e.g., device and access data such as advertising and cookie IDs, encrypted email addresses). However, we only have access to personal data that you provide yourself. This information may also be linked and processed across devices as needed to ensure relevant communication. The encryption of, for example, email addresses ensures that they cannot be used to identify an individual. Our Privacy Manager lists the technologies, tools, and services we use, and we specifically inform you about the tool providers, the data category, the purpose category, the data retention period, the purpose of data processing, the legal basis, as well as any transfers to third countries and the corresponding safeguards. It also explains in which cases we obtain your voluntary consent to use the tools and provides a link to opt out via the Privacy Manager.
 

This Privacy policy describes how we collect and use your data, for example when you:

• visit or use our websites or social media channels;

• subscribe to our newsletters or other direct marketing offers;

• contact our service team;

 (hereinafter referred to as “our offers”).

• Where you have a business relationship with us as an applicant or employee or as a commercial customer, partner, supplier or contractor, specific privacy policy apply, which will be made available to you as part of your contractual documents.
 

Immobilien Scout GmbH operates, among other things, the well-known ImmobilienScout24 brand, offering numerous services relating to real estate, moving and financing.

Where Immobilien Scout GmbH is responsible for the processing of your personal data in addition to or jointly with other entities, we will inform you of this in section 5 (“To which recipients do we disclose your data?”).

The contact details of the controller are as follows:

Immobilien Scout GmbH
Invalidenstraße 65
10557 Berlin
Germany

Email: service@immobilienscout24.de

Contact details of the data protection officer:

For all questions relating to data protection in connection with our products or the use of our Website, you may also contact our data protection officer at any time.

The data protection officer can be contacted at the postal address stated above and at the following email address:

is24-datenschutz@scout24.com

We expressly note that when you use this email address, the content will not be viewed exclusively by our Data Protection Officer. If you wish to exchange confidential information, please first request direct contact via this email address and use the subject line “Attn: Data Protection Officer.”
 

In general, you can use our Services without registering and without providing us with personal data. Whenever you use our website, we process connection data that your browser automatically transmits to enable you to visit the website. This connection data includes so-called HTTP header information, including the user agent, and specifically comprises:

You have various options for contacting us. These include the contact form, live chat and the call-back function. In this context, we process your data solely for the purpose of communicating with you.

The legal basis for this processing is Article 6(1)(b) GDPR, insofar as your information is required in order to respond to your inquiry or for the initiation or performance of a contract, and, in all other cases, Article 6(1)(f) GDPR on the basis of our legitimate interest in enabling you to contact us and allowing us to respond to your inquiry.

We make promotional telephone calls only if you have given your consent to this. If you are not an existing customer, we send you promotional emails only on the basis of your consent. In these cases, the legal basis is Article 6(1)(a) GDPR in conjunction with section 7(2) no. 1 or 2 UWG.

The data collected by us when you contact us will be automatically deleted once your inquiry has been fully processed, unless we still require your inquiry in order to comply with contractual or statutory obligations.
 

When you register for our Services, you create a user account that enables you to manage your data (including account settings, contact information, saved searches, messages, listings, and purchased products) in the respective restricted area.

To register, you only need to provide a valid email address and a username. At www.immobilienscout24.de , we offer two different types of user accounts:

• “My Account” for prospective buyers and private sellers
• “ScoutManager” for commercial sellers.
 

Depending on the capacity in which, and the purpose for which, you use our Services, we collect additional data that you enter in our Services. You are not obliged to provide the relevant information; however, without it, you may not be able to use the relevant feature.

Below, we provide information about the data we collect and store in connection with your use of the platform:
 

As a property seeker / prospective customer, we store the information that you enter in our Services in connection with your property search. This includes, for example, the search parameters entered by you, such as location, property type, Base Rent, area and filter criteria, such as attic apartment, garden, kitchen, etc. In addition, we store which properties you have hidden, saved, shared or reported.

Depending on the type of service you use, additional categories of data may be collected (for example, when you use the contact form, the financing calculator, or our credit check). The information collected for the use of each service will be displayed to you before you use that service.

For example, the following data is collected when the respective service is used:

SCHUFA credit report: personal data, such as name, date of birth, email address and registered address, and payment data.

Real estate appraisal: property data, such as type of property, postcode, living space / plot size and number of rooms.

Financing inquiry: type of employment relationship, household net income and contact details, such as name and email address.

Real Estate agent consultation: property-related data, such as type of property, postcode, size and number of rooms, and contact details, such as name, telephone number and email address.

Moving service: current place of residence, current living space, new address, number of rooms and contact details, such as name, email address and telephone number.
 

As a private or commercial property provider, we store the information that you enter in connection with your property listing and the related services. This includes, for example, your name and contact details as well as data relating to the property listed by you.

As part of our Plus services (MieterPlus, KäuferPlus, WohnenPlus), in addition to your payment and login information, we store the data required for the respective Plus service that you upload or enter. (For example, for MieterPlus, this includes income, rent payment, identity, and creditworthiness data; for WohnenPlus, this includes data related to your utility bill.)

As a recipient of newsletters and emails containing promotional content, we store your email address as well as further information relating to the newsletter subscribed to, such as category, any frequency settings and the time of unsubscribing, and information on your usage behaviour in relation to our Services.You may unsubscribe from these emails at any time by clicking the relevant link at the end of the newsletter.

