Engel & Völkers Paderborn

Privacy Policy

Data Protection Notice

Valid from October 2026

Controller and Your Rights as a Data Subject *

(*Gender note: For reasons of readability, the simultaneous use of masculine, feminine, and diverse (m/f/d) forms is omitted. All subsequent personal designations apply equally to all genders.)

Controller

The controller responsible for the data processing regulated in this data protection notice is "EV Ostwestfalen GmbH" (hereinafter "we" or "us"). Our contact details are: EV Ostwestfalen GmbH Rathausplatz 6 33098 Paderborn License partner of Engel & Völkers Franchise and Trademark GmbH Data Protection Officer If you have any questions about this privacy notice and data protection, please contact our Data Protection Officer: Eichmann & Kleinkes Seminare GmbH Vilsendorfer Str. 201a 33739 Bielefeld Phone: +49 521 55 77 32 50 Email: datenschutz@schulung-eks.de br Your rights as a data subject You have the right to information about the processing of your personal data (for example, the origin of this data, the purpose of the processing, and the methods of data processing). Furthermore, under certain conditions, you are entitled to object to the data processing for the future, to restrict it, or to request the deletion of the data. Finally, you can object to the sending of advertising material or the conducting of market research or commercial communications at any time. In summary, you have the right to: ... If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In accordance with Article 7(3) of the EU General Data Protection Regulation (hereinafter "GDPR"), you can withdraw your consent at any time. This means that we will no longer be permitted to process your data based on this consent in the future. Please note that your right to erasure is subject to limitations. For example, we are not required or permitted to erase data that we must retain due to statutory retention periods. Data that we need for the establishment, exercise, or defense of legal claims is also excluded from your right to erasure. If you have a complaint about how we process your data, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. do.

We reserve the right to disclose information about you in the event of a legal obligation, if we are required to do so by lawful authorities or law enforcement agencies. Legal basis: Art. 6 I sentence 1 lit. c GDPR (legal obligation).

Overview of our data processing activities

Our data protection information below is structured as follows and provides you with an overview of the following data processing activities:

You visit us on our company website

You enter into a search or marketing agreement with us, request a property exposé from us, or commission us to conduct a property valuation We are searching for a property together with another Engel & Völkers licensed partner. Property for you (Introduction)

You manage our newsletters in your Engel & Völkers user account

You communicate with us via WhatsApp or use our WhatsApp newsletter You submit a speculative application or apply for a job posting Storage and deletion of your data

Collection and processing of personal data when visiting our company website

We generally only process personal data if you provide it to us via the contact forms on our company website. Personal data is only processed if you have given us your consent or if processing is permitted by law. For certain services we offer on our company website, we require a minimum amount of data. We have marked these mandatory fields with an asterisk. Without this mandatory information, we cannot provide the services marked accordingly. What data do we process from you (hereinafter "you" or "user")? When you use our company website, we process the following personal data: Email address, first name, last name, title, address, mobile or telephone number, property details – referred to in this privacy policy as "data" or "personal data"), which you provide when using the services offered on our company website (e.g., when submitting contact requests, newsletter mailings, and determining the market price ("valuation") of real estate).

Please refer to the "Cookie Notice" of the website for a description of the usage-related data processing in connection with the use of cookies and other tracking technologies.

Angel & Völkers GmbH Vancouverstraße 2a D-20457 Hamburg Germany Email: contact@engelvoelkers.com You can find the cookie information at the bottom of our company website. ... Consent.)
If applicable. Fulfillment of the request for a market-priced valuation of the property described by the user, as well as the associated expressed interest in selling (the legal basis is the performance of the contract and, in the case of the user entering contact details and forwarding them to a factually or geographically responsible license partner of the Engel & Völkers Group (for the definition, please see section 3 below) or to the company technically implementing the valuation, your consent, and, in the case of using the contact details for direct marketing, the legitimate interest in marketing our own services or your consent); Contact by telephone (the legal basis is the performance of the contract or, in the case of using the telephone number for advertising purposes, your consent); Sending an email newsletter about our own offers as well as our own and third-party advertising to the extent permitted by law or based on consent (the legal basis is either your consent or our legitimate interest in direct marketing, provided that the marketing complies with data protection and competition law requirements). is carried out);

In summary:

The legal basis for processing personal data is Article 6(1)(a) GDPR if the processing is based on consent, Article 6(1)(b) GDPR if the processing is based on a (possibly pre-contractual) contractual relationship, and Article 6(1)(f) GDPR if the basis is our legitimate interest. Insofar as processing personal data is necessary for compliance with a legal obligation to which we are subject, Article 6(1)(c) GDPR serves as the legal basis.

