Legal

Privacy

This is a translation provided for convenience. In case of any discrepancy between this English version and the German version, the German version shall prevail.

This policy informs you, pursuant to Art. 13 GDPR, how we process personal data when you visit this website or contact us by e-mail. It describes this website only. Our TwinEstate platform and the websites of other companies have their own privacy policies.

Controller

The controller within the meaning of Art. 4 no. 7 GDPR is:

TwinOne AG
An der Gehespitz 100
63263 Neu-Isenburg
Germany
E-mail: [email protected]

The authorised representatives are listed in the legal notice above.

Data Protection Officer

We have not appointed a data protection officer. We are currently not required to do so under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act). For any data protection matter, please contact us at the address given above.

General Principles of This Website

This website is deliberately built to minimise data. We want you to be able to understand what happens here and what does not:

  • We do not set any cookies for analytics, marketing or audience measurement purposes, and we do not embed tracking pixels.
  • We do not use any analytics or tracking tool, neither our own nor a third party's.
  • We do not load any content from external servers: no fonts from font services, no maps, no videos, no scripts, no social media buttons. All fonts and images are hosted on our own server.
  • There is no contact form, no newsletter and no user account. We do not accept any input from you via this website.
  • No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Processing When You Access the Website

When you access this website, your browser transmits technically necessary data to the server delivering the page. This is in particular:

  • your IP address
  • the date and time of the request
  • the file or page requested
  • the volume of data transferred and confirmation of whether the request succeeded
  • the browser you use, including version and operating system
  • the previously visited page, where your browser transmits this information

This data is technically necessary for the page to be delivered to your device at all, and it serves the security and stability of our service, in particular the mitigation of automated attacks.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing the website technically, ensuring its secure operation and defending against attacks.

We do not operate a web server of our own and we do not keep server logs of our own. This connection data is processed exclusively by our hosting provider, named in the following section. We do not access this data and do not combine it with any other data.

Hosting and Delivery by Cloudflare

This website is delivered via Cloudflare Pages, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Cloudflare stores and processes the connection data described in the preceding section on our behalf, in order to deliver the pages and to protect the service against overload and automated attacks. The service operates a global server network; requests originating in Europe are regularly served from data centres in the European Union. Processing in the United States of America cannot be ruled out.

We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. On this basis, transfers to the United States are covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR. In addition, Cloudflare has agreed to the European Commission's Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR.

We point out that, despite these safeguards, access by United States authorities to data processed in the United States cannot be entirely ruled out under the law applicable there.

To protect against automated access, Cloudflare may place a technically necessary security marker in your browser, for example a short-lived cookie used to distinguish human from automated traffic. It serves solely the security of this website, contains no identifier for advertising or analytics purposes, and is not used to recognise you across websites. Such a marker is only set to the extent that the protective function is triggered in the individual case; in the regular operation of this website this is not the case.

Further information from the provider is available in its privacy policy at https://www.cloudflare.com/privacypolicy/

Storage of Your Display Preference on Your Device

This website can be displayed in a light and a dark appearance. If you switch the appearance yourself, the website stores your choice in your browser's local storage so that the page looks the way you set it the next time you visit.

A single entry is stored:

  • key: twinone-theme
  • value: light or dark

The entry contains no identifier by which you could be recognised, and no further information. It is stored and evaluated exclusively in your browser; it is never transmitted to us or to any third party. As long as you do not switch the appearance yourself, nothing is stored.

The storage takes place without your consent pursuant to § 25 para. 2 no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), because it is strictly necessary in order to provide you with the function you have expressly requested. For this reason, this website does not display a consent banner.

The entry remains stored until you delete it. You can remove it at any time via your browser settings by deleting the data stored for this website. This causes you no disadvantage; the website continues to work in full and will then revert to the appearance specified by your system.

Because this information never reaches us, we do not process any personal data in this respect.

Contacting Us by E-Mail

This website contains no forms. You can reach us by e-mail at the address given in the legal notice. Clicking the e-mail address merely opens your own e-mail program; no data is transmitted to us in doing so.

If you write to us, we process the information contained in your message, that is your e-mail address, the subject line, the content of your message and any further information you choose to provide. We use this data solely to handle and answer your request.

The legal basis is Art. 6 para. 1 lit. b GDPR insofar as your message relates to the initiation or performance of a contract, and otherwise Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in answering enquiries addressed to us.

Your message is stored with our e-mail service provider, which we have engaged as a processor pursuant to Art. 28 GDPR.

We delete your message once your request has been conclusively handled and no statutory retention obligations apply. Retention obligations under commercial and tax law pursuant to § 257 HGB (German Commercial Code) and § 147 AO (German Fiscal Code) may require longer retention; in that case the data is restricted from further processing.

Please note that the transmission of e-mail over the internet is not consistently encrypted. For confidential information, please agree a secure transmission channel with us in advance.

Recipients of Your Data

The only recipients of personal data are:

  • our hosting provider, for the delivery of this website
  • our e-mail service provider, if you write to us

Both are bound to us as processors pursuant to Art. 28 GDPR and may process the data only in accordance with our instructions. Beyond this, we disclose personal data only where we are legally obliged to do so. We do not sell data and do not pass it on for advertising purposes.

Links to Other Websites

This website links to our own TwinEstate platform at twin-estate.com. No other external websites are linked.

As long as you do not click such a link, no data whatsoever is transmitted to the respective provider. Only when you follow the link do you leave this website. Responsibility for the data processing that takes place there lies solely with the respective provider, and its privacy policy applies.

Retention Periods

We store personal data only for as long as is necessary for the respective purpose:

  • connection data from accessing the website: in accordance with our hosting provider's specifications, as a rule a few days to weeks
  • your e-mail message: until your request has been conclusively handled, thereafter subject to statutory retention obligations
  • your display preference: only on your device and only until you delete it

Provision of Your Data

You are under no statutory or contractual obligation to provide us with personal data. Connection data arises unavoidably for technical reasons whenever any website is accessed. Whether you write to us beyond that is entirely your decision; if you do not, you suffer no disadvantage.

Your Rights

You have the following rights in relation to us:

  • access to information as to whether and which personal data we process about you, pursuant to Art. 15 GDPR
  • rectification of inaccurate data and completion of incomplete data, pursuant to Art. 16 GDPR
  • erasure of your data, pursuant to Art. 17 GDPR
  • restriction of processing, pursuant to Art. 18 GDPR
  • receipt of the data you have provided in a commonly used format and its transmission to another controller, pursuant to Art. 20 GDPR

An informal message to [email protected] is sufficient to exercise any of these rights. Exercising them is free of charge for you.

Your Right to Object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. f GDPR. On this website, this concerns the processing of connection data when a page is accessed, as well as the handling of enquiries that do not relate to the initiation of a contract.

If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Please address your objection informally to [email protected].

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. You may contact the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Postal address: Postfach 3163, 65021 Wiesbaden, Germany
Telephone: +49 611 1408-0
E-mail: [email protected]
Website: https://datenschutz.hessen.de

Data Security

This website is delivered exclusively over a TLS-encrypted connection, which you can recognise in your browser's address bar. We apply a strict Content Security Policy that technically prevents the loading of third-party content.

Changes to This Privacy Policy

We adapt this privacy policy when the legal situation or the technology of this website changes, for example because we add a new function. The version available here applies in each case. The date below shows when we last amended it.

Last updated: 2026-09-10