Legal
Privacy Policy
Last updated: May 14, 2026 · Controller: baugrund.com, Seeshaupt, Germany
1. Data Controller (Art. 13 (1)(a) GDPR)
The controller responsible for data processing on this website is:
82402 Seeshaupt
Deutschland
Phone: +49 8171 48 30 13
E-Mail: mail@baugrundankauf.de
Web: baugrund.com
For privacy-related inquiries, please contact: office@kreativdock.com
2. Legal Basis for Processing (Art. 6 GDPR)
- Art. 6(1)(a)Consent – for optional map services (Mapbox), loaded only after your explicit consent.
- Art. 6(1)(b)Contract performance – processing your address and contact data to create a purchase offer at your request.
- Art. 6(1)(c)Legal obligation – where statutory retention or documentation duties apply.
- Art. 6(1)(f)Legitimate interests – processing server log files to ensure secure and error-free operation.
3. Server Log Files
When you visit our website, the web server (hosted by Strato AG, Germany) automatically records the following data: IP address, date and time of access, requested URL, HTTP status code, data volume, referrer URL, and browser type/operating system (User-Agent).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure website). Log files are deleted after 30 days.
4. Land Valuation Tool
When you use the valuation tool at /bewerten, the following data is processed:
- Address entered – forwarded to Nominatim (OpenStreetMap) for geocoding
- Geographic coordinates – sent to the BORIS API, Overpass API, and Claude (Anthropic)
- Derived plot data (land value, usage type, GRZ/GFZ) – calculated server-side and not stored permanently
Legal basis: Art. 6(1)(b) GDPR. Analysis results are held only in server memory for the duration of your session and are not persisted.
5. Contact Form & Lead Data
When you submit the offer form, we process: name, email address, phone number (optional), plot address, plot size, zoning and development information, indicative purchase price, and timestamp.
Your data is stored in a secured database on our hosting server (Strato AG, Germany) and used exclusively to process your enquiry. No third-party marketing sharing occurs.
Legal basis: Art. 6(1)(b) GDPR. Retention: up to 6 months after processing; up to 10 years if a purchase contract is concluded (HGB/AO).
6. Third-Party Services
Mapbox (Interactive Maps)
Mapbox, Inc., Washington DC, USA. Maps are only loaded after your explicit consent. Mapbox is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Privacy policy: mapbox.com/legal/privacy
Claude AI – Anthropic (Plot Analysis)
Anthropic, PBC, San Francisco, CA, USA. The AI analysis transmits the plot address, coordinates, and anonymised infrastructure data server-side to the Claude API. No personal user data (name, email, IP) is sent to Anthropic. Anthropic complies with GDPR via standard contractual clauses (Art. 46(2)(c) GDPR). Privacy policy: anthropic.com/privacy
OpenStreetMap / Nominatim & Overpass API
Used for address geocoding and infrastructure analysis. Only coordinates are transmitted; no personal data is involved. Servers located in the EU.
Strato AG (Hosting & Email)
All data is hosted on Strato AG servers located in Germany. A data processing agreement (Art. 28 GDPR) is in place.
7. Data Security (Art. 32 GDPR)
We use TLS/HTTPS encryption for all connections, SSH key-based server access, environment-variable management of API keys, and data minimisation principles. All core data is hosted in Germany.
8. Your Rights as a Data Subject
Under the GDPR you have the following rights. To exercise them, contact: mail@baugrundankauf.de
Access (Art. 15)
Right to obtain confirmation and a copy of the personal data we process about you.
Rectification (Art. 16)
Right to have inaccurate or incomplete data corrected without undue delay.
Erasure (Art. 17)
"Right to be forgotten" – where no legal retention obligation applies.
Restriction (Art. 18)
Right to restrict processing, e.g. while disputing accuracy.
Data portability (Art. 20)
Right to receive your data in a structured, machine-readable format.
Objection (Art. 21)
Right to object to processing based on Art. 6(1)(f) (legitimate interests) at any time.
Withdrawal of consent (Art. 7(3))
You may withdraw consent (e.g. for Mapbox) at any time with future effect.
We respond to requests within 4 weeks (Art. 12(3) GDPR). Identity verification may be required.
Updates: This privacy policy will be updated when processing practices change materially. Last updated: May 14, 2026.