As a user of our social media offerings, the data processed is the data required to use the respective function, such as contacting us, commenting, sharing or rating.

In addition, the provider of the respective social media platform collects, among other things, your IP address and further information that is collected directly from your device, including by means of cookies and other technologies.

In general, the respective provider of the social media platform is responsible for the collection of personal usage data on the platform.

You can request the SCHUFA credit check through ImmoScout24. To do so, first fill out the online questionnaire. Here, you’ll enter your personal information (name, date of birth, email address) as well as your registered address. You’ll then be redirected to the payment options, for which your payment details are required. In the next step, you’ll verify your identity using an ID document or through your online banking account.

Your data will be forwarded to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, for the purpose of generating the credit report. Further data processing, in particular the issuance of the credit report, is carried out exclusively by SCHUFA under its own responsibility based on your contract with SCHUFA.

We process and use the data you provide to us when ordering the BonitätsCheck via www.immobilienscout24.de to the extent necessary to provide and bill for the respective service.
 

As an online platform, we are required under Article 30(1) and (2) of the Digital Services Act (DSA) to ensure that commercial providers provide us with the following information, along with supporting documentation, to verify their identity: name, address, phone number, and email address; a copy of an identity document; payment account details; and (commercial) registry information. We store this information securely in accordance with Article 30(5) of the DSA for up to six months after the end of the contractual relationship and delete it thereafter.

HeyImmo is an AI-powered digital assistant that supports users throughout their property journey by providing information and guidance through a chatbot based on large language models.

To provide the HeyImmo service, we process your chat inputs and conversation content, session identifiers for managing the conversation history, technical data such as your IP address for session management and browser information, and, in the case of logged-in users, the user ID, first name and surname for personalized forms of address.

In addition, we collect contextual information such as the page visited or the property viewed, your interactions and click choices in the chat, product interests and purchase intentions resulting from the conversation history and, where the voice function is used, temporary audio data.

Your chat histories are stored to enable a seamless conversation history during subsequent visits. Conversation data is automatically deleted after 90 days. Voice recordings are deleted immediately after conversion into text, with a maximum processing time of 60 seconds. Technical logs are deleted after 30 days, while aggregated and anonymized usage data may be stored for longer for the purpose of improving the service.

To provide HeyImmo, we use technical service providers that supply us with AI models, web search for up-to-date information and infrastructure hosting. We have entered into a data processing agreement with all such providers and, where required, have also put in place the necessary safeguards for transfers of data outside the EEA.

Please do not enter any personal data of third parties, health data, financial data or other sensitive information into the chat and, where necessary, use anonymized information. The use of HeyImmo is entirely voluntary. The use of voice input is optional; audio data is processed solely for the purpose of text conversion and deleted immediately.
 

Digital Purchase assistance is a digital platform designed to coordinate real estate transactions and ensure transparency. It serves exclusively to support the process and provide information; the legal execution of the transaction continues to be carried out by the notary.

We process your data to facilitate coordination among all parties involved in the transaction (buyer, seller, real estate agent, financial advisor), for secure document management, communication, and progress tracking. This includes contact information, property details, communication histories, and transaction status. With your consent, we share necessary data among the parties involved in the transaction. Data is only shared to the extent necessary for the respective step in the process. Transaction data is stored for the duration of the transaction plus 3 years; communication data is stored for 2 years after the transaction is completed.
 

ImmoScout24 cooperates with RABOT ENERGY GmbH (Reimersbrücke 5, 20457 Hamburg, Germany) in relation to the brokerage of energy supply contracts. In this context, both companies act as joint controllers within the meaning of Article 26 GDPR and have entered a corresponding arrangement on joint controllership.

ImmoScout24 brokers the conclusion of energy supply contracts with RABOT ENERGY for end customers. RABOT ENERGY processes your personal data for the purposes of offering and performing the energy supply contract, including name, address, date of birth, email address, bank details and consumption data.

ImmoScout24 processes limited personal data, namely name, address, contract status, start and end of supply, monthly electricity consumption and market location, exclusively for the purpose of verifying the number of brokered contracts.
The legal basis for the processing is the performance of the energy supply contract pursuant to Article 6(1)(b) GDPR and, respectively, Article 6(1)(f) GDPR based on the legitimate interest in tracking concluded contracts.

You may exercise your data subject rights, in particular your rights of access, rectification and erasure, pursuant to Articles 15 to 22 GDPR against either contracting party. Both companies are obliged to comply with your requests and to support each other where necessary.
 

We process your data primarily to provide you with our Services and the associated functions, tailored to your individual interests.

In addition, certain further processing operations are carried out for other purposes, which we set out below together with the respective legal bases. Among other things, we use various procedures on the Platform for usage analysis and for displaying online advertising.

We also process your data for direct marketing purposes by email and for security and legal enforcement purposes.
 

We may use cookies, pixels, and similar technologies when you visit our websites or use our services. Cookies are small files that are stored on your computer while you are browsing the Internet via a browser or app, and they enable your device to be recognized, potentially even across different websites. Cookies do not contain any personal data. Some of the cookies we use are deleted at the end of the browser session; that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our service providers to recognize your browser the next time you visit (persistent cookies).