If the legal basis is your consent, you are entitled to withdraw your consent at any time without affecting the lawfulness of the processing of your personal data carried out on the basis of the consent before its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you. Article 21 GDPR applies in this respect.

Disclosure of your personal data

We generally only disclose your personal data to third parties if this is necessary for the performance of a contract, if we or the third party have a legitimate interest in the disclosure, if there is a legal obligation to do so, or if you have given your consent. If data is transferred to third parties based on a legitimate interest, this will be explained in this privacy policy.

If your contact request concerns offers from other companies within the Engel & Völkers Group, we will transmit the personal data you have entered to the respective company within the Engel & Völkers Group after obtaining your prior consent or – if legally permissible – on the basis of a so-called legitimate interest. Furthermore, we will not share your personal data with third parties. When we refer to the “Engel & Völkers Group” within this privacy policy, we mean the companies belonging to the Engel & Völkers Group as defined in Sections 15 et seq. of the German Stock Corporation Act (AktG), as well as the (master) license partners directly or indirectly affiliated with this group by contract, including ourselves. You can find a current overview of these license partners here: https://www.engelvoelkers.com/de/unternehmen/standorte/ ...

Transfer of Data to Non-EEA Countries

In addition to the paragraph above, "Transfer of Your Personal Data," the following applies:

Recipients of personal data may be located outside the EEA/UK. When personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has determined that the country to which personal data is transferred ensures an adequate level of protection (Art. 45 GDPR) or the transfer is subject to appropriate safeguards (e.g., standard contractual clauses) agreed upon with the recipient by the European Union (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR). Furthermore, where necessary, we intend to agree on additional measures with the recipients to ensure an adequate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/United Kingdom can be requested. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. ... Property;

Email address, if you have consented to receiving promotional information, in particular offers or valuations of properties, or if you wish to communicate by email;

and (if the purchase/sale or rental of real estate occurs) bank details, identity information, copy of identification (in the case of the purchase/sale of real estate), as well as land register entries, electricity, oil and/or gas bills, general utility bills, declarations of division, condominium owners' association (WEG) minutes (resolutions), purchase agreement (in the case of the sale of real estate) or (if the rental of real estate occurs) bank details, identity information, if applicable, CV, proof of income, credit report, landlord confirmation, rental agreement.

Purpose of processing and legal basis

We process this personal data for the following purposes: Purposes:

Fulfillment of the contractual relationship or a pre-contractual legal relationship – also by independent real estate consultants cooperating with us – including invoicing and credit checks (legal basis is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR; our legitimate interest in transferring data to independent real estate consultants arises from the freedom to choose to fulfill contractual relationships with independent brokers or sub-brokers. The legitimate interest in carrying out credit checks arises from the legitimate interest in protecting against payment defaults.);

Fulfillment of a legal obligation, in particular in connection with the Money Laundering Act; (legal basis is Art. 6 para. 1 lit. c GDPR);

Promotional information about properties that we or other licensed partners of the Engel & Völkers Group market (legal basis is Art. 6 para. 1 lit. f GDPR; the legitimate interest arises from the processing of personal data for the purpose of direct marketing). from us. The legal basis is also your consent pursuant to Art. 6 I a. GDPR, insofar as the promotional information is transmitted to you by email, fax or telephone.)

If the legal basis is your consent, you are entitled to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object at any time to the processing of personal data concerning you on grounds relating to your particular situation. Art. 21 GDPR applies in this respect.

Transfer of Data

If your inquiry (e.g., in connection with a valuation request) concerns offers from other licensed partners of the Engel & Völkers Group, Engel & Völkers will transmit the personal data you have entered in this case to the respective company within the Engel & Völkers Group after your prior consent. Consent.

Please also refer to our information on transfer in Section III.

