Protection of your data

Privacy policy

1. Controller

CASA READY by Kamila
Owner: Kamila Bukowska
Brunnenstr. 4
85598 Baldham
Germany

Email: hello@casa-ready.com
Phone: +49 172 714 5989

2. Hosting and server logs

This website is hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. When you visit the website, the host processes technically necessary data, in particular your IP address, date and time, requested page or file, amount of data transferred, referrer URL, browser, operating system and access status.

This processing ensures secure and stable operation and helps prevent misuse. It is based on Article 6(1)(f) GDPR. Log data is normally deleted according to the host's technical deletion schedule after a few days and generally no later than 60 to 90 days, unless a security incident requires longer retention. We have concluded a data-processing agreement with united-domains under Article 28 GDPR.

3. Enquiries and contact form

When you contact us by form, email or telephone, we process the details you provide to handle your enquiry. The form may collect your name, email address, intended use, budget, property references, message and selected language.

Processing is based on Article 6(1)(b) GDPR for pre-contractual steps or performance of a contract. Other enquiries are processed under Article 6(1)(f) GDPR based on our legitimate interest in responding appropriately. The form is transmitted securely through the hello@casa-ready.com mailbox hosted by united-domains.

If an enquiry does not lead to a business relationship, we delete its data no later than six months after final completion. If a business relationship results, required data is retained for its duration and subsequently only as required by statutory retention obligations.

The same applies if you request a report or guide through our guide section. We then use your details to send you the document and answer your questions (Article 6(1)(b) GDPR). You may optionally provide a phone number; we will then also contact you by phone or WhatsApp (Article 6(1)(a) GDPR). You can withdraw this at any time.

4. Recipients

We disclose personal data only where necessary to respond, perform a contract, comply with law or protect legitimate interests. As processor, united-domains has technically necessary access for hosting and email operation. We do not disclose enquiry data for advertising.

For consent management and web analytics, Usercentrics A/S (Cookiebot) and Google Ireland Limited also receive data. Details are set out in section 7.

5. Local fonts

The “DM Sans” and “Lora” fonts are served locally from our own hosting. No connection to Google is made when they load.

6. Social-media links

This website only links to our Facebook, Instagram, LinkedIn and YouTube profiles. It does not load social plugins or embedded content. No data is sent to those platforms merely by visiting our website. Once you click a link, you leave our website and the platform's own privacy terms apply.

7. Cookies, consent management and web analytics

7.1 Consent management with Cookiebot

We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage your consent. On your first visit, Cookiebot asks whether you agree to cookies and similar technologies in the categories preferences, statistics and marketing. Without your consent, only technically necessary cookies are set.

Cookiebot stores your choice in the cookie “CookieConsent” (storage period 12 months) and logs it as proof. This involves the shortened IP address, date and time, browser information, the page visited, your choice and a random consent ID. Processing takes place on servers in the EU. The legal basis is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR (proof of consent) and Section 25(2) no. 2 of the German TDDDG. A data processing agreement under Article 28 GDPR is in place with Usercentrics.

7.2 Google Tag Manager

We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is a tool we use to integrate and control other services on the website; it does not set cookies or analyse usage data itself. When the website loads, Tag Manager is retrieved from Google servers. Your IP address is transmitted to Google in the process, including before you make a choice in the banner. Services integrated via Tag Manager are only triggered once you have consented to the relevant category.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in managing the services we use simply and securely. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission of 10 July 2023 exists.

7.3 Google Analytics 4

Only if you consent to the “statistics” category do we use Google Analytics 4 by Google Ireland Limited (measurement ID G-TR93VRP3YL). It helps us understand which pages are visited and how the website is used, so that we can improve it. Data processed includes in particular the pages visited, date and time, the referring page, device and browser information, approximate region and a random identifier of your browser. Google Analytics 4 does not store full IP addresses. The cookies “_ga” and “_ga_*” are set for this purpose with a storage period of up to 2 years. The collected data is deleted after 14 months.

Before you consent, Google Analytics is blocked via Google Consent Mode and sends no data. The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Data may be transferred to Google LLC in the USA; it is certified under the EU-US Data Privacy Framework. More information: Google privacy policy.

7.4 Protected property location and Google Maps

For individual properties, registered prospective buyers can view the exact location after entering a password. For this we set the technically necessary cookie “cr_lage” (login, storage period up to 30 days; Section 25(2) no. 2 TDDDG). To prevent misuse, we briefly store failed attempts with a non-reversible value derived from your IP address (Article 6(1)(f) GDPR).

The map is provided by Google Maps (Google Ireland Limited). It is only loaded if you have consented to the “marketing” category; in particular your IP address and device information are then transmitted to Google, including to Google LLC in the USA (EU-US Data Privacy Framework). The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent the map remains hidden; the link “Open in Google Maps” only transmits data to Google when clicked.

7.5 Changing or withdrawing consent

You can change or withdraw your consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

The overview below shows your current consent and all cookies used on this website:

8. Your rights

Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21). Contact hello@casa-ready.com to exercise these rights.

You may also lodge a complaint with a data-protection authority. For private-sector organisations in Bavaria, the competent authority is generally the Bavarian State Office for Data Protection Supervision.

9. Data security

This website uses HTTPS encryption. We take appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access.

10. Status

This policy is current as of 21 October 2026 and will be updated when the website, services used or legal requirements change.