You can prevent the use of cookies by adjusting your browser settings accordingly. However, this may result in certain areas of the websites or services not functioning as intended.

We use cookies to operate our Services and improve their functionality. This helps us better understand how you use our services. You can find out which cookies we use in our Privacy Manager.

Pixels are small pieces of code placed on our website or in our app. We provide our advertising clients with pixels to place on their websites so that we can determine whether you have interacted with specific web or email content.

We use local storage to store data on your device. We use this stored data, for example, to measure the effectiveness of our advertisements. We may use this local storage on other websites to provide you with certain features or to obtain information about your visits to those websites.
 

We use tools and cookies that are necessary for the operation of the Website on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR and section 25(2) no. 2 TDDDG, in order to enable you to use our Website in a more convenient and personalised manner and to make such use as time-saving as possible.

In certain cases, these tools may also be necessary for the performance of a contract or to take steps prior to entering into a contract; in such cases, the processing is carried out pursuant to Article 6(1)(b) GDPR and section 25(2) no. 2 TDDDG.

We use all other cookies and tools, in particular those for analytics and marketing purposes, based on your consent pursuant to Article 6(1)(a) GDPR and section 25(1) TDDDG. Data processing by means of these tools takes place only if we have obtained your prior consent.

Further information on the cookies used, including their retention period, and on the associated tools, including their functionality and the type and scope of data collection, can be found in the Privacy Manager.

If you have given your consent to the use of certain tools, we also transfer the data processed when using those tools to third countries based on that consent.

Where different legal bases apply to individual tools or procedures, this is expressly indicated below.

For obtaining and managing your consent, we provide you with our Privacy Manager from Usercentrics GmbH. The Privacy Manager generates a banner that informs you about data processing on our website and gives you the option to consent to all, individual or no data processing operations by optional tools. This banner appears when you first visit our website and when you access your settings again to change them or withdraw consents. The banner also appears during subsequent visits to our website if you have disabled the storage of cookies or if the cookie of Usercentrics GmbH has been deleted or has expired.

When you visit our website, your consents or withdrawals of consent, information about your browser and your device, and the time of your visit are transmitted to Usercentrics GmbH. Usercentrics GmbH also uses a necessary cookie to store the consents you have given and the withdrawals of consent you have made. If you delete your cookies, we will ask for your consent again when you access the Website at a later point in time.

The data processing by Usercentrics GmbH is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis for the use of the Privacy Manager is Article 6(1)(f) GDPR and section 25(2) no. 2 TDDDG, based on our interest in complying with the statutory requirements for consent management.
 

We process your data to provide you with the respective Service and the associated functions. Our service of providing a marketplace platform for real estate sellers, buyers, and those interested in real estate and its financing includes, in particular, facilitating contact between sellers, buyers, and interested parties. Further information on this can be found in section 5.1 (“Disclosure in connection with the provision of our Services”) and in the supplementary notices relating to the respective form, such as a contact inquiry form. The data fields marked as mandatory are required for the provision of the respective Service. Without this data, you cannot use the relevant function. Further data fields are voluntary.

Example: If you search for properties or financing offers in our Services, you may create a search alert. We store your email address and search parameters to send you search results that may be of interest to you.

The provision of our Services involves adapting them to your individual needs. The processing of your data for needs-based design is an integral part of our Services and a core element of our service portfolio. To obtain the best possible benefit from our Services, we therefore recommend that you register.

For your listings to be noticed by as many interested persons as possible, we also distribute listings in some cases via cooperating property portals/websites and via third-party services. This means that we disclose your data, as publicly displayed in the listing, to the cooperating property portal/website. Our Services are also accessible via third-party services such as ChatGPT; however, the listings displayed there and the associated personal data are transmitted to the respective provider of the service only in reduced form and not to the same extent as they appear publicly via our Service. We also send your data by notification email to property seekers or share your listings on social media, such as Facebook.

In limited cases, we process inquiries from customers and their contract data to be able to respond automatically and immediately to a termination or withdrawal. As a result, an inquiry identified as a contractual termination or withdrawal will, where the relevant requirements are met, either be carried out and confirmed automatically, or an automated message will inform you that the termination or withdrawal cannot be carried out, for example because the withdrawal or termination period has expired. The automated processing of terminations or withdrawals takes place only where a customer inquiry has been identified, with a high degree of probability, as a contractual termination or withdrawal by our intelligent system for the thematic classification of messages. For this purpose, message content is analyzed for keywords and patterns that typically occur in contractual terminations or withdrawals. In addition, for automated processing, it must be possible to clearly assign the email address of the person making the inquiry to a user account, and there must be only one contractual item in the user account.

If you do not agree with the result of the automated processing of your matter, you may reply to the automated message to obtain manual processing by customer service. You also have the opportunity to present your own position and to contest the decision.

These processing operations are carried out based on statutory provisions that permit us to process personal data to the extent necessary for the use of a service or for the performance of a contract, Article 6(1)(b) GDPR. Where new, innovative services or cooperations are involved that have not yet become part of our contractual relationships, the data processing is carried out based on our legitimate interests, Article 6(1)(f) GDPR. In this case, our legitimate interest is the economic interest in enabling these new cooperations or service elements.

