Privacy Policy

For the purposes of this Privacy Policy, “we,” “us,” and “our” means Lilienmatt Immobilien GmbH, and “you,” “your,” and “user” means any authorized person accessing or using the Website.

This Privacy Policy sets forth our practices regarding the confidentiality and disclosure of personal data. Personal data is information that relates to individuals whose identity is identified or identifiable (e.g. name, contact information, billing information, IP address). Any data provided by you in the course of visiting the Website is subject to this Privacy Policy.

CONTROLLER

The controller, as defined in the General Data Protection Regulation (“GDPR”), for the processing of your personal data on this website is:

Lilienmatt Immobilien GmbH
Sophienstr. 2
76530 Baden-Baden
Germany

Tel.: +49 7221 398 7387
Email: sales@annaberg21.com

DATA COLLECTION

We collect and process the following types of personal data:

  • Contact information: such as name, address, phone number, email address
  • Financial and payment data: such as bank account number, billing address, proof of financing
  • Device data: details of the device used to visit our website (e.g. operating system, browser type, language, IP address)
  • Usage data: information on visits to our website (e.g. date and time of access, duration of visit, pages accessed)

PURPOSES AND LEGAL BASES OF DATA PROCESSING

We process your personal data for the following purposes and on the legal bases stated below:

Contact enquiries and newsletter

We process your contact details in order to respond to property-related enquiries and to provide information about Annaberg XXI. For this purpose, enquiry data may be forwarded to our authorised brokerage partner Engel & Völkers, who will carry out the further processing of the enquiry and handle subsequent communication.

This processing is carried out pursuant to Art. 6 para. 1 lit. b GDPR (performance of pre-contractual measures).

With your consent, we may also send you a newsletter containing information about offers, promotions, news, and project developments. Registration for the newsletter is completed using a double opt-in procedure. You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link in the newsletter or by sending an email to enquiries@brisengroup.com. After withdrawal, the data will be deleted unless statutory retention obligations apply.

Contractual processing

In the course of initiating or performing a sale or purchase transaction, we process contact data, financial data, and payment data. This processing is necessary for the performance of a contract or for pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR.
Business correspondence is retained for seven years in accordance with statutory retention requirements (e.g. tax law).

Website operation and improvement

To operate, secure, and improve the website, we process device and usage data. This processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in providing a secure and user-friendly website. Such data is generally deleted after 12 months.

You are not obliged to provide personal data. Except where required for contractual purposes, failure to provide data does not result in any disadvantage.
No automated decision-making or profiling pursuant to Art. 22 GDPR takes place.

PROCESSING OF PERSONAL DATA ON THE WEBSITE

Server log files

When you visit our website, our hosting provider automatically collects and stores information in server log files, including IP address, date and time of access, requested page or file, browser type and version, operating system, and referrer URL.
The processing is based on Art. 6 para. 1 lit. f GDPR (security and technical stability). Server log data is deleted after 30 days, unless longer retention is required for security or legal reasons.

Cookies and consent management

This website uses the cookie consent technology of Cookiebot to obtain your consent to store certain cookies on your terminal device and to document such consent in accordance with data protection law.
The provider of this technology is Cybot A/S (Havnegade 39, 1058 Copenhagen, Denmark) (“Cookiebot CMP by Usercentrics”). Cybot A/S is part of the Usercentrics group. For the technical provision and operation of the consent management platform (e.g. script delivery and infrastructure), resources of Usercentrics GmbH (Sendlinger Straße 7, 80331 Munich, Germany) may be used.

When you enter our website, the following personal data is transferred to Cookiebot:

  • Your consent(s) or withdrawal of your consent(s).
  • Your IP address
  • Information about your browser
  • Information about your terminal device
  • Time of your visit to the website

Furthermore, Cookiebot stores a cookie in your browser in order to be able to assign the consent(s) granted to you or their revocation. The data collected in this way will be stored until you request us to delete it, delete the Cookiebot cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

The use of Cookiebot takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Use of Google services

We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, including analytics, advertising, conversion tracking and tag management services.
Depending on the service, personal data (such as IP address, online identifiers, and usage data) may be processed on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
Personal data may be transferred to servers of Google LLC in the United States. Such transfers are safeguarded by appropriate measures pursuant to Art. 46 GDPR, in particular Standard Contractual Clauses (SCC).
Further information: https://policies.google.com/privacy

Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used solely as a technical tool for managing and deploying website tags. It does not independently analyse user behaviour, create user profiles, or carry out tracking or advertising activities.

Google Tag Manager is loaded when the website is accessed in order to ensure the technically reliable integration and management of consent-based services. Any processing of personal data via services integrated through Google Tag Manager takes place exclusively after the user has granted the relevant consent via our consent management platform.

