← Back to Main Page

Privacy Policy

1. General Information

The protection of your personal data is important to us.

With this privacy policy, we inform you about which personal data is processed when using our websites, our web portal, and our mobile application "AEC-Berlin", for what purposes this is done, and what rights you are entitled to under the applicable data protection regulations.

This privacy policy applies in particular to:

Personal data is any information relating to an identified or identifiable natural person.

2. Controller

The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Aec-Berlin UG (haftungsbeschränkt)
Rathausstraße 51A
12105 Berlin
Germany

Managing Director: Chong-Hyun Kim

E-Mail: info@aec-berlin.com

3. Legal Bases of Data Processing

We process personal data only if there is a legal basis for doing so.

Depending on the type and purpose of the processing, the following legal bases come into consideration in particular:

Art. 6 (1) lit. a GDPR – Consent

If you expressly give us your consent to process certain personal data.

Art. 6 (1) lit. b GDPR – Contract and Pre-contractual Measures

If processing is necessary to perform a contract with you or to take pre-contractual measures at your request.

This applies in particular to:

Art. 6 (1) lit. c GDPR – Legal Obligation

If we are obliged by legal provisions to process or retain personal data.

Art. 6 (1) lit. f GDPR – Legitimate Interests

If processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party and no overriding interests or fundamental rights of the data subject conflict with this.

Our legitimate interests include in particular:

4. Use of Our Websites and Our App

When calling up our websites, our web portal, or content within the AEC-Berlin App, technically necessary data can be processed.

This may include in particular:

This processing takes place in particular for:

Legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and functional operation of our digital offerings.

5. Server Logfiles

Our hosting and technical service providers can create so-called server logfiles.

These may contain in particular:

The logfiles serve in particular technical error analysis, system security, and defense against abusive access.

Legal basis is Art. 6 (1) lit. f GDPR. Logfiles are stored only as long as necessary for technical, security, or legal purposes.

6. AEC-Berlin App

The mobile application "AEC-Berlin" serves in particular as central access to information, service, and web offerings of Aec-Berlin UG (haftungsbeschränkt) and, where applicable, offerings of affiliated companies or external providers.

The app can be technically designed as a WebView or wrapper application.

This means that content from app.aec-berlin.eu can be displayed within a mobile application.

Basically, the same data can be processed as when calling up the website directly via a normal browser.

This includes in particular technical connection data as well as data that you voluntarily transmit via forms called up within the app.

7. App Permissions

The AEC-Berlin App is fundamentally intended to use only those device permissions that are required for the respective technical function.

Unless additional functions are used, the app should in particular not require access to:

For the provision of web-based content, typically only internet access and, if applicable, detection of network status are required.

Should additional functions be introduced in the future, for example:

users will be informed prior to usage and this privacy policy will be adjusted if necessary.

8. Contacting Us

You can contact us in particular via:

When you contact us, we process your submitted data to handle your inquiry.

This may include in particular:

For general inquiries, processing regularly takes place on the basis of Art. 6 (1) lit. f GDPR.

If your inquiry serves to initiate or execute a contract, processing takes place on the basis of Art. 6 (1) lit. b GDPR.

9. Inquiry, Service, and Order Forms

Through our digital offerings, you can submit inquiries regarding various services.

Depending on the requested service, the following personal data in particular may be collected:

Processing is carried out primarily to process your inquiry and, if applicable, to prepare or perform a contractual relationship.

Legal basis is Art. 6 (1) lit. b GDPR.

Insofar as legal retention or documentation obligations exist, processing is additionally based on Art. 6 (1) lit. c GDPR.

10. Data for Visa, Relocation, and Similar Services

For specific services, additional personal information may be required for the proper preparation or processing of an order.

Depending on the specific service, this may include for example:

Such data is processed only as far as necessary for the requested service.

Legal basis is fundamentally Art. 6 (1) lit. b GDPR.

Insofar as special categories of personal data within the meaning of Art. 9 GDPR should be affected, processing takes place only if there is additionally an appropriate legal basis or explicit consent.

11. Forwarding Inquiries to Service Providers

The AEC-Berlin platform displays different services and information offerings.

Not every service offered via the platform is performed directly by Aec-Berlin UG (haftungsbeschränkt) itself.

