This Privacy Policy applies both to the use of our website and to our rental brokerage services. It is set out in the two sections below.
We collect and use our users' personal data only to the extent necessary for providing a functional website and our content and services. The collection and use of our users' personal data is generally only carried out with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.
The data controller is:
Stay Anywhere,
Koenigsallee 40, 14193 Berlin, Germany. Email: info@stayanywhere.io
For security reasons and to protect the transmission of confidential content, our website uses SSL or TLS encryption.
We use external service providers (data processors), for example, for hosting, maintenance, support, accounting, or marketing. These providers only have access to the data they need to perform their tasks and process it exclusively on our behalf. Apart from this, your personal data will not be transferred to third parties, except in the cases explained in this statement. Typical exceptions include, for example, if you have consented to the transfer, if the transfer is necessary for the performance of a contract with you, or if we are legally obligated to do so.
Where we obtain consent from the data subject for processing personal data, Article 6(1) (a ) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for taking steps prior to entering into a contract. Where processing personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1) ( c) GDPR serves as the legal basis.
In the event that the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1) ( d) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and the interests or fundamental rights and freedoms of the data subject do not override those interests, then Article 6(1) ( f) GDPR serves as the legal basis for the processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
Visiting our website may involve the transfer of certain personal data to third countries, i.e., countries where the GDPR is not applicable law. Such a transfer is permissible if the European Commission has determined that the third country in question ensures an adequate level of data protection. If no such adequacy decision by the European Commission exists, personal data will only be transferred to a third country if appropriate safeguards are in place pursuant to Article 46 GDPR or if one of the conditions of Article 49 GDPR is met.
Unless otherwise stated below, we use the EU Standard Contractual Clauses adopted by the EU Commission and currently valid as suitable safeguards for the transfer of personal data to processors in third countries.
If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 para. 1 letter a GDPR.
Our website does not use automated decision-making (profiling) within the meaning of Article 22 GDPR.
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
The log files contain IP addresses or other data that could allow identification of a user. This could be the case, for example, if the link to the website from which the user accessed the website, or the link to the website the user navigates to, contains personal data.
The data is also stored in our system's log files. This does not include the user's IP address or other data that would allow the data to be linked to a specific user. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data and log files is Article 6(1) ( f) GDPR.
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
The data is stored in log files to ensure the website's functionality. We also use this data to optimize the website and to ensure the security of our IT systems. The data is not used for marketing purposes.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this occurs after a maximum of seven days. Storage beyond this period is possible. In this case, the users' IP addresses are deleted or anonymized so that it is no longer possible to identify the requesting client.
When you contact us (e.g. via a contact form provided on the website or by email), we process the data you provide in order to handle your request.
We typically collect the following information (input fields) via our contact form:
When you submit the message, your current IP address, as well as the date and time, are automatically recorded. This additional information is used solely to prevent misuse of our contact form and to ensure the security of our systems.
As part of the submission process , we obtain your consent to the processing of the entered data and refer you to this privacy policy. Alternatively, you can contact us directly via the provided email address; in this case, we will process at least your email address and any other personal data contained in your message.
Article 6(1) (a) GDPR (consent) is the primary legal basis for processing your data. If you contact us by email, we can base the processing on Article 6(1) ( f) GDPR (legitimate interest) – the legitimate interest here being the processing of your inquiry. If your inquiry aims at concluding a brokerage agreement, Article 6(1)(b) GDPR may be used as an additional legal basis.
We delete your data as soon as it is no longer needed to process your request. This is usually the case when the conversation with you has ended and the underlying issue has been fully resolved. The additional technical data collected during the submission process (IP address, timestamp) will be deleted after a maximum of 7 days.
You can withdraw your consent to the processing of your contact form data at any time. Please send your withdrawal or objection to the storage of your data to us (e.g., by email). In such a case, we unfortunately cannot continue the conversation. Following your withdrawal, we will delete all personal data that we have stored from you in connection with your contact, unless legal retention obligations prevent us from doing so.
