join the club
Data privacy

Data privacy notice

Commerz Real AG is fully committed to protecting your personal data, and complies with all applicable privacy legislation and standards. Personal data collection on this website only takes place within the necessary scope. Under no circumstances do we forward the data we collect to third parties without your knowledge or without a lawful basis. This notice gives you an overview of what data Commerz Real AG collects when you visit our website, to what purpose, and how we use the data.

General information on data processing

1. Scope of personal data processing
We only collect and use personal data from our users where this is necessary to provision a fully operational website and related content and services. Personal data from our users are generally only collected and used after the user has given consent. The only exception is in cases where the user’s prior consent cannot be obtained for reasons of fact and there is a lawful basis for processing the data.

2. Lawful basis for personal data processing
Insofar as we obtain the data subject’s consent to the processing of personal data, the lawful basis for personal data processing is Article 6 (1) a) of the EU General Data Protection Regulation (GDPR).

In the case of personal data processing that is necessary for the performance of a contract to which the data subject is party, the lawful basis is Article 6 (1) b) GDPR. The same applies in the case of processing operations required to perform pre-contractual tasks.

Insofar as personal data processing is necessary for compliance with a legal obligation to which our company is subject, the lawful basis is Article 6 (1) c) GDPR.

Where personal data processing is necessary in order to protect the vital interests of the data subject or of another natural person, the lawful basis is Article 6 (1) d) GDPR.

Where processing is necessary to protect the legitimate interests of Commerz Real AG or a third party, and where such interests are not overridden by the interests, fundamental rights and fundamental freedoms of the data subject, the lawful basis is Article 6 (1) f) GDPR.

3. Data erasure and retention period
Personal data of the data subject are erased or blocked as soon as the purpose for which the data were stored no longer exists. Data can be retained for a longer period in accordance with European Union or national legislation, regulations, or other requirements to which the controller is subject. Data will also be erased or blocked upon expiration of a retention period specified by legislation or regulations mentioned above, unless continued retention of the data is necessary for the conclusion or performance of a contract.

Provisioning of the website and generation of log files

1. Description and scope of data processing
When our website is accessed, our system automatically collects data and information from the device accessing the site.

The following data are collected:

(1) Browser type/version,
(2) Operating system used,
(3) Name and URL of the file accessed,
(4) Referrer URL (the website previously visited),
(5) Host name of the computer accessing the site (IP address),
(6) Date and time of the server query.

The data are also stored in our system’s log files. The data are not stored together with other personal data from the user.

2. Lawful basis for data processing
The lawful basis for the temporary storage of data and log files is Article 6 (1) f) GDPR.

3. Purpose of data processing
The system needs to temporarily store the IP address to allow provisioning of the website to the user’s device. For this purpose, the user’s IP address must be retained for the duration of the session. Data are stored in log files to enable the website to operate correctly. In addition, we use the data to improve the website and to safeguard the security of our IT systems. The data are not analysed for marketing purposes.

Data processing for these purposes is in our legitimate interests in accordance with Article 6 (1) f) GDPR.

4. Data storage period
Data are erased as soon as their storage is no longer necessary to achieve the purpose for which they were collected. With respect to data collected in order to provision the website, this is the case when the corresponding session ends. With respect to data storage in log files, this is the case after seven days at the latest. Data in log files may be stored for a longer period. In this case, users’ IP addresses are erased or anonymised so that data can no longer be associated with the client accessing the website.

5. Objection and prevention
The collection of data in order to provision the website and the storage of data in log files are absolutely necessary to operate the website correctly. For this reason, it is not possible for users to object hereto.


1. Description and scope of data processing
Personal or business data (name, address, email address, telephone number) is submitted by the user voluntarily on contact and registration forms, for example. The aforementioned data is transmitted to Engel & Völkers Frankfurt – GDA-Immobilien GmbH Lizenzpartner der Engel & Völkers Residential GmbH, Bockenheimer Landstrasse 1, 60325 Frankfurt for contact purposes. Your data is generally not transmitted to third parties unless we are legally obliged to do so, or if data has to be transmitted to execute the contractual relationship or you have expressly consented to the transfer of your data in advance. We ensure that our service providers comply with the provisions of data protection laws accordingly to the extent that they come into contact with your personal data. Please also note the data protection notices issued by Engel & Völkers. Although we make reasonable efforts to review third-party services for compliance with legal requirements, the relevant service provider is responsible for the content of such services.

