Contact

Legal

Privacy

This legal text is currently available in English only.

1. Controller

mih Holding GmbH is responsible for the processing of personal data on this website and in the mih PLACES app.
An der Wurth 2–4, 48612 Horstmar, Germany
Represented by: Hajriz Brčvak
Contact: info@mihplaces.com, +49 2551 7091000

2. What data we collect

When you contact us through the enquiry form or the chat, we collect what you provide:

  • Name and email address (required)
  • Phone number and message (optional)

We also process basic technical data necessary to deliver the website (e.g. IP address handled by our hosting provider). We do not use advertising cookies and we do not build advertising profiles.

To understand how the website is used, we record page views and clicks on our own infrastructure hosted in the EU. This measurement is aggregated, sets no cookie and does not identify you personally.

3. Purpose & legal basis

We use your enquiry data solely to respond to your request and to provide information about our projects. The legal basis is your consent and our legitimate interest in answering enquiries (Art. 6 (1)(a) and (f) GDPR).

4. Where your data is stored

Enquiry data is stored on our database infrastructure hosted within the European Union (Supabase, EU region). Access is restricted to our sales and management team.

5. Retention

We keep your data only as long as necessary to handle your request and any resulting relationship, and delete it when it is no longer required, unless legal retention obligations apply.

6. Sharing

We do not sell your data. It may be processed by service providers acting on our behalf under appropriate data-processing agreements: Vercel (hosting), Supabase (database and measurement, EU region), Resend (email delivery) and, only if you consent to analytics, Google Ireland Limited (Google Analytics). Google may transfer data to the United States on the basis of the EU-US Data Privacy Framework.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can withdraw consent at any time. To exercise your rights, contact info@mihplaces.com. You also have the right to lodge a complaint with a supervisory authority.

8. Cookies and consent

Essential storage required for the website to function is always active. Google Analytics, and the cookies it sets, is loaded only after you accept the notice shown on your first visit. If you decline, no Google script is loaded and no request reaches Google.

9. The mih PLACES app

This part covers the mih PLACES app for iPhone, iPad and Android. Without an account the app shows our projects and lets you ask for an offer. Accounts are created by us for buyers, investors, tenants, partners and staff, after a purchase or on invitation. The controller is the same as above.

10. What the app processes

  • Your account: name, email address, phone number (optional), language, profile photo (optional), your role and the apartments assigned to you.
  • Purchase and ownership: your apartment, payment plan, payments and the receipts you upload, contracts, floor plans, handover documents and the handover checklist.
  • Identity documents: during a purchase a passport or ID and a proof of financing can be uploaded. Only our legal and finance team and the responsible sales person can open them. The machine-readable line of a passport is read on your device.
  • Service requests: the service, your answers, photos, the appointment, messages with our team and your rating.
  • Offer requests without an account: name, email address, phone number (optional) and the apartment or size you are interested in.
  • Your device: a push token if you allow notifications, the app version and the language.

Legal basis: the purchase or rental contract and the steps before it (Art. 6 (1)(b) GDPR) and legal obligations such as tax and anti-money-laundering rules (Art. 6 (1)(c) GDPR).

11. Permissions on your device

  • Camera and photos: only when you add a photo or scan a document.
  • Calendar: write only, to add an appointment when you tap the button. The app never reads your calendar.
  • Face ID, Touch ID and fingerprint: checked by your device. We never receive biometric data.
  • Passkeys: kept by the password manager of your device. We only store the public key.
  • Notifications: only if you allow them. You can switch topics off in the app.
  • Location: the app does not access the location of your device.

12. Usage statistics, only with your consent

If you agree in the app, we record which screens you open and which buttons you tap, together with a random device identifier and, if you are signed in, your account. We use this to improve the app, and our sales team sees which projects you looked at. The data stays in our own database in the EU (Supabase, Frankfurt). We do not record your IP address, the text you type or your screen, and no third-party analytics service is involved. Legal basis: your consent (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG). You can withdraw it at any time in the app under Privacy; recording stops immediately.

13. Service providers for the app

Supabase (database, files and sign-in, EU region Frankfurt), Vercel (web services the app uses), Resend (emails such as sign-in codes and appointment invitations), Google Ireland Limited with Firebase Cloud Messaging (delivery of push notifications, processes the push token), Apple (push notifications and the map on iPhone and iPad) and Google Maps (the map on Android; when map tiles load, Google receives technical data such as your IP address). All work for us under data-processing agreements. Google may transfer data to the United States on the basis of the EU-US Data Privacy Framework.

14. Retention and deleting your account

We keep account data as long as you have an account. Contracts, payments and documents are kept for the periods required by law (up to ten years under German commercial and tax law). You can delete your account in the app under Profile, Security, Delete account. We then remove your name, phone number, photo and settings, separate your usage statistics from you and close your access. What the law requires us to keep remains, without your profile. You can also ask us at info@mihplaces.com.

15. Children

The app is not directed at children under 16.