In some areas, we enable you to rate services provided by partner companies and third-party companies that you have found via our Platform, as guidance for other users. For this purpose, we send you an email asking you to submit such a rating. In addition, we process your data to the extent necessary for the performance and administration of contractual relationships entered, for example for the creation and sending of invoices or for contacting you in the event of problems. This also includes collecting and otherwise processing data relating to any contract concluded between you and other users of our marketplace platform, where this is necessary for billing our Services to your contractual partner or for other legitimate interests, such as the enforcement of legal claims. To be able to process matters as quickly as possible, even when message volumes are high, and to ensure a high quality of service, we use an intelligent system for the thematic classification of incoming messages sent by email or contact form. This enables us to forward messages directly to the internally responsible department or also to send automated replies.

These processing operations are carried out based on statutory provisions that permit us to process personal data to the extent necessary for the use of a service or for the performance of a contract, Article 6(1)(b) GDPR. In some cases, we also obtain your consent to the data processing, Article 6(1)(a) GDPR.

We process data from your invoices and contractual items to make revenue forecasts and decisions concerning sales planning, provided that we have an overriding legitimate interest in doing so, Article 6(1)(f) GDPR.

We also process completed customer inquiries that have reached us by email or contact form to train our intelligent system for the thematic classification of messages and to ensure a consistently high hit rate, even where customer matters change. Your messages are processed for this purpose for a maximum of 6 months and based on our legitimate interest in using effective processing aids when handling customer matters, Article 6(1)(f) GDPR.
 

Where you have given your consent pursuant to Article 6(1)(a) GDPR, or where we are otherwise entitled to do so, we also process your data to inform you about our products, services, events and promotional activities. We may send you this information via various channels, such as email, telephone, SMS, postal mailings and third-party social networks.

In order to tailor our information offers as closely as possible to your interests and preferences, these communications may be adapted to your preferences, for example if you tell us your preferences, if we are able to infer them from your usage behavior in relation to our Services, or if you click on links in our emails.

For this purpose, we may combine your registration data with your movement data on the websites and with notifications from ImmoScout24, such as emails and push notifications, including pages accessed and content clicked on, as well as with data from other services used on these websites, such as search parameters; properties clicked on, saved, recommended or contacted; profile, moving and financing data; and product purchases and services received.

Example: If you search for properties in the Berlin area in our Services, we may use this information to suggest offers in the Berlin area to you by email that may be of interest to you, if you have consented to receiving such personalized messages.
 

When our Service is used, we create usage profiles using pseudonyms for the purposes of statistical analysis.

Statistical analysis of our Services provides us with valuable information that helps us to improve our Services and to deploy resources in a targeted manner.

These processing operations are carried out based on consent given by you or based on statutory provisions that permit the processing of personal data because ImmoScout24 has an overriding legitimate interest in the statistical analysis of the Service, Article 6(1)(f) GDPR. The legitimate interest consists in assessing the reach of our Services, identifying and eliminating errors in our Services and continuously improving our Services.

Please note that, for the purposes of statistical analyses, we store and process property data transmitted by you, such as address, size, location and price, beyond the duration of the listing. To the extent that this constitutes personal data because it can be attributed to you personally, we rely on an overriding legitimate interest, Article 6(1)(f) GDPR. This interest consists in continuously improving our Services and developing new Services.

For statistical analysis, we in part use procedures involving cookies and similar technologies. This takes place only based on your consent, which is obtained via the Privacy Manager; see section 4.1. Details on the tools and services can be found in the Privacy Manager.
 

When our Service is used, we create usage profiles using pseudonyms for the purposes of the needs-based design of the Service. The processing of your data for needs-based design is an integral part of our Services and a core element of our service portfolio.

Example: If you have searched on our Platform for financing offers for a property, we may use the search parameters used by you to suggest financing or moving offers that may be of interest to you.

These processing operations are carried out based on consent given by you or on the basis of statutory provisions that permit us to process personal data because ImmoScout24 has an overriding legitimate interest, Article 6(1)(a) or Article 6(1)(f) GDPR. The legitimate interest consists in adapting and improving our Service in the best possible way in line with your individual needs.

For the personalization of our Services, we in part use procedures involving cookies and similar technologies. This takes place only based on your consent, which is obtained via the Privacy Manager; see section 4.1. Details on the tools and services can be found in the Privacy Manager.
 

We may contact you via email to invite you to rate our service and our products, so that we can tailor our performance more closely to users’ needs. For this purpose, we send an invitation link for submitting the rating to your email address.

In this context, we process your name, email address and user ID. The legal basis is consent given by you, Article 6(1)(a) GDPR, for our marketing measures.

We publish your rating for various marketing campaigns, marketing measures and advertising materials.
 

The advertising in our Services is optimized for you by collecting and processing your usage behavior in relation to predicted interests.

For this purpose, we may collect data about your activities on our website and, if you click on advertising material in our Services, on the website of the respective advertising partner, such as advertising banners clicked on, subpages visited and search queries submitted. These records help us to measure the success of the advertising displayed in our Services and to bill our advertising customers. In addition, we use the data collected in this way to optimize the advertising banners displayed to you.

Example: Optimization may mean, for example, that we hide advertising banners that are not of interest to you and replace them with other advertising banners that are more likely to correspond to your predicted interests. Optimization therefore does not result in you seeing more advertising. You are merely shown advertising that is more likely to correspond to your presumed interests.

