We are very pleased that you are interested in our company. Data protection is of particular importance to the management of CM Immobilienmanagement GmbH. Use of the websites of CM Immobilienmanagement GmbH is generally possible without providing any personal data.
However, if a data subject wishes to make use of certain services of our company via our website, processing of personal data could become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data — for example a name, address, e-mail address or telephone number — is always carried out in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to CM Immobilienmanagement GmbH.
The data controller within the meaning of the General Data Protection Regulation is:
CM Immobilienmanagement GmbH
Friedrich-Ebert-Straße 134
42117 Wuppertal
Germany
Phone: +49 202 261 598 40
E-mail: info@cm-immo.eu
Website: www.cm-immo.eu
The data protection officer of the controller is:
Sascha Twesten
CM Immobilienmanagement GmbH
Friedrich-Ebert-Straße 134
42117 Wuppertal
Germany
Phone: +49 202 261 598 40
E-mail: info@cm-immo.eu
Any data subject may contact our data protection officer directly at any time with any questions or suggestions on data protection.
This privacy policy is based on the terminology used by the European legislator in adopting the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person.
Processing means any operation or set of operations performed on personal data, whether or not by automated means — from collection through storage to deletion.
Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of personal data relating to them.
Our website collects a series of general data and information with each call-up by a data subject or automated system. These data are stored in the server log files. The following may be collected:
When using these general data and information, we draw no conclusions about the data subject. Rather, this information is needed to (1) deliver the contents of our website correctly, (2) optimize the contents, (3) ensure the lasting functionality of our systems and (4) provide law-enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack.
Our website itself does not set any cookies that require consent. Technically necessary storage: your decision in the consent dialog is stored in your browser's local storage (localStorage, entry "cmi_consent") so that the dialog does not reappear on every page view. The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. The entry expires after twelve months.
Cookies and comparable technologies from third parties (Google Analytics, EmbedSocial) are only set after you have given your consent in the consent dialog (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your selection at any time via the "Cookie settings" link in the footer. Withdrawal applies for the future; third-party cookies already set are removed.
Independently of this, you can prevent cookies from being set via your browser settings and delete cookies that have already been set.
With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and comparable technologies to evaluate the use of our website (pages viewed, time spent, approximate location, device used). Google truncates the IP address before storing it; data is only combined with other Google data if you are logged in to Google and have consented to this there.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via "Cookie settings" in the footer. Without consent, Google Analytics is not loaded; we additionally use Google Consent Mode so that no measurement data is transmitted before consent is given.
Data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses apply in addition. A data processing agreement is in place with Google. Google retains user-level data for 14 months.
Further information: https://policies.google.com/privacy
The fonts used on this website (Fraunces, Manrope) are served locally from our own server. No connection is made to servers of Google or other font providers.
If a data subject contacts us by e-mail or via a contact form, the personal data transmitted are stored automatically. Such personal data transmitted on a voluntary basis are stored for the purpose of processing or contacting the data subject. There is no transfer of these personal data to third parties.
We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage, or where this has been provided for by the legislator. If the storage purpose ceases to apply, or if a prescribed storage period expires, the personal data are routinely blocked or erased in accordance with statutory provisions.
Every person affected by the processing of personal data has the following rights:
To exercise your rights, you may contact us at any time — most easily by e-mail at info@cm-immo.eu.
We collect and process personal data of applicants for the purpose of conducting the application procedure. Processing may also take place electronically — in particular when an applicant submits their application documents to us by e-mail or via a web form.
If we conclude an employment contract with an applicant, the data transmitted are stored for the purpose of administering the employment relationship in compliance with statutory provisions. If no employment contract is concluded with the applicant, the application documents are automatically erased two months after notification of the rejection decision, provided no other legitimate interests of the controller stand against erasure.
We embed posts from our LinkedIn company profile on our home page using the widget provided by EmbedSocial Limited DOOEL Skopje, ul. Vasil Gjorgov 22A, 1000 Skopje, North Macedonia (hereinafter "EmbedSocial").
The feed is only loaded once you have agreed to "External content" in the consent dialog or clicked "Load posts" in the placeholder. Only then is content loaded from the servers of EmbedSocial's server and, where applicable, from LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). In particular, your IP address, browser and device information, the time of access and possibly referrer information are transmitted to these providers.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. A data processing agreement is in place with EmbedSocial; the EU standard contractual clauses apply to the transfer to North Macedonia.
You can withdraw your consent at any time via "Cookie settings" in the footer. The feed will then no longer be loaded.
For more information on the data processing carried out by the providers mentioned, please refer to their privacy policies:
EmbedSocial: https://embedsocial.com/privacy-policy/
LinkedIn: https://www.linkedin.com/legal/privacy-policy
We operate an AI-powered chat assistant named "Emmi" on our website. Emmi appears as a small chat button in the bottom right of every page and can be opened voluntarily by you. Processing of your input only takes place after you click the button and send a message.
To answer your questions, your messages are transmitted via our own server proxy to Anthropic PBC, 548 Market St PMB 90375, San Francisco, CA 94104, USA ("Anthropic"), which operates the underlying language model ("Claude"). Only the text of your messages and technically necessary metadata (including IP address, time of request) are transmitted. We do not permanently store your messages.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in offering visitors to our website a low-threshold way to receive quick answers to frequently asked questions.
Since data is transmitted to a third country (USA), we would like to point out that a data processing agreement is in place with Anthropic. Anthropic is certified under the EU-U.S. Data Privacy Framework. Please do not transmit any special categories of personal data (e.g. health or financial data) or confidential information via the chat. For binding information or the transmission of sensitive data, please use our contact form or contact us directly.
For more information on data processing by Anthropic please refer to: https://www.anthropic.com/legal/privacy
You have the right to lodge a complaint with a data-protection supervisory authority — in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).
Last updated: September 2026