Privacy Policy

Thank you for your interest in our real estate software. This website presents our product and uses sample data to show what an agent's website operated with it looks like. You can read and search the entire site without disclosing any personal data to us: the enquiry form on the property pages is not in operation, and you do not need a user account for the public offering - you may register, but you do not have to. We receive personal data only if you write to us or call us on your own initiative, or if you log in to a protected area.

Personal data is processed exclusively within the framework of the General Data Protection Regulation (GDPR) and the supplementary German provisions, in particular the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). In this policy we inform you which data we process for which purpose and on which legal basis, and what rights you have.

We operate this website with technical and organisational measures that reflect the state of the art; transmission is encrypted throughout via HTTPS. Absolute protection of data transmitted over the internet is nevertheless not possible. You are therefore free to contact us by telephone or by post instead at any time.

1. Definitions

This privacy policy uses the terms of the General Data Protection Regulation. So that it remains understandable without further reading, the key terms from Art. 4 GDPR are summarised below.

• a) Personal data

  Any information relating to an identified or identifiable natural person. A person is identifiable if they can be attributed directly or indirectly, for instance via a name, an identification number, location data or an online identifier.

• b) Data subject

  Any natural person whose personal data we process - in the context of this website, in particular you as a visitor and as a party interested in a property.

• c) Processing

  Any operation performed on personal data, whether or not by automated means: collection, storage, organisation, retrieval, use, disclosure, restriction, erasure or destruction.

• d) Restriction of processing

  The marking of stored data with the aim of limiting its future processing. The data remains stored but is not used further.

• e) Profiling

  Any automated processing in which personal aspects are evaluated in order to analyse or predict, for example, interests, behaviour or economic circumstances. No such profiling takes place on this website.

• f) Pseudonymisation

  Processing in such a manner that the data can no longer be attributed to a specific person without the use of additional information kept separately.

• g) Controller

  The body that determines the purposes and means of processing. You will find who this is for this website under section 2.

• h) Processor

  A body that processes personal data on behalf of and on the instructions of the controller.

• i) Recipient

  A body to which personal data is disclosed. Public authorities that receive data under a statutory mandate are not regarded as recipients.

• j) Third party

  Any person or body other than the data subject, the controller and persons under the controller's authority.

• k) Consent

  A freely given, specific, informed and unambiguous indication of your wishes by which you agree to the processing of your data.

2. Name and Address of the Controller

The controller within the meaning of the GDPR is:

• SES Software Entwicklung Sieg
• Sandra Sieg
• Roehnweg 5
• 01159 Dresden
• Germany
• Phone: +49 351 4022951
• E-mail: info@ses-realestate.com
• Web: ses-realestate.com

For questions about data protection and to exercise your rights, you may contact the above address directly at any time. No data protection officer has been appointed, as the statutory requirements for this are not met.

3. Cookies and Storage of Information on Your Device

Cookies are small text files that a website places in your browser and that your browser automatically sends back each time you access the same site. This website uses cookies - exclusively our own cookies (first-party) and exclusively those that are necessary for the function you have called up. There is no tracking, no audience measurement, no profiling and no third-party advertising.

Simply calling up a page does not set any cookie that goes beyond displaying it. Each of the following cookies is created only through an action on your part:

• a) Shortlist and property comparison

  If you add a property to your shortlist or to the comparison, a cookie records your selection - purely as property reference numbers, without any identifier by which several visits could be linked. It is created with the first property added, is valid for 30 days and is deleted as soon as the list is empty again. Further details under section 8.

• b) Your decision on displaying the map

  If you enable the map display, the site remembers this so that you do not have to consent again for every property. This cookie ends when you close your browser. Further details under section 9.

• c) Your login

  If you log in, a cookie maintains your session so that you do not have to enter your credentials again on every page. It is encrypted and cannot be read by scripts in your browser, is valid for fourteen days, is extended for as long as you keep using the site, and expires immediately when you log out. Further details under section 7.

