Privacy policy

Convenience translation. Only the German version is legally binding.

As of 24 October 2026

Privacy policy

This policy applies to the website https://immovisio.net, including ordering and the customer portal, and to the tour pages at https://….immovisio.net. Older tours can also be reached at https://….3d-roomtour.de; this policy applies to them as well.

1. Controller

RS Innovations GmbH, Hauptstraße 31, 59872 Meschede, Deutschland Managing director: Robin Strang Email: info@immovisio.net

You can reach us at this address for all questions about data protection.

2. Visiting the website

Server log files. On every access, our server stores the IP address, date and time, the address accessed and the browser identifier. The purpose is secure and stable operation. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest is secure operation. We delete the log files after 14 days.

Cookies and consent. We set technically necessary cookies without consent: for signing in to the customer portal (for up to 30 days or until you sign out), for the language you select, for the price list of your region (euros, pounds sterling or US dollars; your browser derives the region from its time zone, without any evaluation of your IP address; until the end of the session) and for the unit of area you choose (sq ft or m², 12 months), to protect forms against misuse, so that you can reopen the confirmation page after an order (for up to 90 days), and to store your choice in the cookie banner (12 months). The legal basis for storage on your device is § 25 Abs. 2 Nr. 2 TDDDG, and for the processing Art. 6 Abs. 1 lit. b and f DSGVO. We set cookies for statistics and advertising (Google Analytics and Google Ads, see below) only if you agree in the cookie banner. Without your consent, your browser loads nothing from Google. You can change or withdraw your choice at any time with effect for the future, using the “Cookie settings” link at the bottom of every page.

Audience measurement. We count page views with Plausible Analytics, which we run ourselves on our server in Germany. Plausible sets no cookies, does not access your device and stores no IP addresses: an identifier is formed from the IP address and browser identifier together with a random value that changes daily, and it is discarded after 24 hours. This only produces aggregated statistics (for example pages viewed, referring website, country, device type) without reference to individual persons. The data is not passed on to anyone. We do not load any statistics in the customer portal. Our server reports paid purchases of plans and credits to Plausible, only with the plan or number of credits and the net amount, without name, email address or IP address. The purpose is to improve the website. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest is a data-minimising analysis of usage. You can object (see no. 9).

Google Analytics and Google Ads (only with consent). If you agree, the website loads Google Tag Manager and, depending on your choice, Google Analytics 4 (category “Statistics”) and Google Ads (category “Marketing”). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager does not evaluate any data itself; it only loads the services you have agreed to. We do not load Google in the customer portal or on the tour pages. If you had consented to statistics when you subscribed to or changed a plan or bought credits, our server reports the paid purchase to Google Analytics: with the pseudonymous identifiers from the Google cookies (_ga), the internal purchase number, the plan or credits, the net amount and whether you consented to marketing, so that the purchase can be attributed to your visit. We keep the identifiers for this purpose only until this report, for at most 45 days. We do not report plan renewals to Google. Without your consent this does not happen.

• Google Analytics sets cookies (for example _ga) and records which pages you visit, how you came to the website, device and browser information, your approximate region and events such as a submitted order (order number, level of detail, net amount) or a project request. According to Google, Google Analytics 4 does not store IP addresses. The purpose is to understand how the website is used and to improve it. For Google Analytics, Google is our processor (Art. 28 DSGVO).
• Google Ads sets cookies (for example _gcl_au) and records whether you came to us via one of our ads and then placed an order or sent a request (conversion measurement). We can also show relevant ads from us to visitors of our website later (remarketing). The purpose is to measure the success of our advertising and to use it in a more targeted way. Google processes this data as an independent controller, also for its own purposes; see https://policies.google.com/privacy and https://business.safety.google/privacy/.

We do not pass your name, email address or other form entries to Google; we remove form and order data from the page addresses that are transmitted. Google also transfers data to Google LLC in the USA. The legal basis is your consent (§ 25 Abs. 1 TDDDG, Art. 6 Abs. 1 lit. a DSGVO), and for the transfer to the USA the adequacy decision on the EU-US Data Privacy Framework (Art. 45 DSGVO), under which Google LLC is certified.

3. Orders, customer portal and emails

When you place an order, we process your name, email address, telephone number (voluntary), company, customer type, language and the country of your billing address, for businesses outside Germany also the billing address and, voluntarily, the VAT ID or tax number, the order data (level of detail, floor area, use, price, listing link, property address, notes) and your messages and replies to queries.

The purpose is the conclusion and performance of the contract, including the customer portal, invoicing and communication. The legal basis is Art. 6 Abs. 1 lit. b DSGVO; if you order for a business, we process the contact person’s data under Art. 6 Abs. 1 lit. f DSGVO. Statutory retention duties are covered by Art. 6 Abs. 1 lit. c DSGVO. We check the VAT ID of a business in another EU member state with the VAT Information Exchange System (VIES) of the European Commission; we only transmit the number and receive the result with the name and address of the business (Art. 6 Abs. 1 lit. c DSGVO in conjunction with § 18e UStG). We need the information marked as mandatory for the contract; without it, an order is not possible.

