Privacidad

Last updated: October 19, 2026 · Deutsche Fassung

This policy explains what personal data Door24 (door24homes.com) processes, why, and what rights you have. We collect as little as the service needs. There are no advertising or tracking tools on this site, and no analytics service.

1. Who is responsible

Email: hello@door24homes.com. There is no data protection officer; none is required.

2. Hosting and server logs

The site runs on servers of Fly.io, Inc. (USA) in Frankfurt am Main, Germany. When you open a page, the server briefly records technical data: IP address, date and time, the page, the browser’s identification and the result. We use it only to keep the site secure and to find errors, and it is deleted after a short period. Legal basis: Art. 6(1)(f) GDPR (secure and working service). Fly.io processes the data on our behalf under a data processing agreement; for any access from the USA, the EU standard contractual clauses and the EU–US Data Privacy Framework apply.

3. Cookies

We only set cookies the site needs to work. None is used for advertising or tracking, and none is shared with others:

• sid — keeps you logged in (until you log out or the session ends).
• tf_lang — remembers the language you chose (1 year).
• tf_v — a random number so that a heart or a view is counted once per browser (1 year).
• tf_ref — only if you arrived through someone’s refer-and-earn link: the referral code, so the person who recommended us is credited (90 days).
• tf_splash — so a full-page advert is shown at most once a day (1 day).

Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. Visits are counted only as totals per day, section and language, without any personal data.

4. Accounts

When you create an account (agency, private seller, adviser, creator, partner or buyer), we store what you enter: name or agency name, email address, country, password (only as a secure hash) and, if you add them, phone number, website, photo, description, languages and your listings. Your email address is never shown publicly. What you put in a public profile or listing (for agencies: name, contact details you choose, listings) is shown to visitors. Legal basis: Art. 6(1)(b) GDPR (contract). You can change your data in your dashboard and close your account under Settings at any time; it is then deleted, except what we must keep for tax reasons (section 6).

If an agency gives its website when signing up, we read the listings published there once after payment (titles, prices, photo addresses) and add them to its profile for editing. The agency asked for this; legal basis Art. 6(1)(b) GDPR.

5. Enquiries, messages, ratings, stories and comments

If you contact an agent or owner, we pass your message and the contact details you enter to them and keep a copy so both sides can see the conversation. Private messages between accounts are stored for the same reason. Ratings, buyer stories and comments are published as you write them; stories and rating texts only after we have checked them. Legal basis: Art. 6(1)(b) GDPR. You can ask us to remove a rating, story or comment at any time.

6. Payments

Payments are handled by Stripe Payments Europe, Ltd. (Ireland). You enter your card or other payment details directly at Stripe; we never see them. Stripe tells us the amount, currency, status and a customer reference. Legal basis: Art. 6(1)(b) and (c) GDPR. Invoices and payment records are kept for the periods required by German tax and commercial law (up to 10 years). Stripe’s privacy policy: stripe.com/privacy.

7. Emails

We send emails that belong to the service (confirming your address, receipts, messages, notices about your account) through our mailbox provider Namecheap, Inc. (USA), and invitations to businesses (section 9) through Google Workspace (Google Ireland Ltd.). Both act on our behalf under data processing terms; the EU standard contractual clauses and the EU–US Data Privacy Framework apply to transfers.

The weekly magazine and new-home alerts are sent only after you have confirmed your address through the link we send (double opt-in). Every such email has a link to stop it. Legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time.

8. Feedback and reports

If you use the feedback button or report a listing, we store your message and, if you give it, your email address, to answer you and to fix the problem. Legal basis: Art. 6(1)(f) GDPR.

9. Agency and adviser directory, private previews and invitations

This section is for estate agencies and investment or property-management companies that have not signed up. We collect business data from public sources: business name, address, phone number, website and the business email address the company publishes itself. Sources: OpenStreetMap (© OpenStreetMap contributors, ODbL), Overture Maps Foundation, and the company’s own website. We never copy addresses from property portals and never buy lists.

We use this data to prepare a private preview of how the company’s profile would look on Door24 — with its logo and current listings read from its own website (robots.txt respected; photos are shown from the company’s own site and not stored by us) — and, only in countries whose law allows it, to send the company one invitation by email and at most one reminder. Each invitation says where we found the address and has a one-click unsubscribe. A preview is reachable only through the link in that email and is never listed or indexed.

Legal basis: Art. 6(1)(f) GDPR (our interest in offering our service to businesses). You can object at any time (Art. 21 GDPR): use the unsubscribe link, the “remove” button on the preview, or write to hello@door24homes.com. We then delete the data and keep only the email address or domain on a block list, so that we never write again and never add the business back from the map data.

10. Photos from agencies’ websites

Some listings show photos that are loaded directly from the agency’s own website. When you open such a listing, your browser contacts that website, which sees your IP address. We have no influence on what that website records.

11. How long we keep data

Account data: until you close the account. Enquiries and messages: as long as at least one side keeps the account. Payment records: as required by law (up to 10 years). Server logs: a short period. Block list entries: permanently, so that an objection keeps working.

12. Your rights

You have the right to access (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21 GDPR). Consent can be withdrawn at any time with effect for the future. Write to hello@door24homes.com. You also have the right to complain to a data protection authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

We do not use automated decision-making or profiling.

13. Changes

We update this policy when the service changes. The current version is always on this page.