The collected data is used by third-party companies on behalf of ImmoScout24, by means of a pseudonymous user ID, for the purpose of displaying content and advertising that matches your interests. In this context, procedures are used that involve cookies and similar technologies. This takes place only based on your consent, which is obtained via the Privacy Manager; see section 4.1. Details on the tools and services can be found in the Privacy Manager.
 

On our websites, we use so-called software plugins that extend the range of functions we provide to our users by adding services offered by other providers.

Google reCAPTCHA

We use Google reCAPTCHA, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to verify whether data entered in contact forms is entered by a human or by an automated program. For this purpose, reCAPTCHA analyses the behavior of the website visitor based on various characteristics. For the analysis, reCAPTCHA evaluates various information, such as the IP address, the time spent by the website visitor on the website or mouse movements made by the user. The data collected during the analysis is forwarded to Google.

The data generated in this context may be transferred by Google to a server in the United States for evaluation and stored there. If personal data is transferred to countries outside the EU, we have entered standard contractual clauses with Google.

If you use a Google account, Google may, depending on the settings stored in your Google account, link your web and app browsing history to your Google account and use information from your Google account to personalize advertisements. If you do not want this association with your Google account, you must log out of Google before accessing our website.

The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR in ensuring the functionality of our Services.

Google Maps

We use Google Maps, a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This enables us, for example, to display interactive maps on our website. This application is necessary for the functionality and full provision of our content and Services. Google Maps also uses fonts provided via the Google Fonts service.

When the map is displayed, your browser must establish a connection to Google’s servers. If you have a Google user account and are logged in to Google, your data may be associated by Google with your account. We have no influence over this data transfer or the further processing of the data by Google.

Further information on how user data is handled can be found in Google’s privacy policy:

https://www.google.de/intl/de/policies/privacy/

The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR in the needs-based design of products through the use of map material.

Please note that various “share” functions of social networks may be integrated into our Services not as plugins, but as links. Only a single click is required to use these functions. In doing so, we redirect you to the website of the respective social network, with a reference to the URL of the content to be shared. You must authenticate yourself there with your respective account and can only then share the desired content. The associated collection and use of data are the responsibility of the operator of the respective social network. Please consult the privacy policy of the respective network operator for details.

YouTube videos

Videos stored on YouTube and played from there are embedded on our websites. YouTube is a service of Google/YouTube, namely YouTube LLC / Google LLC / Google Ireland Limited. When videos are embedded, technical information may be stored on or read from your device, such as cookies, local storage or session storage, and JavaScript functions may be executed.

We use the so-called Privacy-Enhanced Mode (“youtube-nocookie”). According to YouTube, this mode reduces the transmission of usage data and prevents embedding calls from influencing the personalisation of the YouTube experience to the same extent as standard embedding. Nevertheless, based on technical experience, information may still be transmitted or stored in local storage/session storage when a video is played or in certain other cases, even in Privacy-Enhanced Mode. A complete prevention of all data transmission is not technically possible.

Typically, cookies such as PREF and entries in local storage/session storage, such as yt-remote-device-id, yt-player-volume, yt-player-quality and similar entries, may occur. This list is not exhaustive; Google may change the type of information stored.

The processing is carried out based on your consent pursuant to Article 6(1)(a) GDPR. Section 25 TDDDG also requires consent for the storage of, or access to, information on the end-user device, such as cookies or local storage. Without your consent, embedded videos will not be loaded automatically.

Through the use of YouTube, personal data may be transferred to the United States or other third countries. Such transfers take place based on your explicit consent.

When the content is accessed, YouTube/Google receives the information that you have accessed the page. This applies regardless of whether you are logged in to Google/YouTube. If you are logged in to your Google/YouTube account, the playback event may be associated with your account. If you wish to avoid this, please log out of Google before visiting our website or prevent the data transfer by refusing consent in the cookie/consent banner.

Further information on Google/YouTube’s privacy practices can be found in Google’s privacy policies:

https://www.youtube.com/intl/ALL_de/howyoutubeworks/privacy/

Instagram videos

Videos stored on Instagram and played from there are embedded on our websites. Instagram is a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”).

When videos are embedded, technical information may be stored on or read from your device, such as cookies, local storage or session storage, and JavaScript functions may be executed. Through the embedding, Meta receives, in particular, your IP address, information about your device and browser and, where applicable, interaction data, such as access to, starting or playing a video. If you are logged in to Instagram or Facebook, Meta may associate your visit to our website with your user account.

In connection with the embedding, cookies may be set and entries may be created in local storage or session storage. These may serve, for example, the technical provision of the player, the storage of settings or statistical purposes. The type, scope and retention period of the stored information are determined by Meta and may change.

The processing is carried out based on your consent pursuant to Article 6(1)(a) GDPR.

Access to, and storage of, information on the end-user device, such as cookies or local storage, takes place in Germany based on section 25(1) TDDDG.

Without your consent, embedded Instagram videos will not be loaded automatically.

You may withdraw your consent at any time with effect for the future via our consent settings.

Meta also processes data in part outside the European Union, in particular in the United States. The transfer may take place based on an adequacy decision, namely the EU-US Data Privacy Framework, or, where applicable, based on your consent. It cannot be ruled out that authorities in third countries may obtain access to the transferred data.

