Privacy Policy

GDPR Data Protection & Policies

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Responsible Party / Data Controller

The responsible party for data processing on this website (and the Vistara application) is:
Sinaholz GmbH
Hafenweg 19, 48155 Münster, Germany
Phone: +49 251 2373 740
Email: info@sinaholz.com

2. Data Collection on our Website & Platform

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This may be data that you enter in a registration form, a client portal contact form, or when uploading assets. Other data is collected automatically or with your consent by our IT systems when you visit the website or virtual tours. This is primarily technical data (e.g. internet browser, operating system, IP address, or time of the page view).

For B2B agency reseller services, we enforce complete database and storage isolation between agency workspaces. Lead files captured inside client virtual tours are isolated and can only be accessed by the respective client account and their parent reseller agency.

Cookies

Our website uses so-called "cookies". Cookies are small text files and do not cause any damage to your terminal device. We only set basic authentication session cookies (such as `sinaholz_auth`) to support instant logins, and we only use Google Analytics cookies after your active consent (via the consent banner).

3. Analysis Tools & Integrations

Google Analytics

This website uses functions of the web analysis service Google Analytics to track visitor interactions. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Clients who embed virtual tours on their websites may configure their own Google Analytics, custom pixel scripts, or SEO tags directly via the Vistara Client Studio dashboard. Sinaholz GmbH is not responsible for data collected by third-party tracking scripts injected independently by reseller clients.

4. Hosting & Infrastructure

We host the contents of our website, databases, and media storage assets with the following provider:
Firebase (Google Cloud Platform)
Firebase is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data is stored on secure, EU-based cloud databases to comply with GDPR storage location restrictions.