Accentro Real Estate AG, Kantstraße 44/45, 10625 Berlin (hereinafter: “We”) is the operator of the website investors.accentro.de (hereinafter “Website”) and is the data controller responsible for the personal data of the Website’s users (hereinafter: “You”) within the meaning of data protection laws, in particular the General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (“BDSG”).

We protect your privacy and your personal data. We collect, process, and use your personal data in accordance with the provisions of this Privacy Policy and applicable data protection laws, in particular the GDPR and the BDSG.

In this Privacy Policy, we inform you about the personal data we collect, process, and use about you when you use our website. We therefore ask that you read the following information carefully.

Personal data, as defined in this Privacy Policy, refers to specific information about your personal or factual circumstances. This includes, in particular, your name, your email address, and, if applicable, your address and phone number, as well as your credit card and bank account information and your VAT details if you are a registered merchant.

1. Provision of the Website

1.1 Personal data also includes information about your use of our website. In this context, we collect the following personal data from you:

• Your IP address,

• the date and time of the request,

• time zone difference from Greenwich Mean Time,

• Content of the request,

• access status/HTTP status code,

• Amount of data transferred,

• Website from which your request is forwarded,

• Browser, operating system and its user interface, language and version of the browser software,

• the location from which you access data from our site

as well as other connection data and sources you access. This is typically done through the use of log files and cookies. More information about cookies is provided below.

1.2 We use this data to safeguard our legitimate interests,

• to ensure that the website can be displayed on your computer,

• to ensure the website functions properly,

• to optimize our website,

• and to ensure the security of our information technology systems. The legal basis for data processing is Article 6(1)(f) of the GDPR.

1.3 The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

2. Cookies

2.1 We also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your devices and that store certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data is sent, as well as information about the cookie’s age and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and make any preset preferences immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive of the user’s computer.

We use different types of cookies on our website. We set cookies that are strictly necessary for us to provide you with the website or individual website features (hereinafter “Essential Cookies”) when you visit the website. In addition, we use other cookies to save your preferences, compile statistics on your use of the website, or for marketing purposes (hereinafter “Cookies Requiring Consent”).

2.2 It is not possible to use the website without the necessary cookies. However, we only use cookies requiring consent if you have given us your consent via our consent banner. We display the consent banner when you visit the website for the first time.

In the consent banner, you can grant your consent to the use of cookies, categorized by purpose, or—if you click on “Individual Privacy Settings”—grant consent separately for each cookie.

2.3 You can revoke your consent to the use of cookies requiring consent at any time by adjusting your cookie settings in the footer.

The following cookies are used on our website:

Essential

Essential cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Essential Cookies

Name	Hosts	Purpose	Duration	Type
CookieConsent	cookiebot.com	Stores the user's consent status for cookies on the current domain.	1 year	HTTP cookie
resolution	investors.accentro.de	Determines which device the visitor is using—the website can adjust to the optimal resolution for that device.	Session	HTTP Cookie
_ga	tradingview.com	Registers a unique ID used to generate statistical data on how the visitor uses the website	2 years	HTTP Cookie
_gat	tradingview.com	Used by Google Analytics to limit the request rate.	1 day	HTTP Cookie
_gid	tradingview.com	Records a unique ID used to generate statistical data on how the visitor uses the website.	1 day	HTTP Cookie
tv.logger.logHighRate	s.tradingview.com	Collects statistics on user interaction with the real-time price and stock ticker on the website.	Persistent	HTML Local Storage
tv.logger.loglevel	s.tradingview.com	Collects statistics on user interaction with the real-time price and stock bar on the website.	Persistent	HTML Local Storage
tvlocalstorage.available	s.tradingview.com	Collects statistics on user interaction with the real-time price and stock bar on the website.	Persistent	HTML Local Storage

Marketing

Marketing cookies are used to track visitors across websites. The purpose is to display ads that are relevant and appealing to each individual user and are therefore more valuable to publishers and third-party advertisers.

Marketing Cookies

Name	Hosts	Purpose	Duration	Type
_ga	investors.accentro.de	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years	HTTP cookie
_gat	investors.accentro.de	Used by Google Analytics to limit the request rate	1 day	HTTP Cookie
_gid	investors.accentro.de	Registers a unique ID used to generate statistical data on how the visitor uses the website.	1 day	HTTP Cookie
collect	google-analytics.com	Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels.	Session	Pixel Tracker
p.gif	typekit.net	Tracks specific fonts used on the website for internal analysis. This cookie does not collect visitor data.	Session	Pixel Tracker

We use cookies that are necessary for the operation of the website to protect our legitimate interest in displaying the website on your device, ensuring certain website functionalities, and processing your cookie settings.

