data protection policy


- www.jonathanvandamme.com -

Within the use of this website we, as the data controller, collect and store the data you provided as long and so far this is necessary to fulfil the specified purposes and legal obligations. In the following we will inform you what data is involved, how the data is processed and what rights you have in this regard.

According to Article 4 no. 1 General Data Protection Regulation (GDPR) personal data means any information relating to an identified or identifiable natural person (in the following „person concerned or user“).

1.          Name and contact data of the data controller  

This Data Protection Policy covers data processing on the website www.jonathanvandamme.com by:

Vandamme GmbH

Stallschreiberstr. 27,,

10179 Berlin

(in the following „Vandamme“)

E-Mail:              j.vandamme@jonathanvandamme.com

Telephone:       +49 (0)157 77 68 94 90

You can always reach out directly to us if you have any questions about data protection law or about your rights as a data subject via email to j.vandamme@jonathanvandamme.com.

2.         Collection and storage of personal data and also nature and purpose and their use 

a)         When visiting the website 

You can access the website www.jonathanvandamme.com without disclosing your identity. The browser on your end device automatically sends information to our website server (e.g. IP address of the querying computer, date and time of the access, name and URL of the accessed file, browser type and version and also further information sent by the browser (such as your computer’s operating system, the name of your access provider, geographical origin, etc.). 

This information, which also includes your ip-address, is temporarily stored in a log file. The following information is collected without any action on your part and deleted automatically after 7 days.

We process these data to ensure trouble-free connection to the website, comfortable use of our website, for evaluating system security and stability and also for further administrative purposes.

The legal foundation for the data processing is Art. 6 Subs. 1 Sentence 1 lit. f GDPR. Our legitimate interest follows from the above purposes for the data collection.

Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we also use cookies and analytics services during visits to our website. Further explanations can be found under section 4 and 5 of this Data Protection Policy.

b)         Using our contact forms

You can use the forms provided on the website to contact us.  We use following forms:

-       Contact form

-       Property request forms

For the use of the contact form, the following data is required, without exception:

·      your first name and last name,

·      a valid e-mail address,

·      your phone number,

·      your specific question or message.

For the use of the property request form, the following data is required, without exception:

·      your first name and last name,

·      a valid e-mail address,

·      your phone number,

·      your specific question or message.

We process the aforementioned data for the following purposes:

·      to identify you and

·      to answer your question.

Additionally, you can voluntarily provide your last for personal response.

Data is processed upon placement of your inquiry, and such processing is required for the above purposes to fulfil the contract and pre-contractual actions in accordance with Art. 6 Subs. 1 Sentence 1 lit. b GDPR. Data from contact inquiries is also processed on the basis of our legitimate interests per Art. 6 Subs. 1 Sentence 1 lit. f GDPR. These interests proceed from the aforementioned purposes.

c)         When registering for our newsletter 

In so far as you have expressly consented under Art. 6 Subs. 1 Sentence 1 lit. a GDPR, we will use your email address to regularly send you our personalised newsletter. Providing an email address is sufficient for receiving the newsletter. 

Cancellation is possible at any time, e.g. via a link at the end of every newsletter. Alternatively, you can cancel at any time by sending an email to email address.

d) When submitting your information through a lead form on Facebook Ad, where you submit information about your:

·      your first name and last name,

·      a valid e-mail address,

·      your phone number.

3.         Transfer of data 

a)         Webhosting

For the provision of this website, we use the web hosting service Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8 Ireland (hereinafter “Squarespace”)

The offer of the website requires the commissioning of a webhosting service. 

The legal foundation for the utilization of Squarespace is Art. 6 Subs. 1 Sentence 1 lit. f GDPR due to our legitimate economic interest to make our offer available on this website. In connection with the hosting Squarespace collects data in our behalf, which accrues while the use of the website. 

We have concluded a data processing agreement with Squarespace. Through this agreement the service provider ensures, that he processes the data in accordance with the General Data Protection Regulation and ensures the protection of the data subject rights. 

b)         MailChimp

The Rocket Science Group LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (hereinafter"MailChimp"). MailChimp is a service with which, among other things, the dispatch of newsletters can be organized and analyzed. If you have entered data through this website for the purpose of newsletter subscription (e.g. e-mail address) or for the purpose of getting in contact with us through contact form or property request form, these will be stored on the servers of MailChimp in the USA. MailChimp is subject to the EU-US Privacy Shield so that an adequate level of data privacy is ensured. In addition, we have concluded a contract processing contract with MailChimp. Through this agreement, MailChimp assures that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the data subject's rights.

