Valid from August 15, 2022.

Person responsible and your rights as a data subject *

(*Gender note: For reasons of better readability, the language forms male, female and diverse (m/f/d) are not used at the same time.

All of the following personal names apply equally to all genders.)

1. Responsible person The responsible body for the data processing regulated in this data protection notice is “EV-Immobilien Heidelberg GmbH” (hereinafter “we” or “us”).

Our contact details are: EV Real Estate Heidelberg GmbH Brückenstraße 19, 69120 Heidelberg heidelberg@engelvoelkers.com License partner of Engel & Völkers Residential GmbH

2. Your rights as a data subject You have the right to information about the processing of your personal data (e.g. the origin of this data, the purpose of processing, the modalities of data processing). Furthermore, under certain conditions, you have the right to object to data processing in the future, to restrict it or to request that the data be deleted. Finally, you can stop sending advertising material or carrying out market research or commercial communications at any time. In summary, you have a right to

- Information

- correction

- deletion (or being forgotten)

- restriction of processing

- data portability

- objection to the processing of your personal data

- Complaint to supervisory authorities.

In addition, you have the right to object to the processing of your personal data for direct marketing purposes at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In accordance with Article 7 III of the EU (General Data Protection Regulation (hereinafter “GDPR”), you can revoke your consent to us at any time. This means that we are no longer allowed to continue data processing based on this consent in the future. Please note that your right to deletion is subject to limitations. For example, we do not have to or may not delete any data that we must continue to retain due to legal retention periods. Data that we need to assert, exercise or defend legal claims is also excluded from your right to deletion. If you have a complaint about the way we process your data, you have the opportunity to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.

In the event of a legal obligation, we reserve the right to disclose information about you if we are requested to release it by lawful authorities or law enforcement bodies. Legal basis: Art. 6 I sentence 1 lit. c GDPR (legal obligation).

Overview of our data processing processes Our data protection information below is structured as follows and gives you an overview of the following data processing processes: I. You visit us on our company website on the Internet II. You conclude a search or marketing contract with us, request an exposé from us or commission us to carry out a property valuation [2] III. We are looking for a property for you together with another Engel & Völkers license partner (supply) IV. You apply on your own initiative or in response to a job advertisement V. Storage and deletion of your data I. Collection and processing of personal data when you visit our company website on the Internet In principle, we only process personal data if you send it to us via the contact forms on our company website. Personal data will only be processed if you have given us your consent or the processing is permitted by legal regulations. For certain services that we offer on our company website, we require a minimum amount of data. We have marked this mandatory information with an “asterisk”. Without the mandatory information, we cannot provide our services marked in this way.

1. What data do we process from you (hereinafter “you” or “user”) As part of your use of our company website, we process personal data, namely: Email address, first name, last name, title, address, telephone number, property data - referred to as "data" or "personal data" in the context of this privacy policy), which are provided by you in the case of the services offered on our company website (e.g. in the context of contact inquiries and newsletter mailings as well as the market price determination (“valuation”) of real estate).

Please refer to the “Cookie Notices” for a description of usage-related data processing in connection with the use of cookies and other tracking technologies Engel & Völkers GmbH Vancouverstrasse 2a D-20457 Hamburg Germany Email: info@engelvoelkers.com You can find the cookie information at the bottom of our company website on the Internet.

2. Purpose of processing and legal basis We process your data for the following purposes:

● Fulfillment of contact requests (the legal basis is the fulfillment of the contract and - in the case of passing on the user data to other license partners of the Engel & Völkers Group (for the definition, please see section 3 below) your consent.)

● If necessary, fulfillment of the request for a valuation of the property described by the user that corresponds to the market price as well as the sales interest conveyed thereby (the legal basis is the fulfillment of the contract and in the case of the user entering contact details and passing them on to a factually or geographically responsible license partner of Engel & Völkers Group (for the definition, please see section 3 below) or to the company technically implementing the evaluation, your consent and, in the case of using the contact details for direct marketing, the legitimate interest in marketing our own services or your consent);

● Contacting us by telephone (legal basis is the fulfillment of the contract or, if the telephone number is used for advertising purposes, your consent);

