Applications now open 78 days left Apply Now

Privacy Policy

1. General notes and mandatory information

Status: July 2025

ATCP Management GmbH (a company of the Aroundtown Group) takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that relates to an identified or identifiable natural person. This includes, for example, your name, your address and your IP address. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

2. Note on the controller

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. The controller pursuant to Art. 4 No. 7 of the General Data Protection Regulation (GDPR) is

ATCP Management GmbH (a company of the Aroundtown Group)
Wittestraße 30, House F, 13509 Berlin

Represented by the managing director: Moshe Maimon Cohen

Phone: +49 (0)30 221 835 400
E-mail: [email protected]

(see also our imprint).

You can reach our data protection officer at [email protected] or at our postal address with the addition “the data protection officer”.

3. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Collection of general data when visiting our website

Type and purpose of processing

If you visit our website without using the services we offer and without providing us with personal data, general information is automatically recorded in the server log files. This information (server log files) may contain personal data in limited cases. Your browser automatically transmits the following information to us:

  • Browser type and browser version,
  • Operating system used,
  • referrer URL,
  • Host name of the accessing computer,
  • time of the service request, and
  • IP address.

We process this data

  • to ensure a problem-free connection to the website,
  • to ensure problem-free use of the website
  • Evaluation of system security and system stability
  • Optimization of the website
  • This data is not merged with other data sources. We do not use your data to draw conclusions about your person.

Legal basis and legitimate interest

Processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR on the basis of our legitimate interest in improving the security, stability and functionality of the website.

Contract processors

It cannot be ruled out that technical service providers who act as processors for the operation and maintenance of the website may have access to this data.

Transfer to a third country

Data is not transferred to a third country.

Storage period

The automatically collected personal data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

At the end of your session or after you have closed the browser window, all log files are deleted. We do not store any personal data beyond the time of your visit to our website.

Provision prescribed or required

The provision of the aforementioned personal data is neither legally nor contractually required. Without the provision of the IP address, the service and functionality of the website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

5. Cookies

Consent to the use of cookies.

We use cookies to ensure that our website functions properly. In order to obtain your valid consent to the use and storage of cookies in the browser you use to access our website and to document this properly, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with the CookieFirst server to enable us to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only the cookies to which you have consented and to properly document this. The processed data will be stored until the specified storage period expires or you request the deletion of the data. Notwithstanding this, certain statutory retention periods may apply.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that the data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected

  • Your consent status or the revocation of your consent
  • Your anonymized IP address
  • Information about your browser
  • Information about your device
  • The date and time of your visit to our website
  • The URL of the website on which you have saved or updated your consent settings
  • The approximate location of the user who saved their consent preferences
  • A universally unique identifier (UUID) of the website visitor who clicked on the banner cookie

6. Social media, plugins and tools

We use various social plugins and other tools on our website to improve your use of the website.

6.1 Social plugins using the “2-click solution”

Our website uses social plugins (“plugins”) from the social networks Facebook, Twitter, Instagram, Pinterest, XING, Kununu, YouTube and LinkedIn. These services are offered by the companies Meta Platforms Ireland Ltd, Google Inc, Twitter Inc, Pinterest Europe Ltd, New Work SE and LinkedIn Corporation (“providers”). They can communicate with you via plugins and collect information about your visit to our website. This processing is based on Art. 6 para. 1 sentence 1 lit. a, f GDPR. We use it to pursue our legitimate interest in enhancing your user experience and optimizing our services.

In order to increase the protection of your data when you visit our website, the plugins for Facebook, Twitter, Instagram, Pinterest, XING, Kununu, YouTube and LinkedIn are integrated into the website using a so-called “2-click solution”. This integration ensures that no connection is established with the servers of Meta, Google, Twitter, Pinterest, LinkedIn and Xing when a website containing such plugins is accessed.

Your browser only establishes a direct connection to the above-mentioned servers when you activate the plugins and thus give your consent to data transmission. The content of the respective plugin is then transmitted directly to your browser by the corresponding provider and integrated into the website. If you are already logged in to the social network, the transmission to Facebook takes place without an additional window. On Twitter, a pop-up window appears in which you can edit the text of the tweet.

(a) Facebook

We operate a fan page on the social network Facebook, a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. We use the fan page to inform users about our company and current developments and to communicate with our users.