The use of Google Tag Manager as a technical tool is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the efficient and technically reliable operation of our website.

Further information about Google Tag Manager can be found at:
https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
https://policies.google.com/privacy

Google Ads Remarketing (similar audiences)

This website uses the remarketing or “similar audience” function of  Google Ads, provided by  Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

This function allows us to display interest-based and personalised advertisements to users when they visit other websites within the so-called “Google Display Network”. Google Remarketing uses cookies and similar technologies that are stored on your end device and enable an analysis of your use of the website. These technologies are used to record visits to this website and pseudonymous information about website usage.

Based on this information, advertisements may be displayed that are likely to reflect product or information areas previously accessed on our website.

The processing takes place  only with your consent  pursuant to  Art. 6 para. 1 lit. a GDPR.

Further information on Google Remarketing and data protection can be found at:
https://policies.google.com/privacy
https://policies.google.com/technologies/ads

Google Ads Conversions Tracking 

We use  Google Ads Conversion Tracking, a service provided by  Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Ads enables us to promote our offers via advertising media on external websites and to measure the effectiveness of advertising campaigns. For this purpose, Google uses cookies and similar technologies (“conversion cookies”). If you access our website via a Google advertisement, Google may store a cookie on your end device. These cookies usually expire after 30 days and are not used for personal identification.

The information collected by means of conversion tracking enables Google and us to recognise that a user has clicked on an advertisement and was redirected to a specific target page. We receive only aggregated and statistical evaluations from Google and cannot identify individual users based on this information.

Due to the use of Google Ads, your browser may automatically establish a direct connection with Google servers. We have no influence on the scope and further use of the data collected by Google.

The processing takes place  only with your consent  pursuant to  Art. 6 para. 1 lit. a GDPR.

You can prevent the storage of cookies by adjusting your browser settings or by withdrawing your consent via our consent management platform. Further information on Google Ads data processing can be found at:
https://policies.google.com/privacy
https://policies.google.com/technologies/ads

Google Ads Enhanced Conversions 

We use the Google Ads feature  “Enhanced Conversions”  to improve the accuracy of conversion measurement for our advertising campaigns.

For this purpose, certain first-party data provided by you in the context of contact or enquiry forms (e.g. email address) may be processed in a  hashed and encrypted form  using industry-standard one-way hashing and transmitted to Google. This data is used exclusively to match conversions with advertising interactions and cannot be reversed into plain text by us.

The processing takes place  only with your consent  pursuant to  Art. 6 para. 1 lit. a GDPR.

Service provider:  Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to servers of Google LLC in the United States. Transfers to third countries are safeguarded by appropriate measures pursuant to  Art. 46 GDPR, in particular  Standard Contractual Clauses (SCC).

Further information:
https://support.google.com/google-ads/answer/9888656
https://policies.google.com/privacy

Google Analytics 

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”), on the basis of your consent for the analysis, optimisation and economic operation of our online offer pursuant to Art. 6 para. 1 lit. a GDPR. Google uses cookies and other technologies. The information generated by the service about the use of the online offer by users may be transmitted to servers of Google LLC in the United States and processed there.

Google acts on our behalf as a processor within the meaning of Article 28 GDPR. We have concluded a data processing agreement with Google, which includes the EU Standard Contractual Clauses (SCC) as appropriate safeguards pursuant to Art. 46 GDPR for the transfer of personal data to third countries.

Google uses the information collected to evaluate the use of our online offer by users, to compile reports on activities within this online offer and to provide us with further services related to the use of this online offer and the internet. In doing so, pseudonymised usage profiles of users may be created.

We use Google Analytics audiences (remarketing audiences) to display advertisements placed within Google’s advertising services and those of its partners only to users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in specific topics or products determined on the basis of visited pages). This processing takes place only on the basis of your consent.

Google Analytics anonymises IP addresses by default before storage.

Cookies and identifiers are stored for the duration configured in our Google Analytics property settings. User-level data is retained for the period configured in the Google Analytics settings and is then automatically deleted. Aggregated reports do not allow identification of individual users.

You can prevent the storage of cookies by adjusting your browser settings or by withdrawing your consent via our consent management platform.

Further information on data usage by Google, settings and options for objection and revocation can be found at:
https://policies.google.com/technologies/partner-sites
https://policies.google.com/technologies/ads
https://adssettings.google.com/authenticated

Doubleclick 

DoubleClick by Google is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Data may be transferred to Google LLC in the United States.

