Privacy policy (Datenschutzerklärung)

This is a convenience translation. Only the German version is legally binding. Deutsche Fassung (German version)

Controller

Thomas Wachsmuth, Kantstr. 27, 10623 Berlin Email: info@kiwax.de Phone: +49 163 8669292

Purpose and users

immonum consists of a public website and a closed web application for sales partners. The website (immonum.de) presents the software. It contains a sample calculator, videos, a shared demo account and a form for access enquiries. The web application can only be used with a user account created by an administrator. Each company is the controller for the data it records about its clients in the application; we process that data as a processor under our data processing agreement (Auftragsverarbeitungsvertrag, AVV).

Hosting and server log files

This application is hosted by Host Europe GmbH, Hansestr. 111, 51149 Köln. There is a data processing agreement under Art. 28 of the General Data Protection Regulation (GDPR; German: DSGVO). Server log files may contain the IP address, browser type, operating system, referrer, date and time. The legal basis is Art. 6(1)(f) GDPR; retention period: 7 days.

Website and sample calculator

The sample calculator on the website runs entirely in your browser. Your entries are not transmitted to our server and are not stored. The videos are hosted on our own server. No data is passed to third parties when you play them.

Enquiry form

If you request access via the form, we process the information you provide: company, name, email address and, if you provide them, phone number, team size, type of property sold, your message and how you heard about immonum. The server forwards the enquiry by email to info@kiwax.de.

The purpose is to handle your enquiry and to prepare a contract. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

To prevent misuse, the server limits the number of enquiries per IP address. For this purpose, the IP address is held only briefly in memory and is not stored permanently.

We delete your enquiry once it has been dealt with and there is no obligation to retain it. If a contract is concluded, the retention periods of the contractual relationship apply.

Demo account

For prospective customers there is a shared demo account with entirely made-up sample data. All demo users work in the same account: whatever you enter there can be seen by all other demo users. Please therefore do not enter any real client data or other personal data.

All demo data is deleted daily at 3:00 (German time) and replaced with the sample data.

To sign you in, we set a technically necessary session cookie, as with a normal sign-in. We do not store IP addresses for this; only the protection against too many requests holds them briefly in memory.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in being able to show the software to prospective customers without registration).

User account and sign-in

For signing in, we store the user name, name, role and the password in encrypted form (hash); the password itself cannot be read. After you sign in, a session cookie maintains your session (see the section “Technically necessary storage”). The legal basis is Art. 6(1)(b) GDPR (user relationship) and point (f) (security of the application). The data remains stored until the account is deleted.

Data you record in immonum

In immonum, sales partners record projects, properties, clients (name, address, contact details, information on income and assets), calculations and files. The company using immonum is the controller for this data. We process it on that company's behalf and in accordance with its instructions (Art. 28 GDPR). The data processing agreement can be found under “Data processing agreement”.

The data is held in a database on the server. Only signed-in users have access, within the scope of their permissions. If several companies use immonum, their data is kept separate; each company is responsible for its own data. The operator accesses a company's data only to provide support, and in that case also as a processor. Content can be permanently deleted in the application; the database overwrites deleted content. Automatic backups still contain it for up to 7 days, copies made before program updates and copies of deleted companies for no more than 30 days. Requests from end clients for access, rectification or erasure should be addressed to the company that looks after them.

Users can subscribe to their follow-ups as a calendar and receive a daily email reminder. Client names, due date and a link to the client page – no notes – are passed to the user's calendar or email provider. The subscription can only be reached via a secret link, which the user can renew or end at any time; the reminder can be cancelled.

Logging and retention

For the security of the application and for evidence purposes, immonum logs security-relevant events: sign-ins, temporary account locks after failed attempts, creation and modification of users (role, status, password reset), changes to companies, access by the operator to a company, downloads of data backups and permanent deletions. The time, the acting user, the company concerned and the type of event are stored; IP addresses and passwords are not logged, deleted clients only by their number. The legal basis is Art. 6(1)(f) GDPR in conjunction with Art. 32 GDPR (security of processing).

The entries can be viewed by the administrators of the company concerned (their own company only) and by the operator. Entries are deleted automatically after 2 years.

Technically necessary storage

The application sets a session cookie and uses your browser's local storage to remember your choices for the PDF output. Both serve solely to operate the application and take place without consent under § 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). Details are given in the cookie notice. There are no cookies for analytics or advertising.

On the website you can choose between a light and a dark colour scheme. Only when you use the switch do we store your choice in your browser's local storage (entry “immonum-thema”), so that the page appears in the chosen scheme on your next visit. This serves solely this function, which you have requested, and takes place without consent under § 25(2) no. 2 TDDDG. You can delete the entry in your browser at any time.

No third-party services

immonum does not embed any external services in your browser, such as font servers, analytics tools, advertising networks, maps or chatbots. Your browser loads all files from this server. This also applies to the location maps: they are generated on the server (see “Location maps for projects”).

Location maps for projects

For construction projects, immonum shows a location map – in the application, on client links and in PDF calculations. The map is generated by the immonum server, not by your browser: the server sends the project address (street, house number, postcode, town) to the geocoding service photon.komoot.io (Photon by komoot, data from OpenStreetMap) and then retrieves the matching map tiles from the OpenStreetMap Foundation (tile.openstreetmap.org). Only the project address or the requested map tiles and the server's IP address are transmitted – no names, no client data and no data about visitors to these pages.

The finished map is stored on the server and displayed from there; viewing it does not transfer any data to third parties. Only if you click the link to open the map in OpenStreetMap does your browser call up the OpenStreetMap website; its privacy policy then applies. The legal basis is Art. 6(1)(f) GDPR (clear presentation of the location of the properties on offer). Map data © OpenStreetMap contributors, licence ODbL.

Encryption

The application uses SSL/TLS encryption.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Contact: info@kiwax.de.

Right to lodge a complaint

Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de

As of: October 2026