Privacy policy

Who is responsible

JÖRRES Immobilienverwaltung, owner Jan-Marc Jörres, Im Günther 1, 52372 Kreuzau, Germany

Phone: +49 151 61657921, email: info@joerres-verwaltung.de

I have not appointed a data protection officer because I am not required to. If you have questions about data protection, please email me at the address above.

The short version

This website is built to process as little data as possible:

• I do not use cookies and do not store anything in your browser (no localStorage).
• I do not load content from other companies: no Google Fonts, no maps, no videos, no social media plugins. The font loads from my own domain.
• I count visits with Matomo, without cookies, on the same server as this website. The data does not go to anyone else.
• WhatsApp and Instagram are only links. No data goes to these services unless you click the link.
• This is why there is no cookie banner on this website.

Hosting

The website and my Matomo service run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is in a data centre in Falkenstein, Germany.

Tedacon runs the server for me. Tedacon is my processor under Art. 28 GDPR and uses Hetzner as a sub-processor. Both only process the data on my instructions and not for their own purposes.

The legal basis is my legitimate interest in running the website in a safe and reliable way (Art. 6 (1) (f) GDPR).

Visiting the website and server logs

When you open the website, your browser sends some data to my server. This is technically necessary. The server uses it to show you the page and to protect the website against attacks and misuse:

The legal basis is my legitimate interest in delivering the website and keeping it secure (Art. 6 (1) (f) GDPR). Without this data, the website cannot be shown.

Access logs are deleted automatically after 7 days. If an entry is needed to investigate an attack, I keep it until the matter is resolved.

• IP address
• date and time of the visit
• address of the page you open (URL)
• browser identifier (user agent), which shows your browser and operating system

Counting visits with Matomo

To understand how people use my website and to make it better, I use the open-source software Matomo. Matomo runs on the same server as this website, at stats.joerres-verwaltung.de. The data stays with me and is not passed on to anyone else.

Matomo works without cookies and without localStorage. I do not store anything on your device and I do not read device details such as screen size or installed add-ons. The counting script loads from my own domain. It reports page views and clicks to my web server, and the web server passes the report with your IP address on to my Matomo service.

To tell visits apart, Matomo creates a pseudonymous code (hash) from your IP address and browser details. This code changes every day. This means you cannot be recognised over several days or across other websites. Matomo stores your IP address only in shortened form, without the last two parts (for example 198.51.0.0), so it cannot be linked to a person.

Matomo processes: the pages you open, the time and length of your visit, the page you came from, clicks on links and contact options (for example phone, email, WhatsApp), loading times, browser, operating system, device type and language setting.

The legal basis is my legitimate interest in a data-saving analysis of how my website is used (Art. 6 (1) (f) GDPR). I delete the detailed data after 14 months. After that, I only keep summary statistics that do not relate to single visitors.

You can object to this counting at any time: turn on the “Do Not Track” setting or the “Global Privacy Control” (GPC) signal in your browser, and Matomo will not count your visits. Or send me a short email to info@joerres-verwaltung.de.

QR code and contact card

With a printed QR code or the “Save contact” button on this website, you can download my contact card (vCard). The file only contains my own business contact details.

When the contact card is opened with the QR code, my server counts this in Matomo. Neither your IP address nor your browser identifier is sent to Matomo, only the fact that the card was opened and when. Downloads with the button on the website are not counted.

The legal basis is my legitimate interest in knowing how often the QR code is used (Art. 6 (1) (f) GDPR).

Contact by phone and email

When you call me or send me an email, I process the information you give me (for example your name, phone number, email address and your request) to deal with your request.

My email inbox runs on Microsoft 365. The provider is Microsoft Ireland Operations Limited, Ireland, acting as my processor. Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework, so an adequacy decision of the EU Commission applies for the USA (Art. 45 GDPR).

The legal basis is Art. 6 (1) (b) GDPR if your request is about a contract with me or may lead to one. Otherwise it is my legitimate interest in answering requests (Art. 6 (1) (f) GDPR).