Further information on data processing by Meta can be found in the privacy policies of Instagram and Meta:

https://privacycenter.instagram.com/policy

https://www.facebook.com/privacy/policy

We also use your data to effectively counteract possible acts of misuse within our Platform in the interests of honest users, and to protect ourselves and our customers from harm in such cases. This also includes data processing operations that are necessary for the enforcement of our rights and claims. These processing operations are described in more detail in section 5.4 (“Disclosure to public authorities, injured parties and for legal enforcement”).

Example: If you submit a contact inquiry on our website, we may automatically collect and temporarily store your email address, first name and surname, as well as parts of the inquiry and the listing enquired about. In addition, in the case of incoming messages sent by email or contact form, we may automatically analyze message content for the presence of fraudulent patterns. This helps us to identify and block fraudulent contact enquiries in good time. At the same time, we may also evaluate this data to send you a fraud warning if we must conclude that a listing visited by you is being used for abusive purposes.

In addition, we use your data to identify disruptions and to ensure system security, including the detection and tracking of unauthorized access and attempted access to our web servers.

These processing operations are carried out in connection with the provision of the Services requested by you, Article 6(1)(b) GDPR, and/or on the basis of statutory provisions that permit us to process personal data for protection against misuse and for legal enforcement purposes, and because ImmoScout24 has an overriding legitimate interest in processing operations to ensure the functionality and security of the Service, Article 6(1)(f) GDPR.

We also use messages identified as fraudulent to train our automated systems for detecting fraudulent content with current fraud patterns, based on the legitimate interest in fraud prevention, Article 6(1)(f) GDPR.
 

The property data transmitted and published by our advertisers, such as property address, size, location and price, but not names or other specific communication details relating to the advertiser or owner, may be published by us for the purpose of creating market transparency and disclosed to contractual partners, such as partners from the insurance or energy supply sectors, for monetization purposes.

Where the publication does not serve to promote the active listing; see section 4.1; all information relating to the advertiser of the relevant property is removed before the property data is published or disclosed. It is therefore not possible to identify the advertiser solely from the disclosed data.

The association of the disclosed data, such as the property address, with personal data of other contractual partners is possible and takes place based on a separate legal basis of the respective contractual partner.

We base the data processing on an overriding legitimate interest, Article 6(1)(f) GDPR. This interest consists in the commercial exploitation of the property data.
 

Your personal data will be disclosed, in addition to the other cases referred to in this Privacy Policy, only in the following cases:

In connection with the provision of our Services and the associated functions and services, we disclose your data, for example, to providers of, and persons interested in, real estate and related financing, where you use the respective service.

Further information on the recipient or the category of recipients and the purpose of the respective data transfer will be provided to you before you use the respective Service in separate notices or immediately after use by email.

Data is also disclosed to cooperation partners who are not bound by our instructions for the purposes of personalizing our Services, in connection with the placement of online advertising and when plugins are integrated; see sections 4.7 to 4.8 of this Privacy policy.

Finally, we transmit property listings to third-party providers so that they can be made available via their services; see section 4.1 of this Privacy policy.

Example: If you use the “property valuation” function, we disclose your data to suitable property experts of our cooperation partners. The category of recipients and the purpose of the data disclosure can be found in the corresponding notices on the form pages. If you do not find more detailed information on the recipient in the notices, we will provide this to you after you have used the function.

Example: If you use the credit check in connection with financing enquiries, we collect your master data, namely name, address and date of birth, and transmit it to the respective partner for the purpose of the credit check, to retrieve the creditworthiness data stored there. This includes information on your previous payment behavior and the assessment of the risk of payment default based on mathematical and statistical procedures using address data, so-called scoring.

If you have selected this function, this data is forwarded to financing partners cooperating with ImmoScout24 for the purpose of preparing offers for mortgage financing.

This disclosure takes place on the basis of statutory provisions that permit us to process personal data to the extent necessary for the use of a service or for the performance of a contract, Article 6(1)(b) GDPR, or because ImmoScout24 has an overriding legitimate interest in making use of the Platform as easy and efficient as possible, Article 6(1)(f) GDPR. In some cases, we also obtain your consent to the data processing, Article 6(1)(a) GDPR.
 

Certain personal data, such as data provided by the user during registration, may be disclosed within the group of companies for internal administrative purposes, including joint customer support, where such use is necessary and legally permissible.

This takes place either in the context of processing on behalf of a controller or in the context of joint controllership. The group companies have set out their mutual obligations under the GDPR in an arrangement.

These disclosures take place based on statutory provisions that permit us to process personal data to the extent necessary for the use of a service or for the performance of a contract, Article 6(1)(b) GDPR, or because ImmoScout24 has an overriding legitimate interest in doing so. This interest consists in making customer support as easy and efficient as possible, Article 6(1)(f) GDPR. In some cases, we also obtain your consent to the data processing, Article 6(1)(a) GDPR.

For compliance with the transparency obligations under Articles 13 and 14 GDPR and the further data subject rights under Chapter 3 GDPR in relation to the data processing operations referred to above, the respective company with which you have a contractual relationship or whose Services you have used is primarily responsible.

However, you may continue to exercise these rights against each individual company.
 