Depending on the selected service, it may therefore be necessary to pass on the personal data required for processing to the responsible service provider.

A transfer takes place only:

12. Forwarding to Aec-Asia

Insofar as an inquiry explicitly concerns a service performed or co-processed by Aec-Asia, the personal data required for this can be forwarded to Aec-Asia.

This affects only such information necessary to handle the respective inquiry or service.

Legal basis is fundamentally Art. 6 (1) lit. b GDPR.

Insofar as Aec-Asia subsequently decides independently on purposes and means of further processing, this processing takes place under its own data protection responsibility.

13. Forwarding to FDK-Finanz GmbH

Insofar as an inquiry concerns services offered or performed by FDK-Finanz GmbH, the personal data required for this can be forwarded to FDK-Finanz GmbH.

This may concern in particular financing, real estate, or other correspondingly labeled services.

The transfer takes place only insofar as necessary to process the explicitly requested service.

Legal basis is in particular Art. 6 (1) lit. b GDPR.

Insofar as FDK-Finanz GmbH decides independently on further processing, it is independently responsible under data protection law.

14. Other Cooperation Partners and Service Providers

For individual services, further companies, advisors, or cooperation partners may be involved.

Personal data is transferred only insofar as:

These may be in particular the following categories of recipients:

insofar as this is necessary and permissible in individual cases.

15. Hosting

Our websites and digital offerings are operated via external hosting and infrastructure providers.

Technically necessary connection data can be processed in the process.

Insofar as hosting providers process personal data exclusively on our behalf, processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Depending on technical design, services such as:

may be used.

The specifically used providers may change in the course of technical development.

We ensure that the service providers used meet data protection requirements.

16. Email Dispatch

For sending emails, confirmations, or technical messages, specialized email service providers may be used.

This may include, for example, Resend or a comparable service.

In email communication, the following data in particular may be processed:

The legal basis depends on the respective communication purpose.

For contract-related communication, processing takes place in particular on the basis of Art. 6 (1) lit. b GDPR.

For general communication, it takes place on the basis of Art. 6 (1) lit. f GDPR.

17. Cookies and Comparable Technologies

Our websites and the web pages displayed within the app may use cookies or comparable technologies.

Cookies are small pieces of information stored on your terminal device.

Technically Necessary Cookies

Technically necessary cookies or comparable storage mechanisms can be used when they are necessary to provide an explicitly requested digital service.

According to § 25 (2) TDDDG, consent is fundamentally not required for this.

This may concern for example:

Non-necessary Cookies

Insofar as cookies or comparable technologies are used for:

this takes place fundamentally only after prior consent.

§ 25 (1) TDDDG fundamentally requires consent when information is stored on or read from the terminal device and no exception under § 25 (2) TDDDG applies.

18. No Tracking or Advertising Technologies

Insofar as no analysis, advertising, or tracking services are used on our digital offerings, there is in particular no use of:

Should such technologies be used in the future, this privacy policy will be supplemented accordingly and, insofar as legally required, prior consent will be obtained.

19. External Content

Our websites or our app may contain content from external providers.

These may be, for example:

When loading such externally embedded content, a connection to the server of the respective third-party provider can technically be established.

In the process, IP address and technical connection information in particular may be transmitted.

We therefore endeavor to provide external content locally where possible or only embed it directly when technically or functionally useful.

20. External Links

Our digital offerings contain links to websites or services of third parties.

When you click an external link, you leave our sphere of responsibility.

The operator of the respective called website or external service is fundamentally responsible for the subsequent processing of personal data.

The respective privacy policies apply there.

21. Payment Processing

Insofar as paid services can be ordered via our digital offerings, payment service providers may be integrated for payment processing.

In the process, the following data in particular may be processed:

Processing takes place in particular on the basis of Art. 6 (1) lit. b GDPR.

Insofar as external payment service providers decide independently on the processing of certain payment data, their respective privacy policies apply additionally.

22. Google Play

The AEC-Berlin App can be offered via Google Play.

Google processes store data independently in connection with the Google Play Store, in particular within the framework of:

Google is fundamentally responsible for this data processing according to its own privacy policy.

Aec-Berlin UG (haftungsbeschränkt) provides Google with information regarding app data processing within the Play Console.

