Legal
Cookie policy
This site sets three cookies, all of them first-party, and none of them for advertising or tracking. Here is what each one does and how to change your mind.
No advertising cookies. No analytics service. No third-party tracking pixels. No external font, map or video services that would load code from another company's servers.
The cookies below exist so the site can keep a session, protect its forms against forgery, and remember the choice you made in this banner. Anything beyond that is switched off until you switch it on.
The register
Cookies this site can set
Generated from the application's own configuration, so it lists exactly what can be set and nothing that cannot.
| Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
_app_session
|
First party (this site) | Strictly necessary | Keeps your session and the anti-forgery token valid while you use the site. | Session |
rem_cookie_consent
|
First party (this site) | Strictly necessary | Stores which cookie categories you allowed, so we do not ask again. | 6 months |
remember_user_token
|
First party (this site) | Strictly necessary | Set only inside the application, when a signed-in user chooses to stay signed in. | 2 weeks |
This table is generated from the site's own configuration, so it lists exactly what the application is able to set.
What a cookie is, and what the law requires
A cookie is a small text file that a website asks your browser to store and send back on later requests. Similar techniques — local storage, session storage — are treated the same way here.
Under Section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), storing information on your device or reading information already stored there requires your consent. Section 25 (2) exempts storage that is strictly necessary to provide a service you have expressly requested. Where we rely on consent, the legal basis for the associated processing of personal data is Article 6 (1) (a) GDPR; where we rely on strict necessity, it is Article 6 (1) (f) GDPR, our legitimate interest in a website that works and is not trivially attackable.
The three categories
- Strictly necessary
- Keeps your session valid, protects forms against cross-site request forgery, and stores the cookie choice you made so we do not ask again on every page. These cannot be switched off, because without them the site cannot serve you a form or remember that you declined the others.
- Functional
- Would remember preferences such as a chosen language or a layout setting beyond what the URL already carries. No vendors are configured in this category today, so consenting to it currently causes nothing to be set. The category exists so that consent is already collected and enforceable on the day something is added.
- Analytics
- Would measure, in aggregate, which pages are read and which are not. No analytics service is in use on this website today. If one is introduced, it will run only for visitors who have consented to this category, and this page and the banner will be updated before it goes live.
The theme preference is not a cookie
The light and dark theme switch in the footer stores your choice in your browser's local storage under the key rem-theme. It never leaves your device, is not sent with any request, and is not used to recognise you. Clearing your browser's site data removes it.
Cookies inside the application
Signing in to Real Estate Management at the application URL sets a session cookie, and, if you tick “remember me”, a persistent authentication cookie. Both are strictly necessary to keep you signed in, and neither is used for any other purpose.
Data you enter inside the application is a separate matter from this website's cookies. It is covered by the privacy policy, and for customers it is governed by a data processing agreement.
Changing or withdrawing your consent
Use the cookie settings control on this page, or the “Cookie settings” link in the footer of every page. Withdrawing consent is exactly as easy as giving it, which is what Article 7 (3) GDPR requires. Your choice is stored for six months, after which we ask again. We also ask again if the categories or the services behind them change.
Controlling cookies in your browser
Every current browser lets you block or delete cookies, either generally or per site, in its privacy or site-settings section. Blocking strictly necessary cookies will stop forms on this site from working, because the anti-forgery token has nowhere to live. Blocking the others has no effect here today.
Server log files
Independently of cookies, the web server records each request — the time, the page requested, the response status, the referring page, the browser identification and the IP address — in order to operate the service and to detect and investigate attacks. That processing is described in the privacy policy, and it does not depend on your cookie choice, because it happens on our side rather than on your device.
Changes to this policy
If the set of cookies changes, this page and the cookie register behind it change with it, and the consent version is raised so that everyone is asked again. This policy was last reviewed on 3 August 2026.
Questions about any of this?
Data protection questions go to the same people who write the code. There is no ticket queue in between.