The legal basis for data processing via cookies is Article 6(1)(f) of the GDPR.

We use cookies requiring consent only if and to the extent that you have previously given us your consent via our cookie banner. The legal basis for cookies requiring consent is Article 6(1)(a) of the GDPR.

2.4 The personal data stored in the cookies is automatically deleted at the end of the expiration period; for cookies requiring consent, however, it is deleted at the latest when you have withdrawn your consent.

3. Contact Form

On our website, we offer you the opportunity to contact us via a contact form to send us questions, suggestions, or comments, as well as to request promotional and informational materials. When you use the contact options, the information you enter is transmitted to us. Your email address is a required field. In addition, we store the time of your inquiry and your IP address for documentation purposes.

You may also provide your name on a voluntary basis. We use this data exclusively to process your inquiry and answer your questions, as well as to send you informational and promotional materials if you have requested them. We use the voluntary information to address you personally. The data is not processed for any other purposes. We store your information until we have responded to your inquiry.

The processing serves our legitimate interest in offering you a convenient way to contact us or as pre-contractual measures if you have requested them. The legal basis for the processing is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.

4. Ordering the Condominium Ownership Report

You have the option to order the Condominium Ownership Report on our website. To do so, we require the following mandatory information from you: title, company name, last name, ZIP code, city, email address, and bank details (account holder, account number, bank routing number, bank name). In addition, you may voluntarily provide your first name, street address, and phone number. The legal basis for processing is Article 6(1)(b) of the GDPR.

5. Google Analytics

5.1 We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of the website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on the website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage.

5.2 The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

5.3 You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all features of the website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the online portal (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

5.4 This website uses Google Analytics with the “_anonymizeIp()” extension. This truncates IP addresses during processing, thereby preventing any personal identification. If the data collected about you is personally identifiable, such identification is immediately ruled out, and the personal data is promptly deleted.

5.5 We collect this data only if you have previously given us your consent. The legal basis for processing is Art. 6(1)(a) of the GDPR. You can revoke your consent at any time by clicking “Change or Renew Your Consent” above and adjusting your cookie settings for Google Analytics.

6. Google Web Fonts

6.1 To safeguard our legitimate interest in displaying fonts consistently on our website, we use so-called web fonts provided by Google.

6.2 When you visit a page, your browser downloads the required web fonts from a Google server. In doing so, your IP address is transmitted to Google. If your browser does not support web fonts, a standard font from your computer will be used.

6.3 The legal basis for this processing is Article 6(1)(f) of the GDPR.

6.4 For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://www.google.com/policies/privacy/

7. OpenStreetMap

7.1 To display interactive maps on our website, we have integrated map data from the open-source mapping tool “OpenStreetMap” (OSM). The operator is the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom (“OpenStreetMap”).

7.2 In order for the map to be displayed, your IP address is forwarded to OpenStreetMap. According to OpenStreetMap, it does not store this information. You can find out how OpenStreetMap stores your data on its privacy policy page and here: http://wiki.openstreetmap.org/wiki/Legal_FAQ.

7.3 We use OpenStreetMap to pursue our legitimate interest in presenting the locations of our properties to you in an appealing manner. The legal basis for this processing is Article 6(1)(f) of the GDPR.

8. Stock Chart

Our website uses the iframe for the stock chart provided by Vereinigte Wirtschaftsdienste GmbH (vwd Group) and EQS Group AG (EQS). It is possible that data about you (e.g., IP address, the URL of the destination page, or the time) may be transmitted to the source of the frame content. For further information on the purpose and scope of data collection and its processing by the vwd Group and EQS, please contact the vwd Group and EQS. We use the stock chart to present you with economically relevant data in an appealing and optimized format. The legal basis for this processing is Article 6(1)(f) of the GDPR.

9. Adobe Typekit

Our website uses Adobe Typekit web fonts. Typekit is a service offered by Adobe. This service provides fonts that are displayed in the user’s web browser after a server request is made to Adobe (in the U.S.). In this process, Adobe stores at least the IP address of the browser on the user’s device accessing this website. For more information, please refer to Typekit’s privacy policy, which you can access here: https://www.adobe.com/de/privacy/policies/typekit.html. The legal basis for this processing is Article 6(1)(f) of the GDPR.