With MailChimp we can measure and evaluate the behavior of our newsletter recipients. This includes the opening, clicking, bouncing, delivery, unsubscribe and conversion rates. The evaluation is also carried out by so-called web beacons. These are pixel-sized graphics files that are implemented in the email. Web beacons collect information such as IP address, browser type / version, email client, and time of retrieval. It can also be tracked by who opens the email and clicks on links contained therein. The evaluation of user behavior is done to measure the success of the email campaigns and to improve the offer of MailChimp.

If you have problems viewing the e-mail program or retrieving the privacy policy, you can link to the MailChimp website. Upon submission, MailChimp will use web bacons, cookies, tracking and targeting tools from its personal data processing partners. We have no influence on this data processing. For more information about privacy related to MailChimp, please refer to their Privacy Policy.

c) To developers or apartment owners.

Your last name can be given to developers or apartment owners in order to make Kundenschütz (Client protection), according with our contracts with the apartment owners or developers.

d)         For other purposes 

Your personal data will not be transferred to third parties for purposes other than those specified below. We will only transfer your personal data to third parties, if:

·       you have expressly given your consent pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR;

·       is legally permitted and according to Art. 6 Subs. 1 S. 1 lit. b GDPR necessary for executing contractual relationships with you your personal data may be communicated to third parties;

·       in cases where transfer of your data is necessary for compliance with a legal obligation pursuant to 6 Para. 1 S. 1 lit. c GDPR;

·       it is required pursuant to Art. 6 Subs. 1 S. 1 lit. b GDPR in order to assert or defend against claims or exercise legal rights and there are no grounds to assume that you have a prevailing legitimate interest in non-disclosure of your data.

4.         Cookies 

We use cookies on our website. These are small files that your browser automatically creates and saves on your end device (laptop, tablet, smartphone or suchlike) when you visit our website. Cookies do not cause any harm to your computer and do not contain any viruses, trojans or other malware.

The cookie stores information which arises in conjunction with the specifically used end device. This does not mean, however, that this gives us direct knowledge of your identity.

Cookies are used on the one hand so that we can make the use of our offerings more pleasant for you. Therefore, we use session cookies to recognise that you have already visited individual pages of our website.

In addition, we use temporary cookies saved on your end device for a certain defined period to optimise user friendliness. If you visit our website again to use our services, it is automatically recognised that you were already here before and which entries and settings you made so that you do not have to repeat them.

On the other hand, we use cookies to compile statistics on the use of our website and to evaluate the optimisation of our offerings for you (see section 5). These cookies enable us to automatically recognise that you were here before the next time you visit our website. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are required for the stated purposes to protect our justified interests and also of third parties under Art. 6 Subs. 1 Sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. You can configure your browser, however, so that no cookies are saved on your computer or a message always appears before a new cookie is created. Complete deactivation of cookies can, however, lead to you not being able to use all the functions of our website.

5.         Analytic tools 

The following tracking and targeting measures which we use are carried out on the basis of Art. 6 Subs. 1 Sentence 1 lit. f GDPR.

With the deployed tracking measures we want to ensure an appropriate design and continuous optimisation of our website. On the other hand, we use tracking measures to compile statistics on the use of our website and to evaluate the optimisation of our offerings for you.

Via the deployed targeting measures we want to ensure that you only see advertising tailored to your actual or presumed interests on your end devices.

These interests are to be considered as justified within the meaning of the aforementioned regulation.

The pertinent data processing purposes and data categories can be found in the corresponding tracking and targeting tools.

a) HubSpot CRM

We use HubSpot, a service of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA. This is an integrated software solution that enables us to control our online marketing activities. Therefore cookies are utilized (see point 4) and possibly further automatically generated information about your use of our website are evaluated by HubSpot on our behalf. These cookies lose their validity after 13 months. In addition to its use as a website reporting tool, we also use HubSpot for our e-mail marketing, our content management and as a customer relationship management tool (CRM). At the same time, HubSpot produces various reports on our behalf in order to optimize our website.

The processing is carried out on our behalf. This ensures that HubSpot processes the data in accordance with the GDPR and ensures the protection of the data subject's rights. HubSpot is a US-based software company with a representative in Ireland. However, it cannot be ruled out that the information generated by the cookie about your use of this website is transmitted to and stored by a server of HubSpot in the USA. Therefore, HubSpot is certified under the terms of the EU-US Privacy Shield Framework and is governed by the TRUSTe's Privacy Seal and the US-Swiss Safe Harbor Framework, which ensures the security of your data.

If you do not want this, you can reject the processing of your data at any time. In addition, you can block cookies by a corresponding setting in your browser. You may also email us at office@jonathanvandamme.com if we should not use HubSpot in connection with your email address.

