Privacy Policy

blue auditor gmbh, an Austrian limited liability company registered at the Commercial Court Vienna under FN439759f (“blue auditor gmbh”, “we,” “us” or “our”) is committed to protecting and respecting your privacy. This privacy policy (“Privacy Policy”) explains how we collect, use, share and protect data that identifies or is associated with you (“personal data”) in relation to our website including the services offered on such website (the “Platform”), and your choices about the collection and use of your information.

blue auditor gmbh operates a sustainability assessment platform “blue auditor” for real estate assets. Our Privacy Policy applies to all visitors, users, and others who access the Platform (“Users”).

Before accessing or using the Platform, please ensure that you have read and understood our Privacy Policy.

1.    What kind of information do we collect?

Please find below the type of information we may require from you in order to provide our services on the Platform:

Personal data

  • full name
  • phone number
  • address, postal code, city, state
  • e-mail address
  • your username and password when you register for an account
  • IP address
  • the answers you give to assessment questions
  • communications between you, other users and us
  • subscriptions/preferences

In cases, you provide personal data to us about other people, you must ensure that you have given those individuals an appropriate notice that you are providing their information to us and have obtained their consent to that disclosure.


Information we collect when you use our Platform

Log file information: We collect information that your browser sends whenever you visit our Platform. This log file information may include information such as your computer’s Internet Protocol address, browser type, browser version, the pages of our Platform that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Analytics services (non-personally identifiable information only): We use third-party analytics tools to help us measure traffic and usage trends for the Platform. These tools collect information sent by your device or our Platform, including the web pages you visit, add-ons, and other information that assists us in improving the Platform. The tools use ‘cookies’, which are text files placed on your device, to collect your log information and behavior information in an anonymous form. We collect and use this analytics information with analytics information from other Users so that it cannot reasonably be used to identify any particular individual User. With respect to Google Analytics: although Google Analytics plants a permanent cookie on your web browser to identify you, the cookie can only be used by Google. Google’s ability to use and share information collected by Google Analytics about your visits is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits by disabling cookies.

2. How do we use your personal data?

We use your personal data to help us provide and support (the services on) our Platform. Here is how:

Communication: sending emails, newsletters, and other messages to keep you informed of the Platform. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link. We also use the personal data to deal with inquiries and complaints made by you relating to the Platform and to address your questions, issues, and concerns;

Website monitoring: to check the Platform and our other technology services are being used appropriately and to optimize their functionality;

Platform optimization: improve, test, and monitor the effectiveness of our Platform and diagnose or fix technology problems;

Managing suppliers: who deliver services to us;

Easy access: to help you efficiently access your information after you sign in and to remember information so you will not have to re-enter it during your visit or the next time you visit the Platform;

Statistics: monitor metrics such as total number of visitors, traffic, demographic patterns and patterns in our test results (on an anonymized and aggregated basis);

Development: develop and test new products and features.

3. Our reasons for using your personal data

We will process your personal data for a number of reasons:

  • you have given us consent;
  • processing is necessary for our legitimate business interests or those of a third party: provided this does not override any interests or rights that you have as an individual. Our legitimate interests are:
  • managing our business and relationship with you or your company or organization;
  • understanding and responding to inquiries and User feedback;
  • understanding how our Users use the Platform;
  • identifying what our Users want and developing our relationship with you, your company or organization;
  • improving our Platform and offerings;
  • managing our supply chain;
  • developing relationships with business partners;
  • sharing data in connection with acquisitions and transfers of our business.


4. With whom do we share your personal data?

We share your information with others as follows:

Suppliers/Partners: who support our business including IT and communication suppliers or other service partners, outsourced business support, business intelligence, marketing, and advertising agencies, and back-up vendors. Our suppliers have to meet minimum standards regarding information security and they will only be provided data in line with their function.

Change of control: If we sell or otherwise transfer part or the whole of blue auditor gmbh or our assets to another organization (e.g., in the course of a transaction like a merger, acquisition, bankruptcy, dissolution, liquidation), your information and any other information collected through the Platform may be among the items sold or transferred. The buyer or transferee will have to honor the commitments we have made in this Privacy Policy.

Legal requests and preventing harm: We may access, preserve and share your personal data in response to a legal request (like a search warrant, court order, or subpoena) if we have a good faith belief that the law requires us to do so. We may also access, preserve and share information when we have a good faith belief it is necessary to (i) detect, prevent and address fraud and other illegal activity and (ii) to protect ourselves, you, and others, including as part of investigations. Information we receive about you may be accessed, processed, and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

5. Safety and security

blue auditor gmbh has taken appropriate technical and organizational measures by using the latest technologies to protect your personal data against loss or unlawful processing. We use safeguards to help keep the information collected through the Platform secure and take steps (such as requesting a unique password) to verify your identity before granting you access to your account. However, we cannot ensure the security of any information you transmit to us or guarantee that information on the Platform may not be accessed, disclosed, altered, or destroyed. We request you to do your part to help us. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails between you and us, at all times. We are not responsible for the functionality, privacy, or security measures of any other organization.

6. Your Rights

If you are resident in the European Union, in accordance with European Union privacy law, you have the following rights in respect of your personal information that we hold:

  • Access: you are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of the personal data we hold about you and certain other information about it;
  • Correction: you are entitled to request that any incomplete or inaccurate personal data we hold about you is corrected;
  • Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims;

Residents in other jurisdictions may have similar rights to the above. If you want to exercise any of these rights, please contact

You also have a right to lodge a complaint with a data protection supervisory authority, in particular in a member state in the European Union where you are habitually resident, where we are based, or where an alleged infringement of Data Protection law has taken place.

7. Third-party applications, websites, and services

We are not responsible for the practices employed by any applications, websites, or services linked to or from our Platform, including the information or content contained within them. Please remember that when you use a link to go from our Platform to another application, website, or service, the Privacy Policy does not apply to those third-party applications, websites, or services. Your browsing and interaction on any third-party application, website, or service, including those that have a link on our Platforms, are subject to that third party’s own rules and policies. In addition, you agree that we are not responsible and do not have control over any third parties that you authorize to access your account. If you are using a third-party app, website, or service and you allow them to access your account you do so at your own risk.

8. How long do we keep your data?

We generally keep your information only as long as needed to provide the services on our Platform. We will retain your information as necessary to comply with legal, accounting, or regulatory requirements.

9. Where will your information be held?

Your information will be held on servers in Germany. We will take steps to protect your information in line with locally applicable data protection requirements.

Your information may be transferred to, and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the European Economic Area and choose to provide information to us, please note that we transfer the information to the European Economic Area. Your consent to this Privacy Policy followed by your submission of personal data represents your agreement to that transfer.

10. Cookies

We use cookies that identify your browser. They collect and store information when you visit the Platform about how you use it, through which it is possible to (i) record your use of the Platform, (ii) provide you with a better service and experience when browsing and (iii) for analytics. The personal data we collect through these technologies will also be used to manage your session. For more information about cookies and how we use them, please see our Cookie Policy.


12. Changes to this Policy

We may modify or update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. How to contact us

If you have any questions about this Privacy Policy, please contact