10. Use of Social Media Plug-ins

10.1 We currently use the following social media plug-ins: Facebook, Instagram, Google+, Twitter, Xing, LinkedIn, YouTube, Pinterest, and Tumblr. We use the so-called “two-click solution.” This means that when you visit our site, no personal data is initially transmitted to the plug-in providers. You can identify the plug-in provider by the label on the box, which displays its initial letter or logo. We provide you with the option to communicate directly with the plug-in provider via the button. Only when you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding page of our website. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of U.S. providers, in the United States). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

10.2 We have no influence over the data collected or the data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

10.3 The plug-in provider stores the data collected about you as usage profiles and uses this data for advertising, market research, and/or to tailor its website to user needs. Such analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(a) of the GDPR.

10.4 Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider’s service, the data we collect about you is directly associated with your existing account with the plug-in provider. If you click the activated button—for example, to share the page—the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out of social networks regularly after use, and especially before activating the button, as this will help you avoid having the action linked to your profile with the plug-in provider.

10.5 For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers listed below. There you will also find further information regarding your rights in this regard and settings options for protecting your privacy.

10.6 Addresses of the respective plug-in providers and URLs to their privacy policies:

a) For Facebook and Instagram: Facebook Ireland – 4 Grand Canal Square, Dublin 2, Ireland; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other, and www.facebook.com/about/privacy/your-info.

b) Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; www.google.com/policies/privacy/partners/.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

d) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; www.xing.com/privacy.

e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policy. LinkedIn has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

f) YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; for more information on data collection: policies.google.com/privacy. YouTube has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

g) Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Ireland; further information on data collection: policy.pinterest.com/de/privacy-policy. Pinterest has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

h) Tumblr, Inc., 770 Broadway, New York, NY 10003, USA. Further information on data collection: www.tumblr.com/privacy. Tumblr has complied with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

11. Google Ads

11.1 We use Google Ads to draw attention to our attractive offers on external websites through advertisements (so-called Google Ads). Based on the data from the advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are relevant to your interests, make our website more engaging for you, and ensure a fair calculation of advertising costs.

11.2 These advertisements are delivered by Google via so-called “ad servers.” To do this, we use ad server cookies, which allow us to measure certain performance metrics, such as ad impressions or user clicks. If you arrive at our website via a Google ad, Google Ads will store a cookie on your computer. These cookies generally expire after 30 days and are not intended to identify you personally. The following analytics data is typically stored in connection with this cookie: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (an indicator that the user no longer wishes to be targeted).

11.3 These cookies enable Google to recognize your web browser. If a user visits specific pages on an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can determine that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in connection with the advertising measures mentioned. We merely receive statistical reports from Google. Based on these reports, we can determine which of the advertising measures used are particularly effective. We do not receive any further data resulting from the use of these advertising tools; in particular, we cannot identify users based on this information.

11.4 Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence over the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address.

11.5 You can prevent participation in this tracking process in several ways: a) by adjusting your browser settings accordingly; in particular, disabling third-party cookies will prevent you from receiving ads from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com,” www.google.de/settings/ads, although this setting will be deleted when you clear your cookies; c) by disabling interest-based ads from providers participating in the “About Ads” self-regulatory campaign via the link www.aboutads.info/choices, although this setting will be deleted when you clear your cookies; d) by permanently disabling them in your Firefox, Internet Explorer, or Google Chrome browsers via the link www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to fully use all features of this service.

11.6 We use Google Ads only if you have previously given your consent. The legal basis for the processing of your data is Art. 6(1)(a) of the GDPR. You can revoke your consent at any time by clicking “Change or Renew Your Consent” above and adjusting your cookie settings for Google Ads.

11.7 For more information on data protection at Google, please visit: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org. Google has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

12. Embedding YouTube Videos

12.1 We have embedded YouTube videos in our online content that are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode,” meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Data is only transmitted to YouTube when you play the videos. We have no control over this data transmission.

