Privacy.

The controller responsible for this property website and for processing property enquiries addressed to Core is:

You can also use these contact details to request access, rectification, erasure or exercise other privacy rights. Please identify the matter concerned so we can locate your enquiry. Further company details are available in the Legal notice.

Personal data is information relating to an identified or identifiable individual. The information processed depends on which functions you use.

Consent to load a tool is separate from a later enquiry or instruction. Simply opening this website neither creates an estate agency agreement nor constitutes consent to advertising.

This website is provided through ChatGPT Sites by OpenAI. To transmit pages, images, fonts and video files, the hosting infrastructure processes technically necessary connection data. This may include your IP address, date and time, requested address, volume of data transferred, HTTP status, browser, operating system and the previously visited page.

Processing serves to deliver the website, analyse errors and protect against unauthorised access. The legitimate interest is the secure operation of this website. Technical logs are retained according to the requirements of operation, troubleshooting and security incidents; see the retention periods section for further information.

Access through the Sites platform

If access to this website requires sign-in, this is managed by the platform. Core’s pages do not provide their own registration and do not receive your ChatGPT password. OpenAI’s privacy notices apply to its independent processing of your platform and account data. For individuals in the EEA, OpenAI identifies OpenAI Ireland Limited, Dublin, Ireland, as the controller.

OpenAI’s European privacy policy

This website is delivered over encrypted HTTPS. For particularly confidential documents, please agree a suitable transfer method with your contact.

Your choice is stored in this browser

A cookie is a small piece of information that a browser stores for a website. This website’s own application code uses the necessary cookie core_privacy. It contains your permissions for “Interactive map” and “SystemBase tools & usage analytics”, the preference version and the storage and expiry times. It does not contain a unique visitor identifier assigned by this website.

If your browser blocks cookies, we apply your choice only to the current visit. A previously stored choice is not automatically transferred to another domain or browser.

Choose freely — and change your mind at any time

“Necessary only” leaves all optional categories disabled. “Allow all” enables both categories. “Adjust settings” lets you choose separately. Unticked switches, scrolling, closing the notice or continuing to use the website do not constitute consent.

Permission is based on Article 6(1)(a) GDPR and, where information is stored on or accessed from your device and this is not strictly necessary, additionally on section 25(1) TDDDG. Necessary storage of your decision is based on section 25(2)(2) TDDDG.

If you disable a previously granted permission, the affected embeds are removed and the page reloads to fully stop the loaded services. This does not automatically delete information already transferred or data stored by the provider. You can contact Core or the named provider about deletion.

This Core website’s own application code does not embed analytics or advertising trackers. Consent to external functions is not consent to personalised advertising. Technically necessary processes of the hosting and access platform must be considered separately.

The local overview of Hamburg, including district and neighbourhood boundaries, is delivered with this website. It remains visible and usable without optional permission and does not connect to an external map service.

Only after you permit the “Interactive map” does the additional map view load map tiles, symbols and labels from CARTO, operated by CartoDB Inc., USA. This involves connections in particular to tiles.basemaps.cartocdn.com . The provider receives your IP address, technical connection data and requests for the displayed map area.

The display uses OpenStreetMap data and administrative boundaries from Hamburg’s State Agency for Geoinformation and Surveying that are delivered with the website. Core’s map does not request access to your device location. Information about data sources and licences is available on the map and under Sources & data.

CARTO also describes processing in the USA and identifies the EU–US Data Privacy Framework and standard contractual clauses as transfer mechanisms in its privacy notice. The provider explains details, recipients and retention criteria in its Privacy Notice. You can withdraw map permission at any time in the cookie settings.

Property valuation, selling advice, the affordability calculator, property listings, the service centre and other specialist advisory routes are embedded as original applications from SystemBase / UnitedDataHub. The technical provider is MediaHUB Next Level SL, Calle Aragón 28-1, ES-07006 Palma, Spain. Core remains your contact for property enquiries addressed to Core.

What happens when a tool loads

Without permission, a notice appears in place of an embedded advisory tool. The floating service centre remains disabled. The external iframe and its associated scripts and styles are only loaded after your consent. Your browser then connects to the relevant service under uniteddatahub.dev . This involves, in particular, your IP address, the time, device and browser information, and the application requested. The connection to Core’s application uses a fixed company identifier, not a personal visitor identifier generated by this website.

Floating service centre on every page

After you permit “SystemBase tools & usage analytics”, the floating service centre from udh-subterminal.uniteddatahub.dev loads on every page. It offers direct access to advisory routes. The application may use the current page address and page changes to suggest relevant starting points. Connection preparation and preloading of its script also begin only after permission. With “Necessary only”, the service centre remains fully disabled. You can withdraw permission at any time in the cookie settings.

Usage analytics within SystemBase

Usage analytics are enabled in SystemBase for Core’s tools. They may record advisory steps opened or completed, visibility, time spent, active usage time and technical device information. The application supports a random browser identifier in the cookie __Secure-systembase_browser for up to 90 days on the uniteddatahub.dev domain. If this cookie cannot be stored, the identifier systembase:analytics:browser:v1 is used in the provider’s local storage instead. This can recognise visits across several SystemBase applications. When a contact enquiry is prepared, usage events and source information may be associated with that enquiry.

