- processes the personal data of website and property app users for the following purposes:

• Fulfilment of users' contact enquiries (legal basis is the fulfilment of the contract and - in the event of the user data being passed on - the legitimate interest of FIRST ACCESS in passing on contact or service enquiries within the FIRST ACCESS Group to companies / licence partners that are competent in terms of subject matter or geography. The "FIRST ACCESS Group" as defined above includes FIRST ACCESS and its domestic and foreign affiliated companies within the meaning of § 15ff of the German Stock Corporation Act (Aktiengesetz) as well as the (master) licence partners affiliated to this group of companies. You can obtain a current overview of these licence partners here: https://www.engelvoelkers.com/en-de/company/locations/);

• Fulfilment of the request for an evaluation of the property described by the user in line with the market price as well as the interest in making a sale transmitted with it (legal basis is the fulfilment of the contract as well as, in the event that the user enters contact details and these are passed on to companies of the "FIRST ACCESS Group" with legal or geographical responsibility or to the company responsible for the evaluation, your consent as well as, in the event that the contact details are used for direct marketing, the legitimate interest of FIRST ACCESS in marketing its own services);

• Contact via telephone by FIRST ACCESS or the FIRST ACCESS Group (legal basis is the fulfilment of the contract or, if the telephone number is used to advertise similar goods and services, the legitimate interest to advertise FIRST ACCESS services in the context of direct marketing);

• The forwarding of e-mail newsletters (website only) containing the company’s own offers and advertising by the company or third parties to the legally permissible extent or based on consent. (Legal basis is either the consent or the legitimate interest of FIRST ACCESS in the context of direct marketing, providing this is in accordance with data protection and competition rules);

• For the functionality and optimisation of the FIRST ACCESS website and property app. (Legal basis is the legitimate interest of FIRST ACCESS toin continuously improveing the quality of the website and property app and ensure its ease of use);

• Analysis of the website and property app for determining user behaviour. (Legal basis is consent.);

• Identification and possible blocking of users who have installed a so-called adblocker and who thereby block advertising. (Legal basis is the legitimate interest of FIRST ACCESS of providing users who do not block advertising with wholly or partially web-financed offers);

• In order to prevent fraudulent activities or misuse on the website or in connection with the website or property app and to observe the legal stipulations for secure websites. (Legal basis is the legitimate interest of FIRST ACCESS in eliminating faults, ensuring system security, and identifying unauthorised access attempts or accesses.)

The legal basis for the processing of personal data is GDPR Article 6(1)(a), if the processing is based on consent, Article 6(1)(b) if the basis for processing is a contractual relationship and Article 6(1)(f) if the basis for processing is FIRST ACCESS’s legitimate interests. If the legal basis is your consent, you are entitled to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. If the legal basis is a legitimate interest, you are also entitled in principle to object to the processing of your personal data at any time for reasons arising from your particular situation. Article 21 GDPR applies in this respect. Nature of provision of personal data and consequences of objection The provision of personal data by users is voluntary. They may freely decide whether to make personal data available to FIRST ACCESS and may subsequently revoke their consent to the processing of personal data which has already been made available. Revocation may mean that the FIRST ACCESS website is no longer usable. Access to data The personal data is processed by FIRST ACCESS and (with respect to individual items) particularly by

• Employees (permanent employees such as employees and independent property consultants) and consultants authorised to administer the website and property app and provide the associated services.

• Third-party supplier companies (e.g., IT service providers, hosting providers, etc.) to which FIRST ACCESS has outsourced processing services as part of a job processing agreement.

Information about the data As the responsible authority we are able to provide information about your personal data. However, this information may only be given for the following reasons:

• In the case of fulfilment of legal obligations or obligations arising from regulations and guidelines under national or European laws.

