Privacy Policy
As of October 2026 · under the General Data Protection Regulation (GDPR)
1. Controller
The controller responsible for data processing on this website is:
RM Hospitality, owner Maurice Räder, Heiliggrabstraße 55a, 96052 Bamberg, Germany. Email: kontakt@rm-hospitality.de, phone: +49 171 9402131.
2. General information on data processing
We generally process our users' personal data only insofar as this is necessary to provide a functional website and our content and services. Processing regularly takes place only with the user's consent (Art. 6 (1) lit. a GDPR), to perform a contract (lit. b), to fulfill legal obligations (lit. c), or on the basis of legitimate interests (lit. f).
3. Provision of the website and server log files
On every visit, our hosting provider automatically collects information (server log files): browser type, operating system, referrer URL, host name, time, and IP address. The legal basis is Art. 6 (1) lit. f GDPR; the legitimate interest lies in the technically error-free and secure provision of the site.
Hosting and the domain are provided by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, with whom a data processing agreement pursuant to Art. 28 GDPR exists. The servers are located in Germany.
4. Contact and forms
If you contact us via the contact form, the potential analysis, the waitlist, or by email, the data you provide (e.g. name, email, property details) is processed to handle your inquiry. Form submission takes place via the form mailer of our host STRATO and is delivered to our address kontakt@rm-hospitality.de. The legal basis is Art. 6 (1) lit. b and lit. f GDPR. The data is deleted as soon as it is no longer needed to achieve the purpose.
5. Newsletter & waitlist (RM Homes)
For sending location updates and waitlist information, we use the double opt-in procedure. The legal basis is your consent (Art. 6 (1) lit. a GDPR), which you can withdraw at any time.
6. Cookies & audience measurement
Details on the cookies used can be found in our Cookie Policy. Non-essential cookies are set only with your consent.
7. Appointment booking (Calendly)
For booking consultations, we use the Calendly service (Calendly LLC, USA). When the booking calendar is opened, the data necessary to schedule an appointment is transmitted to and processed by Calendly. Legal basis: Art. 6 (1) lit. b and lit. f GDPR. Data transfer to the USA takes place on the basis of the EU standard contractual clauses and/or the EU-US Data Privacy Framework.
8. Social media presences (Facebook and Instagram)
We maintain a Facebook Page (“RM Hospitality”) and an Instagram profile (@rmhospitality.de). For users in the EU, both services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). When you visit our Page or profile or interact with our posts, Meta processes your data under its own terms. We process the comments and messages you send us there, together with the profile details visible to us, in order to communicate with you.
We operate these presences to present our company and our services and to communicate with prospective and existing clients. The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in this presentation and communication.
Meta provides us with statistics for our Facebook Page and our Instagram profile (known as Insights), for example on the reach of our posts and on interactions. We receive these statistics only in aggregated form. We and Meta are joint controllers for the processing of the data from which Meta creates these statistics (Art. 26 GDPR). For Facebook Pages, Meta has provided a joint controllership arrangement for this purpose (the Page Insights Controller Addendum); for our Instagram profile, we assume a corresponding joint controllership. Under the arrangement for Facebook Pages, Meta assumes responsibility for complying with the GDPR obligations for the processing of Insights data, in particular for informing data subjects and for handling requests concerning your rights (Art. 15 to 21 GDPR). This arrangement does not address Instagram profiles; you can exercise your rights regarding these statistics against us and directly with Meta. We use the statistics to improve our posts and presences; here, too, the legal basis is Art. 6 (1) lit. f GDPR.
In this context, data may also be transferred to the USA. According to Meta, transfers to Meta Platforms, Inc. in the USA are based on the EU-US Data Privacy Framework, under which Meta Platforms, Inc. is certified, and otherwise on the EU Commission’s standard contractual clauses.
Meta describes which data it processes and for what purposes in its Privacy Policy. You can exercise your rights (section 10) against us and also directly with Meta, for example via the settings of your Facebook or Instagram account.
