Privacy Policy

Server Log Files

Each time our platform is accessed, our hosting service provider automatically collects information and stores it in so-called server log files. This concerns in particular:

• IP address of the requesting device (shortened or deleted promptly)
• Browser type, browser version, and operating system used
• Date and time of access as well as the page accessed
• Referrer URL from which you reached our platform

The processing is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in the secure, stable, and trouble-free operation of the platform and in defending against attacks and abuse.

The log files are generally deleted automatically after no more than 7 days, unless they are exceptionally required for longer to investigate a specific security incident.

Cookies & Consent Management

We use cookies and comparable technologies to provide the platform and make it user-friendly. Technically necessary cookies (e.g. for login, session management, and security) are required for the operation of the platform and are used for contract performance or on the basis of our legitimate interest.

Cookies and services that are not technically necessary are only used with your prior consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR). Your consent is voluntary and can be withdrawn at any time with effect for the future, without this affecting the usability of the essential platform functions.

A detailed overview of all cookies used and the option to manage your consent can be found in our Cookie Policy.

Contacting Us

If you contact us via the contact form, by email, or by telephone, we process the data you provide (in particular name, contact details, and the content of the request) in order to handle your request and answer any follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR insofar as your request relates to a contract, otherwise our legitimate interest in handling requests (Art. 6 para. 1 lit. f GDPR). The data is deleted once the request has been conclusively handled and no statutory retention obligations apply.

Registration & User Account

Using the protected areas of the platform requires the creation of a user account. As part of registration and subsequent account use, we process the following data:

• Email address (mandatory; used as login and for communication)
• Password (stored exclusively in encrypted or hashed form)
• Profile data such as name and – optionally – additional information you provide
• Selected user role (housing seeker or provider) and, where applicable, membership of an organization
• Technical metadata such as registration and login timestamps for the security of your account

The processing serves to provide the user account, for authentication, and to perform the usage contract (Art. 6 para. 1 lit. b GDPR). Security-related metadata is processed on the basis of our legitimate interest in abuse-proof operation (Art. 6 para. 1 lit. f GDPR).

The account data is stored for the duration of your user account and removed after its deletion, unless statutory retention obligations exist.

Listings (Providers)

Providers can create listings for residential space on WOHNO. In doing so, we process the data provided in the listing, in particular the property description, address and location, rental or purchase prices, features, and uploaded photos and documents.

Listings are displayed – depending on the visibility chosen by the provider – publicly on the platform and, where applicable, via search engines. Providers are responsible for not including any personal data of third parties in listings without an appropriate legal basis.

The processing is carried out to perform the usage contract with the provider and to provide the platform's intermediary function (Art. 6 para. 1 lit. b GDPR).

Search Profiles & Application Portfolios (Seekers)

Housing seekers can create a search profile and a digital application portfolio. Depending on your input, this may involve processing data such as name, contact details, household size, income and creditworthiness information, employment situation, and uploaded evidence and documents.

Some of this information may be particularly sensitive. You decide for yourself which information you provide and to which providers you transmit your application portfolio. The processing is carried out to perform the usage contract and at your initiative; for particularly sensitive information, additionally on the basis of your explicit consent. You can change, restrict, or delete your information at any time.

The processing serves to create and manage your search profile and application portfolio and to transmit them to the providers you have selected (Art. 6 para. 1 lit. b and, where applicable, lit. a GDPR).

Matching & Score Calculation

To improve matchmaking, we automatically compare search profiles and listings and determine a match score. This serves solely as non-binding guidance and does not lead to a legally binding decision. The respective provider always decides independently on whether to accept an application or allocate an apartment. No decision based solely on automated processing within the meaning of Art. 22 GDPR takes place. The legal basis is contract performance and our legitimate interest in efficient matchmaking (Art. 6 para. 1 lit. b and f GDPR).

Chat & Messages

Seekers and providers can communicate with each other via the platform's internal chat and messaging function. We process the content and metadata of this communication in order to provide the function, ensure delivery, and prevent abuse. Messages are stored for as long as this is necessary for the communication of the parties involved. The legal basis is Art. 6 para. 1 lit. b and lit. f GDPR.

Viewing Appointments

For the scheduling and management of viewing appointments, we process data such as appointment times, the persons involved, the property reference, and any notes you store. The processing serves to organize viewings and to coordinate between seekers and providers (Art. 6 para. 1 lit. b GDPR).

Payments & Paid Services

For paid services, we process the data required for contract handling, in particular the selected service, billing data, and payment status. The actual payment processing is carried out via specialized payment service providers; complete payment data (e.g. credit card numbers) is processed directly by these service providers and not stored permanently by us.

The processing serves to handle paid contracts (Art. 6 para. 1 lit. b GDPR) and to fulfill commercial and tax retention obligations (Art. 6 para. 1 lit. c GDPR).

AI-Assisted Features

WOHNO uses AI-assisted features, for example to create texts and summaries, structure listing data, or support matchmaking. In doing so, content you enter or upload may be transmitted to and processed by specialized service providers.

The processing serves to provide and improve these features on the basis of contract performance or our legitimate interest in a high-performing service (Art. 6 para. 1 lit. b and f GDPR). Automated evaluations serve merely as support; no decision based solely on automated processing with legal effect within the meaning of Art. 22 GDPR takes place.

Map Display & Location Data

To display property locations and to enable radius searches, we integrate map services and process location and address data (geocoding). When maps are loaded, your IP address may be transmitted to the respective map provider. The services used are listed in the overview below. The legal basis is contract performance or our legitimate interest in a clear presentation of locations (Art. 6 para. 1 lit. b and f GDPR).

Newsletter

If you subscribe to our newsletter, we process your email address and the time of subscription in order to send you information about WOHNO. The dispatch is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time with effect for the future via the unsubscribe link in every email or by message to us.

Embedding Listings on Third-Party Sites (Embed Widget)

Providers (e.g. property managers or real estate agencies) can embed individual listings on their own websites using a so-called embed widget. Technically, this loads an iframe from wohno.de that displays the listing data. When you visit such a third-party site with an embedded widget, your IP address is transmitted to our servers — as with any website request — so that the content can be delivered. The widget does not set any cookies.

To measure reach, we record how often an embedded listing is displayed and clicked. We process your IP address exclusively in pseudonymized form: it is hashed using a key that rotates daily, so that no conclusions about your identity and no recognition across multiple days are possible. We additionally store a shortened browser identifier and the originating website (referrer). This individual data is automatically deleted after 90 days; only anonymous daily statistics without any personal reference remain. The legal basis is our legitimate interest in measuring the success of the embedding (Art. 6 para. 1 lit. f GDPR). The embedding provider can fully disable this tracking via the attribute data-wohno-track="false".