PRIVACY POLICY & DATA PROCESSING
We handle your data with care and strictly follow the legal requirements when processing them. The following data protection information provides an overview of the processing of your personal data and your resulting rights in accordance with the applicable data protection law:
1. Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Herzberg Consulting Services -
Uta Herzberg
Bahnhofstraße 11b
85604 Zorneding
Germany
Email: info@herzberg-consulting-services.de
Phone: +49 8106 3480162
2. General Information on Data Processing
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws (including the Federal Data Protection Act – BDSG).
Personal data is processed solely for specified, legitimate purposes and only to the extent necessary for:
• the initiation and performance of contracts,
• the provision of relocation and office search services,
• communication with clients and third parties,
• compliance with legal obligations,
• the protection of legitimate business interests.
3. Categories of Personal Data
Depending on the nature of the mandate (B2C or B2B), we may process the following categories of personal data:
• Personal identification data (name, address, contact details)
• Contact details of corporate representatives and employees
• Contractual and project-related data
• Communication records (email, phone, documentation)
• Property and tenancy-related information
• Financial or credit-related documentation (where required)
• Viewing and handover documentation
• Website usage data (technical data, cookies)
4. Purpose and Legal Basis of Processing
Personal data is processed for the following purposes and legal bases:
a) Contract Initiation and Performance
(Art. 6(1)(b) GDPR)
• Execution of relocation and office search mandates
• Communication with landlords, property owners, brokers and property managers
• Preparation and coordination of lease agreements
• Participation in negotiations and handover procedures
b) Legitimate Interests
(Art. 6(1)(f) GDPR)
• Efficient and structured mandate execution
• Contact with third parties involved in the leasing process
• Documentation and safeguarding of legal claims
• Improvement of internal processes and services
c) Legal Obligations
(Art. 6(1)(c) GDPR)
• Compliance with tax, accounting and statutory retention requirements
d) Consent
(Art. 6(1)(a) GDPR)
• Newsletter subscriptions
• Use of non-essential cookies and analytics tools
• Any processing requiring explicit consent
5. Data Sharing and Recipients
Personal data is disclosed only where necessary for mandate execution or required by law. Recipients may include:
• Landlords and property owners
• Real estate agents and brokers
• Property management companies
• IT and hosting providers
• Accounting and tax service providers
• Public authorities where legally required
Data is transferred strictly on a need-to-know basis and only for legitimate purposes.
6. Data Retention
Personal data is retained only as long as necessary to fulfil the purposes for which it was collected or as required by statutory retention periods.
If no longer required for contractual purposes, personal data is generally deleted no later than three (3) months after the last mandate activity, unless statutory retention obligations apply.
Under German commercial and tax law, certain documents must be retained for 6 to 10 years.
7. Cookies and Website Technologies
Our website uses cookies and comparable technologies to ensure technical functionality and improve user experience.
Where legally required, non-essential cookies (e.g., analytics tools) are used only based on user consent.
Users may adjust cookie preferences through their browser settings. Disabling cookies may limit certain website functionalities.
8. Data Subject Rights
Under the GDPR, individuals have the following rights:
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time
Requests may be submitted using the contact details provided above.
9. Automated Decision-Making and Profiling
We do not carry out automated decision-making within the meaning of Art. 22 GDPR.
Where data analysis or internal profiling is conducted, it serves solely operational or service optimization purposes and does not produce legal effects concerning individuals.
10. Right to Lodge a Complaint
Data subjects have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of their residence or place of alleged infringement.
11. Application to Offers and Contracts
By accepting an offer or entering into a contractual relationship, clients acknowledge that they have read and understood this Privacy Policy in its current version.
Last updated: January 2026