● Sending an email newsletter about your own offers as well as your own and third-party advertising to the extent permitted by law or based on consent (the legal basis is either your consent or our legitimate interest in direct marketing, as long as the marketing is carried out in compliance with data protection and competition law requirements) ; In the summary: The legal basis for the processing of personal data is Art. 6 I Sentence 1 lit. a GDPR, if the processing is based on consent, Art. 6 I Sentence 1 lit Art. 6 I Sentence 1 Letter f GDPR, provided the basis is our legitimate interest. If the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Article 6 I sentence 1 lit. c GDPR serves as the legal basis. If the legal basis is your consent, you are entitled to withdraw your consent at any time, without affecting the lawfulness of the processing of your personal data based on your consent before its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. In this respect, Art. 21 GDPR applies.

3. Sharing your personal information In principle, we will only pass on your personal data to third parties if this is necessary to fulfill the contract, we or the third party have a legitimate interest in passing it on, there is a legal obligation or you have given your consent to do so. If data is transmitted to third parties on the basis of a legitimate interest, this will be explained in these data protection regulations. If your contact request concerns offers from other companies in the Engel & Völkers Group, we will transmit the personal data you entered in this case to the respective company in the Engel & Völkers Group after your prior consent or - if legally permissible - on the basis of a so-called . legitimate interest. Furthermore, we will not pass on your personal data. If we speak of the “Engel & Völkers Group” within this data protection declaration, we mean the companies belonging to the Engel & Völkers group of companies within the meaning of §§ 15ff. AktG as well as the (master) license partners who are contractually directly or indirectly affiliated with this group of companies, to which we also belong. You can get a current overview of these license partners here: https://www.engelvoelkers.com/de/unternehmen/standorte/).

4. Transfer of data to non-EEA countries In addition to the “Sharing of your personal information” paragraph above, the following applies: Recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has decided that the country to which personal data is transferred has an adequate Level of protection guaranteed (Art. 45 GDPR) or the transfer is subject to appropriate guarantees (e.g. standard contractual clauses) of the European Union that have been agreed with the recipient (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR ). In addition, if necessary, we intend to agree additional measures with the recipients to ensure an appropriate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/UK may be requested. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. II. You conclude a search or marketing contract with us, request an exposé from us or commission us to carry out a property valuation [3]

1. What data do we process about you? When searching for, selling or renting a property, requesting an exposé and evaluating the property, the following personal data is regularly processed:

● First name, last name, title, address, telephone number, information about the property you want (in the case of property search) or (in the case of property marketing or property valuation) information about the property;

● E-mail address, if you have agreed to receive advertising information, in particular the offer or valuation of real estate, or wish to communicate by e-mail;

● as well as (if there is a purchase/sale or rental of real estate) bank details, identity information, a copy of your ID (when buying/selling a property) as well as the land register, electricity, oil and/or gas bills, general individual cost statements, declarations of division, WEG -Protocols (resolutions, purchase agreement (if a property is sold) or (if a property is rented) bank details, identity information, CV if applicable, proof of salary, proof of creditworthiness, landlord confirmation, rental agreement.

2. Purpose of processing and legal basis We process this personal data for the following purposes:

● Fulfillment of the contractual relationship or a pre-contractual legal relationship - also by independent real estate consultants cooperating with us - including billing and credit checks (legal basis is Art. 6 I lit. b. GDPR and Art. 6 I lit. f GDPR; our legitimate interest in connection with The transfer of data to independent real estate consultants results from the freedom to fulfill contractual relationships with independent brokers or sub-brokers. The legitimate interest in carrying out credit checks follows from the legitimate interest in protecting against bad debts.);

● Fulfillment of a legal obligation, particularly in connection with the Money Laundering Act; (Legal basis is Art. 6 I lit. c GDPR);

● Advertising information about properties that we or other license partners of the Engel & Völkers Group market (legal basis is Art. 6 I lit. f GDPR; the processing of personal data for the purpose of direct advertising results in our legitimate interest. The legal basis is also yours Consent according to Art. 6 I a. GDPR, if the advertising information is sent to you by email, fax or telephone.) If the legal basis is your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. In this respect, Art. 21 GDPR applies.

