Security and discretion

diskret.immo protects property and owners through five measures: addresses are never public, anonymous profiles do not appear in search engines, only verified buyers receive an exposé, information is released in three stages, and every access is logged under a pseudonym. Before receiving the exposé, every buyer gives a confidentiality undertaking. Releases are always granted by a person, never by software.

Who sees what? The release stages

Every piece of information about a property belongs to one of three stages. A higher stage is only available once the requirement is met. Releases are granted by our team, and only with the owner’s consent or on the instructions of the agent holding the mandate.

In their area, owners see how many people have reached each stage – not who they are.

Why is the address never public?

Because an address makes the sale visible immediately – to neighbours, tenants and anyone who knows the building. That is why no anonymous profile shows a street, house number, parcel number or photo of the façade. Maps, too, show the region at most.

In addition, an automatic check according to fixed rules examines every anonymous profile text for features that would make a property identifiable – street names, proper names, striking combinations such as „the only house with a tower on the lake“. The result is a flag, not a verdict. The text is always released by a person.

Nor can the address easily be found via the land register (Grundbuch): in Germany, under § 12 Land Register Code (GBO), only those who demonstrate a legitimate interest are granted access.

Why don’t anonymous profiles appear on Google?

Anonymous profiles are blocked for search engines („noindex“) and are not included in the sitemap. They therefore do not appear in Google, Bing or the answers of AI search engines. Anyone searching for a street or a place will not find your property via a search engine.

Only general pages such as guides, regional pages and this page are public and findable – without reference to individual properties.

What is logged?

Every access to the anonymous profile, exposé and address by logged-in users is recorded with date, time and a pseudonymous identifier of the account. In their area, owners and agents holding the mandate see how many people have viewed their anonymous profile, their exposé and the address. We only disclose names in the event of a dispute, for example if information has been passed on in breach of the confidentiality undertaking. The log serves three purposes:

1. Control: you know at all times how many people have reached which stage.
2. Deterrence: anyone who knows that access is recorded is less likely to pass on documents.
3. Evidence: in the event of a dispute – for example about information being passed on, or about client protection between estate agents – the sequence of events can be proven.

We store access logs for three years.

How do documents reach the buyer?

We do not make documents such as the land register extract, tenant list or leases available for download. After your release, our team hands them over in person and individually to the respective buyer. This way you know who has received which document.

What does the confidentiality agreement cover?

Before a buyer receives the exposé, they give a confidentiality undertaking (confidentiality agreement, NDA). In it, they undertake to use the information only to assess an acquisition, not to pass it on to third parties (except their advisers who are bound to confidentiality and their financing bank), and not to approach the owner, tenants, neighbours or property management without consulting diskret.immo. The undertaking does not create any obligation to pay commission.

What such an agreement can achieve and where its limits lie is explained in the guide Confidentiality agreement in a property sale.

How do we verify buyers?

In two steps. Buyers register free of charge and confirm their email address. Our team then activates the account as „verified“: identity and contact details are confirmed, and a search profile is in place. Only verified buyers can request an exposé. Our team confirms identity by calling back.

We ask for proof of capital or financing in a personal conversation, for example a confirmation from the bank or evidence of equity. You receive the exposé (stage B) after telephone confirmation of your identity and your confidentiality undertaking, and the address (stage C) only after proof of financing or equity. Independently of this, IMMOBRA GmbH, as an estate agent, is obliged under the German Anti-Money Laundering Act (Geldwäschegesetz) to identify both parties to a purchase agreement (§ 2(1) no. 14, § 11(2) GwG).

How do we handle your data?

• Data centre in Germany: the website and database are hosted in a data centre in Germany. If we use an external AI service for the search in future, only the search text is sent to it; the privacy policy names the provider and location.
• Encrypted connection: all pages are transmitted via HTTPS.
• Data minimisation: we only collect what is needed for the respective stage. We only ask for proof of financing in a personal conversation.
• Purpose limitation: search profiles are used for matching with anonymous profiles and for notifying you by email (without address), not for third-party advertising.
• Partner agents: we only pass your data on to a partner agent if you have given separate and voluntary consent.
• Deletion: you can have your account and search profiles deleted at any time. We delete inactive accounts, search profiles and uploaded documents 24 months after the last activity, unless a statutory retention obligation applies, for example under the Anti-Money Laundering Act.
• Rights under the GDPR: access, rectification, erasure, restriction, objection and data portability under Art. 15–21 GDPR (DSGVO).

All details are in the privacy policy.

Which principles apply to AI?

Today, the search in your own words works according to fixed rules on our server, without AI. In future it will be supported by an AI language model; AI results are always labelled and are only suggestions. The following principles apply:

1. AI supports, people decide. Recognised search criteria and the match score are labelled as such and are suggestions that you can check and change yourself. Texts of anonymous profiles are always released by a person.
2. The AI releases nothing. Releases of the exposé and address are only granted by our team, with the owner’s consent or on the instructions of their estate agent.
3. No sensitive documents to the AI. Identity, bank and financing documents are never processed by an AI model. Only the search text is sent to the model.
4. Works without an AI service. The search also works according to fixed rules, without an external model.
5. Transparency. If we use an external AI service, we name the provider and purpose in the privacy policy.

What we never do

• Show addresses or photos of façades publicly
• Release anonymous profiles to search engines
• Hand out documents without the owner’s consent or the instructions of their estate agent
• Sell your data or pass it on to third parties for advertising purposes
• Pass data on to partner agents without your separate consent
• Have releases granted automatically by software or AI