Privacy Policy

1. Controller

This website is operated under the brand name TLA Office.

The responsible legal entity within the meaning of the General Data Protection Regulation (GDPR) is:

Real Estate Property Graf GmbH
Ramsteiner Str. 60
67661 Kaiserslautern
Germany

Phone: +49 157 58304995
Email: info@tla-office.com

TLA Office is a registered business name (brand) of Real Estate Property Graf GmbH.

2. Hosting

Our website is hosted by:

Raidboxes GmbH
Hafenstraße 32
48153 Münster
Germany

When you visit our website, Raidboxes automatically collects server log files (e.g., IP address, date and time of request, browser type, operating system).

This data is processed to ensure the stability and security of the website (Art. 6(1)(f) GDPR).

3. Access Data and Server Log Files

When accessing our website, the following data may be collected automatically:

  • IP address

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

  • Requested pages

This data is not combined with other data sources and is used solely for technical monitoring and security purposes.

4. Cookies

We use cookies and similar technologies on our website.

Cookies are small text files stored on your device. Some cookies are technically necessary, while others require your consent.

You can manage your cookie preferences at any time via our cookie banner.

Legal basis:

  • Essential cookies → Art. 6(1)(f) GDPR

  • Analytics cookies → Art. 6(1)(a) GDPR (consent)

    Marketing cookies (Google Ads) → Art. 6(1)(a) GDPR (consent)

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/rcb/data-processing/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>.

The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

5. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us analyze user behavior on our website.

Data processed may include:

  • IP address (anonymized)

  • Device information

  • Browser data

  • Usage behavior

  • Pages visited

  • Interaction data

Google may transfer data to servers in the United States.

Google is certified under the EU-US Data Privacy Framework.

Google Analytics is only activated after you provide consent via our cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

You may withdraw your consent at any time via the cookie settings.

We have concluded a Data Processing Agreement (DPA) with Google in accordance with Art. 28 GDPR.

6. Google Ads, Microsoft Advertising and Conversion Measurement

We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to show ads for our accommodation and to measure how well these ads work.

Google Ads and the related Google tag are only activated after you give consent via our cookie banner (Google Consent Mode). Without your consent, no advertising cookies are set and no personal data is shared with Google for advertising purposes.

If you have given consent and arrived via one of our ads, we measure whether you submitted an inquiry (conversion tracking). For this purpose, the click identifier from the ad and information about your visit are processed.

Enhanced conversions: If you have given consent and submit our inquiry form, the email address and phone number you entered are converted into an irreversible code on your device (hashing, SHA-256) before they are sent to Google. Google uses this code only to match the inquiry to an ad interaction and to report aggregated results to us.

Reservation feedback: If an inquiry later results in a reservation, we may report this to Google in the same hashed form, together with the date of the reservation. This helps us show our ads to people who are looking for temporary housing and to avoid wasting ad spend. We only do this for inquiries where consent for advertising was given.

Google may transfer data to servers in the United States. Google is certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the cookie settings with effect for the future.

More information: business.safety.google/privacy and policies.google.com/privacy

Microsoft Advertising: We also show ads in the Bing search network and Microsoft Copilot through Microsoft Advertising, a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The Microsoft Universal Event Tracking (UET) tag is only loaded after you give consent for marketing services via our cookie banner (UET Consent Mode). It then measures whether a visit from one of our ads leads to an inquiry. Microsoft may process data in the USA; Microsoft is certified under the EU-U.S. Data Privacy Framework. More information: privacy.microsoft.com/privacystatement.

7. Contact Form

If you contact us via our contact form, we process:

  • Name

  • Email address

  • Phone number (if provided)

  • Message content

  • Details of your planned stay (for example dates, household size, pets and preferred location)

  • Technical information about how you found us (first page visited and, only if you consented to advertising cookies, the Google Ads click identifier)

This data is processed to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

We do not sell or pass on your inquiry data to third parties. Exceptions: our hosting provider (see section 2) and, only if you have consented to advertising cookies, Google in hashed form for conversion measurement as described in section 6.

8. Customer Reviews (Trustindex)

We display Google reviews of TLA Office using the Trustindex widget provided by Trustindex Informatikai Kft., Hungary. The widget and the review content are only loaded after you have given consent via our cookie banner.

When the widget is loaded, Trustindex and Google may collect your IP address, browser data and interaction data.

Legal basis: Art. 6(1)(a) GDPR (consent).

9. AI Chat Assistant

Our AI chat assistant is provided by Chatbase Inc., USA. The chat is only loaded after you have given consent via our cookie banner.

When you use the chat, the text you enter, your IP address and technical browser data are transmitted to Chatbase to generate a response. Transfers to the USA are based on the EU Standard Contractual Clauses.

Legal basis: Art. 6(1)(a) GDPR (consent). Please do not enter sensitive personal information (such as financial data or identification numbers) in the chat.

10. Other Embedded Services

Maps (Mapbox): We use Mapbox, provided by Mapbox Inc., USA, to show the locations of our homes on interactive maps. When a map is loaded, your IP address and technical browser data are transmitted to Mapbox. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a clear presentation of our locations).

Virtual tours (Giraffe360): Some property pages offer virtual 3D tours provided by Giraffe360 Ltd., United Kingdom. The tours are only loaded after you have given consent via our cookie banner. Legal basis: Art. 6(1)(a) GDPR (consent).

Website statistics (Ahrefs Web Analytics): We use Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd., Singapore, to understand which pages are visited. This service does not use cookies and only produces aggregated statistics. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving our website).

WhatsApp: Our website contains links to contact us via WhatsApp. Data is only transmitted to WhatsApp Ireland Limited when you click such a link and start a conversation. The privacy policy of WhatsApp applies to the conversation.

11. Data Retention

We retain personal data only as long as necessary:

  • Inquiries submitted via our forms → stored in our website system to process your request and any resulting reservation; inquiries that did not lead to a reservation are deleted after 24 months at the latest

  • Reservation data → as long as statutory retention periods (for example under German commercial and tax law) require

  • Server logs → according to hosting provider retention period

  • Analytics and advertising data → according to the Google Analytics and Google Ads settings

12. Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Object to processing (Art. 21 GDPR)

You may lodge a complaint with a supervisory authority.

Responsible authority in Germany:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Germany
https://www.datenschutz.rlp.de/

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to comply with legal requirements or reflect changes in our services.

Last updated: October 2026.