Privacy.

01Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

02Data protection officer

You can reach our data protection officer at:

03General information

Scope of processing

This website primarily provides information about Tuchfabrik Berlin and its rental spaces. We only process personal data where this is necessary for a functioning website, for handling your enquiries, or for initiating and performing tenancies.

Legal bases

Depending on the purpose, we rely on the following legal bases under the GDPR:

• Art. 6(1)(a) – your consent
• Art. 6(1)(b) – performance of a contract or pre-contractual steps, for example a rental enquiry or viewing
• Art. 6(1)(c) – compliance with a legal obligation, for example retention duties under commercial and tax law
• Art. 6(1)(f) – our legitimate interests, unless your interests override them, for example the secure operation of the website

Retention and erasure

We erase personal data or restrict its processing as soon as the purpose of storage no longer applies. We only keep data for longer where statutory retention periods require it; once these expire, the data is erased.

Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

04Hosting and server log files

This website is hosted in Germany by:

The host processes the data generated when the website is accessed on our behalf. We have concluded a data processing agreement with the host under Art. 28 GDPR.

Each time you access the website, your browser automatically sends information to the server. This is stored in server log files:

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• referrer URL (previously visited page), if transmitted
• browser type and version, operating system

Purpose

Delivering the website, ensuring stability and security, preventing and investigating attacks. The data is not analysed for marketing purposes.

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest is the secure and error-free operation of the website.

Retention

Server log files are deleted after six months. Data that must be kept as evidence is excluded from erasure until the incident has been resolved.

Collecting this data is strictly necessary for operating the website.

05Cookies, fonts, tracking

This website does not set any cookies and does not use any analytics, tracking or advertising services. The language selection (German/English) is part of the page address and is not stored in your browser.

All fonts are stored on and loaded from our own server. No connection to third-party servers, such as Google's, is made when you visit the site.

06Contact by email and phone

If you contact us by email or phone, we process the information you provide (for example your name, contact details and the content of your enquiry) in order to handle your request.

Legal basis

Art. 6(1)(b) GDPR where your enquiry relates to a tenancy or its initiation; otherwise Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries addressed to us.

Retention

Until your enquiry has been fully dealt with. If a lease is concluded or statutory retention duties apply, the corresponding periods apply.

07Viewing and contact requests

You can use the enquiry form on our contact page to request a viewing or general information about our spaces. We process:

• the space you are interested in (or “no specific space”)
• name and company
• email address and phone number
• intended use of the space
• the viewing times that suit you and, optionally, a specific preferred date
• optionally, your message

We use this information to review your request, suggest suitable spaces and arrange a viewing with you. We confirm the appointment by email; it is only agreed once we have confirmed it.

Transmission by email

When you submit the form, your details are sent as an email to our mailbox via the mail server of our host (see section 04). You also receive an automatic acknowledgement with a summary of your details at the email address you provided. The form data is not stored on the web server, and no external form or booking service is used.

To protect against automated spam, the form contains a field that is invisible to people and transmits how long it took to fill in. No cookies are set for this and no data is passed on to third parties.

Further information on processing in the subsequent letting process can be found in our privacy information for prospective tenants (PDF, German).

Legal basis

Art. 6(1)(b) GDPR (pre-contractual steps taken at your request).

Required fields

We cannot process your request without the information marked as required.

Retention

If no tenancy results, we erase your details no later than six months after your enquiry has been closed. If a tenancy results, the periods of the contractual relationship and statutory retention duties apply.

08Online meetings with Zoom

For conversations with tenants and prospective tenants, we use “Zoom” for online meetings, video and phone conferences. The provider is Zoom Communications, Inc., 55 Almaden Boulevard, Suite 600, San Jose, CA 95113, USA.

Online meetings are held via the Zoom account of GEMAG Hausverwaltung, the property management company for Tuchfabrik Berlin. The controller for processing directly related to these online meetings is:

If you visit Zoom's website, Zoom itself is responsible for processing there. You can also join our meetings via the Zoom app or the browser version by entering the meeting ID and, where applicable, a passcode.

Data processed

• Personal details: name, email address, optionally phone number and profile picture
• Meeting metadata: topic, optional description, participants' IP addresses, device and hardware information, start and end time
• Dial-in by phone: incoming and outgoing phone number, country, start and end time
• Text, audio and video data: chat entries and data from your device's microphone and camera for the duration of the meeting. You can switch off your camera and microphone at any time.

You need to provide at least a name to take part. We do not normally record meetings. If a recording is exceptionally necessary, we will inform you in advance and, where required, ask for your consent; Zoom will also show you that the meeting is being recorded. We only log chat content where this is necessary to document results.

Legal basis

Art. 6(1)(b) GDPR where the meeting takes place in the context of an existing or prospective tenancy; otherwise Art. 6(1)(f) GDPR. Our legitimate interest is conducting online meetings effectively. For recordings, Art. 6(1)(a) GDPR applies.

Recipients

Zoom receives the above data to the extent provided for in the data processing agreement under Art. 28 GDPR between GEMAG Hausverwaltung and Zoom. We do not otherwise pass meeting data to third parties unless it is intended to be shared.

Third-country transfer

Zoom also processes data in the USA. Zoom is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Art. 45 GDPR. In addition, EU Standard Contractual Clauses under Art. 46(2)(c) GDPR are in place.

Retention

We erase meeting data as soon as it is no longer needed for its purpose and no retention duties apply.

09Your rights

If we process your personal data, you have the following rights:

• Access to the data we process, its purposes, recipients, retention period and source, and to information on appropriate safeguards for transfers to third countries (Art. 15 GDPR)
• Rectification of inaccurate or completion of incomplete data (Art. 16 GDPR)
• Erasure of your data unless legal grounds prevent it (Art. 17 GDPR)
• Restriction of processing, for example while the accuracy of your data is being verified (Art. 18 GDPR)
• Notification of recipients about rectification, erasure or restriction (Art. 19 GDPR)
• Data portability of the data you have provided, in a common machine-readable format (Art. 20 GDPR)
• Withdrawal of consent at any time with effect for the future; processing carried out before withdrawal remains lawful (Art. 7(3) GDPR)

An informal message to the controller or our data protection officer is sufficient to exercise your rights. For requests not made in writing, we may ask you to verify your identity.

10Complaints to the supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:

11Changes

We update this privacy policy when the website, our services or the legal situation change. The version published here applies.

As of: October 2026