Privacy policy
PRIVACY POLICY
The purpose of data protection is to not infringe upon the rights of our customers and business partners, as well as our suppliers and other contractual partners, when handling their personal data. For this reason, apollo real estate GmbH & Co. KG processes data exclusively with careful adherence to the applicable legal provisions. These include the Federal Data Protection Act (new) (BDSG), the General Data Protection Regulation (GDPR), the Digital Services Act (DDG), the Telecommunications Telemedia Data Protection Act (TDDDG), as well as all other laws that contain corresponding regulations.
With the following privacy policy, we explain how we handle personal data during its collection, processing, use, and deletion. The subject of our data usage always relates exclusively to our real estate business purpose, namely the purchase, rental, brokerage, conversion and expansion, as well as the administration, management, valuation, and sale of real estate matters in offices and retail, in industrial and logistics sectors, and in residential areas.
1. Controller and Data Protection Officer
These privacy notices apply to the data processing by
apollo real estate GmbH & Co. KG, Schillerstraße 20, D-60313 Frankfurt am Main, Germany, E-mail: info@nai-apollo.de, telephone: 069 / 970 50 50
The Data Protection Officer is:
Carsten Jockel
Senpro IT GmbH
At the church 2
35463 Fernwald (Germany)
Phone: 06404 / 658 03 51
Email datenschutz@nai-apollo.de
Website www.senpro.de
2. Collection and storage of personal data, as well as the type and purpose of their use
When visiting the website
When you access our website www.nai-apollo.de, your browser automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected without your action and stored until it is automatically deleted:
IP address of the requesting computer, date and time of access, name and URL of the retrieved file, website from which access is made (referrer URL), browser used, and operating system of your computer, if applicable, as well as the name of your access provider.
The data mentioned is processed by us to ensure a smooth website connection, comfortable use of our website, for evaluating system security and stability, and for other administrative purposes. The storage period is 14 days.
The legal basis for data processing is Article 6(1) sentence 1(f) GDPR. IP addresses are considered personal data; our legitimate interest lies in the secure and stable operation of the website.
Furthermore, apollo real estate GmbH & Co. KG uses cookies and analysis services when you visit the website. You can find more detailed information on this in sections 4 to 8 of this privacy policy.
b) When signing up for our newsletters
If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to regularly send you our newsletter. Providing an email address is sufficient to receive the newsletter.
Shipping will only occur after a double opt-in; we will log your signup/confirmation (timestamp, IP address). Legal basis: Art. 6 Abs. 1 a GDPR in conjunction with Section 7 of the Unfair Competition Act (UWG). Proof of consent will be retained for up to 3 years.
Unsubscribing is possible at any time, for example, via a link at the end of every newsletter. Alternatively, you are welcome to send your unsubscribe request to newsletter@nai-apollo.de at any time via email.
c) When using our contact form
For questions of any kind, Apollo real estate GmbH & Co. KG offers the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that Apollo real estate GmbH & Co. KG knows who sent the request and to be able to answer it. Further information can be provided voluntarily.
The processing of data for the purpose of contacting us is based on your voluntary consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, on the basis of a pre-contractual or contractual situation pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, or Art. 6 para. 1 sentence 1 lit. f GDPR (to facilitate communication).
The personal data collected for the use of the contact form by Apollo real estate GmbH & Co. KG will be deleted upon completion of your request or at the latest after 6 months. Longer storage will only occur if required by law.
3. Data Sharing
A transfer of personal data will only take place for the purposes listed below. Apollo real estate GmbH & Co. KG will only pass on your personal data to third parties if:
(1) you have given your express consent required by Art. 6 Para. 1 Sentence 1 lit. a GDPR in conjunction with § 25 TDDDG,
(2) the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the protection of our legitimate interests or those of third parties beyond the performance of the contract, and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
(3) in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, as well as
(4) that is legally permissible and, according to Art. 6(1) sentence 1 letter b GDPR, necessary for the processing of contractual relationships with you or for the performance of pre-contractual measures required at your request.