Google in particular requires app providers to transparently declare what data their app collects or shares and how it is protected.

The declarations in the Google Play "Data Safety" section shall match the actual data processing of the app and this privacy policy.

23. Data Collection Within a WebView

Insofar as the AEC-Berlin App opens our own web pages within a WebView, personal data can also be collected within this WebView.

This includes in particular data that you enter yourself in:

This data is not considered processed outside the app simply because the respective form is technically provided on a website.

Processing is governed by the respective purposes and legal bases described in this privacy policy.

24. No User Accounts

Insofar as the AEC-Berlin App offers no registration or personal user accounts, no app user accounts are established.

Should a registration or login function be introduced in the future, this privacy policy will be adjusted accordingly.

In particular, information on:

will then be added.

25. Push Notifications

Currently, push notifications are used only if explicitly technically provided for and implemented in the respective app version.

Should push notifications be used, technical device identifiers or so-called push tokens may be processed for this purpose.

Users will be informed accordingly prior to activation.

This privacy policy will be adjusted upon introduction of corresponding functions.

26. Storage Duration

We store personal data fundamentally only as long as necessary for the respective purpose.

General Inquiries

Personal data from general inquiries is erased when handling is completed and no further retention is required.

Contract-related Data

Data in connection with contractual relationships is stored for the duration of the contractual relationship and subsequently according to applicable statutory retention periods.

Invoices and Accounting Documents

Tax or commercial law relevant documents are stored according to statutory retention periods.

Technical Data

Technical protocol data and logfiles are stored only as long as necessary for security, error analysis, and technical operation.

Longer storage takes place only insofar as a legal obligation exists or this is necessary for the establishment, exercise, or defense of legal claims.

27. Data Transfer to Third Countries

When using certain technical service providers, it cannot be excluded that personal data is processed outside the European Union or the European Economic Area.

Corresponding transfer takes place only in compliance with Art. 44 et seq. GDPR.

In particular, the following come into consideration as legal bases for third-country transfers:

28. Data Security

We take appropriate technical and organizational measures to protect personal data against:

Our websites and digital offerings are encrypted fundamentally via HTTPS/TLS during transmission.

29. No Automated Decision-Making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does fundamentally not take place.

Should such processing be used for a specific service in the future, separate information will be provided.

30. Rights of Data Subjects

According to statutory requirements, you have in particular the following rights:

Right to Access

You can request information as to whether and which personal data about you is processed.

Right to Rectification

You can request the rectification of inaccurate or incomplete personal data.

Right to Erasure

Under statutory requirements, you can request the erasure of your personal data.

Right to Restriction of Processing

Under certain requirements, you can request a restriction of processing.

Right to Data Portability

Insofar as statutory requirements are met, you can request to receive certain personal data in a structured, commonly used, and machine-readable format.

Right to Object

Insofar as we process personal data on the basis of Art. 6 (1) lit. f GDPR, you can object to processing under the requirements of Art. 21 GDPR.

Revocation of Consent

You can revoke granted consent at any time with effect for the future.

The lawfulness of processing carried out up to the revocation remains unaffected by this.

31. Exercising Your Data Protection Rights

To exercise your data protection rights, you can contact us:

Aec-Berlin UG (haftungsbeschränkt)
Rathausstraße 51A
12105 Berlin

E-Mail: info@aec-berlin.com

32. Right to Complain

You have the right to complain to a data protection supervisory authority about the processing of your personal data.

For the registered office of our company, the responsible authority is in particular:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

You can fundamentally also address another legally responsible data protection supervisory authority.

33. Obligation to Provide Personal Data

A legal or contractual obligation to provide personal data exists only insofar as necessary in individual cases.

However, certain services cannot be provided or can only be provided to a limited extent if necessary details are not provided.

This may concern for example:

34. Minors

Our services target fundamentally adults or persons acting with consent of their legal representatives.

We do not deliberately direct our digital offerings at children.

Insofar as personal data of minors should be required within a service, e.g. in connection with family, visa, or relocation procedures, these are processed only within the scope of the respective order and in compliance with applicable data protection regulations.

35. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy when:

The current version published on our digital offerings applies in each case.

Status: September 2026