Commerz Real AG offers you the opportunity to use the website to obtain information on various topics or to make contact with us. You can contact Commerz Real AG using the contact form or by telephone. When you make contact with us, we collect data such as your given and surname, your e-mail address or your phone number.

Users can also contact us using the e-mail address provided. In this case, the user’s personal data transferred via the e-mail are stored.

Data collected in this context are not generally forwarded to third parties. The data are used exclusively for the purpose of processing the conversation. If the inquiry relates to the activities of the Commerz Real AG or our subsidiaries or affiliates or companies on whose behalf the Commerz Real AG or affiliates is acting, and if necessary for the efficient processing of the inquiry, your data may be forwarded to the relevant company.

2. Lawful basis for data processing
Where the user’s consent has been obtained, the lawful basis for data processing is Article 6 (1) a) GDPR.

The lawful basis for the processing of data transferred via an e-mail is Article 6 (1) f) GDPR. If contact is made with the intention of concluding a contract, the lawful basis for data processing is additionally Article 6 (1) b) GDPR.

3. Purpose of data processing
The processing of data from entry fields is solely for the purpose of processing your initial contact. Where you initially contact us by e-mail or telephone, it is also in our legitimate interests to process your e-mail address or telephone number, respectively.

4. Data storage period
The data are erased as soon as they are no longer required for the purpose for which they were collected. For personal data entered via the fields of the contact form and data submitted to us via e-mail, this is when the conversation with the user is concluded. The conversation is deemed to have been concluded where it can be inferred from the circumstances that the issue in question has been fully resolved.

5. Objection and prevention
The user may at any time withdraw consent to the processing of their personal data. If a user initially contacts us via e-mail, they can object to the storage of his or her personal data at any time. In this instance, the conversation cannot be continued and all personal data stored within the scope of the conversation are erased.

Use of cookies

1. Description and scope of data processing
Our website makes use of cookies at multiple points. Cookies are small text files that your browser stores on your device. They are employed, for example, to determine how many users visit the website and how often it is used, in order to improve the website’s user-friendliness and effectiveness. Both session cookies, which are only stored temporarily while you are using the website, and persistent cookies are used. A persistent cookie is limited to an identification number in order to gain information on users who visit the website more than once, in order to recognise you as a user and possibly to offer you improved navigation features. Cookies do not cause any damage to your device and do not contain viruses. You can prevent the storage of cookies by choosing corresponding browser settings. If you do not accept cookies, this may limit the function/operation of the website.

We use cookies on our website that allow the analysis of users’ surfing behaviour.

As a result, the following data may be transferred:

(1) Search terms entered
(2) Devices
(3) Website access frequency
(4) Time spent on a website
(5) Use of website functions

User data obtained by these means are pseudonymised by technical mechanisms. As a result, it is no longer possible to link the data to the user accessing the website. The data are not stored together with other personal data relating to the users.

When users access our website, a banner informs them of the use of cookies for analytics purposes, and they are referred to this data privacy notice. They are also told how to prevent the storage of cookies via their browser settings.

2. Lawful basis for data processing
The lawful basis for personal data processing in conjunction with cookie use is Article 6 (1) f) GDPR.

3. Purpose of data processing
Analytics cookies are employed for the purpose of improving website quality and content. Analytics cookies allow us to discover how the website is used, enabling us to continuously improve our content and offering.

The following cookies may be used on our website:

Adform cookie For the duration of the campaign – up to 30 days  
_ga 2 years Used to distinguish users.
_gid 24 hours Used to distinguish users.
_gat 1 minute Used to throttle request rate.
AMP_TOKEN 30 seconds to 1 year Used to retrieve a Client ID.
_gac_<property-id> 90 days Contains campaign-related information for the user.
__utma 2 years Used to distinguish users and sessions
__utmt 10 minutes Used to throttle request rate.
__utmb 30 minutes Used to determine new sessions/visits.
__utmc Session Used to determine whether the user was in a new session/visit.
__utmz 6 months Used to store the traffic source or campaign that explains how the user reached the site.
__utmv 2 years Used to store visitor-level custom variable data.

Data processing for these purposes is also carried out in our legitimate interests in accordance with Article 6 (1) f) GDPR.

