Skip to content
Account

Privacy policy

Version: 1 October 2026 (draft)

This website works without analytics, advertising or third-party content. We process as little personal data as possible and state here exactly what that is.

Controller

Internetmarketing Geissel, Thorsten Geissel, Leipziger Str. 22, 50858 Köln, Germany.
Email: kontakt@claronda.de

We process data in accordance with the EU General Data Protection Regulation (GDPR). If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply to you; the legal bases named below correspond to the same articles of the UK GDPR.

Hosting

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre. Hetzner processes the data on our behalf and only on our instructions. The data stays in Germany.

Server logs

With every request the web server automatically stores a log entry: IP address, date and time, requested address, amount of data transferred, status message, referring page and information about browser and operating system. We need these entries for secure operation and troubleshooting. The legal basis is our legitimate interest in trouble-free operation (Art. 6(1)(f) GDPR). The logs are rotated daily and deleted after 14 days. They are not evaluated in relation to you personally.

Visitor statistics

From these logs we regularly count how many requests and visits there were, which pages were read, which pages visitors came from, whether the visit came from a mobile phone and how many pages and how much time a visit comprised. To count visits, we form a hash from the IP address and browser information using a key that exists only in memory during this count and is discarded afterwards. Only daily totals are stored: no IP address, no browser information, no full referring address. We determine the country from public allocation lists for IP address ranges, without asking a third party. The legal basis is our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).

Cookies

We do not set any cookie for analytics or advertising. There are three cookies, none of them readable by scripts and all only for this website:

The basis is § 25(2) no. 2 TDDDG and, for users in the United Kingdom, regulation 6(4) PECR, because each of these cookies is strictly necessary for a service you have expressly requested.

Protection against misuse

Sign-in, account creation and the “forgotten password” function are limited in frequency so that nobody can try out passwords or flood other people's mailboxes with messages. For this we count attempts per sender address and per affected account. We do not store the IP address, only a hash of purpose, value and a server key; neither the address nor the IP can be derived from it. These counters are deleted after two days. The legal basis is our legitimate interest in the security of the accounts (Art. 6(1)(f) GDPR).

The forms also contain a field that is invisible to people and detects automated submissions. It stores nothing and loads nothing from third parties; no puzzle or service such as reCAPTCHA is used.

Customer account

For the property report you create an account. We store your email address, your password only as a non-reversible hash, the times of creation, confirmation and last sign-in, the language you want to receive emails in, which reports you have unlocked or bought and which access you have booked. We send the confirmation, password messages and a contract confirmation after each purchase to this address. For each purchase we record when you consented to immediate performance, which version of the terms and conditions and the cancellation policy applied, and in which language you ordered. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). You can delete the account yourself in the account area. In doing so we also delete the messages sent to you and your alerts; information on purchases and payments is kept without reference to your account for as long as statutory retention obligations require (Art. 6(1)(c) GDPR). We delete copies of sent messages 30 days after sending in any case.

When you create an account and in the payment window we ask, on a voluntary basis, how you heard about us (fixed choice, no free text). We store the answer with your account and the purchase to see which routes lead to us. The legal basis is your consent through the voluntary answer (Art. 6(1)(a) GDPR); choosing nothing has no disadvantage. When the account is deleted we delete the answer on the account; on the purchase it remains, like the other purchase details, without reference to your account.

Emails

Emails are sent via the mailboxes of our domains at Hetzner Online GmbH; English emails come from hello@claronda.com, German ones from kontakt@claronda.de. No additional email service provider is involved.

Payment

Payment is made via Stripe (Stripe Payments Europe, Limited, Dublin, Ireland). You enter your payment details on a page operated by Stripe; card and account details do not reach us. We pass Stripe your email address, an internal customer number and what you are buying. From Stripe we receive and store the amount, currency, time and status of the payment and the identifiers of customer, payment and, where applicable, subscription. If you pay in your local currency, Stripe carries out the conversion. You manage payment methods and the cancellation of an access in Stripe's customer portal. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Stripe also processes data itself and may transfer it to countries outside the European Union; details are in Stripe's privacy policy.

