Privacy policy

1. Controller

G Home GmbH, Bonner Str. 12, 51379 Leverkusen, Germany (registered office: Cologne; Amtsgericht Köln, HRB 129886), represented by its managing director . Email: info@ghome.gmbh.

2. Hosting and server logs

This website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Server log files are stored automatically on each visit: IP address (truncated), date and time, page requested, browser type, referrer. Legal basis: Art. 6(1)(f) GDPR (secure operation). Logs are deleted after 14 days.

3. Sale enquiries via the forms

On the home page you can offer us a property using two forms: the quick enquiry and the detailed property information (multi-step form).

Categories of data

• Contact data: name, email address, phone number (optional), preferred contact channel and time.
• Property data: property type, address or postcode and city, year built, living and plot area, rooms, floor and number of floors, parking, condition, renovations, heating type, energy certificate and efficiency class, occupancy and, where applicable, annual net cold rent, registered land charges, ownership.
• Sale data: desired timeline, price expectation, reason for sale (optional) and your message.
• Technical data: your IP address, held only in the server's memory to limit the number of enquiries per hour and discarded after one hour at the latest.

Photos of the property (optional)

In both forms you may upload up to ten photos of your property. We use them only to assess the property and to make you an offer; as for the other form data, the legal basis is Art. 6(1)(b) GDPR. Please do not include people in the photos. Our server checks every file, converts it into a new JPEG image (1600 pixels at most) and removes all metadata in the process, in particular EXIF data such as the camera, the time taken and the GPS location. The photos are not stored on the web server: they are processed in memory only and sent to us as attachments of the email with your enquiry; the uploaded original files are discarded immediately. The same recipients and retention periods apply as for the other form data (see below). You can also send further photos and documents later by email.

Purpose and legal basis

We process the data to handle your enquiry, assess the property, prepare a purchase offer and contact you. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Where we process data to prevent abuse (security question, hidden check field, per-IP rate limit), the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the efficient handling of purchase enquiries and protecting the form against spam.

Recipients and retention

Form data is not stored on our server; it is sent directly by email to our mailbox info@ghome.gmbh. The mailbox is operated on Google Workspace (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Enquiries that do not lead to a purchase are deleted no later than twelve months after the correspondence ends. Where a contract is concluded, statutory retention periods under commercial and tax law apply (up to ten years).

Required fields are marked; without them we cannot handle your enquiry. All other details are optional.

4. Spam protection

The forms use a self-hosted arithmetic challenge, a check field invisible to humans and a per-IP rate limit. No data is passed to third parties for this.

5. Phone assistant “Angela” (AI)

When you call us, the call is answered by our AI assistant “Angela”. Angela is an AI system; you are not talking to a human. Angela is operated by ElevenLabs Inc. (New York, USA), which we use as a processor (Art. 28 GDPR). We process your phone number (where transmitted), the date, time and duration of the call, your voice and the content of the conversation as a recording and transcript. From the conversation the system automatically creates a summary and records the details of your request (for example name, contact details, property address and property data, time frame, asking price, preferred call-back time). After the call, the summary, the details and the transcript are sent automatically to our server, which does not store them but forwards them directly by email to our mailbox info@ghome.gmbh (Google Workspace, Google Ireland Ltd., Dublin, Ireland). We use this data only to handle your request, to call you back and, where applicable, to make you an offer.

The legal basis is Art. 6(1)(b) GDPR (handling your request and pre-contractual steps) and Art. 6(1)(f) GDPR (our legitimate interest in answering calls outside business hours and documenting them completely). The emails containing the call data are kept for the same periods as the other enquiries (see section 3): deletion no later than twelve months after the correspondence ends, or the statutory retention periods where a contract is concluded. At ElevenLabs, the recording and transcript are deleted according to the retention settings defined in our account. If you prefer not to talk to an AI, please write to info@ghome.gmbh or use the form on our website.

ElevenLabs also processes the data in the USA. According to ElevenLabs, the transfer is based on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) under the ElevenLabs data processing agreement, supplemented by technical and organisational measures such as encryption in transit and at rest. According to ElevenLabs, the data is not used to train AI models where this is excluded for our account. A copy of the safeguards is available on request from info@ghome.gmbh.

6. Market reports (generated automatically with AI)

The market reports under /en/reports/ are generated automatically twice a week with an AI model from OpenAI (OpenAI Ireland Ltd., Dublin, Ireland, or OpenAI, L.L.C., San Francisco, USA) on the basis of publicly available sources, and are labelled as such (Art. 50 EU AI Act). Generation runs on a schedule on our server and is independent of page visits. No data about visitors to this website is sent to OpenAI; only the writing brief and the titles of the most recent reports are transmitted.

7. Share prices

Share prices of listed property companies are retrieved by our server from Yahoo Finance and cached for about two minutes. Your browser loads the prices only from our own server; no visitor data is sent to Yahoo. Prices are delayed and are not investment advice.

8. Postcode lookup

The postcode lookup on the home page and at /en/postcode/ sends what you type (a postcode or a place name) to our own server, which looks it up in a local database. Your input is not stored and not passed to third parties; search results are cached briefly without any personal reference. To limit the number of requests per minute, your IP address is held in the server's memory for at most one minute. Legal basis: Art. 6(1)(f) GDPR (providing the search and preventing abuse). The map is our own graphic; no third-party map services are loaded.

Postcode data: GeoNames (geonames.org), licence CC BY 4.0, modified by us (bulk-recipient postcodes removed, district names unified). Map data: Natural Earth (public domain).

9. Anonymous visitor statistics

To see which pages are used, we keep anonymous visitor statistics on our own server, without cookies, without storing anything in your browser and without third-party services. When a page is opened, a small script sends the page, the domain of the referring website (for example google.com) and, if present, a campaign name from the address (utm_campaign) to our server. For some buttons and links (navigation, enquiry buttons, email links, language switch) only their label is sent as well. Form content, input and mouse movements are not recorded; submitted enquiries are only counted. From the browser identification we derive only the device type (mobile or desktop) and the browser family. Your IP address is shortened immediately and never stored. So that a visitor is counted only once per day, we combine the shortened IP address and the browser identification with a random value generated anew every day into a one-way check value. The random value and the check values are deleted when the day is over, so visits can neither be linked across days nor attributed to a person. If "Do Not Track" or "Global Privacy Control" is enabled in your browser, no clicks are recorded. Individual entries are deleted automatically after 30 days; aggregated daily figures without any personal reference are kept longer. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in designing and improving the website to meet visitors' needs). The data is not passed to third parties.

10. No external services

All fonts, scripts and images on this website are served from our own server. No data is transmitted to content delivery networks, analytics or advertising services when you visit.

11. Cookies and browser storage (§ 25 TDDDG)

This website sets no cookies. There is no tracking across other websites or devices and no profiling; the anonymous visitor statistics (section 9) work without cookies and without storing anything in your browser.

Only one entry is kept in your browser's local storage (localStorage); it contains no user identifier and is not transmitted to us:

• ghome-consent: that you have dismissed the notice at the bottom of the screen, so it does not reappear on every visit. Legal basis: § 25(2) no. 2 TDDDG.

The entry remains until you clear the site data in your browser.

12. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to withdraw consent at any time. Complaints may be addressed to the North Rhine-Westphalia data protection authority (LDI NRW).

Last updated: September 2026