Legal
Privacy policy
In short: no tracking cookies, no third-party advertising or analytics services. We only process what is needed to run the website and the details you send us yourself.
This English version is a translation for convenience. The German Datenschutzerklärung is authoritative. Datenschutzerklärung
As of 4 October 2026
1. Controller
A1 Asset One GmbH, Skalitzer Straße 34, 10999 Berlin. E-Mail: [email protected]. Further details in the legal notice.
Contact for data protection questions: [email protected]
2. At a glance
| What | How we handle it |
|---|---|
| Cookies and browser storage | We set no tracking or advertising cookies. Only when you choose it yourself does your browser remember two settings: the language in the cookie “a1-lang” (for one year, when you switch the language in the footer) and the light or dark display in local storage (“a1-theme”). Both stay on your device, we do not evaluate them, and you can delete them in your browser at any time. The legal basis is section 25(2) no. 2 TDDDG. |
| Access logs | Our web server keeps no access logs of your visit. |
| Fonts and content | Fonts are served from our server; no third-party content is loaded. Links to other websites only open when you click them. |
| Contact form | Only the details you enter, only for your enquiry. We delete enquiries once we no longer need them. |
3. Providing the website
When pages are requested, the server processes technically necessary data such as IP address, time, requested address and browser identification. Without these data the page cannot be delivered. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).
Hosting: The website runs at Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, in data centres in Frankfurt am Main. A data processing agreement under Art. 28 GDPR is in place with Google Cloud (Cloud Data Processing Addendum).
Cloudflare: The connection runs through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare protects the site against attacks and delivers it faster, processing the technical data mentioned above, also in the USA. Cloudflare is certified under the EU-US Data Privacy Framework; the EU standard contractual clauses apply in addition. The legal basis is Art. 6(1)(f) GDPR.
The transfer is encrypted throughout (TLS).
4. Contact form and enquiries
When you request advice using the form, we process your first and last name, your e-mail address, your message, the service requested (if selected), the page you came from, the page language, the time and the version of the privacy notice shown when you sent it.
We answer your enquiry and, where appropriate, make you an offer in the way you chose. The legal basis is taking steps prior to a contract at your request (Art. 6(1)(b) GDPR). If you enquire for an owners’ association or another person, the legal basis is our legitimate interest in answering the enquiry (Art. 6(1)(f) GDPR).
The controller is A1 Asset One GmbH. Advice and any offer come from the company of the group that provides the service requested. We pass your enquiry on to this company, which is itself responsible for further processing:
- Property management: owners’ associations, rental buildings and single units: RE SMART Management GmbH, Skalitzer Straße 34, 10999 Berlin
- Letting, sale and valuation of property: RE SMART Invest GmbH, Skalitzer Straße 34, 10999 Berlin
- Project management, construction and energy-efficient refurbishment: A1 Immobilienentwicklung GmbH, Skalitzer Straße 34, 10999 Berlin
- Brokering of property financing and insurance: RE SMART Finance GmbH, Skalitzer Straße 34, 10999 Berlin
The enquiry service stores nothing: it checks your details and sends them via the delivery service Mailgun as an e-mail to our mailbox [email protected]. Depending on your request, you receive a reply or an offer from us by e-mail.
Service providers (processors under Art. 28 GDPR)
- Storage of enquiries: Your enquiry is only stored as an e-mail in the mailbox [email protected], not in a database of the website.
- E-mail delivery: Mailgun Technologies, Inc. (a Sinch group company), 112 E Pecan St. #1135, San Antonio, TX 78205, USA, as processor under a data processing agreement with A1 Asset One GmbH. We use the EU region (servers in the EU) via the sending domain mail.asset.one; open and click tracking is switched off. Access from the USA cannot be ruled out; the European Commission’s standard contractual clauses apply to it.
- Mailbox: the enquiry passes through Google Workspace (Google Cloud EMEA Limited, Dublin, Ireland) into the mailbox [email protected], which our team handles with Front App, Inc., USA; both are processors under data processing agreements (with Google: Google Workspace Data Processing Amendment). Access from the USA cannot be ruled out: Google LLC and Front App, Inc. are certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.
- Protection against automated requests: Cloudflare Turnstile (Cloudflare, Inc., see above) checks on submission whether a person is using the form, processing technical characteristics of your browser and your IP address. The legal basis is our legitimate interest in protecting the form against misuse (Art. 6(1)(f) GDPR).
Your enquiry is kept as an e-mail in the mailbox [email protected]. We keep your enquiry as long as we need it to handle it and for possible follow-up questions. After that we delete it unless statutory retention obligations apply. To withdraw your enquiry, an e-mail to [email protected] is enough; we then delete it immediately. If a contract is concluded, the retention periods of the responsible company apply.
Required are only first name, last name, e-mail address, your message and your contact request. Without these details we cannot answer your enquiry.
If you write to us directly or call, we process your details in the same way to answer your request and delete them after the same periods.
