1. Information on the collection of personal data

1.1.
In the following, we inform you about the collection of personal data when using our website. Personal data are all data
that can be related to you personally, e.g. name, address, e-mail address, etc.

1.2.
Pursuant to section 4 (7) GDPR (General Data Protection Regulation) the data controller is:
OTTO WULFF Projektentwicklung GmbH
Archenholzstrasse 42
22117 Hamburg
T. +49 40 736 24-0
M. info@otto-wulff.de

1.3.
When you contact us by letter, e-mail, telephone or via a contact form, the data provided by you (your e-mail address,
your name and telephone number, if applicable) will be stored by us in order to answer your questions. Data collected in
this context is deleted by us once its storage is no longer required or processing thereof is restricted in case of the data
being subject to legal retention obligations.

1.4.
If we entrust service providers with individual service roles on our behalf or wish to use your data for advertising pur￾poses, we will inform you in detail about the respective processes.

2. Your rights

2.1.
You have the following rights to us with regard to our processing of your personal data:
– the right to information
– the right to correction or deletion
– the right to restrict processing
– the right to object to processing
– the right to revoke consent given to processing
– the right to data portability

2.2.
You also have the right to lodge a complaint with the data protection supervisory authority relating to our processing of
your personal data.
The contact details of the data protection supervisory authorities can be found at the following link:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

3. Storage of data

3.1.
Every time you access our website, access data is stored in a log file on our provider’s server.

3.2.
For example, this record consists of your IP address, the date and time of the request, the name of the requested file,
the amount of data transferred and the access status, a description of the web browser and operating system used,
and the name of your internet service provider.

3.3.
This data is collected for technical reasons. Deletion will take place automatically after 14 days at the latest. The legal
basis for the collection of this data is section 6 (1) f GDPR. Our legitimate interest is the technically error-free presenta￾tion and optimisation of the website.

3.4.
This website uses WP Statistics. This server service does not read any information from your terminal and does not
store any information on your terminal. Only the server-side data is collected and anonymised and used to create
straightforward access statistics. No user profiles are created and no cookies are set. All data collected by WP Statis￾tics are stored completely anonymously and only on this web server. No data is shared with third parties or other bod￾ies. The legal basis is section 6 (1) 1 F) GDPR. The legitimate interests consist of checking the technical requirements
of response time behaviour, page loading times and server utilisation and, based on this, to ensure that the equipment,
programming and connection to the internet meets the expectations of the website user and guarantees secure and
reliable website operation.
The balancing of interests within the framework of section 6 (1) f GDPR has shown that the rights and freedoms of the
data subjects are not compromised by the type of processing described above and that the said interests constitute a
legitimate interest.

4. Data transfer
Your personal data will only be transferred to third parties if
– you have given your express consent to this in accordance with section 6 (1) a GDPR
– the transfer is necessary for the fulfilment of contractual obligations in accordance with section 6 (1) b GDPR
– we are legally obliged to transfer the data within the meaning of section 6 (1) c GDPR
– data transfer is in the public interest within the meaning of section 6 (1) e GDPR or
– if data transfer is necessary in accordance with section 6 (1) f GDPR to safeguard our legitimate interests or the legiti￾mate interests of a third party, provided that they are not outweighed by your interests in protecting your personal data.
5. Categories of recipients
Data processors
We use various external service providers who cooperate exclusively on our behalf and at our instruction (order pro￾cessing) in the provision of the offered service, e.g. the hosting of this website or the operation of our IT. The latter were
carefully selected and commissioned by us. They must follow our instructions and are monitored on a regular basis.
Third-party recipients
In order to be able to deal with your concerns satisfactorily, we may have to transfer your personal data to third-party
recipients. Third-party recipients may be our suppliers or transport and logistics partners.
You can use the contact form on this website to make enquiries and request information from our business partners
Grossmann & Berger and Jones Lang LaSalle (JLL). In such instances, please also note the privacy policies of these
companies.

6. Retention period of personal data
Your data will be stored by us for as long as it is required for the original purposes for which it was processed. In addi￾tion, we only store data insofar as we are legally obliged to do so, e.g. due to statutory retention obligations.

7. Detailed information on the right of objection
An objection to the processing of your personal data on the basis of section 6 (1) e GDPR (data processing in the public
interest) or section 6 (1) f GDPR (data processing to safeguard legitimate interests on the basis of a balancing of inter￾ests) is possible at any time pursuant to section 21 GDPR. In the event of an objection, the personal data will no longer
be processed unless compelling legitimate grounds for the processing are demonstrated that outweigh the inter￾ests, rights and freedoms of the data subject or the processing serves the establishment, exercise or defence of legal
claims.
Please file your objection to the responsible body specified in section 1.

8. Detailed information on the right of objection
If you have given us your consent to the processing of personal data, you can revoke this consent at any time. This also
applies to declarations of consent given to us before 25 May 2018 (before the GDPR came into effect). The revocation
of consent can only always be valid for the future. Revocation does not eliminate the legality of the processing retroac￾tively.
Please submit your revocation to the responsible body specified in section 1.

9. Currentness
This privacy policy was last updated on 26.09.2025. It is the current and valid version of our privacy policy. However,
please note that on occasion it may be necessary to revise this privacy policy in the light of de facto or legal changes.

10. Data protection officer
Cord Lange
c/o Vater Solution GmbH
Boschstrasse 5
24118 Kiel
M. colange@vater-gruppe.de