Legal

Privacy Policy

This privacy policy applies to the website casahero.de and all subdomains, the web application and the mobile app. It provides information under Art. 13/14 GDPR on the processing of personal data.

Status:: In force (version 1.0)
As of:: 4 August 2026

Only the German version is legally binding. This English version is provided for information only.

1. Controller

The controller within the meaning of the GDPR and the BDSG is: Elmi Pepaj – IT-Dienstleistungen (sole proprietorship), Wolfegger Str. 3, 88250 Weingarten, Germany. Email: datenschutz@casahero.de.

2. Data protection officer

No data protection officer has been appointed; there is no statutory obligation to do so. Please address data protection enquiries to datenschutz@casahero.de or by post to the address given above.

3. Role as processor

Where tenants (property managers, landlords) process personal data of their tenants and caretakers in the platform, the respective manager is the controller. CasaHero acts only as a processor within the meaning of Art. 28 GDPR. As a tenant, please refer to your property manager’s privacy policy.

4. Hosting and server log files

The platform is hosted on servers in the European Union ([hosting provider], location [country/city]). On every access, server log files are processed (truncated IP address, time, requested URL, status code, data volume, user agent, referrer). The legal basis is Art. 6 (1) (f) GDPR; deletion after 30 days.

5. Cookies and tracking

We use only technically necessary cookies (session, CSRF protection, cookie settings). We currently do not use optional cookies or analytics tools. Google Analytics is not used.

6. Recipients and third-country transfers

Recipients include hosting, email delivery, push notifications (Google Firebase Cloud Messaging) and error tracking (Sentry, EU region). Any third-country transfer to Google Firebase takes place on the basis of the EU standard contractual clauses (Art. 46 GDPR).

7. Retention period

Personal data is deleted as soon as the purpose ceases to apply and no statutory retention obligations apply (e.g. invoices 10 years under § 14b UStG / § 257 HGB / § 147 AO; login audit 90 days).

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise these rights, contact datenschutz@casahero.de. You also have the right to lodge a complaint with the competent supervisory authority ([name of authority]).

9. Security of data transmission

Transmission is encrypted via TLS. Stored data is additionally encrypted (AES-256) and hosted on servers in the EU.

This is a condensed overview of the key points. The full draft will be completed before approval.