Privacy Policy

The protection of your data is important to us. Below we inform you about which personal data we process on this website, for what purposes and what rights you have.

Status: January 2026

1. Controller

Immowoo Group GmbH
Nördliche Münchner Str. 9 c
82031 Grünwald, Germany
Email: info@fotoestate.de

2. General Information

Personal data is all data with which you can be personally identified. We only process data insofar as this is necessary to provide this website, to process your request or to fulfill legal obligations.

3. Processed Data (Data Categories)

  • Server Logs: IP address, date/time, visited page/URL, referrer URL, browser/user agent.
  • Contacting us: If you contact us (e-mail, phone or inquiry form), we process your details to handle your request.
  • Inquiry Form (Lead Funnel): Depending on the input e.g. name, e-mail, phone number, company as well as property information.
  • Technical Data: Device and connection information necessary for the stable delivery and security of the website.

4. Purposes & Legal Bases

  • Operation of the website (Art. 6 Para. 1 lit. f GDPR)
  • Answering inquiries / pre-contractual measures (Art. 6 Para. 1 lit. b GDPR)
  • Fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR)

If we require your consent in individual cases (e.g. for optional marketing/tracking services), the processing is based on Art. 6 Para. 1 lit. a GDPR.

5. Hosting & Server Log Files

When you visit this website, the hosting provider and our systems automatically collect information in so-called server log files. The processing is necessary to technically provide the website, ensure system security and detect abuse. The legal basis is Art. 6 Para. 1 lit. f GDPR.

This data is not merged with other data sources. Log data is generally only stored for as long as necessary for security reasons.

6. Contact & Inquiry Form

If you contact us by email, phone or via the inquiry form, we process the information you provide to answer your inquiry and, if necessary, implement pre-contractual measures. The legal basis is Art. 6 Para. 1 lit. b GDPR (initiation/fulfillment of a contract) as well as Art. 6 Para. 1 lit. f GDPR (efficient processing of customer inquiries).

7. Cookies, Local Storage & Consent

We use technical mechanisms that are necessary for the operation of the website (e.g. session/security functions). Tracking or marketing cookies are not used without your consent.

8. Recipients & Processors

Your data is generally only processed internally by us. Insofar as we use service providers (e.g. hosting, IT service providers), this is done on the basis of an order processing contract in accordance with Art. 28 GDPR.

9. Third Country Transfer

If data is transferred to countries outside the EU/EEA within the scope of using service providers, this is only done in compliance with the requirements of Art. 44 et seq. GDPR (e.g. adequacy decision, standard contractual clauses).

10. Storage Duration

We only store personal data for as long as is necessary for the respective purposes. We delete inquiry and communication data as soon as processing is complete and there are no statutory retention requirements.

11. Your Rights

You have the following rights regarding your data:

  • Information / Correction / Deletion: You can request information (Art. 15 GDPR) as well as correct incorrect data (Art. 16 GDPR) or have it deleted (Art. 17 GDPR).
  • Restriction / Data Portability: You can have processing restricted (Art. 18 GDPR) and request data portability (Art. 20 GDPR).
  • Objection: You can object to processing for reasons arising from your particular situation (Art. 21 GDPR).
  • Revocation & Complaint: You can revoke your consent at any time with effect for the future (Art. 7 Para. 3 GDPR). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

For any concerns regarding data protection, please write to us at info@fotoestate.de.

12. Security (TLS/SSL)

This website uses TLS encryption to protect data transmissions. You can usually recognize a reliable encrypted connection by the https:// address in the browser bar.

13. Changes to this Privacy Policy

We adapt this privacy policy if the legal situation, the website or our processes change. The currently published version applies.

Data Security: How We Protect Your Building Data

When developers, portfolio owners and agencies work with FotoEstate, they entrust us with sensitive information – from confidential building plans (CAD/BIM) and financing documents to detailed LiDAR scans of occupied buildings. This privacy policy explains the legal framework for using the website. This supplementary guide additionally describes how we protect spatial data and image material in the business client area.

1. GDPR compliance in the creation of digital twins

The recording of a building using laser scanning (e.g. Matterport) or classic architectural photography entails inherent data protection challenges, particularly in the rented commercial or residential sector. A precise 3D scan not only captures the geometry of the room, but potentially also whiteboards with company secrets, server room configurations or family photos in residential properties.

We have established strict procedures to comply with the General Data Protection Regulation (GDPR). Before a digital twin is published or passed on to potential buyers, the material goes through multi-stage anonymization. With AI support and manual quality control, faces, license plates, screen contents and other personal data are irreversibly obscured. This lets you use the material with full legal certainty in your data rooms or in public marketing.

2. Secure hosting and cloud architecture in Europe

Processing terabytes of raw data – huge point clouds, high-resolution drone videos or uncompressed RAW files – requires a powerful IT infrastructure. For many portfolio owners (such as banks or insurers), storage on insecure servers outside the EU is out of the question.

FotoEstate relies on a redundant cloud infrastructure whose data centers are geographically localized in Europe and subject to strict ISO standards (e.g. ISO 27001). Data transfer between your systems and our production servers for Computer Generated Imagery (CGI) and virtual staging takes place exclusively via encrypted connections (end-to-end encryption). This ensures that exclusive project developments are treated strictly confidentially prior to the official market launch (pre-sales phase).

3. Transaction security in NPLs and share deals

In sensitive market phases, such as the handling of non-performing loans (NPL) or discreet off-market transactions, absolute discretion is the top priority. Any data leak can severely weaken the negotiating position of the parties involved. Our services are designed to fit seamlessly into the restrictive requirements of legal due diligence audits.

We apply strict access control to all delivered files and tours. You keep full control over who accesses which virtual tour or floor plan data and when. Password-protected links, time-limited access and approvals restricted to specific networks are part of our standard for sensitive properties.

  • NDAs as standard: Confidentiality agreements are mandatory for all our staff and affiliated photographers.
  • Data Sovereignty: Upon completion of a CGI or scanning project, we guarantee the complete deletion of the raw data from our systems upon request.
  • Secure onboarding: API interfaces to your existing CRM and ERP systems meet the highest authentication standards (OAuth 2.0).

4. Measuring marketing success without compromises

Wide reach and strict data protection don't have to be a contradiction. We help portfolio owners and agents measure the success of their real estate marketing without taking legal risks. We proactively advise you on the privacy-compliant integration of analytics tools (e.g. Google Analytics 4, Meta Pixel) into our interactive exposés and web apps – so you can see, with legal certainty, what your campaigns deliver.

FotoEstate does not see itself as a mere supplier of images, but as a reliable partner to the real estate industry. Careful, legally compliant handling of your building data is the foundation on which we jointly develop solutions that measurably increase the value of your properties. Read our privacy policy for details on your rights and our technical safeguards. Start your project inquiry now.