• For defence in court in the case of a legal dispute.​

Disclosure of data  If your query relates to offers from other companies of the FIRST ACCESS Group, FIRST ACCESS transfers the personal data entered by you in this case to the respective company from the FIRST ACCESS Group with your prior consent or on the basis of its legitimate interests. Other than this, your personal data will not be disclosed by FIRST ACCESS. Disclosure of data in non-EEA countries FIRST ACCESS will not transfer any personal data to non-EEA countries without your consent. The servers used by FIRST ACCESS are located within the European Union. If your query relates to companies of the FIRST ACCESS Group outside the European Union, we will transfer your data after obtaining your consent. In cases where personal data is transferred to countries that do not offer the same level of protection as within the European Union and you have not expressly agreed to the transfer of your data to those countries by way of your consent, FIRST ACCESS will ensure that certain contractual obligations under applicable data protection law (including the execution of standard contractual clauses approved by the European Union) are agreed with each service provider, unless FIRST ACCESS can invoke other legal grounds for the transfer of personal data. Saving and deleting of data FIRST ACCESS saves personal data for the time necessary for achieving the purposes for which the data was collected and processed, including any retention period stipulated under the applicable legislation (e.g. retention of accounting records) and in any case for a maximum of 24 months after the personal data was collected. Use of cookies and other tracking technologies In addition to the above-mentioned processing of personal data, cookies and other tracking technologies are stored on your end device during or after your visit to FIRST ACCESS. Cookies are small text files that are sent when visiting our website or property app and stored in the user's browser. If the corresponding website is called up again, the user's browser sends the contents of the cookies back and thus enables the user to be identified. Third party technologies such as scripts, pixels, and tags, which FIRST ACCESS integrates for advertising purposes, also set cookies on your end device. Certain cookies are automatically deleted at the end of the browser session (so-called session cookies), others are stored in the user's browser for a specified time or permanently and then delete themselves automatically (so-called temporary or permanent cookies). Which cookies does FIRST ACCESS use in general? Depending on their function and purpose, cookies are divided into various categories by FIRST ACCESS. "Essential" and "functional" cookies are required to enable FIRST ACCESS to provide the online offering in a secure and user-friendly manner. This category includes, for example,

• cookies that serve to identify or authenticate our users and

• cookies that temporarily store certain user entries.​

These cookies enable you to navigate through the FIRST ACCESS online offers and use the functions as desired. Without these cookies, essential services of FIRST ACCESS cannot be provided. They are only used when you visit our online offers and are usually deleted after closing your browser. They are also used to retrieve the optimised website display when accessed with a mobile device, so that your data volume is not unnecessarily depleted. The legal basis for setting these cookies is the legitimate interest of FIRST ACCESS that the online services can be used securely and easily and that the quality of the online services and content is constantly improved. No consent is required for the use of "essential" and "functional" cookies. They cannot be deactivated. FIRST ACCESS also uses cookies for analytical ("analytical cookies") and advertising purposes ("advertising" cookies). FIRST ACCESS uses the profiles created with the help of these cookies for statistical information on the use of FIRST ACCESS online services and to display advertising or offers which are tailored to your interests ("interest-based advertising"). The legal basis for the use of these cookies is your consent. Which cookies does FIRST ACCESS use in particular? You can find out which cookies FIRST ACCESS uses in particular via this link. This list also contains the duration of the storage and other helpful information. How can you manage and prevent the use of cookies or delete cookies? You can use FIRST ACCESS without "analytical" cookies, "advertising" cookies and other web tracking mechanisms. Please click on this link to disable these cookies and tracking mechanisms. In this case, only the “essential” and “functional“ cookies remain, which are necessary for the use of the online offers. You can also deactivate the storage of cookies via your browser settings and delete previously stored cookies in your browser at any time. Please note, however, that this online offer may not function or may only function to a limited extent without cookies. We also recommend that you visit the website of www.YourOnlineChoices.com, where you can obtain information and assistance in connection with web tracking mechanisms. A central opt-out option for various tools, in particular from US American providers, is also available at the following link: optout.networkadvertising.org. Links to social media pages This website contains links to the main social media network sites (e.g., Facebook and Instagram). These are not embedded social media plug-ins, but a link through which no personal data is transmitted to the social media operators. Rights of data subjects You have the right to information with regard to the processing of your personal data (for example, the origin of this data, the processing purpose, the modalities of the data processing). Under certain conditions, you are also entitled to object to data processing in the future, to restrict it or to request that the data be deleted. Finally, you can prevent the sending of advertising material or the implementation of market research or commercial communications at any time. In summary, you are entitled to

• information,
• correction,
• deletion (or to be forgotten),
• limitation of processing,
• data portability,
• objection to the processing of your personal data,
• lodge a complaint with the supervisory authorities.

Please note that your right to deletion is subject to certain restrictions. For instance, we are not obliged to or may not be permitted to delete any data which we need to retain for a further period under a statutory retention period. Data needed by us for the establishment, exercise, or defence of legal claims is also exempt from your right to deletion. To exercise the above rights and to request information, users may write to the following e-mail address [email protected] or postal address FIRST ACCESS, .......... Similarly, users may at any time revoke consent tothe processing of their data or request that their data is corrected or deleted. Contacts The responsible authority for processing of data is FIRST ACCESS located at ...... In the event of questions regarding our data processors, we are happy to make a current list of these available to you. If you have questions about this data protection declaration or about data protection, please contact the data protection officer at FIRST ACCESS: [email protected]