(as of November 2022)
With respect to the handling of the data from your internet visit, we observe the relevant legal regulations, such as the German Federal Data Protection Act, the German Telemedia Act and the provisions of the EU General Data Protection Regulation. For you, this means:

  • You can browse our website anonymously.
  • You decide which personal data you send to us and for what purpose we may process or use it.
  • Of course, you can revoke your consent to the processing or use of your data at any time with effect for the future.
  • We respect your rights under the aforementioned data protection laws, such as the right to information about the data we hold about you.
  • It goes without saying that our security measures in information processing comply with the state of the art and the legal requirements.
  • Our employees are bound to secrecy.
  • Compliance with our privacy policy is monitored by the company’s data protection officer. If you have any questions, you are also free to contact him directly by e-mail.

Security measures
If you send messages to us from the website using the contact form, the data is transmitted in encrypted form. We use the SSL encryption method, which is also recommended by the German Federal Office for Information Security (BSI).
We use the e-mail address you provide for the sole purpose of sending you the requested information by e-mail. As a rule, we do not send information concerning contractual matters by e-mail. In this case, you will receive a reply by post. Whether e-mails are transmitted in encrypted or unencrypted form depends on the support provided by the respective provider. For this reason, it is possible that they may not be protected against unauthorised access, falsification, etc. In addition to the German Federal Data Protection Act, we are legally obliged to observe banking secrecy and to protect personal data, in particular contract data, against access by unauthorised third parties. For this reason, we do not generally transmit contract data unencrypted via the internet. 

Privacy notice
As we take the protection of your data very seriously, it is important to us that you know by whom, when and for what purposes data is collected and used in connection with our website.
By using our website and its content, you agree to the data collection and data processing described below:

  1. Personal data
    If you contact us via one of the contact forms on our website, request documentation on our offers or wish to be called back or arrange an appointment, we ask you to provide personal data such as your first name and surname, address, telephone number and e-mail address. We collect this data to process your enquiry and in particular to send you your requested documents. For this purpose, the data is stored in electronic form. The data on the contact forms is sent to us in encrypted form (as far as technically possible).
  2. Anonymised data
    When you visit our website, the following data is automatically stored on our server:
    • Date and time of your visit to our website
    • IP address (host name of the accessing computer)
    • Operating system used and browser type/version
    • Search terms used
    • Referrer URL (previously visited website)

This data is collected anonymously so that it cannot be assigned to specific persons. They are only used for the statistical evaluation of visits to our website and are not combined with personal data. We use this data to constantly improve our website and our offers for you.

        3. Cookies
We use session cookies on our website. The data is not stored permanently. The use of temporary cookies offers you the advantage that you do not have to repeatedly enter your personal data when filling out various forms on our website: The cookies are automatically deleted when you close the browser.
A cookie refers to information that a web server sends to a browser that the browser in turn sends back when accessing this web server. Cookies extend the stateless hypertext transfer protocol by enabling information to be stored between visits. A distinction can be made between persistent cookies and session cookies. The former are stored permanently (for example on the hard disk), while the latter are only stored for the length of a session.
Most browsers are set to accept cookies automatically. However, you can disable the storage of cookies or set your browser to notify you as soon as cookies are sent.
Additional information on the use of cookies can also be found on the website of the German Federal Office for Information Security.

       4. Google analytics web analytics service
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the link below (
You can find more information on this at or at (general information on Google Analytics and data privacy). We would like to point out that, on this website, Google Analytics has been expanded to include the code “gat._anonymizeIp();” in order to ensure the anonymised collection of IP addresses (“IP masking”).

       5. External service providers
We have commissioned an external service provider for the technical implementation, maintenance and upkeep of our website. The service provider is obligated to process the data that accumulates within the scope of our website exclusively according to our instructions. The service provider is of course subject to the aforementioned provisions and does not pass on data to third parties.

      6. Changes to this privacy notice
We will update this privacy notice if necessary depending on current circumstances, such as an amendment to the German Federal Data Protection Act or the EU General Data Protection Regulation.

      7. Links to other providers
Our website also contains links to websites of other providers to which our privacy notice does not extend. As a rule, we have no influence on the content and compliance with data protection regulations by these providers and therefore ask you to inform yourself about the guidelines applicable there when visiting these websites.