Property check and property report

When you have a property checked, you enter an address or a cadastral reference. With it we query public registers and map services from our server and store the results with the property so that the report remains readable without a new query:

These queries run via our server, not via your browser; the bodies queried do not learn your IP address. What is transmitted is the property searched for, not your person. The legal basis is the performance of the service you requested (Art. 6(1)(b) GDPR) and our interest in a reliable evaluation (point (f)). All the bodies named are located in the European Union.

The finished report can be reached via a random address that cannot be guessed. Anyone who has this address can read the report; therefore only share the link if you want to. We keep property data and check results for as long as the report is to remain available. We delete it on request.

Alerts about new auctions

For alerts we store your email address, the regions and types you selected, any price limit and the times of sign-up, confirmation and sending. The sign-up only becomes valid after you confirm it via the link in the confirmation message (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; the unsubscribe link in every message is sufficient. After you unsubscribe we delete the subscription; we delete unconfirmed sign-ups after 30 days.

Information from the holiday-let registers

Under holiday lets and holiday-let check we look in the registers that six Spanish regions keep for holiday accommodation and publish as open data. We store nothing about you: the query is answered and not recorded; we only count how often a connection has asked, so that the free page is not harvested automatically (see “Protection against misuse”).

These registers contain information about accommodation — and therefore indirectly about its owners, insofar as they are natural persons. If you are one of these persons, this section concerns you. From the published files we take only: register name, registration number, type of entry, note on status, number of places and units, year, municipality, postcode, street, house number, cadastral reference and coordinate. We do not take names, telephone numbers, email addresses, ID and tax numbers or websites — even if they are in the source file. We show even less publicly: the register, the type of entry, the municipality and the year. We never disclose an address.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in making an officially published fact findable, so that travellers and buyers can check it themselves. We have recorded the balancing against your interests in writing and will provide it on request. The data comes from the open data sets of the Comunitat Valenciana, Catalonia, Andalusia, the Canary Islands and the Consells of Mallorca and Menorca; we name the exact sources and the date of each file under every result. This information is given publicly because we cannot notify the persons concerned individually without collecting contact details that we specifically do not store (Art. 14(5)(b) GDPR).

You can object (Art. 21(1) GDPR). Write to kontakt@claronda.de and give the registration number or the address. We then block the entry for the information service and keep it blocked after the next import. This does not change the entry in the official register — the body that keeps it is responsible for that.

Contact by email

If you write to us, we process your details to handle the enquiry (Art. 6(1)(b) or (f) GDPR). We keep the message for as long as it is needed for handling it or because of statutory retention obligations.

Enquiries via forms

If you request a land registry extract via a report or register as a partner, we store the details from the form (email address, message, for partners also name, company, location and field) and the processing status in order to answer the enquiry (Art. 6(1)(b) GDPR). We keep them for as long as they are needed for processing; we delete them on request.

If you cancel or withdraw using the buttons “Cancel contracts here” or “Withdraw from contract”, we store the details from the form (name, email address, contract, dates, for termination for good cause the reason) with the time of receipt and send you a confirmation of receipt. This serves the performance of the contract and proof of the declaration (Art. 6(1)(b) and (c) GDPR). We keep these details and the contract confirmations for your purchases for ten years from the end of the year in which they arose; after that we delete them. We delete other enquiries one year after they have been dealt with.

Fonts, maps, external links

The font used is hosted on our server; there is no connection to Google Fonts. We fetch maps and aerial images during the check and then deliver them from our server. Your browser therefore does not connect to third parties. If you follow a link, for example to the Spanish Official State Gazette, the privacy policy of that body applies.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object to processing based on our legitimate interest. You can withdraw consent you have given at any time with effect for the future. To do so, contact kontakt@claronda.de.

You can also complain to a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany. If you are in the United Kingdom, you can also complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.

Changes

If the service develops further, we will adapt this policy. The version published here applies.