• d) One-off notices

  A confirmation shown to you after a redirect - such as "All cookies have been deleted" - is carried in an encrypted cookie until it is displayed and disappears together with it.

All of these cookies originate from us, are limited to this website and are not sent when you call up a third-party site. Unlike purely local storage in the browser, cookies are, for technical reasons, sent with every request to our server; we evaluate them exclusively for the purposes stated and do not combine them with other data. No user account and no attribution to your person arises from the shortlist or the comparison.

Storing this information on your device is strictly necessary in order to provide you with the service you have expressly requested (Section 25(2) no. 2 TDDDG): without the cookie there is no shortlist, no comparison and no login persisting beyond the individual page - and the map would ask you again for every property. A consent banner is therefore not required. Loading the map itself and playing a video, by contrast, require your consent; we obtain this on the spot (sections 9 and 10).

You can get rid of the cookies at any time: calling up ses-realestate.com/revoke-consent deletes the cookies for the shortlist, the comparison and the map release in one step; your shortlist is then empty and the map will ask again. You end an existing login via "Log out".

In addition, every common browser offers the option of deleting website data or refusing cookies from the outset. If you refuse them, reading, searching and viewing properties remain fully possible; only the shortlist, the comparison and the login will then be unavailable.

4. Collection of General Data and Information (Server Log Files)

Each time a page is called up, data is automatically stored in our server's log files. The following is recorded:

• the IP address of the accessing system,
• the date and time of access,
• the address called up, including any parameters passed,
• the HTTP status code and the volume of data transferred,
• the previously visited page (referrer), if your browser transmits it,
• browser type, browser version and operating system used.

We do not evaluate this data on a personal basis and do not combine it with other data sources. It serves to deliver the content correctly, to ensure the functioning of the site and, in the event of an attack, to be able to provide the information required for criminal prosecution. The legal basis is our legitimate interest in the secure and trouble-free operation of the website pursuant to Art. 6(1)(f) GDPR. The log files are deleted after seven days at the latest, unless a specific security-relevant incident makes longer retention necessary; in that case the entries concerned remain stored until the matter has been finally clarified.

5. Search Function

The search allows you to search our property listings. The search term you enter is transmitted to our server as part of the address called up and evaluated there; no separate storage beyond the log files described under section 4 takes place. We recommend that you do not enter personal data in the search field. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing you with searchable listings.

If you move from a list of results to the shortlist or the comparison, your search travels along in the address called up so that the way back leads to the same search again. It is not stored on your device - it is contained in the link and passes with it.

6. Enquiry Form

The property pages show a "Contact provider" form. It is part of the range of functions our software demonstrates and is not in operation on this website: entries are not transmitted, not stored and not forwarded. The properties shown on this site are sample data about which there is nothing to enquire. Please do not enter any personal data there.

If you would like to get in touch with us, please use the contact details given under section 2. If you send us an e-mail, we process your details exclusively in order to deal with your request and delete them as soon as it has been dealt with and no statutory retention periods prevent this. The legal basis is Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR for contract-related enquiries.

As soon as the form goes into operation, we will amend this privacy policy beforehand.

7. Registration and Protected Areas

Individual areas of this website may be reserved for logged-in users. The public offering - home page, blog, property list, property pages, search, shortlist and comparison - is open to you without logging in. You do not need an account for this; you may, however, register voluntarily.

Registration

To register we need your e-mail address and a password; providing your name is voluntary and serves only for the form of address. There is no confirmation procedure: the account is created when the form is submitted, and you are logged in immediately afterwards. Please therefore register only an e-mail address that is your own.

For your account we store the details mentioned, an indicator of whether the account is active, and the time of your last login. We do not store your password in plain text, but exclusively as a cryptographic hash from which the password cannot be recalculated. If an e-mail address is already taken, the form will tell you so, so that you can log in instead.