4. Treats
Apollo real estate GmbH & Co. KG uses cookies on its website. These are small files that your browser automatically creates and stores on your terminal device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your terminal device and do not contain viruses, Trojans, or other malware. Information is stored in the cookie that relates to the specific terminal device used. However, this does not mean that we are immediately made aware of your identity.
The use of cookies is, on the one hand, to make our services more enjoyable for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site.
Additionally, Apollo real estate GmbH & Co. KG also uses temporary cookies to optimize user-friendliness, which are stored on your device for a specific, set period. If you visit our site again to use our services, it will be automatically recognized that you have been with us before and what inputs and settings you have made, so you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see sec. 5). These cookies allow us to automatically recognize on a return visit to our site that you have been with us before. These cookies are automatically deleted after a defined period of time.
We only use non-essential technologies with your consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 a GDPR). We base essential technologies on § 25 para. 2 TDDDG in conjunction with Art. 6 para. 1 f GDPR (operation/security). For details (providers, purposes, storage durations), please refer to the provider list in the consent banner, where you can change or revoke your settings at any time.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a prompt always appears before a new cookie is created. However, disabling cookies entirely may prevent you from using all of the features of our website.
5. Web Analysis Tools/Services Used (if enabled)
The tracking measures listed below and used by us are carried out on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDSG. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. Furthermore, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you.
The respective data processing purposes and data categories can be found in the corresponding tracking tools. For details (provider, purposes, storage durations), please refer to the provider list in the consent banner, where you can change or revoke your settings at any time.
Google Analytics
For the purpose of need-based design and continuous optimization of our websites, we use Google Analytics, a web analytics service provided by Google Ireland Ltd. Its use is only permitted with consent (statistics). In Google Analytics 4 (Consent Mode v2 with retention 2/14 months), IP addresses are anonymized by default. We have deactivated advertising features. Data transfers to the USA may occur. Legal basis for transfer: Adequacy decision EU-US Data Privacy Framework (if the provider is certified); otherwise SCCs. Revocation/changes can be made at any time in the consent banner.
Optionally, you can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). The browser add-on is optional and does not replace the legal basis (your consent).
Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
b.) Matomo (cookieless or with cookies – depending on your selection in the consent banner)
We use the open-source software Matomo to analyze and statistically evaluate website usage. This is done with or without cookies.
If you do not consent to the use of Matomo in the content banner, Matomo will be operated without cookies with truncated IPs (no tracking via end device identifiers). The legal basis is then Art. 6 para. 1 f GDPR (reach measurement; our interest: demand-oriented website with low intensity of intervention). No data is passed on to third parties.
If you consent to the use of Matomo, it will be used on a cookie basis. The legal basis in this case is Art. 6 para. 1 a GDPR. Details (cookies/storage durations) in the consent banner. No data will be passed on to third parties.
6. Marketing/Conversion Tools/Services Used (if enabled)
We only use the measures listed below with your consent if they are technically non-essential measures (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We base necessary technologies on § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR (operation/security). You can find details (providers, purposes, storage durations) in the provider list in the consent banner, where you can change or withdraw your settings at any time.
Google Ads Conversion Tracking
We also use Google Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you. This involves Google Ads placing a cookie (see section 4) on your computer if you have reached our website via a Google ad. The recipient of the data is Google Ireland Ltd.
These cookies expire after 90 days and are not used for personal identification. If the user visits certain pages on the Ads customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page.
Each Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. The Ads customers will be told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this – for example, via browser settings that generally disable the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain „www.googleadservices.com".
The recipient of the data is Google Ireland Ltd.; transfers to the USA may take place (EU-US DPF, if certified; otherwise SCCs). Details in the consent banner. Revocation at any time in the consent banner.
Google's privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/en.html).
b) ZoomInfo Websites
To determine from which company networks access to our website originates, we use ZoomInfo WebSights (firmographics by IP). The tool primarily serves to optimize lead generation by identifying the companies from whose networks access to our website originates.
ZoomInfo Websights is only used with your consent (§ 25 para. 1 TDDDG, Art. 6 para. 1 a GDPR). The recipient is ZoomInfo Technologies LLC (EU branch, if applicable). Data: IP/network assignment, derived company assignment, page views (pseudonym). Transfers to the USA may take place (EU-US DPF, if certified, otherwise SCCs). Revocation possible at any time in the consent banner.