Furthermore, in the course of processing a contractual relationship, we transmit personal data to contractual partners (owners, landlords, prospective buyers) and supporting service providers such as notaries, lawyers, property managers, developers, as well as to credit agencies or supervisory authorities (e.g., for anti-money laundering documentation). We may also transmit your data to third parties to the extent legally permissible. Third parties to whom we disclose your personal data, regardless of our service provision, include external advisors (e.g., lawyers and auditors), authorities within their jurisdiction to comply with legal obligations and/or protect our rights (e.g., tax office, police, public prosecutor's office, courts), potential buyers or acquirers of all or part of our assets and/or activities, and other third parties, provided you instruct us to disclose data or have given your consent. grant.

Furthermore, we will only share your personal data with employees (permanent staff such as employees and freelance real estate consultants) and third-party companies (e.g., IT service providers, hosting providers, etc.) to whom we have outsourced services involving data processing as part of commissioned data processing.

Transfer of Data to Non-EEA Countries

In addition to the preceding paragraph, “Transfer of Your Personal Data,” the following applies:

If we search for a property for you together with another license partner, your data will only be transferred based on your prior consent. Please note that both we, as your initial contact, and the Engel & Völkers Group license partner to whom your data is referred, process your personal data. Both – us and this license partner – are independently responsible for their respective data processing. We and this other license partner do not have access to each other's data and do not process your data jointly. If you wish to assert your data subject rights, please check beforehand whether you wish to assert them against us or against the other Engel & Völkers Group license partner who also processes your data.

For information on how we process your data in connection with the marketing of your property, what rights you have in this context, and who your contact persons are should you wish to assert your data subject rights, please refer to the above explanations.

You manage our newsletters in your Engel & Völkers user account

What data do we process from you

By using the newsletter management function within the user account provided by Engel & Völkers GmbH on the website engelvoelkers.com, you can subscribe to and unsubscribe from our electronic newsletters. In doing so, we process personal data, in particular your email address and, if applicable, your first and last name – hereinafter referred to as "data" or "personal data" – which you or our service providers provide to us when you use the newsletter management function within your Engel & Völkers user account. received.

Purpose of processing and legal basis

Provision of an administrative function for electronic newsletters (the legal basis is your consent in each case, Art. 6 I lit. a. GDPR).

Disclosure of your personal data

As a general rule, we only disclose your personal data to third parties if this is necessary for the performance of a contract, if we or the third party have a legitimate interest in the disclosure, if there is a legal obligation to do so, or if you have given your consent. If data is transferred to third parties based on a legitimate interest, this will be explained in this privacy policy.

Transfer of data to non-EEA countries

In addition to the above paragraph "Disclosure of your personal data", the following applies: The recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the If your personal data is transferred to the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has determined that the country to which personal data is transferred ensures an adequate level of protection (Art. 45 GDPR) or the transfer is subject to appropriate safeguards (e.g., standard contractual clauses) agreed upon with the recipient by the European Union (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR). Furthermore, where necessary, we intend to agree on additional measures with the recipients to ensure an adequate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/UK are available upon request. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. . ...

V. You communicate with us via WhatsApp or use our WhatsApp newsletter

We offer you the opportunity to contact us via the WhatsApp messenger service and to subscribe to our WhatsApp newsletter. Our WhatsApp communication with you and its central management are not handled by WhatsApp itself, but rather via the messaging platform “Superchat” of the accredited Meta/WhatsApp Business Solution Provider Super X GmbH, Schlesische Straße 12, 108997 Berlin, with whom we have a data processing agreement and whose servers are located in Germany. As an official WhatsApp partner, they use the WhatsApp Business API, meaning that no other third parties or WhatsApp have access to your communication content within our area of responsibility.

1. What data do we process from you

By using the WhatsApp functionalities, we process your name in WhatsApp and your WhatsApp number (mobile phone number), the Chat history and any interests you may have indicated during the registration process.

2. Purposes and Legal Bases of Processing

Contract Initiation and Customer Service: If you contact us via WhatsApp to inquire about real estate offers or the sale/rental of your property, or to initiate service contracts (e.g., brokerage agreements), we process your name, mobile phone number, and the content of the message history. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of pre-contractual measures) or your consent, Art. 6 para. 1 lit. a GDPR.

WhatsApp Newsletter: If you have given us your explicit consent (e.g., by confirming in a double opt-in procedure in the chat), we use your data to send you promotional information and real estate offers from us and other licensees of the Engel & Völkers licensee network. The legal basis is Art. 6 para. 1 lit. a GDPR (consent). You can revoke this consent at any time with effect for the future (e.g., by sending the message "STOP" in the chat).

