Privacy Policy

1. Overview

We take the protection of your personal data seriously. This privacy policy explains what data we collect when you use Rentwerk, how we use it, and what rights you have regarding your information.

2. Data Controller

[Company Name]
[Street Address]
[Postal Code] [City], Germany
Email: [email@example.com]

3. Data We Collect

When you use our website and services, we may collect the following information:

• Account data: Name, email address, and password when you create an account.
• Usage data: Pages visited, features used, and interaction patterns to improve our service.
• Property data: Information about rental properties and tenants that you enter into the system.
• Payment data: Billing information processed through our payment provider. We do not store full payment details on our servers.
• Server logs: IP address, browser type, and access times for security and performance monitoring.

4. How We Use Your Data

We use the collected data to:

• Provide and maintain our property management services
• Process rent collection, utility billing, and other financial transactions
• Send service-related notifications and updates
• Improve our platform based on usage patterns
• Comply with legal obligations (e.g., tax reporting, DATEV exports)

5. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party tracking cookies. Analytics, if any, are privacy-friendly and do not track individual users across websites.

6. Third-Party Services

We may share data with the following types of service providers:

• Hosting provider: For server infrastructure and data storage within the EU.
• Payment processor: For handling subscription payments securely.
• Email service: For sending transactional emails (e.g., invoices, notifications).

All third-party providers are contractually bound to handle your data in compliance with GDPR.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we remove personal data within 30 days, except where retention is required by law (e.g., tax records are kept for 10 years as required by German law).

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Delete your data ('right to be forgotten')
• Restrict processing of your data
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email@example.com].

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage, and regular security audits.

10. Contact

If you have questions about this privacy policy or your data, contact us at:

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.