7. Embedded Content/Plugins (if enabled)
We use various social network plugins on our website to increase our company's visibility. The respective providers are responsible for ensuring data protection compliant operation.
These services are deactivated by default. Data processing (including possible transfers to the USA) will only take place after your consent in the consent banner (§ 25 para. 1 TDDDG, Art. 6 para. 1 a GDPR). Activation via a two-click process. Providers (EU entities, where available): Google Ireland Ltd. (YouTube/Maps), Meta Platforms Ireland Ltd. (Instagram), LinkedIn Ireland Unlimited Company, X Corp. (EU branch), New Work SE (XING) in the consent banner.
a) X (formerly Twitter)
Plugins from the microblogging network of X Corp. (EU branch) are integrated into our website. You can recognize the X plugins (tweet button) by the X logo on our site.
X will receive information that you visited our page with your IP address. We point out that, as the provider of the sites, we do not receive any knowledge of the content of the transmitted data or its use by X.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
More information on this can be found in X's privacy policy (https://privacy.x.com/de).
YouTube
Our website uses plugins from the YouTube website, operated by Google. The operator of the sites is Google Ireland Ltd.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
For more information on handling user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.
XING
The „XING Share button" is used on our website. The operator of the site is XING SE, Germany.
When you click the „XING Share button,“ content from XING will be loaded only after you have given your consent and activated it.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
You can retrieve the current data protection information for the „XING Share button" and supplementary information on this website:
https://www.xing.com/app/share?op=data_protection
d) LinkedIn
We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn Ireland Unlimited Company. Each time our website, which is equipped with such a component, is accessed, this component causes the browser you are using to download a corresponding representation of the LinkedIn component.
By agreeing to use this plugin, LinkedIn will be informed which specific page of our website is currently being visited.
We have neither control over the data collected by LinkedIn in this manner nor over the scope of this data collected by LinkedIn. We also have no knowledge of the content of the data transmitted to LinkedIn.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
You can find details about LinkedIn's data collection, your rights, and your settings in LinkedIn's Privacy Policy. You can find this policy at http://www.linkedin.com/legal/privacy-policy.
e) Meta Instagram/Facebook
Functions of the Instagram and Facebook services are integrated into our pages. These functions are offered by Meta Platforms Ireland Ltd. If you are logged into your Instagram account, you can link the content of our pages to your Instagram or Facebook profile by clicking the Instagram or Facebook button. This allows Instagram or Facebook to associate your visit to our pages with your user account. Please note that as the provider of the pages, we do not receive any information about the content of the transmitted data or its use by Instagram or Facebook.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
You can find more information on this in Instagram's privacy policy: http://instagram.com/about/legal/privacy/
Facebook: https://www.facebook.com/privacy/policy/
f) Google Maps
This page uses the Google Maps service via an API. The provider is Google Ireland Ltd.
To use the features of Google Maps, it is necessary to store your IP address. This information is typically transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
Integration takes place using a two-click process only after your consent; details (provider/purposes/storage durations) are available in the consent banner.
For more information on handling user data, please see Google's Privacy Policy: https://www.google.com/policies/privacy/.
8. Using the AI-powered search function (OpenAI API)
To enable an efficient and user-friendly search on our website, we use an intelligent search function. This service is technically provided via an interface (API) from OpenAI Ireland Ltd. (Merrion Court, Unit 1, 12-13 Merrion Row, Dublin 2, Ireland; Parent company: OpenAI, Inc., 3180 18th St, San Francisco, CA 94110, USA) provided.
a) Scope and purpose of data processing When using the search function, the text you enter (search query) and technically necessary metadata (e.g., your IP address) will be transmitted to OpenAI's servers. This is necessary to analyze the semantic meaning of your request and generate a precise answer based on our content.
b) Special protection of your data (exclusion from AI training) We have configured the technical integration via the OpenAI API to ensure a high level of data privacy:
-
No training: In contrast to private use of ChatGPT, according to OpenAI's terms of use, data submitted via our API interface Not used to train or improve OpenAI's global language models.