For more information on privacy at HubSpot, please refer to their Privacy Policy.

b)         Google Analytics 

We use Google Analytics, a web analytics service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google") for the purpose of creating a website experience tailored to users' needs and continuing optimisation of our website. In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated through the use of cookies about your usage of this website such as

·      web browser type / version,

·      operating system used,

·      referrer URL (the previously visited website),

·      host name of the accessing computer (IP address),

·      time of server request,

are transmitted to and stored on a server belonging to Google in the USA. Google is subject to the EU-US Privacy Shield so that an adequate level of data privacy is ensured. We have also concluded a data processing contract with Google for the use of Google Analytics. In this contract Google undertakes to process data in accordance with the General Data Protection Regulation and to ensure that the rights of the persons concerned are protected.

The information will be used for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the purposes of market research and ensuring an internet experience tailored to users' needs.

Furthermore, this information may be transferred to third parties to the extent that this may be legally required or those third parties process these data on our behalf. Under no circumstances will your IP address be associated with any other data held by Google. The IP addresses will be anonymised so that attribution is not possible (IP masking).

You can block the installation of cookies by selecting the appropriate settings in your web browser software; however, please note that if you do so, you may not be able to use the full functionality of this website.

You can also block the collection of the data generated by the cookie and relating to your usage of our website (including your IP address) and the processing of such data by Google by downloading and installing a web browser add-on.

An opt-out cookie is created which prevents the tracking of your data when you visit this website in the future. The opt-out cookie applies only to the web browser you are using and only to this website and will be stored on your end device. If you delete the cookies on this web browser, you will have to set another opt-out cookie.

More information on data privacy in relation to Google Analytics can be found on the Google Analytics Help page.

c)         Google Tag Manager 

We use the Google Tag Manager tool provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). Google Tag Manager helps us to manage the tools about which we inform users in this Data Privacy Statement. You can find more details regarding these tools in the information on the respective tool.

The tag manager tool itself (which implements the tags) is a cookie-free domain. The tool controls the triggering of other tags which again may collect data under certain circumstances. Google Tag Manager will not access those data. If deactivation was made at the domain or cookie level, this continues to apply to all tracking tags which are deployed with Google Tag Manager.

You can find more information about Google Tag Manager in the use policy for this product.

d)         Google AdSense

We use Google AdSense, a service for integrating advertisements provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google AdSense"). 

Google AdSense uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on these pages.

The information generated by cookies and web beacons on the use of this website (including your IP address) and the delivery of advertising formats are transmitted to and stored by Google on servers in the USA. Google is subject to the EU-US Privacy Shield so that an adequate level of data privacy is ensured.The created information may be shared by Google with Google affiliates. However, Google will not merge your IP address with other data you have stored.

You can also block the collection of the data generated by the cookie and relating to your usage of our website (including your IP address) and the processing of such data by Google by downloading and installing a web browser add-on

More information on data privacy in relation to Google AdSense can be found under the following link.

e)         Facebook Custom Audience (Pixel)

In addition, we also use Facebook website custom audiences of Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland). This is a marketing service at Facebook. It enables us to have individually co-ordinated and interest-based advertising on Facebook shown to certain groups of pseudonymised visitors to our website who also use Facebook.

A Facebook custom audience pixel is integrated in our website. This is a Java Script code via which personal data concerning the use of the website is stored. This in-cludes your IP address, the browser used as well as the originating and destination page. This information is transmitted to Facebook servers in the USA. Facebook is subject to the EU-US privacy shield, so that an appropriate data level is guaranteed.

There, an automated comparison will be made to ascertain whether you have stored a Facebook cookie. Via the Facebook cookie, it will automatically be established whether you belong to the target group relevant for us. If you belong to the target group, you will be shown corresponding adverts by us on Facebook. During this process, you will not be personally identified, either by us or by Facebook, through the comparison of the data.

You can also prevent the use of Facebook custom audiences by clicking on this link. Through this opt-out, any future recording of your personal data when visiting this website is prevented.

You can find more information about data protection of Facebook in the data policy of Facebook.

6.         Data subject rights 

You have the right: 

·       pursuant to Art. 7 Subs. 3 GDPR to withdraw your consent to us at any time. This means that we may no longer continue processing the data based on that consent for the future; 

·       pursuant to Art. 15 GDPR to demand information about your personal data we process. In particular, you can demand information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data were or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction or revocation of processing, the existence a right to lodge a complaint, the origin of your data, in so far as not collected by us, and also about the existence of automated decision-making including profiling and where appropriate meaningful information about to details thereof;

·       pursuant to Art. 16 GDPR to demand immediate rectification of inaccurate or completion of your personal data saved with us;

·       pursuant to Art. 17 GDPR to demand deletion of your personal data saved with us, in so far as the processing is not required for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;

·       pursuant to Art. 18 GDPR to demand restriction of processing of your personal data, in so far as you contest the accuracy of the data, the processing is unlawful but you oppose deletion and we no longer need the data but you do to establish, exercise or defend legal claims or you have objected to processing pursuant to Art. 21 GDPR;

·       pursuant to Art. 20 GDPR to receive your personal data you have provided us in a structured, commonly used and machine-readable format or to demand transmission to another controller;

·       pursuant to Art. 77 GDPR to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority for your habitual residence or place of work or our registered offices.