Doubleclick by Google uses cookies to serve ads relevant to you. Your browser is assigned a pseudonymous identification number (ID) to check which ads have been displayed in your browser and which ads have been called. The cookies do not contain any personal information. The use of DoubleClick cookies only allows Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and stored there. Under no circumstances will Google match your data with other data collected by Google.

You consent to the processing of data about you by Google and the manner of data processing described above as well as the named purpose.

You may refuse the use of cookies by selecting the appropriate settings on your browser. You can also prevent Google from collecting the data generated by the cookies and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link under “Extension for DoubleClick deactivation”.

For more information about DoubleClick by Google and privacy, please visit: https://policies.google.com/technologies/ads?hl=de

Google Fonts (locally hosted)

We use Google Fonts for the uniform and visually appealing presentation of fonts on our website.

The Google Fonts used on this website are  hosted locally on our own servers. When accessing our website,  no connection to Google servers is established  in connection with the use of Google Fonts. In particular,  no personal data, such as IP addresses, is transmitted to Google  in this context.

The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in a consistent and technically optimized presentation of our website.

Use of Microsoft services

We use services of Microsoft Corporation / Microsoft Ireland Operations Limited for analytics and marketing purposes. Processing takes place on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Data may be transferred to third countries, in particular the United States, subject to appropriate safeguards pursuant to Art. 46 GDPR.
Further information: https://privacy.microsoft.com

Microsoft Clarity

We use Microsoft Clarity to better understand the needs of our users and to optimise the offer on this website. With the help of Clarity technology, we gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to tailor our offering to our users’ feedback. Clarity works with cookies and other technologies to collect information about the behaviour of our users and their end devices (in particular IP address of the device (is only recorded and stored in anonymised form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). Clarity stores this information in a pseudonymised user profile. The information is neither used by Clarity nor by us to identify individual users or merged with other data about individual users.

For more information, please refer to Microsoft Clarity’s privacy policy: privacy.microsoft.com/en-us/privacystatement.

The legal basis for the processing is your consent in accordance with Article 6 (1) (a) GDPR.

LinkedIn analytics and advertising

We use services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland to analyse website usage and display interest-based advertising. Processing takes place only with your consent pursuant to Art. 6 para. 1 lit. a GDPR.
Further information: https://www.linkedin.com/legal/privacy-policy

Cloudflare (content delivery and security)

We use services of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to ensure the security, performance and availability of our website (e.g. protection against abusive access, DDoS attacks and technical optimisation).

In this context, Cloudflare processes technical connection data such as IP addresses, system configuration information and request metadata. Cloudflare may set technically necessary cookies or use web storage (e.g. _cfuvid) for security and load balancing purposes.

The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in ensuring the secure and reliable operation of our website.

Data may be transferred to servers in third countries, in particular the United States. Such transfers are safeguarded by appropriate measures pursuant to Art. 46 GDPR, in particular Standard Contractual Clauses (SCC).

Further information:  https://www.cloudflare.com/privacypolicy/

YOUR RIGHTS

With regard to the personal data concerning you, you have the right of access (Art 15 GDPR), rectification (Art 16 GDPR), erasure (Art 17 GDPR), restriction of processing (Art 18 GDPR), and the right to data portability (Art 20 GDPR).

Right to object (Art 21 GDPR)

In the event that we process your data on the basis of our legitimate interests or those of a third party (Art 6 para 1(f) GDPR), you have a statutory right to object. This can be done informally, for example by written communication to the  Lilienmatt Immobilien GmbH, Sophienstr. 2, 76530 Baden-Baden.

or by e-mail to sales@annaberg21.com

Withdrawal of Consent (Art 7(3) GDPR)

In the event that we process your data on the basis of your consent, you have the unconditional right, at any time, to withdraw the consent you have given, without charge, and with effect for the future. This withdrawal can be made in any form (with regard to cookie consent, see our Cookie Policy, for example:

  • by clicking ‘unsubscribe’ at the bottom of an e-mail message or newsletter;
  • by written notice to Lilienmatt Immobilien GmbH, Sophienstr. 2, 76530 Baden-Baden;
  • or by e-mail to enquiries@brisengroup.com

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

CONFIDENTIALITY AND DISCLOSURE OF INFORMATION

Your personal data is not disclosed to third parties except as described in this Privacy Policy. We may engage sales and marketing partners as processors pursuant to Art. 28 GDPR. In the context of processing property-related enquiries, personal data may be forwarded to our authorised brokerage partner Engel & Völkers for further handling of the enquiry. Authorities may receive personal data where required by law.

QUESTIONS AND COMPLAINTS

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for Lilienmatt Immobilien GmbH is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart
Germany
https://www.baden-wuerttemberg.datenschutz.de/

January 2026