-
Purpose limitation: The data will be processed exclusively for the purpose of handling and responding to your current search query.
Legal basis The processing is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) for providing modern, innovative, and efficient information on our website. If you have explicitly consented via our consent manager (cookie banner), the legal basis Art. 6(1)(a) GDPR.
Data transfer to third countries Since OpenAI is a US company, data can be processed on servers in the US. We have entered into a Data Processing Agreement with OpenAI based on the EU Standard Contractual Clauses. OpenAI is also under the EU-U.S. Data Privacy Framework certified, which guarantees an adequate level of data protection.
e) Storage duration and abuse control Your search queries are processed by OpenAI for security purposes (e.g., abuse or spam detection) for a period of up to 30 days saved and then permanently deleted. We only store search queries in anonymized form for statistical evaluation and optimization of our services.
f) Important note regarding data entry The AI search processes free text inputs. We expressly ask our users to, no personal data (such as names, addresses, phone numbers, or confidential documents) into the search field. Entering such data is voluntary and at the user's own risk.
9. Third-country transfers
For individual services, personal data is transferred to recipients in third countries (esp. USA). If personal data is transferred to recipients in the USA, this is done – with certified providers – on the basis of the adequacy decision on the EU-US Data Privacy Framework (adequacy decision 07/10/2023, confirmation GC 03/09/2025 (T-553/23), appeal possible); otherwise, on the basis of EU standard contractual clauses and, if applicable, additional measures.
However, an equivalent level of protection to that of the EU cannot be guaranteed in every case (e.g., government access). The legal basis is your consent, insofar as the service is not technically necessary.
10. Further Information and Rights of Data Subjects
If mandatory fields are indicated in forms, this information is required for processing your request or for carrying out pre-contractual/contractual measures. Without this information, the respective service cannot be provided. Voluntary information is not mandatory.
The source of the data is generally directly from you (website usage/forms); for external content/plugins, it is from the respective provider.
We do not make automated decisions or perform profiling. Individual providers (e.g., social/marketing) may conduct their own profiling.
As a „data subject" within the meaning of the GDPR, you have the following rights:
- pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if they were not collected by us, as well as information about the existence of an automated decision-making, including profiling, and, if applicable, meaningful information about its details;
- pursuant to Art. 16 GDPR, to request the rectification of inaccurate or the completion of your personal data stored by us without delay;
- in accordance with Art. 17 GDPR to request the erasure of your personal data stored by us, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
- according to Art. 18 GDPR to request the restriction of the processing of your personal data, if you dispute the accuracy of the data, the processing is unlawful you refuse their deletion and we no longer need the data, but you need them for the assertion, exercise or defense of legal claims or you have objected to the processing according to Art. 21 GDPR;
- to receive your personal data, which you have provided to us, in a structured, common, and machine-readable format or to request its transmission to another controller, in accordance with Art. 20 GDPR;
- in accordance with Art. 7(3) GDPR, you may withdraw your consent at any time. This means that we may no longer continue the data processing based on this consent for the future and
- according to Art. 77 GDPR, to lodge a complaint with a supervisory authority.
The supervisory authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information
represented by
Prof. Dr. Alexander Roßnagel
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: 0611-1408 0
Email poststelle@datenschutz.hessen.de
11. Right of Objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without stating any particular situation.
If you wish to exercise your right of withdrawal or objection, simply send an email to datenschutz@nai-apollo.de
12. Data Security
Our website uses TLS (Transport Layer Security) encryption. You can recognize this by features such as „https://“ in the address bar and a padlock icon in your browser.
We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
13. Hosting
Our website is hosted by an external service provider (web host):
Host Europe GmbH
c/o WeWork Wallarkaden
Pilgrim Street 6
50674 Cologne
Server location: Strasbourg, France, EU
Processing is carried out on the basis of a contract processing agreement concluded with this external service provider in accordance with Art. 28 GDPR.
14. Timeliness and Modification of this Privacy Policy
This privacy policy is currently valid and dated February 2026.
Due to the further development of our website and offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy can be accessed and printed by you at any time on the website at https://www.nai-apollo.de.de/datenschutz.