We use cookies and similar technologies ("cookies") on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and allows it to be recognized by web servers. You have full control over the use of cookies through your browser settings. You can delete cookies at any time in your browser's security settings. You can also generally or specifically object to the use of cookies through your browser settings. Further information on this topic is available from the Federal Office for Information Security (BSI) at www.bsi.bund.de
The use of cookies is partly technically necessary for the operation of our website and is therefore permissible without the user's consent. The legal basis for this is our legitimate interest in the proper operation of our website (Art. 6 para. 1 lit. f GDPR).
In addition, we use cookies to offer special functions and content, as well as for analysis and marketing purposes. These may include cookies from third-party providers (so-called third-party cookies). We only use such cookies, which are not technically necessary, with your consent in accordance with Section 25 Paragraph 1 of the German Telemedia Act (TTDSG) or Article 6 Paragraph 1 Letter a of the GDPR. give and withdraw your consent at any time via our consent management tool.
Here you will find an overview of the cookies we use, as well as further information and legal notices about the individual cookies.
As a data subject, you have the following rights regarding your personal data (pursuant to Articles 15–21 GDPR):
To exercise your rights, you can contact us or our data protection officer at any time without any specific form. Please use the contact details provided (in writing or by email).
You can, for example, send us an email to info@stayanywhere.io to request information, make corrections, or submit a cancellation/objection. We will then address your request immediately.
Please do not hesitate to contact us if you have any questions or wish to exercise your rights. We take the protection of your data very seriously and are happy to assist you in exercising your data protection rights.
When you exercise your data subject rights as described above, we process the data you provide in order to comply with your request and to provide proof thereof. The legal basis for this is Article 6(1) ( c) GDPR in conjunction with Articles 15–22 GDPR and Section 34(2) BDSG.
You can reach our data protection officer using the following contact details:
Email: info@stayanywhere.io
As of November 2025
We collect and process personal data only to the extent necessary to provide our services – in particular in the context of housing brokerage – and to provide our associated services.
Responsible for data processing is:
Stay Anywhere
Koenigsallee 40, 14193 Berlin Email: info@stayanywhere.io
As a general rule, we only process data that you provide to us yourself.
If necessary, additional data may be collected later on when the rental agreement is actually concluded (e.g., ID card details for identity verification, proof of a legitimate interest in temporary accommodation, signature on a rental agreement, etc.). However, this data is typically collected directly by the landlord. To the extent that Stay Anywhere provides support in individual cases (e.g., forwarding a signed contract document by email), such processing is also subject to this privacy policy.
As part of the apartment booking process, your personal data will be shared with third parties, particularly the landlords or apartment providers of the apartments you are interested in. Stay in Berlin works in particular with the following partner companies:
These companies are the owners or main tenants of the apartments we broker. We only transmit to the relevant partner the data necessary for them to conclude a rental agreement with you. This typically includes your contact details (name, address, email, telephone) and relevant information about your rental request (e.g., desired rental period)
The partner companies, in turn, use your data to decide on the conclusion of the contract and to prepare the rental agreement. You will not receive any information from us that goes beyond the purpose of initiating the rental agreement. Naturally, our partners will also treat your data confidentially and in accordance with legal regulations. If necessary, they will inform you again about data processing once you enter into contract negotiations directly with them (Article 14 GDPR).
Your data will only be transferred to third parties if this is necessary to perform the contract (e.g., to a property manager to organize an apartment viewing with your consent) or if we are legally or officially obliged to do so (e.g., to provide information to a public authority). In such cases, we will inform you separately, if permitted.
To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures. To the extent that the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.
Your personal data will be deleted or blocked as soon as the purpose for processing no longer applies. Furthermore, data may be stored if European or national law so requires (e.g., statutory retention periods) or if the data is required to assert, exercise, or defend legal claims. As soon as retention reasons no longer exist, the data will be deleted. If storage is still necessary for the initiation or fulfillment of a contract, the data will be stored for a longer period (see also the detailed information below on the retention period for rental inquiries).