3. Sharing of data If your request (e.g. as part of an evaluation request) concerns offers from other license partners of the Engel & Völkers Group, Engel & Völkers will transmit the personal data you entered in this case to the respective company from the Engel & Völkers Group after your prior consent. In this context, please also find out about our information on feeding in Section III. Furthermore, as part of the processing of a contractual relationship, we transmit personal data to contractual partners (owners, landlords, search customers) and supporting service providers such as notaries, lawyers, property managers, property developers, as well as in the context of credit reports or to supervisory authorities (such as money laundering documentation). It may also be the case that we transmit your data to third parties to the extent permitted by law. Third parties to whom we pass on your personal data, regardless of our service provision, include external consultants (e.g. lawyers and auditors), authorities within the scope of their competence in order to comply with legal obligations and/or protect our rights (e.g. tax office, police, public prosecutor's office, courts), potential buyers or acquirers of all or part of our assets and/or activities and other third parties to the extent you instruct us to share information or give your consent. In addition, we will only pass on your personal data to employees (permanent employees such as employees and freelance real estate consultants) and third-party companies (e.g. IT service providers, hosting providers, etc.) to whom we provide services with processing operations as part of a has outsourced order processing.

4. Transfer of data to non-EEA countries In addition to the paragraph “Disclosure of your personal data” above, the following applies: Recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has decided that the country to which personal data is transferred has an adequate Level of protection guaranteed (Art. 45 GDPR) or the transfer is subject to appropriate guarantees (e.g. standard contractual clauses) of the European Union that have been agreed with the recipient (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR ). In addition, if necessary, we intend to agree additional measures with the recipients to ensure an appropriate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/UK may be requested. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information. If your request relates to license partners of the Engel & Völkers Group outside the European Union, we will transmit your data to the locally/factually responsible license partner after your consent.

III. Together with another Engel & Völkers license partner, we are looking for a property for you (“transfer”) If we look for a property for you together with another license partner, your data will only be transmitted based on your previously given consent. Please note that both we, as your first contact, and the Engel & Völkers Group license partner to whom your data is sent, process your personal data. Both - we and this license partner - are independently responsible for the respective data processing. We and this other license partner do not have access to each other's data and do not process your data together. If you would like to assert the rights of those affected, please check in advance whether you would like to assert these rights against us or against the other license partner of the Engel & Völkers Group who also processes your data. How we process your data in connection with the marketing of your property, what rights you have in this context and who your contact persons are if you want to assert data subject rights can be found in the information above.

IV. You apply on your own initiative or in response to a job advertisement

2. Purpose of processing and legal basis If the legal basis is your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its withdrawal. If the legal basis is legitimate interest, you are also generally entitled to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. In this respect, Art. 21 GDPR applies.

3. Sharing of data In principle, we will only pass on your personal data to third parties if this is necessary to fulfill the contract, we or the third party have a legitimate interest in passing it on, there is a legal obligation or you have given your consent to do so. If data is transmitted to third parties on the basis of a legitimate interest, this will be explained in these data protection regulations.

4. Transfer of data to non-EEA countries

In addition to the paragraph “Disclosure of your personal data” above, the following applies: Recipients of personal data may be located outside the EEA/UK. If personal data is transferred to locations outside the EEA/UK, we will, as required by law, ensure that your data protection rights are adequately protected, either because the European Commission has decided that the country to which personal data is transferred has an adequate Level of protection guaranteed (Art. 45 GDPR) or the transfer is subject to appropriate guarantees (e.g. standard contractual clauses) of the European Union that have been agreed with the recipient (Art. 46 GDPR), unless the GDPR provides for an exception (Art. 49 GDPR ). In addition, if necessary, we intend to agree additional measures with the recipients to ensure an appropriate level of data protection. Copies of the appropriate safeguards (to the extent we rely on them) and a list of recipients outside the EEA/UK may be requested. Please note that these copies may be redacted to the extent necessary to protect trade secrets or other confidential information.

5. Storage and deletion of your data We will retain your personal data for the time necessary to achieve the purposes for which the data is collected and further processed, including any retention period required by applicable law (e.g. retention of accounting records). As part of application processes that end without employment/employment, your data is regularly stored for another six months for documentation purposes and then deleted or destroyed, as are the documents sent to us. If you give your consent to process the data for future application processes, we will also keep it for a longer period of time.