3. Service Providers Used

Superchat (SuperX GmbH): We have concluded a data processing agreement with SuperX GmbH in accordance with Art. 28 GDPR. Superchat serves as an interface through which we receive and respond to your WhatsApp messages;

WhatsApp (Meta): The provider of WhatsApp is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Although message content is end-to-end encrypted, Meta has access to metadata (e.g., who communicated with whom and when) - further information can be found in section 5.

4. Disclosure of Your Personal Data

We will only disclose your personal data to third parties if Your personal data will be disclosed to third parties where necessary for the performance of the contract, where we or the third party have a legitimate interest in the disclosure, where there is a legal obligation to do so, or where you have given your consent. If data is transferred to third parties based on a legitimate interest, this will be explained in this Privacy Policy. Transfer of Data to Non-EEA Countries In addition to the above paragraph "Transfer of Your Personal Data," the following applies: Recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has determined that the country to which personal data is transferred ensures an adequate level of protection (Art. 45 GDPR) or the transfer is subject to appropriate safeguards (e.g., standard contractual clauses) agreed with the recipient by the European Union (Art. 46 GDPR), unless the GDPR provides for an exception (Art. Article 49 GDPR). Furthermore, where necessary, we intend to agree on additional measures with the recipients to ensure an adequate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/United Kingdom can be requested.Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. Please be aware that when using WhatsApp, data (such as communication data and your mobile phone number) may be transferred to Meta Platforms Inc. in the USA. Meta is certified under the EU-U.S. Data Privacy Framework. However, we would like to point out that, from the EU's perspective, the USA does not offer a level of data protection fully equivalent to the GDPR. Further information can be found in WhatsApp's Privacy Policy (https://www.whatsapp.com/legal/privacy-policy-eea). We have neither precise knowledge of nor influence over the data processing carried out by WhatsApp Ireland Limited. You are submitting an unsolicited application or applying for a job posting. What data do we process from you? If you apply to us via our website or via a job posting, we process your name, address, telecommunications, and application data. Providing your address and telecommunications data, which are listed as mandatory, is necessary so that we can contact you regarding your application and process it. ... GDPR).

● Furthermore, we process your personal data based on your prior consent to inform you about interesting job opportunities (legal basis is Art. 6 para. 1 lit. a GDPR).

If the legal basis is your consent, you are entitled to withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent before its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. In this respect, Art. 21 GDPR applies.

We need your personal data to fulfill the processing purposes listed above. You are free not to provide us with any personal data. In this case, we will not be able to enable you to participate in the application process for open job opportunities.

Data Sharing

We generally only share your personal data with third parties if this is necessary for the performance of a contract, if we or the third party have a legitimate interest in the transfer, if there is a legal obligation to do so, or if you have given your consent. If data is transferred to third parties based on a legitimate interest, this will be explained in this privacy policy.

If you applied via the global online job portal of Engel & Völkers Holding GmbH, your application documents were forwarded to us by Engel & Völkers Holding GmbH. You learned how Engel & Völkers Holding GmbH processed your personal data during the application process and can read about it at any time on the relevant Engel & Völkers Holding GmbH website via the global online job portal.

Transfer of Data to Non-EEA Countries

In addition to the preceding paragraph “Transfer of Your Personal Data”, the following applies:

Recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has determined that the country to which personal data is transferred ensures an adequate level of protection (Art. 45 GDPR) or the transfer is subject to appropriate safeguards (e.g., Standard Contractual Clauses) agreed with the recipient by the European Commission (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR). Furthermore, where necessary, we intend to agree on additional measures with the recipients to ensure an adequate level of data protection. Copies of the appropriate safeguards (to the extent that we rely on them) will be provided to you. A copy of your personal data (exit) and a list of recipients outside the EEA/United Kingdom can be requested. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. VI. Storage and Deletion of Your Data We store your personal data for the period necessary to achieve the purposes for which the data is collected and further processed, including any retention period required by applicable laws (e.g., maintaining accounting records). In the context of application processes that do not result in employment, your data will be routinely stored for six months for documentation purposes and then deleted or destroyed, along with the documents you submitted to us. With your consent to the processing of your data for future application processes, we will retain it for a correspondingly longer period. Data from WhatsApp communication will be deleted as soon as it is no longer required for the purpose for which it was collected (e.g., answering the inquiry or concluding the contract negotiations), unless statutory retention obligations apply. Newsletter data will be deleted immediately upon revocation of consent.