Privacy policy
Last updated: 5 October 2026
1. Controller and contact
Iris Mori, Mori Immobilien, is responsible for processing personal data on this website. You can contact us by email, telephone or post with privacy questions and requests to exercise your rights.
Mori Immobilien, Iris Mori
Martin-Luther-Ring 3
55276 Oppenheim, Deutschland
E-Mail: info@mori-immo.de
Telephone: +49 6133 579567
2. Website visits and hosting
When you visit this website, technically necessary connection data is processed, including your IP address, request date and time, requested page, HTTP status, browser, operating system and, where applicable, referring page. This information can be personal data. It is used to deliver the website, identify errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation.
The website is hosted by Vercel Inc., which processes technical connection data and logs to deliver it. Processing in the United States is possible. Vercel's data processing agreement linked below describes subprocessors and intended transfer safeguards. Technical logs are needed only for operation, diagnostics and security; an actual security incident may require longer retention for investigation.
Some property images are delivered through Cloudflare R2, a storage service provided by Cloudflare Inc. Direct image requests transmit technically necessary connection data, such as your IP address, image path and browser information, to Cloudflare. The purpose is to display the requested property images. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in reliable presentation of our listings. Processing outside the European Economic Area is possible. The Cloudflare data processing agreement linked below describes international transfers and subprocessors.
3. Contact and property enquiries
When you contact us through a form, by email or by telephone, we process your name, contact details, message and, where relevant, the property you are enquiring about. Article 6(1)(b) GDPR applies to enquiries concerning a possible contract. Other enquiries are handled under Article 6(1)(f) GDPR and our legitimate interest in answering messages addressed to us. Required form fields are necessary to handle a form enquiry; you can alternatively contact us by telephone.
Form messages are forwarded through EmailJS Pte. Ltd. to our mailbox hosted by Alfahosting GmbH. EmailJS and Alfahosting receive the data necessary for delivery, storage and handling, including message content, sender and recipient details and technical delivery data. The legal bases described above apply to providing the mailbox and handling enquiries. EmailJS describes processing on servers in the United States and standard contractual clauses as transfer safeguards. Alfahosting's privacy notice and EmailJS's privacy policy and data processing agreement are linked below.
We keep enquiries for as long as required to handle them. If a contract follows or statutory retention duties apply, relevant documents are kept for the legally required period (Article 6(1)(c) GDPR). Longer retention may be necessary to establish, exercise or defend legal claims. Please do not send identification documents or other particularly sensitive documents through the general contact form.
4. Form protection with Cloudflare Turnstile
We offer Cloudflare Turnstile, provided by Cloudflare Inc., to protect contact forms against automated abuse. The widget loads only when you expressly activate it in the form and consent to the associated access to your device and processing of personal data (§ 25(1) TDDDG and Article 6(1)(a) GDPR). Cloudflare processes technical signals such as IP addresses, browser information, TLS characteristics and website and security information to identify automated activity. You can contact us without activation using the email and telephone links provided in the form.
Activation applies only to the currently open form and is not saved as a persistent cookie or browser-storage preference. You can withdraw it at any time by deactivating Turnstile in the form, which removes the widget. Withdrawal does not affect the lawfulness of earlier processing. Cloudflare describes itself as a processor for protecting our website and as an independent controller for improving bot detection. Processing in the United States is possible. Its Turnstile privacy notice and data processing agreement linked below describe purposes, roles, storage and international transfers.
5. Language preferences and external links
The NEXT_LOCALE cookie remembers the selected language for up to one year to provide your chosen language version. You can delete it in your browser or change the language again. Processing is based on Article 6(1)(f) GDPR; necessary storage for the requested language function is governed by § 25(2)(2) TDDDG.
WhatsApp and social media references are external links. Opening one takes you away from this website, and the relevant provider processes data under its own privacy notice. Our handling of your message follows the contact rules explained above. These services are optional; email and telephone are available as alternatives.
6. Your privacy rights
Subject to the statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20). You can withdraw consent at any time for future processing. Withdrawal does not affect the lawfulness of earlier processing.
You can lodge a complaint with a data protection authority, particularly where you live or work or where you believe an infringement occurred. The authority for our location is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz. This website does not make automated decisions that produce legal effects concerning you or similarly significantly affect you.
7. Right to object under Article 21 GDPR
Where processing is based on Article 6(1)(f) GDPR, you can object on grounds relating to your particular situation. We then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary to establish, exercise or defend legal claims. You can object to direct marketing at any time without providing special grounds; your data will then no longer be processed for that purpose. You can send your objection using the contact details above.