The legal basis is Art. 6(1)(b) GDPR - registration establishes the usage relationship concerning the account. We process your account data exclusively for this purpose: we do not send any newsletter or advertising via it, and we do not pass the details on. You may request the deletion of your account at any time, informally, using the contact details given under section 2; we will then delete it together with your credentials, unless a statutory retention obligation prevents this.

Logging in

When you log in, we process your e-mail address and your password in order to check your authorisation. After a successful check we set the cookie described under section 3 c) so that you remain logged in and do not have to enter your credentials again on every page. Your authorisation is checked again on every request, so that a withdrawn access takes effect immediately. Via "Log out" the cookie expires immediately.

We record registrations as well as successful and failed login attempts in the logs of our application server - together with the e-mail address used in each case - in order to be able to detect and trace attacks on accounts. The legal basis for this is Art. 6(1)(f) GDPR with our legitimate interest in securing protected areas; for the login itself Art. 6(1)(b) GDPR applies insofar as it serves the performance of the usage relationship.

8. Shortlist and Property Comparison

You can add properties to a shortlist and compare them with one another without registering. Your selection is held in the cookie described under section 3 a), purely as property reference numbers - without any identifier by which several visits could be combined into a profile. Because a cookie travels with every request, our server already knows your selection when the page is built; only in this way can the shortlist, the comparison and the counters on the buttons be displayed immediately and in full.

The cookie is only created when you add the first property and is deleted as soon as the list is empty again. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in providing this convenience function requested by you. Section 25(2) no. 2 TDDDG applies to the storage on your device.

9. Map Display (OpenStreetMap)

To illustrate the location of a property, we can embed a map based on OpenStreetMap. The provider of the map material is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The map is not loaded automatically. Instead, you first see a placeholder; only when you expressly click on it are the map tiles retrieved from the OpenStreetMap servers. In doing so, your IP address is transmitted to OpenStreetMap, over which we have no influence. If you do not click the placeholder, no connection to OpenStreetMap is established at any time.

We record your decision in the cookie described under section 3 b) so that you do not have to consent again for every property; it is valid until you close your browser and can be withdrawn at any time via ses-realestate.com/revoke-consent or by deleting the website data.

The location is shown only approximately unless the provider of the property has released an exact address for publication. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. An adequacy decision of the European Commission is in place for the United Kingdom. Further information can be found in the privacy policy of the OpenStreetMap Foundation at osmfoundation.org/wiki/Privacy_Policy.

10. Videos

For individual properties we provide videos hosted on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We embed these videos in extended data protection mode via the domain youtube-nocookie.com. Simply calling up the property page does not yet establish a connection to YouTube; the video is loaded only when you start it by clicking the play button. From that point on, YouTube receives the information that you have called up the page in question, as well as your IP address, and information may be stored on your device over which we have no influence. If you are logged in to Google at the time, Google can attribute the request to your account; you can prevent this by logging out before playing the video.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, which you give by starting the video. A transfer to the United States cannot be ruled out in this context; Google is certified under the EU-US Data Privacy Framework. Details can be found at policies.google.com/privacy.

11. References to External Websites

Our website contains references to third-party websites, for example to the site of the respective provider of a property. These references are pure links; no data is transmitted as long as you do not click the link. Once you have clicked it, the privacy policy of the respective provider applies, over whose processing we have no influence.

12. Recipients and Processors

We operate this website on our own infrastructure. No personal data is transmitted to third parties, apart from the retrievals from OpenStreetMap and YouTube described under sections 9 and 10, which you trigger yourself in each case. Where we use service providers, this is done on our instructions on the basis of a data processing agreement pursuant to Art. 28 GDPR. Beyond that, we only pass on data where we are legally obliged to do so. Data is not sold.

13. Routine Erasure and Blocking of Personal Data

We process and store personal data only for as long as is necessary to achieve the respective purpose or as provided for by a statutory retention period. If the purpose ceases to apply or a period expires, the data is routinely erased or - insofar as statutory obligations prevent erasure - its processing is restricted.