If you use the withdrawal function or the button “Verträge hier kündigen” (cancel contracts here), we process your details (name, email address, order reference or tour link, content and time of the declaration) and the IP address in order to assign, confirm and be able to prove the declaration (Art. 6(1)(c) and (f) GDPR).

Project requests. Through the request form on our pages for the different target groups, we process your company, name, email address, telephone number (voluntary), the details you give about the project (for example type and number of units, floor area, planned start) and your message. The purpose is to answer your request and to provide you with a quote. The legal basis is Art. 6 Abs. 1 lit. b DSGVO (pre-contractual measures); if you make a request for a business, we process the contact person’s data under Art. 6 Abs. 1 lit. f DSGVO. We create the request as a contact with a note in HighLevel’s CRM and forward it to our team by email. We store a copy on our server without the IP address.

In the customer portal you sign in without a password, using a link that we send you by email. We keep customer data, orders and invoices in HighLevel’s CRM, through which we also send our emails.

4. Creation of the tour

Your materials. We use floor plans, photographs, listing data and the property address only for your order. We do not publish photographs, and the tour does not show the property address. Please avoid uploading photographs in which people, identity documents or other personal papers can be recognised.

Artificial intelligence. When creating the tour, we use AI models from Anthropic (Claude). For this purpose we transmit floor plans, photographs, listing data and, where necessary, the property address to Anthropic. Anthropic is our processor, does not use the data to train AI models under the agreed terms, and, according to its own information, generally deletes them within 30 days.

Surroundings. For terrain, neighbouring buildings and aerial imagery, our servers query public geoservices. In doing so we transmit only the property address or map coordinates, not names or contact details.

Reuse. We may reuse general furniture models and technical parameters that do not relate to a person for later orders. We use your photographs and textures derived from them only for your order.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO. Where photographs show other people, we rely on Art. 6 Abs. 1 lit. f DSGVO (interest in performing the order).

5. Payment

We create your invoice in the CRM. Payment is made online via Stripe. We do not receive your full payment details, only the payment status. Stripe processes data in part as its own controller, for example for fraud prevention and to comply with statutory duties; details are at https://stripe.com/de/privacy. The legal basis is Art. 6 Abs. 1 lit. b and c DSGVO.

6. Tour pages and embedding

Anyone who opens a tour generates server log files as described in section 2. The tour pages do not set cookies. Your browser only stores display settings locally on your device, such as viewing direction or quality level (§ 25 Abs. 2 Nr. 2 TDDDG). Tours do not subsequently load content from third parties and are blocked from search engines (noindex).

If a customer embeds a tour on their website, the visitor’s browser loads the tour from our server. The operator of that website provides information about this in their own privacy policy.

Statistics for 3D tours

We also measure the reach of tours with Plausible Analytics on our own server. The statements about cookies, IP addresses and the identifier that changes daily in “Audience measurement” under section 2 also apply here. In addition, we record the tour identifier, whether it was opened as an embedded tour, the language, whether the visitor interacted with it, and the active usage time. Events are sent from the tour to our tour server and from there to our Plausible server. The IP address is passed on only to create the identifier that changes daily and is not stored. This produces aggregated statistics for our customers without reference to individual persons. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest is measuring reach for our customers.

7. Recipients and transfers to third countries

You can obtain a copy of the standard contractual clauses on request at info@immovisio.net. Authorities receive data only where we are legally obliged to provide it. We do not sell data. We use data for advertising only with your consent, as described in no. 2.

8. Storage period

• Server log files: 14 days.
• Choice in the cookie banner: 12 months (cookie on your device); cookie for the confirmation page: up to 90 days.
• Google Analytics: event data 14 months, cookies up to 2 years. Identifiers for the purchase report on our server: until the report, at most 45 days. Google Ads: cookies up to 90 days. When you withdraw consent, we delete the Google cookies on your device.
• Declarations of withdrawal and cancellation: 3 years; we delete the IP address after 14 days.
• Project requests: the copy on our server for 6 months; in the CRM until the end of the third year after the last contact, unless an order results from the request.
• Materials (floor plans, photographs, listing data): until 6 months after the tour is made available.
• Tour: for the agreed period of availability (6 months, or longer in the case of an extension).
• Customer data and order history: until the end of the third year after your last order (statutory limitation period).
• Invoices and accounting records: 8 years; business correspondence: 6 years, in each case from the end of the calendar year (§ 147 AO, § 257 HGB).
• At Anthropic: generally up to 30 days.

9. Your rights

You have the right of access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An email to info@immovisio.net is sufficient. You can withdraw consent at any time with effect for the future (Art. 7 Abs. 3 DSGVO); for Google Analytics and Google Ads, use the “Cookie settings” link at the bottom of every page.

You may lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO). The authority competent for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, poststelle@ldi.nrw.de, https://www.ldi.nrw.de.

No automated decision-making within the meaning of Art. 22 DSGVO takes place. The AI assists in building the tour, but it does not make a decision about you.

Right to object (Art. 21 DSGVO) Where we process data on the basis of Art. 6 Abs. 1 lit. f DSGVO (for example server log files), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, or the processing serves the establishment, exercise or defence of legal claims. An email to info@immovisio.net is sufficient.