Last updated:
This notice describes which personal data we process when you visit this website and when you make an enquiry, on what legal basis, and what rights you have.
The controller for data processing on this website is the provider named in the legal notice. For data protection questions you can reach us at the email address given there. No data protection officer has been appointed because the statutory conditions in section 38 BDSG are not met. Your requests are handled personally by management.
When you access this website our hosting provider processes technically necessary connection data such as IP address, timestamp, requested resource, status code, volume of data transferred, referrer and user agent. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in stable and secure operation. This data is deleted after 30 days at the latest and is not combined with other sources.
We use strictly necessary cookies that store your language choice, your appearance setting and your cookie decision. The legal basis is section 25(2) TDDDG in conjunction with Article 6(1)(f) GDPR. All non-essential services load only after you have consented in the banner. The legal basis for those is section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. You can change or withdraw your consent at any time with future effect via the Cookie settings link in the footer.
When you contact us through a form we process the details you enter, that is your name, email address, and where given your telephone number, company, property details and message, in order to answer your enquiry and prepare a quote. The legal basis is Article 6(1)(b) GDPR, because the processing is necessary for steps taken prior to entering into a contract. We additionally store, for abuse prevention, a hash of your IP address formed with a secret salt, the timestamp and the user agent. The IP address itself is not stored. The legal basis for this is Article 6(1)(f) GDPR. We delete enquiries no later than three years after the last contact, unless commercial or tax retention periods require otherwise.
For the newsletter we process your email address, your language and the record of your consent, consisting of the timestamp, the hashed IP address and the confirmation timestamp. After signing up you receive an email with a confirmation link. You are only added once you click it. The legal basis is Article 6(1)(a) GDPR. You can unsubscribe at any time via the link in every message. After unsubscribing we keep your address on file in a blocked state so that it cannot be contacted again by mistake.
We use carefully selected service providers, each under a data processing agreement pursuant to Article 28 GDPR: Vercel Inc. for hosting and delivery, Neon Inc. for the database and Resend Inc. for email dispatch. Database and hosting run in data centres within the European Union. Where a transfer to the United States nevertheless occurs in individual processing steps, it is based on the European Commission's standard contractual clauses under Article 46(2)(c) GDPR together with supplementary technical measures and, where the providers are certified, on the adequacy decision for the EU-US Data Privacy Framework under Article 45 GDPR.
The directions map on the contact page is loaded from OpenStreetMap. The map is not embedded automatically but only after your explicit consent. When it loads, your IP address is transmitted to the OpenStreetMap Foundation, United Kingdom. The legal basis is Article 6(1)(a) GDPR. An adequacy decision of the European Commission is in place for the United Kingdom.
Audience measurement takes place only if you have consented to the Statistics category in the consent banner. Without your consent no analytics script is loaded and no corresponding cookies are set. Where consent is given, signals are set in line with Google Consent Mode v2 according to your selection.
You have the right of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction of processing under Article 18, data portability under Article 20 and objection to processing based on legitimate interests under Article 21 GDPR. You may withdraw consent at any time with future effect. The lawfulness of processing carried out before withdrawal is unaffected. An informal message to the email address in the legal notice is sufficient to exercise these rights.
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2 to 4, 40213 Düsseldorf.
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place. Quotes are calculated by people. This website uses no AI chatbot and no generative system that interacts with you.