Privacy policy

1. Data controller

The controller responsible for this processing is ZahaRich UG (haftungsbeschränkt), Badstraße 26a, 79410 Badenweiler, Germany, represented by Sergey Zakharov.

For any privacy question, or to exercise your rights, reach us at info@immofirst.eu.

2. What data we collect

When you create a search profile on immofirst.eu, we collect:

• Search-profile details: rent or buy, property type, preferred districts, number of rooms, budget, planned move-in or purchase timeline, optional free-text notes on your requirements, and whether you already knew that many homes are rented or sold without a public listing.
• Contact details: first name, last name, email address, and an optional phone number.
• Metadata for your submission: your selected language, the submission timestamp, and the consent you gave.
• If you opt in to Firebase Analytics, Google may process analytics data such as page views, form-progress events, device/browser information, approximate location, cookies, and app-instance identifiers. We do not send your contact details, budget, districts, free-text notes, or other search-profile answers to Firebase Analytics.

3. Purpose of processing

We use your details solely to add you to our early-access list, manage your search profile, contact you personally once a matching opportunity in Hamburg becomes available, and send relevant invitations to private Immofirst access groups. There is no automated matching — a member of our team reviews every submission personally.

We deliberately do not ask for financial-qualification information such as income or creditworthiness; that would only ever be discussed in a personal follow-up conversation.

If you consent, we use Firebase Analytics to improve the website experience and understand launch performance across traffic sources.

4. Legal basis

Processing your search profile is based on your consent under Art. 6(1)(a) GDPR, which you give when submitting the form. You can withdraw that consent at any time, with effect for the future (Art. 7(3) GDPR), for example by emailing info@immofirst.eu.

Firebase Analytics is used only after your consent (Art. 6(1)(a) GDPR). You can reject it and still use the site, or change your choice via the analytics settings link in the footer.

5. Storage & technical implementation

Your submitted search-profile details are stored in Google Firestore (Google Cloud / Firebase, region eur3 — the Europe multi-region, with data centers in Belgium and the Netherlands); this submitted profile data never leaves the EU.

Access happens exclusively server-side through the Firebase Admin SDK. Our Firestore security rules deny any direct access from browsers or client apps. Only our team can read stored search profiles, through an internal tool separately protected by a secret access token.

Firebase Analytics, if you consent to it, is provided by Google and may process analytics data according to Google Analytics for Firebase settings and Google's data-processing terms.

6. Recipients

We never sell your data. Recipients are limited to our team and to Google (Firebase / Google Cloud) as our processor for technical storage and, if you consent, Firebase Analytics.

7. Retention period

We keep your details for as long as your search profile is active, or as long as we could realistically still connect you with a matching opportunity or relevant private access invitation. We delete your data at any time on request, no questions asked.

8. Cookies & local storage

We use one strictly necessary cookie to remember your language preference (no tracking, no advertising, no consent required for this kind of cookie).

While you fill in your search profile, we additionally keep your progress locally in your browser (session storage). That data never leaves your device until you submit the form, and is cleared automatically once you close the tab.

We store your Firebase Analytics choice in local storage. Firebase Analytics is loaded only if you accept it, and may then use cookies or app-instance identifiers for analytics. You can reopen analytics settings from the footer.

9. Your rights

Regarding your personal data, you have the right to:

• Access the data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority — in particular the authority responsible for our registered seat, the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW).

11. Automated decision-making

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. Every submission is reviewed personally by our team.

12. Changes to this policy

We update this policy whenever our data processing changes, for example when new features launch. The version published on this page is always the current one.