You have the option to send us messages via our fan page using Facebook Messenger and to share, comment on or “like” our posts. We process profile data (in particular your profile name and public information) and the respective interaction (e.g. the content of the message or comment). The data processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR. We have a legitimate interest in contacting our users via our fan page and responding to inquiries.

If the communication (via Messenger or the comment function) serves the purpose of fulfilling the contract or implementing pre-contractual measures, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

We use the “Facebook Insights” function on our fan page. These are page statistics that are provided by Facebook and through which we obtain information about how users interact with our fan page. Page Insights may be based on personal data collected in connection with a visit or interaction of users on or with our fan page and its content. Facebook and we are jointly responsible for the processing of Insights data and have concluded an agreement within the meaning of Art. 26 GDPR. The agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

In addition, personal data is processed by Facebook when you visit our fan page. It is also possible that cookies that are not absolutely necessary for the operation of the fan page are set on the fan page (even for users who are not logged in). We have no influence on data processing by Facebook Data Processing.

The purpose and scope of data processing by Facebook as well as the relevant rights and setting options for protecting the privacy of users can be found in Facebook’s data policy: https://www.facebook.com/about/privacy/

Our website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Meta Platforms Ireland Ltd (“Facebook”). The plugins are marked with a white “f” on a tile. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

If you activate the Facebook plugin, the content of the plugin is transmitted by Facebook directly to your browser and integrated into the website. We have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform you according to our level of knowledge: https://www.facebook.com/help/186325668085084.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding website of the offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there.

If a user is not a member of Facebook, it is still possible for Facebook to find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

Data processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). In addition, it is used in the interest of an appealing presentation and simplification of the use of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them via this website and link it to their membership data stored on Facebook, they must log out of Facebook before visiting the website.

(b) Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. If you are logged into your Instagram account, you can link the content of our website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our website with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by Instagram.

The data processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). In addition, the use of Instagram is in the interest of an appealing presentation and simplification of the use of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on this can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

(c) LinkedIn

We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the LinkedIn component.

This process informs LinkedIn which specific website of our Internet presence is currently being visited. If you click on the LinkedIn “Recommend button” while you are logged into your LinkedIn account, you can link the content of our website to your LinkedIn profile. This enables LinkedIn to associate your visit to our website with your LinkedIn user account.

The data processing is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). In addition, the use of LinkedIn is in the interest of an appealing presentation and simplification of the use of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

We have no influence on the data that LinkedIn collects in this way, nor are we aware of the scope of the data collected by LinkedIn. We also have no knowledge of the content of the data transmitted to LinkedIn. Details on data collection by LinkedIn and your rights and settings options can be found in LinkedIn’s privacy policy. You can find this information at http://www.linkedin.com/legal/privacy-policy

8. Contact via e-mail

Type and purpose of processing

If you would like to contact us via our central rental e-mail address [email protected] or write an e-mail directly to our employees, we will be happy to contact you and can advise you on rental inquiries, rental properties or inquiries relating to an existing rental agreement, among other things. You can also send us general inquiries here.

The contact details you provide will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass this data on to third parties without your consent.

Legal basis

The processing of the data sent by e-mail takes place in the case of a general inquiry on the basis of a legitimate interest in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR.

If you contact us to request a quote, the processing of data from the e-mail correspondence is carried out to carry out pre-contractual measures in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR.

Recipients of the data

The recipients of the data are our internal departments that process your request.

Transfer to a third country

There is no transfer of data to a third country.

Storage period

Data will be deleted no later than 3 months after the request has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

9. Your rights

If you have any questions or complaints about data protection, you can contact our company. You can find the contact details under point 1 of this privacy policy.

If the legal requirements are met, you also have the following rights:

  • You can request confirmation from us as to whether we are processing personal data about you. If this is the case, you have the right to information about this personal data and the information listed in Art. 15 GDPR, such as information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
  • in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; and
  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

You can contact the competent authority in Berlin as follows

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59-61
10555 Berlin

Phone: 030/138 89-0
Fax: 030/215 50 50

E-Mail: [email protected]

Homepage: https://www.datenschutz-berlin.de

Further German supervisory authorities can be found at

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

In addition, you have the right to object to the processing of your personal data at any time, provided that we process your personal data to pursue legitimate interests and there are reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims, Art. 21 GDPR. You can find our contact details under point 2 of this privacy policy.

If you have any further questions about data processing or data protection, please contact our data protection officer (see point 2 of this privacy policy for contact details).

10. Miscellaneous

We reserve the right to amend this privacy policy at any time in compliance with data protection regulations.