9.          Right to object pursuant to  Art. 21 GDPR 

In so far as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Subs. 1 Sentence 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, in so far as there are grounds arising from your particular situation or it relates to objection to direct marketing. In the latter case, you have a general right to object which we shall heed without the stating of a particular situation; This also applies to profiling based on those provisions as defines in Art. 4 no 4 GDPR.

If you submit an objection we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defence of legal claims.

If your objection is to the processing of data for direct marketing purposes, we shall cease processing immediately. In this case it is not necessary for you to assert a particular situation. This also applies to profiling to the extent that it is related to such direct marketing.

If you want to exercise your right to object, simply send an email to email address.

10.       Data Security 

All the data you personally transfer will be sent encrypted with the customary and secure TLS standard (Transport Layer Security). TLS is a secure and proven standard, which is also used for online banking, for example. You can recognise a secure TLS connection inter alia by the "s" appended to the http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, de-struction or against unauthorised access by third parties. Our security measures are continually monitored and improved to reflect technological developments.

11.       Actuality of and changes to this Data Protection Policy

This Data Protection Policy is the latest version and was last amended as of 15 October 2018.

The further development of our website and offers on it or changes in statutory or public-authority requirements many render it necessary to amend this Data Protection Policy. The latest version of Data Protection Policy can be downloaded and printed out at any time from the website under Data Protection Policy.

Data Collection and Processing Purposes
Vandamme GmbH collects and processes personal data exclusively for lawful purposes, including but not limited to:

  • Fulfilling real estate consultation requests and service delivery.

  • Facilitating direct communication with clients and responding to inquiries.

  • Conducting analysis to improve service offerings (using anonymized data where applicable).

Legal Basis for Data Processing
Processing of personal data is conducted based on the following legal grounds:

  1. Consent (Art. 6(1)(a) GDPR): Processing is based on the user’s explicit consent, obtained before any non-essential data collection or processing.

  2. Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for the legitimate interests of Vandamme GmbH in enhancing and developing its services, provided such interests are not overridden by the data subject’s rights.

  3. Contractual Necessity (Art. 6(1)(b) GDPR): When processing is required to fulfill our contractual obligations to users, including pre-contractual measures.

Data Retention and Deletion
Vandamme GmbH retains personal data only as long as necessary to achieve the purposes for which it was collected or as required by law. Data will be securely deleted or anonymized when no longer required.

Data Sharing and Third-Party Access
Vandamme GmbH may share personal data with trusted partners, including Infin-Estate GmbH (for joint venture services) and RealEstateCRM (for data management and client communication), in strict compliance with GDPR requirements. All third parties involved in data processing are bound by contractual obligations to maintain data confidentiality and process data exclusively as per Vandamme GmbH’s instructions.

Data Subject Rights
Under GDPR, users have the following rights regarding their personal data:

  • Right of Access (Art. 15 GDPR): Request a copy of your personal data and details about its processing.

  • Right to Rectification (Art. 16 GDPR): Correct any inaccurate or incomplete personal data.

  • Right to Erasure (Art. 17 GDPR): Request deletion of personal data where no overriding legal reason for its retention exists.

  • Right to Restrict Processing (Art. 18 GDPR): Request that data processing be restricted under specific circumstances.

  • Right to Data Portability (Art. 20 GDPR): Receive a copy of personal data in a structured, machine-readable format, and have it transmitted to another data controller if technically feasible.

  • Right to Withdraw Consent (Art. 7(3) GDPR): Withdraw consent to data processing at any time without affecting the lawfulness of processing based on consent before its withdrawal.

  • Right to Object (Art. 21 GDPR): Object to data processing based on legitimate interests, including profiling, unless Vandamme GmbH demonstrates compelling legitimate grounds for the processing.

How to Exercise Your Rights
If you wish to exercise any of the above rights or have questions about this policy, please contact us at info@vandamme.com. Additionally, you have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Changes to this Addendum
Vandamme GmbH reserves the right to modify this privacy policy at any time. Changes will be updated on our website, and, where applicable, significant updates will be communicated directly to data subjects.

This Data Protection Policy is the latest version and was last amended as of 30 October 2024.