Where this is necessary to investigate unlawful or abusive use of our Services, or for legal enforcement purposes, personal data is forwarded to law enforcement authorities and, where applicable, to injured third parties. However, this only takes place where there are indications of unlawful or abusive conduct.

Disclosure may also take place where this serves to enforce terms of use or other agreements.

Our legitimate interest in the data processing within the meaning of Article 6(1)(f) GDPR consists in ensuring the proper functioning of our Website and the Service and, where applicable, in establishing, exercising or defending legal claims.

We are also under a statutory obligation within the meaning of Article 6(1)(c) GDPR to provide information to certain public authorities upon request. These include law enforcement authorities, authorities prosecuting administrative offences punishable by a fine, and tax authorities.
 

As our business develops, the structure of our company may change, for example by changing its legal form or by establishing, acquiring or selling subsidiaries, parts of companies or business components.

In such transactions, customer information may, where applicable, be disclosed together with the part of the business to be transferred to the purchaser or legal successor and their advisers.

Whenever personal data is disclosed to third parties to the extent described above, we ensure that this is carried out in accordance with this Privacy Policy and applicable data protection law.

These disclosures take place on the basis of statutory provisions that permit us to process personal data where ImmoScout24 ensures that the performance of the contract with you can continue without disruption, Article 6(1)(b) GDPR, or where ImmoScout24 has an overriding legitimate interest in disclosing the data for administrative purposes, Article 6(1)(f) GDPR.
 

ImmoScout24 regularly verifies your identity when contracts are concluded and in cases where there is a legitimate interest, both in relation to new and existing customers. In this context, we cooperate with CRIF Bürgel GmbH, Leopoldstraße 244, 80807 Munich, Germany.

The legal bases for this transmission are Article 6(1)(b) and Article 6(1)(f) GDPR.

CRIF Bürgel GmbH processes the data received and also uses it for the purpose of profiling, or scoring, in order to provide its contractual partners in the European Economic Area and in Switzerland and, where applicable, in other third countries, insofar as an adequacy decision of the European Commission exists for such countries, with information including information for assessing the creditworthiness and identity of natural persons.

Further information on the activities of CRIF Bürgel GmbH can be found in its information sheet or online at www.crifbuergel.de/de/datenschutz.
 

For the processing of payments for paid Services, we use various payment service providers and payment methods. We may transmit to these service providers data that arises in direct connection with payment processing.

As a rule, you disclose payment data, such as your account number or credit card details, only to the payment service provider, and we neither have knowledge of nor access to this data. We receive information from the payment service providers regarding payments made or failed transactions.

The legal basis for the exchange of data with payment service providers is Article 6(1)(b) GDPR, as the processing is necessary for the performance of the contract and the processing of payments.

The payment service providers act as independent controllers under the GDPR. The legal bases and further details of the data processing carried out by the payment service providers on their own responsibility can be found in the Privacy Policies of the payment service providers.

Data protection inquiries in this context can most easily be addressed directly to the payment service provider, as only the payment service provider has access to the data and can take the corresponding measures.

We currently use the following payment service providers:

PayPal Limited
Ballycoolin Business Park
Ballycoolin Road
Blanchardstown Dublin 15
Ireland
https://www.paypal.com/myaccount/privacy/privacyhub

Adyen N.V.
Simon Carmiggeltstraat 6
1011 DJ Amsterdam
Netherlands
https://www.adyen.com/de_DE/privacy-policy

Heidelberger Payment GmbH
Vangerowstraße 18
69115 Heidelberg
Germany
https://www.heidelpay.com/de/datenschutz/

Stripe Payments Europe, Limited (SPEL)
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
D02 H210
Ireland
https://stripe.com/en-de/privacy

UniCredit S.p.A.
Piazza Gae Aulenti 3, Tower A
20154 Milan
Italy
https://www.unicreditgroup.eu/en/info/privacy.html
 

As explained in this Privacy Policy, we use services whose providers are, in some cases, established in so-called third countries, i.e. outside the European Union or the European Economic Area, or process personal data there. These are countries whose level of data protection does not correspond to that of the European Union.

Where this is the case and the European Commission has not adopted an adequacy decision for these countries within the meaning of Article 45 GDPR, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among other things, the standard contractual clauses of the European Union, the EU-US Data Privacy Framework or binding corporate rules.

Where this is not possible, we base the data transfer on derogations under Article 49 GDPR, your explicit consent or the necessity of the transfer for the performance of a contract or for the implementation of pre-contractual measures.

Where a transfer to a third country is intended and neither an adequacy decision nor appropriate safeguards are in place, it is possible, and there is a risk, that authorities in the respective third country, such as intelligence services, may obtain access to the transferred data in order to collect and analyse it, and that the enforceability of your data subject rights cannot be guaranteed.
 

Unless otherwise described in this Privacy Policy, we store your personal data only for as long as is necessary to achieve the purposes stated herein or as provided for by a statutory retention period. Thereafter, the relevant data is routinely blocked, deleted or anonymized in accordance with statutory provisions.

Please note that, as a general rule, we do not delete your registered account unless you inform us that you wish us to do so. This also applies if you do not use your account for a longer period of time. If, at your request, we have marked your account for deletion, its physical deletion will not be carried out until after a technical waiting period of 14 days has expired.

Where we are required or permitted to retain data for statutory reasons or to safeguard overriding legitimate interests, further processing of the data concerned will be restricted instead of the data being deleted or anonymised.