14. Rights of the Data Subject

• a) Right to confirmation

  You may request confirmation from us as to whether we process personal data concerning you.

• b) Right of access

  Under Art. 15 GDPR you have the right to obtain information about the data stored about you free of charge, including the purposes of processing, the categories of data, the recipients, the envisaged storage period and the origin of the data.

• c) Right to rectification

  Under Art. 16 GDPR you may request the rectification of inaccurate data without undue delay and the completion of incomplete data.

• d) Right to erasure (right to be forgotten)

  Under Art. 17 GDPR you may request the erasure of your data, provided one of the grounds set out there applies and the processing is not necessary, for instance to comply with a legal obligation or to assert legal claims.

• e) Right to restriction of processing

  Under Art. 18 GDPR you may request the restriction of processing, for instance while we verify the accuracy of contested data.

• f) Right to data portability

  Under Art. 20 GDPR you may receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or request its transmission to another controller, insofar as the processing is based on consent or a contract and is carried out by automated means.

• g) Right to object

  Under Art. 21 GDPR you may object at any time, on grounds relating to your particular situation, to processing that we base on a legitimate interest. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests. Where data is processed for the purpose of direct marketing, you may object at any time without giving reasons.

• h) Automated individual decision-making, including profiling

  Under Art. 22 GDPR you have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you. We do not use such decision-making (see section 19).

• i) Right to withdraw consent under data protection law

  Under Art. 7(3) GDPR you may withdraw consent you have given at any time with effect for the future - the release of the map display, for example, via ses-realestate.com/revoke-consent. The lawfulness of the processing carried out up to that point remains unaffected.

• j) Right to lodge a complaint with a supervisory authority

  Without prejudice to other remedies, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The authority responsible for us is the Saxon Commissioner for Data Protection (Saechsischer Datenschutzbeauftragter), Devrientstrasse 5, 01067 Dresden, Germany.

An informal message to the contact details given under section 2 is sufficient to exercise these rights.

15. Legal Basis for Processing

Insofar as we obtain consent, Art. 6(1)(a) GDPR is the legal basis - this concerns the map display and the playing of videos. Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, we base it on Art. 6(1)(b) GDPR; this concerns registration and logging in. Where we are subject to a legal obligation, for instance arising from retention obligations under commercial or tax law, Art. 6(1)(c) GDPR applies. In the remaining cases - delivery of the site, logging, search function, shortlist and comparison - processing is based on Art. 6(1)(f) GDPR. Section 25 TDDDG applies in addition to the storage of information on your device: subsection 2 no. 2 for the strictly necessary cookies under section 3, subsection 1 for the map and video.

16. Legitimate Interests in the Processing

Where we base processing on Art. 6(1)(f) GDPR, our legitimate interest lies in the technically flawless provision and the security of this website as well as in the conduct of our business activities.

17. Duration for Which the Personal Data Is Stored

The storage period depends on the respective purpose. We delete log files after seven days at the latest. Enquiries you send us by e-mail or by telephone are deleted as soon as they have been finally dealt with. The lifetimes of the cookies placed on your device are set out under section 3; they end at the latest when they expire or when you withdraw your consent. We store the data of a registered account for as long as the account exists and delete it at your request. Where data is subject to a statutory retention obligation - for instance under Section 257 HGB or Section 147 AO, with periods of six and ten years respectively - it is retained until the end of the period and deleted thereafter.

18. Provision of Personal Data

You are neither legally nor contractually obliged to provide us with personal data. Using this website, including the search, property view, shortlist and comparison, is possible without providing personal data. If you contact us on your own initiative, we only need the details necessary to answer your request; an e-mail address and a password are required for registration and logging in, without which an account, and therefore access to protected areas, is not possible; providing your name is voluntary. You will suffer no further disadvantages if you do not provide us with any data.

19. Existence of Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

20. Changes to This Privacy Policy

We amend this privacy policy when the functions offered on this website or the legal framework change. The version available here applies in each case.

Version of this privacy policy: August 2026