12.2 When you visit the website, YouTube receives the information that you have accessed the corresponding page of our website. In addition, the data listed in Section 1.1 of this statement is transmitted. This occurs regardless of whether you are logged in to a YouTube user account or do not have a user account. If you are logged in to Google, your data is directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

12.3 For more information on the purpose and scope of data collection and its processing by YouTube, please refer to YouTube’s Privacy Policy. There you will also find further information about your rights and settings options for protecting your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has complied with the EU-U.S. Privacy Shield, www.privacyshield.gov/EU-US-Framework.

12.4 We use YouTube videos to pursue our legitimate interest in presenting content to you in an engaging and optimized format. The legal basis for this processing is Article 6(1)(f) of the GDPR.

13. Data Security

All information you provide to us is stored on servers within the European Union. We protect our website and other systems against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons through technical and organizational measures. These measures are updated in accordance with the current state of the art. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) encryption system for this purpose.

14. No Disclosure of Your Personal Data

We do not disclose your personal data to third parties unless you have consented to such disclosure or we are authorized or required to do so by law and/or by official or court orders.

15. Deletion

We store your data for as long as we are authorized to do so. If you have exercised your right to object, or if the legal basis subsequently ceases to apply for any other reason—in particular because the purpose for which the data was collected has been achieved—we will delete the data immediately, unless we are required to retain it due to a statutory retention obligation.

16. Data Protection and Third-Party Websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot assume any responsibility or liability for third-party content or privacy policies. Please familiarize yourself with the applicable privacy policies before submitting personal data to these websites.

17. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time with future effect. The most current version is available on the website. Please visit the website regularly to review the applicable Privacy Policy.

18. Your Rights and Contact Information

You may access your personal data at any time free of charge and request information regarding its origin, the recipients or categories of recipients to whom this data is disclosed, and the purpose of its storage; you may also request, where applicable, the correction and/or deletion and/or restriction of its processing.

You also have the right to object to the processing of your data at any time, provided that the processing is carried out to safeguard one of our legitimate interests. In this case, your data will only be processed if we can demonstrate compelling legitimate grounds for the processing that override your interest in preventing the processing, or if the processing serves to assert, exercise, or defend our legal claims.

If the processing of your data is based on consent, you have the right to withdraw that consent at any time. In this case, we will no longer process your data, unless permitted to do so by law. The lawfulness of the processing of your data that took place prior to your withdrawal of consent remains unaffected by your withdrawal.

If you have provided us with personal data, we will provide it to you upon request in a machine-readable format for use with other providers.

To exercise your rights as described above, please contact us via email at mail(at)accentro.de, by fax at +49(30) 88 71 81 11, or by mail at: ACCENTRO Real Estate AG, Kantstraße 44/45, 10625 Berlin. If you have any questions, comments, or inquiries regarding our collection, processing, and use of your personal data, please also contact us using the contact information provided.

If you believe that the processing of your data violates data protection laws, you have the right to file a complaint with a data protection authority. To do so, you can, for example, contact the State Commissioner for Data Protection and Freedom of Information at the following address:

The Berlin Commissioner for Data Protection and Freedom of Information Friedrichstraße 219 10969 Berlin

19. Data Protection Officer

If you have any questions or comments regarding data protection matters, you may contact our company data protection officer at any time. You can reach them using the following contact information:

Email: datenschutz@accentro.de Address: Kantstraße 44/45, 10625 Berlin Phone: 030 - 887 181 798

As of: June 2023

Privacy Notice for Shareholders

Privacy Notice for Job Applicants

Privacy Notice for Prospective Clients and Customers

Ynfinite

We use the Ynfinite Content Management System from Ynfinite GmbH, Lichtstr. 25, 50825 Cologne, to display our website. (hereinafter: Ynfinite CMS)

Ynfinite CMS is hosted on a central server environment that is not under our control. This server environment is located in Frankfurt. All German data protection regulations apply. Ynfinite CMS stores personal data only if explicit consent has been given, e.g., by submitting a form. Ynfinite CMS processes the personal data that is strictly necessary for the operation of the website. To load the website, images, and scripts, your IP address is required to establish a connection to the Ynfinite CMS servers. Once the connection is established, this IP address is stored only in log files retained for a short period for troubleshooting purposes and is subsequently discarded.

By visiting the website, you consent to the above. The legal basis for data processing is the consent you have provided in accordance with Art. 6(1)(a) of the GDPR. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. For more information on how the transmitted data is handled, please see Ynfinite’s Privacy Policy: https://ynfinite.de/datenschutz