In individual cases, the processing of your data may involve the transfer of personal data to third countries (countries outside the EU or EEA) – for example, if we use cloud services or external service providers located outside the EU. Such transfers will only take place in compliance with the GDPR: either an adequacy decision has been made by the EU Commission for the target country, or we have agreed on appropriate safeguards such as EU standard contractual clauses pursuant to Art. 46 GDPR, or a statutory exception applies pursuant to Art. 49 GDPR.
Unless otherwise stated below, we use the EU standard contractual clauses adopted by the EU Commission and currently in force for the transfer of personal data to processors in third countries as appropriate guarantees.
If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 (1) (a) GDPR.
As part of our brokerage activities, no automated decision-making – such as profiling – takes place in accordance with Art. 22 GDPR. In other words, decisions that significantly affect you legally or in any other way are not made exclusively by automated means.
If you contact us as a prospective tenant—whether by email, via a form, or by phone—we process the personal data you provide to process your rental request and complete the rental process. This typically includes:
As a general rule, we do not request any special categories of personal data (Article 9 GDPR) – data such as health information, religious affiliation, etc., are irrelevant for rental brokerage. Please refrain from providing us with such sensitive information unless it is essential for the rental process. In these cases, we ask for your express consent.
In addition to the data you actively provide to us, we may also process personal data that we have legitimately received from third parties. This may be the case, in particular, in the context of a credit check: We may transmit the information required for a credit report to a credit agency (e.g., SCHUFA Holding AG) to check your creditworthiness. We will then receive a credit score or relevant information about your financial reliability from the credit agency. The legal basis for this transmission and query is our legitimate interest in assessing the risk of rental default (Art. 6 (1) (f) GDPR). Please note that a negative credit assessment may result in the non-conclusion of a rental agreement.
The primary legal basis for the processing of your data as a prospective tenant is Art. 6 (1) (b) GDPR, as the data processing takes place to carry out our contractually owed brokerage services, which are provided at your request.
If you send us a general enquiry that is not directly aimed at concluding a contract, we can use our legitimate interest (Art. 6 (1) (f) GDPR) in answering your enquiry as the legal basis or it concerns pre-contractual (contract initiation) processing activities that are also covered by Art. 6 (1) (b) GDPR.
If we ask for your consent (for example, to be able to store your documents for future suitable offers even after an initial unsuccessful placement), the processing is based on Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect.
Your personal data will be processed as part of your rental request solely for the purpose of brokering your property. We will share your data with the potential landlord and contact you as part of the brokerage process (e.g., to arrange viewings, clarify any outstanding questions, or send you a draft rental agreement). Without the provision of the required personal data, we would not be able to process your rental request.
As a prospective tenant, we generally only store your personal data for as long as is necessary for the purposes stated above.
In all cases, as soon as it is determined that data is no longer required (because the purpose has been achieved and there is no longer any obligation to retain it), this data is routinely deleted or anonymized.
As a data subject, you have the following rights with regard to your personal data (according to Articles 15–21 GDPR):
To exercise your rights, you can contact us or our data protection officer at any time without any formalities. Please use the contact details provided (in writing or by email). You can, for example, send us an email to info@stayanywhere.io to request information, make corrections, or withdraw your consent/objection. We will then respond to your request promptly.
Please do not hesitate to contact us if you have any questions or wish to exercise your rights. We take the protection of your data very seriously and are happy to support you in exercising your data protection rights.
If you assert your aforementioned rights as a data subject, we will process the data you provide to comply with your request and to provide evidence of your request. The legal basis for this is Art. 6 (1) (c) GDPR in conjunction with Art. 15–22 GDPR and Section 34 (2) BDSG.
You can reach our data protection officer at the following contact details:
As of July 2025