9. Advertising on Facebook and Instagram with lead forms
We advertise on Facebook and Instagram with ads that contain an enquiry form provided by Meta (lead ads with “Instant Forms”). If you submit such a form, you provide us with the following details: number of your properties, current type of letting, location, name, email address and phone number. In addition, Meta provides us with information on when and via which ad, which form and which platform (Facebook or Instagram) you submitted the form.
We use these details to handle your enquiry, call you back and prepare an offer. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures taken at your request). Where you give consent in the form, Art. 6 (1) lit. a GDPR is an additional legal basis; you can withdraw this consent at any time with effect for the future.
The form data is initially stored on Meta’s servers and retrieved by us. Here, too, data may be transferred to the USA (see section 8). According to Meta, both Meta and we as the advertiser are controllers within the meaning of the GDPR for data from lead ads. Meta also uses the form data in accordance with its own Privacy Policy, for example to pre-fill future forms. According to Meta, the form data is available for us to retrieve for 90 days from submission. How long Meta itself stores data is governed by Meta’s Privacy Policy; how long we store the retrieved data is set out in section 11.
We record the processing status of your enquiry (e.g. “qualified”, “converted”, “not qualified” or “lost”) in Meta’s lead management tool (Leads Center). This status is transmitted to Meta via Meta’s Conversions API. Meta uses it to evaluate which ads lead to suitable enquiries and to improve the delivery of our ads. The legal basis is Art. 6 (1) lit. f GDPR; our legitimate interest lies in showing our ads to people for whom our services are relevant. We are responsible for the collection of this information and its transmission to Meta. Under Meta’s Business Tools Terms, Meta processes the information on our behalf for reports on our ads; for other purposes, such as improving ad delivery, Meta processes it after the transmission under its own responsibility in accordance with its Privacy Policy. There, Meta also describes the legal bases it relies on and how you can exercise your rights against Meta. You can object to this transmission at any time (Art. 21 GDPR).
We do not use the Meta Pixel or any comparable Meta tools on this website; we do not transmit data about your visit to this website to Meta.
You can control which ads Meta shows you in the ad preferences in your Meta Accounts Center. Via the menu on an ad, you can also hide ads or block ads from a specific advertiser. You can also exercise your rights (section 10) directly with Meta.
10. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You can withdraw consent you have given at any time. You also have the right to lodge a complaint with a supervisory authority.
11. Storage period
Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations (e.g. under commercial and tax law) preclude this.
12. Currency
This privacy policy is adapted as needed to reflect changed legal or technical circumstances. This version is dated October 2026.
13. AI chat assistant
Our website offers an AI-powered chat assistant that answers questions about our services, pricing and software. Its use is voluntary – data is only processed once you open the chat and send a message.
We process the chat messages you enter, your language setting and your IP address; the latter only briefly, to prevent abuse and overload. We do not store your chat history permanently – it only exists for the duration of your browser session. Please do not enter any special categories of personal data (e.g. health data) in the chat.
Chat requests are processed via our application at app.rm-hospitality.de, hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. To generate responses, your chat messages are transmitted to Anthropic PBC, 500 Howard Street, San Francisco, CA 94105, USA (operator of the “Claude” API). Data processing agreements are in place with both providers; transfers to the USA are based on the EU Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). According to Anthropic, data transmitted via the API is not used to train AI models and is deleted after 30 days.
The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries efficiently and promptly). If you choose to be referred to our team in the chat, you are merely shown our contact options (contact page, phone, e-mail) – your data is only transmitted once you use one of these channels yourself.
The assistant’s responses are generated automatically and may occasionally be inaccurate or incomplete. Only our offers and direct communications are binding.
14. Google Analytics 4
Based on your consent (Art. 6(1)(a) GDPR, sec. 25(1) German TDDDG), we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies (“_ga” and “_ga_KZ4KJTL8DN”, stored for up to 24 months) that enable an analysis of your use of this website. Google Analytics 4 does not store IP addresses; they are truncated before processing.
Without your consent, Google Analytics is not loaded and no data is transmitted to Google. You can withdraw your consent at any time with future effect via “Cookie settings” in the footer by switching off the “Statistics” category. Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. Processing by Google is governed by a data processing agreement. Analytics data is deleted after 14 months.