Contact by WhatsApp

This website only links to WhatsApp; nothing from WhatsApp is built into the page. Only when you click the link do you leave my website and WhatsApp opens.

If you write to me on WhatsApp, the provider WhatsApp Ireland Limited, Ireland (part of the Meta group), also processes your data, for example your phone number and information about when you talk to whom. Data may be transferred to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework. How WhatsApp processes data is set out in the WhatsApp privacy policy; I have no influence on this.

Using WhatsApp is your choice. You can always reach me by phone or email instead. The legal basis for my processing is Art. 6 (1) (b) GDPR if your request is about a contract or may lead to one, otherwise Art. 6 (1) (f) GDPR.

Instagram

I link to my Instagram profile @joerres.verwaltung with a simple link. No data is sent to Instagram when you visit my website. Only when you click the link do you go to Instagram. There, the privacy policy of the provider Meta Platforms Ireland Limited, Ireland, applies.

Contact form

If you send me a message with the contact form, I only use your details to deal with your request and to reply to you:

Your request is not stored on the web server. The server hands it as an email to my email system at Microsoft 365 (Microsoft Ireland Operations Limited), which delivers it to my inbox. If you give an email address, you receive an automatic confirmation at this address in the same way.

To protect against spam, the form has a field that people cannot see. The server also limits the number of requests per IP address. For this, it keeps the IP address briefly in its working memory; it is not stored or logged.

The legal basis is Art. 6 (1) (b) GDPR if your request is about a contract with me or may lead to one, for example a request to manage your property. For all other requests, for example from tenants, it is my legitimate interest in answering requests (Art. 6 (1) (f) GDPR). The spam protection is based on my legitimate interest in a secure form (Art. 6 (1) (f) GDPR).

• name
• phone number or email address (you must give one of them)
• topic (choice, optional)
• location of the property (optional)
• message (optional)

Who receives your data

I do not sell your data and do not pass it on for advertising. Only I and the following service providers, who work for me and on my instructions, have access to your data:

• Tedacon: runs and looks after the website and the server
• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany: data centre in Falkenstein, Germany, as sub-processor of Tedacon
• Microsoft Ireland Operations Limited, Ireland: email inbox (Microsoft 365), also used to send the requests from the form

Legal bases at a glance

I process personal data on these legal bases of the GDPR:

• Art. 6 (1) (b) GDPR: a contract, or steps before a contract at your request
• Art. 6 (1) (c) GDPR: legal duties, for example keeping records under tax law
• Art. 6 (1) (f) GDPR: my legitimate interests, as named in each section

How long I keep data

I only keep personal data until I no longer need it for the purpose I collected it for, unless the law requires me to keep it longer. I delete requests when they are done. If a request leads to a contract, I keep the records as long as tax law requires.

Some processing has its own time limit, as stated in the sections above, for example 14 months for Matomo data.

Your rights

You have the following rights. To use them, just send a short message to info@joerres-verwaltung.de.

• to know what data I have about you (Art. 15 GDPR)
• to have wrong data corrected (Art. 16 GDPR)
• to have your data deleted (Art. 17 GDPR)
• to limit how I use your data (Art. 18 GDPR)
• to receive your data in a common format (Art. 20 GDPR)
• to object to processing (Art. 21 GDPR), see the next section

Your right to object

If I process data based on my legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time for reasons that come from your particular situation (Art. 21 (1) GDPR). I will then stop processing your data, unless I can show compelling legitimate reasons that outweigh your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

You can object to counting visits with Matomo at any time without giving a reason, as explained in the Matomo section.

Right to complain

You have the right to complain to a data protection authority (Art. 77 GDPR). The authority responsible for me is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (data protection authority of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Duty to provide data and automated decisions

You do not have to give me personal data, neither by law nor by contract. But without contact details I cannot answer your request.

I do not make automated decisions and do not use profiling (Art. 22 GDPR).

Encryption

This website uses SSL/TLS encryption. You can see this by the “https://” in the address bar of your browser. This means others cannot read the data you send to me on its way.

Date of this policy

This privacy policy is dated 8 October 2026. I will update it when the website or the law changes.