Enquiries through our enquiry page (l.asset.one)
The controller is A1 Asset One GmbH, Skalitzer Straße 34, 10999 Berlin, Germany. Contact for data protection questions: [email protected].
Which data, for what purpose, on what legal basis. When you request advice through l.asset.one, we process your answers (service requested, depending on the service the type of property, the time of sale, the purpose of the financing or the type of insurance, the number of units and the address of the property with street, house number, postcode and town), your name, your e-mail address, your phone number (if given), your message and the time. We also store where your visit came from (campaign tags from the link, the referring website as a domain, device type and the country that our network service provider derives from the IP address). We use these details to answer your enquiry and, where appropriate, to make you an offer. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract at your request). If you enquire for an owners’ association or another person, the legal basis is our legitimate interest in answering the enquiry (Art. 6(1)(f) GDPR). We use the details of origin to see which campaigns bring enquiries (Art. 6(1)(f) GDPR). Only the details marked in the form are required. Without them we cannot process your enquiry.
Address suggestions. So that you have to type less, we suggest streets in the address step. For this, our server sends the beginning of the street name and, if already entered, the postcode to the OpenPLZ API (STÜBER SYSTEMS GmbH, servers in Germany, open data © OpenStreetMap contributors), without the house number and without your IP address.
Passing on within the group. Advice and any offer come from the company of our group that provides the service requested: RE SMART Management GmbH (property management), RE SMART Invest GmbH (letting and sale), A1 Immobilienentwicklung GmbH (refurbishment and energy advice) or RE SMART Finance GmbH (brokering of financing and insurance), all Skalitzer Straße 34, 10999 Berlin, Germany. We pass your enquiry on to this company. It is itself responsible for further processing.
Service providers (processors under Art. 28 GDPR). The enquiry page runs on a server of Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, servers in Frankfurt am Main (Germany). The connection runs through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which processes technical data including your IP address, also in the USA. We inform our team of new enquiries by e-mail via Mailgun Technologies, Inc., USA, sending through the EU region to our mailbox at Front App, Inc., USA. Where data may reach the USA, the providers are certified under the EU-US Data Privacy Framework; the EU Commission’s standard contractual clauses apply in addition.
Retention. We keep your enquiry as long as we need it to handle it and for possible follow-up questions. After that we delete it unless statutory retention obligations apply. To withdraw your enquiry, an e-mail to [email protected] is enough. If a contract is concluded, the statutory retention periods of the responsible company apply.
Call-back. If you give a phone number, we call you only about this enquiry.
No cookies, statistics without an identifier. On l.asset.one we set no cookies and use no third-party analytics services. When the page is requested, our server counts where visitors come from (campaign, referring domain, device type, country), only as a daily total. While you use the assistant, the page reports to our own server which step was shown, which answer option was chosen, whether a field had an error and after what time (in rough bands) the page was left. These reports contain no identifier and no input from the text fields, and are only aggregated into daily totals. They cannot be linked to a person or to an enquiry. We use them to improve the assistant (Art. 6(1)(f) GDPR). We do not store your IP address. To protect against mass requests, we keep it briefly (at most ten minutes) in memory.
Temporary storage in your browser. So that your answers are kept when you reload the page or go back, your browser stores the answers you chose, the postcode and the town in the session storage of this tab (sessionStorage), but not the street, your name, e-mail address, phone number or message. The storage is deleted as soon as you submit the enquiry or close the tab. We do not read it for statistics, and it contains no identifier. This is strictly necessary for the enquiry assistant you requested (section 25(2) no. 2 TDDDG). We do not set cookies.
Your rights: access, rectification, erasure, restriction, data portability and objection (Art. 15–18, 20, 21 GDPR), and the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin. An e-mail to [email protected] is enough.
5. Banners in our e-mail signatures
A banner may appear below the signature in our e-mails, pointing to offers or information from the A1 Group. If you click on the banner, we record the time, the device type (computer or mobile device), which banner you clicked and which e-mail conversation the click belongs to. Via the conversation, we assign the click to a recipient group (for example owners, tenants, service providers, authorities), based on the contact details we hold. This is how we measure which banners are relevant to which recipients, and we show you suitable banners or none at all. We do not evaluate the display of the banner itself on a personal basis.
The legal basis is our legitimate interest in effective communication that is relevant to you (Art. 6(1)(f) GDPR). We delete the assignment of a click to a conversation as soon as it is no longer needed for the evaluation, at the latest after 12 months. You can object to this processing at any time, for example by e-mail to [email protected]. If you do not click on banners, no evaluation takes place.
6. Job offers
We read the job offers on the careers page from the public job portal at Personio when the website is built; visiting the careers page transfers nothing to Personio. Only when you click a position do you move to the website of Personio SE & Co. KG. The company advertising the position is responsible for your application; its privacy policy applies there.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). An informal e-mail to [email protected] is sufficient.
Right to object: where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.