Privacy policy

Your rights

Subject to the statutory requirements, you have the right of access and the rights to rectification, erasure, restriction of processing and data portability, as well as the right to object. Where processing is based on your consent, you can withdraw that consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. For companies with their registered office in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg can be reached at baden-wuerttemberg.datenschutz.de/beschwerde/ .

Legal bases at a glance

Where we obtain consent, processing is based on Art. 6(1)(a) GDPR. For enquiries, quotations, applications and the preparation of contracts we rely on Art. 6(1)(b) GDPR. We base statutory retention or documentation obligations on Art. 6(1)(c) GDPR. For the secure operation of the website, general communication and the defence of legal interests, Art. 6(1)(f) GDPR may apply.

Visiting the website and server logs

When you visit the website, technically necessary access data is processed. This can include the IP address, the date and time of access, the address requested, the amount of data transferred, the status code, browser and device information and the previously visited page.

The processing serves the delivery of the website, stability, error analysis and security. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website. Log data is kept only for as long as is necessary for operation, security and error analysis, and in the event of security-related incidents it is analysed for longer where necessary.

Contact forms and project enquiries

When you use a form, we process the data you enter, in particular your name, email address, phone number, project type, message, the selected form type and technical form information. Where available, campaign or referrer information submitted voluntarily may also be processed.

The purpose is to handle your enquiry and to prepare a consultation, a quotation, a site survey or a subsequent contract. The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at a contract or at pre-contractual measures. For general communication, Art. 6(1)(f) GDPR applies; our legitimate interest lies in handling incoming enquiries properly.

Mandatory details are only those that the form in question recognisably requires for processing. Without these details we cannot answer the enquiry, or can answer it only to a limited extent.

The form service receives data on the server side. Validated enquiries can be passed by email, via the mail delivery service used, to the responsible internal mailboxes and, where enabled on the server side, stored in protected directories outside the public web root.

File uploads

Photos, sketches, floor plans, PDFs or ZIP files can be submitted in enquiry and application forms. In doing so, we process the content of the files as well as technical file information such as file name, file type and size.

Uploads are used so that we can assess the installation area, feasibility, project planning or the application. Files are checked technically and, where storage is enabled, stored outside the publicly accessible web directory. Please do not send any documents containing special categories of personal data if these are not necessary for your enquiry.

Applications

If you apply via the website or by email, we process your contact details, application documents, the content of your messages and the information necessary to decide on your application. The purpose is to carry out the application process.

The legal basis is Art. 6(1)(b) GDPR. Where specific statutory requirements for applicant or employee data apply, these are also taken into account. After the process has been completed, application data is erased as soon as there are no longer any statutory retention, documentation or defence interests. Inclusion in an applicant pool for a longer period takes place only with separate consent.

Email, phone and WhatsApp

If you contact us by email or phone, we process the contact details and content you send us in order to handle your request. Depending on the content, Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR applies.

The website contains WhatsApp links. Only when you click on such a link or use WhatsApp do you leave our website, and the privacy terms of WhatsApp or Meta then apply. Via WhatsApp we receive only the content that you actively send us there.

Google Maps and Google reviews

The website does not automatically embed an interactive Google Maps map or a Google reviews widget. It contains links to the public Google Business Profile, to Google reviews and to route planning functions. Only when you click on these links do you leave our website, and Google then processes data under its own responsibility.

The review figures and customer testimonials shown on the website are displayed only as approved content. Where individual customer testimonials are published, this is done only with a genuine source and approval.

Cookies, analytics, advertising and external media

The current website uses no tracking cookies that require consent, no Google Analytics, no Meta/Facebook pixel, no newsletter service, no embedded YouTube videos and no externally loaded Google Web Fonts. Fonts and images are displayed from local website files or system fonts.

Should analytics, advertising, newsletter, map, video or review services be integrated in future, this privacy policy will be updated before they are activated and, where necessary, a consent mechanism will be put in place beforehand.

Recipients and service providers

Within the company, only those units that need the data to handle the matter in question have access to it. In addition, technical service providers, hosting/server providers, email providers, IT support providers or other processors may be involved where this is necessary for operation, communication, security or the handling of enquiries.

Data is disclosed to third parties only if this is necessary to handle your request, you have given your consent, there is a legal obligation or we are pursuing legitimate interests such as the establishment, exercise or defence of legal claims.

Storage period

Personal data is erased as soon as the purpose in question no longer applies and no statutory retention obligations or legitimate interests in documentation prevent this. Documents relevant under commercial and tax law may in particular have to be retained for six or ten years.

As a rule, general enquiries are erased once they have been dealt with and there is no further follow-up communication, quotation, contract or documentation obligation.

Security and updates

The website is transmitted in encrypted form via HTTPS. Forms and uploads are validated technically; access credentials and data for sending emails are managed on the server side and are not published in the website code.

We adapt this privacy policy when website functions, the services used, technical processes or legal requirements change.

No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place via this website.