(as of November 2022)

1. Name and address of the data controller
wbg Nürnberg GmbH Immobilienunternehmen
Glogauer Straße 70
90473 Nuremberg

2. Managing Directors
Frank Thyroff
Ralf Schekira

3. Data protection officer
The company’s data protection officer can be contacted at the above address, for the attention of the data protection officer, or at

4. Purpose of data collection, processing or use
The purpose of wbg Nürnberg GmbH Immobilienunternehmen is to provide housing to broad sections of the population and to take on related economic tasks.
It can assume responsibility for any tasks arising in the field of housing, urban development and infrastructure, acquire, mortgage and sell developed and undeveloped properties and issue leaseholds. It may provide community facilities and ancillary facilities, shops and commercial buildings, social, economic and cultural facilities and services. The company may establish subsidiaries, acquire, lease, dispose of or participate in other enterprises, enter into co-operations with other enterprises or enter into joint venture agreements. It may also engage in other business, provided that it is (directly or indirectly) beneficial to the company purpose, in particular facility management and development.

The collection, processing and use of data is carried out for the purposes stated, in particular in connection with:

  • Letting of housing space
    • Initiation and implementation of a quasi-contractual relationship
    • Management of interested parties
    • Rental management
    • Settlement (rent, operating costs, etc.)
    • Management

Legal basis: Contract / contract initiation, Heating Costs Ordinance, registration laws

  • Sale of real estate
    • Planning and implementation of portfolio sales or property development

Legal basis: Contract / contract initiation

  • Employment relationships (employees)
    • Conclusion, implementation and termination of employment relationships

Legal basis: Contract / contract initiation, German Income Tax Act (EStG), Social Security Codes, Works Constitution Act

  • External management, third-party management, business management
    • Initiation and implementation of a quasi-contractual relationship
    • Management of interested parties
    • Rental management
    • Settlement (rent, operating costs, etc.)
    • Management

Legal basis: Contract / contract initiation

  • Condominium management
    • List of owners
    • Collection of resolutions
    • Maintenance costs statement
    • Safeguarding the legal interests of the condominium community

Legal basis: Contract, Condominium Act

5. Recipients or categories of recipients to whom the data may be disclosed

  • Internal recipients
    • Other departments of wbg Nürnberg GmbH Immobilienunternehmen entrusted with processing activities relating to the fulfilment of obligations arising from the contractual relationship
    • For safeguarding the legitimate interests of wbg Nürnberg GmbH Immobilienunternehmen (e.g. claims management)
    • Employee representation in the context of the initiation or implementation of an employment relationship
  • External recipients
    • IT service providers or software system houses for IT applications (e.g. external IT administration, ERP system manufacturers etc.)
    • Tax advisors, auditors, consultants
    • Lawyers
    • Metering service companies
    • Tradespeople (especially maintenance, modernisation, repairs, special requests)
    • Debt collection companies
    • Credit agencies
    • Banks
    • Prospective tenants for subsequent leasing
    • Energy supply companies
  • Offices and authorities
    • Nuremberg Social Welfare Office
    • Courts
    • Tax office
    • Working group/job centre
    • Residents’ registration office
    • Federal Central Tax Office

6. Standard periods for the deletion of data/duration of storage
According to the legal retention periods or information on the respective forms

7. Planned data transfer to third countries
There are currently no plans to transfer data to third countries. Otherwise, the relevant legal requirements will be met.

8. Data subject rights
Data subjects have the right to:

  • Information about their stored and processed personal data (Art. 15 GDPR)
  • Correction of stored personal data (Art. 16 GDPR)
  • Deletion of data no longer required (Art. 17 GDPR)
  • Restriction of the use of data (Art. 18 GDPR)
  • Objection (particularly in the case of previously given consent) (Art. 21 GDPR)
  • Data portability (Art. 20 GDPR)

Please direct enquiries regarding the safeguarding/implementation of your rights to:


9. Right of complaint to a supervisory authority
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR or the German Privacy Act (BDSG). Please address complaints to the Bavarian Office for Data Protection Supervision at

10. Information regarding the provision of personal data
All data provided to wbg Nürnberg GmbH Immobilienunternehmen is necessary to ensure the implementation of a tenancy, a property purchase, the management of residential property or an employment relationship.
In each of these cases, the collection, processing and use of the personal data of the data subjects relates to a corresponding contractual relationship or the initiation of a contractual relationship or to legal requirements.

11. Automated decision-making (§ 13 para. 2f GDPR)
Automated decision-making does not take place.