4. Storage period, objection and prevention
Cookies are stored on the user’s device and from there they are transferred to our website. You as the user therefore have complete control over the use of these cookies. By changing your browser settings, you can disable or restrict the transfer of cookies. Cookies already saved on your device can be erased at any time. This can also be performed automatically. If cookies for our website are disabled, it may not be possible to use all functions of our website.

V. Web tracking

Web monitoring technologies are employed on our website to collect and store data in pseudonymised form exclusively for the purpose of improving our website and its content. These data are used to create pseudonymised usage profiles. To this end, cookies may be deployed, but these collect and store data exclusively in pseudonymised form. The data are not used to personally identify visitors to this website and are not combined with personal data on the person (orthonym) behind the pseudonym.

You can configure your browser to notify you when cookies are about to be placed on your device, enabling you to decline their use. Moreover, you can prevent the installation of cookies via a corresponding browser setting. However, in this case, you may not be able to use all functions of our website. No personal data are stored. The user’s IP address is masked and does not allow conclusions to be drawn regarding visitors to this website. The lawful basis for data processing is the legitimate interests of Commerz Real AG in accordance with Article 6 (1) f) GDPR. Insofar as personal data are processed, the lawful basis is your consent in accordance with Article 6 (1) a) GDPR.

Website analytics with Webtrekk
We utilise Webtrekk services and cookies to collect statistical data on the usage of our website and to improve our online content. Webtrekk has been privacy-certified in the context of web analytics software by the independent testing and inspection association TÜV Saarland.

Every time our website is accessed, information transferred by your browser is collected and analysed for web analytics/monitoring purposes. Data are collected via a pixel which is on each page. The following data are collected:

  • Request (file name of the requested file)
  • Browser type and its version (for example, Mozilla Firefox 33.0, Internet Explorer 10, etc.)
  • Browser language (for example, English)
  • Operating system
  • Browser resolution
  • Screen resolution
  • JavaScript activated: ‘Yes’ or ‘No’
  • Java: ‘On’ or ‘Off’
  • Cookies: ‘On’ or ‘Off’
  • Colour depth
  • Referrer URL
  • Shortened IP address for geographical analysis down to the level of town/city
  • Timestamp
  • Clicks
  • E-commerce information such as order value, products, quantity, etc.
  • Form content: free text fields such as Name, E-mail, Account Number and Phone Number are tracked as ‘completed’ or ‘empty’. The actual values are not tracked.

A more detailed list of the information transferred is available from . Webtrekk stores IP addresses exclusively in truncated form and only uses them for session recognition, for geo-localisation and for combatting cyber attacks. IP addresses are then immediately erased, which means the data collected are anonymous.

The following cookies are placed via Webtrekk:

  • Last click (used for session timeout; duration is a session)
  • Session cookie (used for session identification; duration is a session)
  • Ever cookie (used for recognition of new and returning visitors; duration is six months).

You can enable or disable the use of cookies via your browser settings. If you do not wish to be tracked when visiting specifically, you can object to tracking by clicking this link:

To opt out of Webtrekk web analytics, the domain places a cookie called “webtrekkOptOut” on your device. The opt-out is valid for as long as the user does not erase this cookie, or for the cookie’s maximum age of 60 months. The cookie is placed for the named domain, for each browser and each device. If you visit our website via multiple browsers or devices, you need to place the cookie separately for each device and browser.

Further information is available from the website of Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany,

Commerz Real AG cannot accept responsibility for the security of data transferred via the Internet. E-mail messages are not encrypted. As a result, it is not possible to rule out third parties becoming aware of them. We therefore recommend sending confidential information by conventional post only.

Your rights and how to lodge a complaint
You have the following rights with respect to our collecting and processing your personal data:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to withdraw consent,
  • Right to object to processing,
  • Right to data portability.

To exercise your rights, please contact the data protection officer at Commerz Real AG at datenschutzbeauftragter(at)

In addition, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

VI. Responsibility (data controller)

The data controller under GDPR and other national data-protection legislation of member states and other related regulations is:

Commerz Real AG

Friedrichstrasse 25

65185 Wiesbaden, Germany


VII. Data protection officer

Commerz Real AG

Data Protection Officer

Friedrichstrasse 25

65185 Wiesbaden, Germany