Example: If you have completed a paid booking, your booking and payment data and, where applicable, further data are subject to statutory retention obligations, for example under the German Commercial Code (Handelsgesetzbuch, HGB) and the German Fiscal Code (Abgabenordnung, AO). In such cases, we are required to retain your data for a period of up to ten years. Only thereafter may we finally delete the relevant data.

Example: If you have subscribed to a newsletter or otherwise consented to receiving promotional messages, we have an overriding legitimate interest in retaining, in blocked form, the data required to prove your consent for legal defense purposes. In this case, the duration of the blocking period is based on the relevant statutory limitation periods. After these periods have expired, the relevant data is deleted.

Where your data is transmitted to third parties when you use our Services, for example in the case of contact enquiries to property providers or enquiries to financing providers, those third parties are responsible for retaining and deleting that data. The contact details of those third parties will be communicated to you in connection with your use of our Services, so that you can exercise your rights directly against the respective third party.
 

Pursuant to Article 15 GDPR, you have the right to obtain information about your personal data at any time. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data where it was not collected from us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof.

To exercise these rights, please contact the company with which you have a contractual relationship or whose Services you have used. The contact details can be found in section 2 (“Name and contact details of the controller”).

Where the relevant requirements are met, you may also have the following rights.
 

Pursuant to Article 7(3) GDPR, you have the right to withdraw the consent you have given to us at any time. As a result, we may no longer continue, for the future, the data processing that was based on that consent.

Where you have given consent via the Privacy Manager, you may withdraw it in the Privacy Manager.
 

Pursuant to Article 16 GDPR, you have the right to obtain from us without undue delay the rectification of personal data concerning you if such data is inaccurate.

Furthermore, within the scope of Article 16 GDPR, you have the right to obtain the completion of your data from us, including by means of providing a supplementary statement, if such data is incomplete.
 

You have the right, under the conditions set out in Article 17 GDPR, to obtain from us the erasure of personal data concerning you, for example where your data is no longer necessary for the purposes for which it was collected or otherwise processed.

In certain cases, we may continue to store personal data even after you have requested the deletion of your user account. This is particularly the case if we are legally obligated to do so or if continued storage is necessary to assert, exercise, or defend legal claims, to handle ongoing administrative or court proceedings, or to prevent fraud and misuse.

In these cases, your user account will generally be deactivated. You will then no longer be able to use the account or log in. The personal data in question will be processed exclusively for the respective purpose, and its processing will otherwise be restricted.

If we reject a request for erasure in whole or in part, or if we continue to store data despite a request for erasure, we will inform you, in accordance with the requirements of Article 12(4) of the GDPR, of:

• the reasons for continued storage,
• the relevant legal basis for this,
• the categories of data that continue to be stored,
• the purpose of the continued processing, and
• the intended retention period or the criteria for determining it

The retention period depends on the specific purpose: In cases where statutory retention obligations apply, we store the data until the relevant statutory periods have expired. When data is stored for the purpose of legal defense, it is retained until the proceedings are conclusively resolved and, thereafter, only for as long as necessary to assert or defend potential legal claims. For the prevention of fraud and misuse, we generally store the data only for as long as is necessary to detect, investigate, or prevent the specific instance of misuse. In all other respects, Section 6 of this Privacy Policy applies.

As soon as the conditions for further storage no longer apply and there are no longer any statutory retention obligations, the relevant data will be deleted or anonymized.

You have the right to obtain from us the restriction of processing in accordance with Article 18 GDPR.

This right exists in particular where the accuracy of the personal data is contested between the user and ImmoScout24, for the period required to verify the accuracy of the data, and where the user has an existing right to erasure but requests restricted processing instead of erasure.

It also exists where the data is no longer required for the purposes pursued by ImmoScout24, but the user requires it for the establishment, exercise or defense of legal claims, and where the successful exercise of an objection between ImmoScout24 and the user is still disputed.
 

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 GDPR.

To the extent that we process data that you have provided to us, you have the right, in accordance with Article 20 GDPR, to receive the personal data concerning you in a structured, commonly used and machine-readable format, provided and to the extent that you have provided the data to us.

Information on your right to object pursuant to Article 21 GDPR

Pursuant to Article 21 GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR, namely data processing in the public interest, and Article 6(1)(f) GDPR, namely data processing on the basis of a balancing of interests. This also applies to profiling within the meaning of Article 4 no. 4 GDPR based on those provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.

Where your objection is directed against the processing of data for direct marketing purposes, we will stop the processing without delay. In this case, you do not need to state a particular situation. This also applies to profiling to the extent that it is related to such direct marketing.

If you wish to exercise your right to object, an email to the contact details listed in section 2 (“Name and contact details of the controller”) is sufficient.

Please note that, even if you opt out of receiving marketing communications, you may still receive certain communications from us. These include, for example, technical updates regarding our products, order confirmations, notifications about your account activities and other important communications.
 

Scout24’s offering is continuously being developed, to further improve the services and functionalities of the Platform. Such changes may also affect the use of your personal data.

We will therefore amend this Privacy Policy accordingly from time to time. The current version is available on our Website in the “Privacy” section. Please use this section to regularly inform yourself about the status of the Privacy Policy.
 

Last updated: February 2026