The purpose of this analysis is to evaluate usage and processes in the advisory tools. It is expressly included in the “SystemBase tools & usage analytics” category and only becomes accessible on this website after your consent. The unmodified original applications do not provide a separate permission for the tool interface alone here. If you do not want this, you can read all website content and contact Core directly by telephone or email.

What happens when you make an enquiry

Depending on the advisory route, you may provide contact details, property address, floor areas, year of construction, condition, use, ownership, intention to sell or financial circumstances. These entries are made in the embedded application. Please follow its information about processing and submission. This website cannot itself read or delete entries stored within an external service.

Advice you request or steps towards entering into a contract are processed on the basis of Article 6(1)(b) GDPR. For other enquiries, the relevant basis is the legitimate interest in responding. Separately granted consent applies only to the specified purpose. Any additional services within a tool are explained in that tool’s privacy notice.

Technical permission covers this group of tools. You can disable all of them together again; telephone and email contact remain available. Further provider information: Privacy at UnitedDataHub / SystemBase.

When you contact Core by telephone or email, we process the contact details you provide, the content of your message and the property information needed to handle your request. This data is used to respond, arrange appointments, prepare advice and, where applicable, carry out an instruction.

Providing personal data is generally voluntary. However, without a suitable way to contact you or essential property information, we may be unable to respond to your specific request. Required fields in a tool are marked there.

Where an instruction gives rise to statutory identification, documentation or retention obligations, we process the necessary information under the relevant provisions. Further information is provided in the relevant process. Simply using a tool does not authorise promotional contact beyond your specific enquiry.

The font files, original Core photographs and office film used on this website are delivered with the website. Their display does not involve Google Fonts or an external video platform. The office video may start automatically, muted and on a loop, and can be paused. These local media do not require permission for optional services.

The FAQ search filters existing content directly in your browser. This function does not send your search term to Core as an enquiry. Local district or neighbourhood selections are not stored as a personal usage profile either.

Links such as “Directions to the office” open an external service only when you choose to follow them. The relevant provider’s information then applies. Telephone and email links open the designated application on your device.

Depending on your use, recipients involved in delivery and processing may include hosting and security providers, SystemBase / UnitedDataHub, CARTO and communications providers. Within Core, access is given to the people handling your request or performing the relevant technical and organisational tasks.

Further recipients may be needed for an instructed property service, such as owners, prospective buyers or tenants, notaries, property managers or authorities. The scope and legal basis depend on the specific instruction and legal requirements; the website does not grant blanket permission for this.

Some infrastructure and feature providers may process data outside the EU or EEA, particularly in the USA. The requirements of Articles 44 onwards of the GDPR apply. A relevant adequacy decision or appropriate safeguards, such as EU standard contractual clauses, may serve as a basis. Consent to load a service does not replace these requirements. You can request information about the specific recipient and relevant safeguards through the privacy contact; linked provider notices contain additional information.

We base retention periods on the purpose of processing, the progress of the matter and existing legal obligations. Data is deleted when it is no longer needed for those purposes and no retention obligation or other legal basis prevents deletion.

For information about the retention period for a specific matter, please contact info@core-immo.de.

Subject to the legal conditions, you may exercise the following rights:

• AccessFind out whether and which personal data is processed and receive a copy (Article 15 GDPR).
• RectificationHave inaccurate information corrected and incomplete data completed (Article 16 GDPR).
• ErasureRequest deletion of your data where no overriding obligations or other legal grounds prevent it (Article 17 GDPR).
• RestrictionHave processing restricted where the legal conditions are met (Article 18 GDPR).
• Data portabilityReceive or transfer relevant data in a structured, commonly used and machine-readable format (Article 20 GDPR).

Please send your request to info@core-immo.de or by post to the address above. Where there are reasonable doubts about identity, further information may be needed to verify the request securely.

This website’s own functions do not make decisions based solely on automated processing that have legal or similarly significant effects. Results from a valuation or budget tool provide guidance and, in particular, do not constitute a binding financing commitment.

Your right to object under Article 21 GDPR

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Following a valid objection, processing stops unless compelling legitimate grounds or the establishment, exercise or defence of legal claims justify continuing it.

You may object to processing for direct marketing at any time without giving reasons. This also applies to related profiling. You can send your objection to info@core-immo.de .

If you believe processing is unlawful, Article 77 GDPR gives you the right to complain to a data protection supervisory authority, particularly in the place of your habitual residence, work or the suspected infringement. For a company based in Hamburg, a relevant contact is:

This notice covers this Core property website, its own functions and the embedding of external services described here. Other websites and independently operated applications may have additional privacy notices. These supplement information about the relevant processing; they do not replace your contacts and rights in relation to Core.

This notice will be updated if the functions used or the legal framework change. A material change to purposes requiring consent requires fresh permission. The current version is permanently available through “Privacy” in the footer.