This is a non-binding English translation provided for convenience. The German version is legally binding. View the German version.

Privacy Policy

pursuant to Art. 13 and 14 GDPR

1. Controller

ImmoFindsYou – GmbH
Maiffredygasse 2, A-8010 Graz, Austria
Email: club@idc.immo
Phone: +43 664 92 666 86

2. Overview of processing activities

We process personal data in the course of operating the "Immobilien Deal Club" platform (www.idc.immo) for the following purposes:

  • Managing membership applications and memberships
  • Providing club services (member directory, posting generator, event management, WhatsApp group links)
  • Communicating with members and prospective members (transactional emails, newsletters, event notifications)
  • Internal marketing purposes (information on club offerings, events and services of the Operator and the AKTIVIT Network)
  • Security and abuse prevention (authentication, rate limiting, audit logging)

3. Legal bases

PurposeLegal basis
Performance of contract (membership, club services)Art. 6 (1)(b) GDPR
Internal marketing communicationArt. 6 (1)(f) GDPR (legitimate interest)
Consent (directory opt-in, profile picture)Art. 6 (1)(a) GDPR
Legal obligations (invoicing, retention)Art. 6 (1)(c) GDPR

4. Categories of personal data

At application: salutation, title, first and last name, company, position, address, email, phone, website, industries, focus areas, requested federal state(s), IP address and timestamp of submission.

At registration and use: in addition to the above: password (stored encrypted), profile picture (optional), short bio (optional), directory visibility (opt-in), created postings and attachments, event registrations, consent to the Participation Agreement (version, timestamp, IP address).

Collected automatically: IP address, browser type, device type, access times (server logs), usage statistics (if analytics is enabled, see section 9).

5. Recipients and processors

ServiceProviderPurposeLocation
Hosting & databaseLovable / Supabase (Supabase Inc.)Platform operation, authentication, data storageEU (Frankfurt) / USA *
Email deliveryResend (Resend Inc.)Transactional emailsUSA *
AI extractionGoogle (Gemini) via Lovable AI GatewayAutomated data extraction from uploaded documentsEU / USA *
Analytics (optional)Plausible Analytics (Plausible Insights OÜ)Anonymous usage statisticsEU (Estonia)
Domain & DNSRegistrar (varies)Domain managementvaries

* For data transfers to the USA we rely on the adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2)(c) GDPR.

6. Retention

  • Membership data: for the duration of the membership and beyond pursuant to statutory retention periods (in particular 7 years pursuant to BAO for accounting-relevant data).
  • Application data (rejected): 6 months after rejection, then deleted.
  • Postings and attachments: for the duration of the membership or until deletion by the member.
  • Event data: for the duration of the membership.
  • Server logs: max. 30 days.
  • Audit log (deletions): 3 years.

7. Your rights

You have, at any time, the right to:

  • Access the personal data we store about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data, unless statutory retention obligations apply (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability in a machine-readable format (Art. 20 GDPR)
  • Object to processing based on legitimate interests, in particular against use for internal marketing (Art. 21 GDPR)
  • Withdraw consent without affecting the lawfulness of processing carried out up to that point (Art. 7 (3) GDPR)

To exercise your rights please contact: club@idc.immo

8. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
dsb@dsb.gv.at
www.dsb.gv.at

9. Cookies and tracking

The IDC platform uses only technically necessary cookies for authentication (session cookie). No advertising or tracking cookies are used.

If Plausible Analytics is enabled, usage analysis is performed without cookies and without collecting personal data (no IP storage, no fingerprinting). No consent is required for this.

10. AI-supported processing

In the posting generator, members may voluntarily upload documents (brochures, factsheets) which are automatically analysed using AI (Google Gemini). The analysis serves exclusively to extract structured property data (type, location, price, description) for the creation of a WhatsApp posting. Uploaded documents are not stored permanently after processing; only the extracted text data is saved as a posting draft if the member confirms it. No training of AI models is performed on the uploaded data.

11. Changes

We reserve the right to amend this Privacy Policy when required, in particular when platform functionality or the legal situation changes. The current version is available at www.idc.immo/datenschutz (German binding version).

As of May 2026