Legal

Privacy Policy

Information pursuant to Art. 13 General Data Protection Regulation (GDPR) · As of October 2026

At a glance

The public pages of this website set no cookies, use no third-party analytics or tracking services (e.g. Google Analytics) and load no content from third-party servers (fonts and images are hosted on our own server). Personal data is only processed when your browser requests a page (server log) and when you contact us. Our own anonymous visitor counting without cookies is described in section 4; for the owner portal, the information in section 6 applies in addition.

1. Controller

PHM Properties L.L.C
Office S04-82
Sheikh Rashid Building
Trade Centre 1
Dubai, United Arab Emirates

Represented by: Md Eftakar Kobir Shakib Humayun Kabir (Manager)
Phone: +971 58 595 4488
Email: moc.seitreporpmhp@ofni

2. Hosting and server logs

The website runs on a server in a data centre of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, within the European Union. Each time a page is requested, the server automatically records the following in a log:

IP address of the requesting device
date and time of the request
requested address, status code and amount of data transferred
previously visited page (referrer), if sent by the browser
browser and operating system (user agent)

We need this data to deliver the website, to keep it secure and to fend off attacks (e.g. automatically detecting and temporarily blocking addresses that send large numbers of faulty requests). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the website.

We also use the logs to compile an internal access statistic (e.g. number of visits, pages viewed, referring websites, browsers, country of origin). For this, IP addresses are shortened so that they can no longer be linked to individuals; search-engine crawlers are filtered out. The country is determined with a country database on our own server; the IP address is not passed on to third parties for this. The statistic is only available internally and helps us improve the website (Art. 6 (1) (f) GDPR).

The logs are deleted automatically after 14 days. If an address is temporarily blocked because of suspicious requests, the block is lifted and the entry deleted after one day at the latest. The data is not combined with other data or analysed for advertising purposes.

3. Storing your language choice

If you choose a language with the “EN | DE” switch, your browser remembers this choice in its local storage (localStorage, entry “phm-sprache”). It stays on your device and is not transmitted to us. Without a choice of your own, the language on your first visit follows your browser’s language setting; this check also takes place in your browser only.

Storing the choice is strictly necessary for the language selection you requested (Section 25 (2) No. 2 German TDDDG). You can delete the entry at any time in your browser settings.

4. Visitor counting without cookies

To understand how our website is used, we count visits and actions with a small script of our own on our server — without cookies, without storing anything on your device and without third-party services. The following is transmitted: the page viewed and its language, the website you came from (domain name only), the width of the browser window, your browser identifier, how long the page was visible, how far you scrolled and whether you clicked on call, WhatsApp, email, Property Finder or a listing.

These signals are logged without an IP address, deleted after 14 days and only kept as aggregated daily figures; they cannot be linked to you. If you have enabled “Do Not Track” or “Global Privacy Control” in your browser, nothing is counted. The legal basis is Art. 6 (1) (f) GDPR (interest in a user-friendly, effective website).

5. Contacting us

If you contact us by phone, email or WhatsApp, we process your details (e.g. name, contact details, content of your enquiry) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).

Email: Our mailbox is operated via Google Workspace (Google); emails are stored on Google’s servers.

WhatsApp: The WhatsApp button opens the WhatsApp service (for users in the EU: WhatsApp Ireland Limited). Data is only transmitted to WhatsApp once you click; WhatsApp’s own privacy policy applies to its processing. If you prefer not to use WhatsApp, you can also reach us by phone or email.

We delete your details once your request has been dealt with, unless statutory retention obligations apply.

6. Owner portal

For owners whose properties we manage, we operate an online portal at www.phmproperties.com/owner-portal. Access is by invitation only. The legal basis for processing in the portal is Art. 6 (1) (b) GDPR (performance of the management agreement), and Art. 6 (1) (f) GDPR for security measures.

Your account: Name, email address, password (stored only as a secure hash that we cannot read), language, notification settings, date of invitation, and date and IP address of your last login.
Content: Information on your properties and their management, e.g. tenancy contracts, tenants, payment status, handover reports, damages, statements and documents. This includes data of your tenants; please treat it confidentially.
Session cookie: When you open the portal, we set a technically necessary session cookie so that you stay signed in (Section 25 (2) No. 2 German TDDDG). The session ends after 120 minutes of inactivity; for this we store the IP address, browser identifier and time of last activity. There is no permanent sign-in (“remember me”).
Security log: Sign-in attempts are logged with the IP address and the email address entered, in order to detect and fend off attacks (limiting failed attempts, temporary blocks). This log is deleted after 14 days.
Emails: We send invitations and password reset links from our mailbox (Google Workspace).
Push notifications: Only if you switch them on in the portal and your browser agrees do we store your browser’s delivery address (push service of the browser vendor, e.g. Apple, Google or Mozilla) with the associated keys and the browser identifier. Notifications are delivered in encrypted form via this service. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG); you can withdraw it at any time in the portal or in your browser. Notices within the portal (bell icon) are stored in your account.
Retention: Your account exists as long as we manage your properties. Afterwards it is deactivated and deleted, unless statutory retention obligations apply to contract and accounting records.

The portal runs on the same server in the EU as this website and uses no analytics or advertising tools.

7. Links to other websites

Our website links to third-party services, in particular our listings profile on Property Finder, WhatsApp and the website of the Dubai Land Department. This content is not embedded in our website; data is only transferred when you click a link. From then on, the privacy policy of the respective provider applies.

8. Transfers outside the EU

We are based in the United Arab Emirates. There is no adequacy decision of the European Commission for the UAE. When you contact us, the related transfer of your details to us is based on Art. 49 (1) (b) GDPR (necessary to handle your request or for pre-contractual measures taken at your request). Google may also process email data in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

The website’s server logs (section 2) and the owner portal data (section 6) are stored on the server in the EU; we access them from the UAE. Push notifications are delivered via your browser vendor’s service, which may also process data outside the EU.

9. Encryption

The website is delivered exclusively via encrypted HTTPS (TLS), so data you send to us cannot be read by third parties.

10. Your rights

Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Simply contact us using the details above.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or place of work (Art. 77 GDPR).

11. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.

← Back to home