Privacy Policy

Information in accordance with the General Data Protection Regulation (GDPR) and TDDDG

1. General Information

This privacy policy informs you about what personal data is collected when you visit our website, how we process it, and what rights you have.

We take the protection of your personal data very seriously and treat it confidentially in accordance with statutory data protection regulations – in particular the GDPR, the BDSG, and the TDDDG in its current version.

2. Controller

Dipl.-Ing. Kevork Apikian & Dipl.-Ing. Frank Behrendt
A&B Ingenieurgesellschaft bR
Consulting Engineers for Civil Engineering

Storkower Straße 113
10407 Berlin, Germany

Tel: +49 30 / 264 99 5 – 0
Email: info@ab-bauing.de
VAT ID: DE302064938
Note on the Data Protection Officer As a company of our size, we are not legally required to appoint a data protection officer (Art. 37(1)(b) GDPR). For data protection inquiries, please contact the address above directly.

3. Categories of Personal Data and Processing Purposes

Below we provide a systematic overview of the categories of personal data we process, the respective processing purposes, and the legal bases pursuant to Art. 13(1) GDPR:

Category Examples Purpose Legal Basis
Contact Data Name, email address, phone number Processing inquiries, contract communication Art. 6(1)(b) GDPR (contract) or (f) (legitimate interest)
Usage Data IP address (anonymised), browser type, operating system, referrer URL Secure and stable provision of the website, error analysis Art. 6(1)(f) GDPR (legitimate interest)
Communication Data Content of emails and contact form messages Responding to inquiries Art. 6(1)(b) GDPR or (f) GDPR
Preference Data Language preference, cookie consent status Storing user settings Art. 6(1)(f) GDPR (legitimate interest) or § 25(2) No. 2 TDDDG

4. Hosting & Server Log Files

Our website is hosted by:

IONOS SE (formerly 1&1 Internet SE) Elgendorfer Str. 57, 56410 Montabaur, Germany
Web: www.ionos.de | Privacy: IONOS Privacy Policy

Processing is based on a data processing agreement pursuant to Art. 28(3) GDPR. The servers are located exclusively in Germany or the EU.

When you access our website, IONOS automatically collects the following data in so-called server log files:

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the website). The data is deleted no later than after 30 days.

5. Third-Party Providers & International Data Transfers

In the course of providing our website, we use the following third-party providers:

5.1 Google Fonts

To ensure a uniform presentation of fonts, we use Google Fonts. When loading the page, a connection is established to the Google Fonts servers (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Your IP address may be transmitted to Google in the process. This constitutes an international data transfer to a third country (USA).

The legal basis for this transfer is Art. 49(1)(a) GDPR (consent), if you have given your consent. Alternatively, the data transfer may be based on Art. 49(1)(f) GDPR (legitimate interests), provided that Google offers appropriate safeguards pursuant to Art. 46(2)(c) GDPR (Standard Contractual Clauses). Further information can be found in Google's Privacy Policy and the Google Cloud SCCs.

5.2 Other Recipients

Your personal data is generally not disclosed to other third parties. Exceptions apply only in the following cases:

6. Legal Bases for Data Processing

We process your personal data on the following legal bases pursuant to Art. 6 GDPR:

7. Contact Form & Email Contact

If you contact us via our contact form or by email, the data you provide (name, email address, phone number, message content) will be stored for the purpose of processing your inquiry. We do not disclose this data without your express consent.

The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to customer inquiries) or Art. 6(1)(a) GDPR (consent).

The data is deleted as soon as your inquiry has been finally processed and no statutory retention obligations apply. As a rule, the retention period is a maximum of 6 months after completion of the correspondence, provided that no contract has been concluded.

8. Consent & Withdrawal

Where we process your data on the basis of consent (Art. 6(1)(a) GDPR), you may withdraw this consent at any time. An informal notification by email to info@ab-bauing.de or by post to the address above is sufficient.

The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal (Art. 7(3) sentence 2 GDPR). The withdrawal is effective for the future and is free of charge.

9. Cookies

Our website uses exclusively technically necessary cookies. These are permissible without consent pursuant to § 25(2) No. 2 TDDDG, as they are strictly necessary for the operation of the website.

The following cookies are used:

Tracking cookies, analytics cookies, or third-party cookies are not used. Deactivation of technically necessary cookies is possible via browser settings, but may restrict the functionality of the website.

10. SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the "https://" in the address bar of your browser and the padlock symbol.

11. Duration of Data Storage

We store your personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods (e.g. tax retention obligations of 10 years pursuant to § 147 German Fiscal Code). After expiry of the periods, the data is routinely deleted.

12. Your Rights as a Data Subject

You have the following rights against us at any time:

To exercise your rights, please contact: info@ab-bauing.de

You may withdraw a consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

13. Competent Supervisory Authority

In the event of violations of the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Berlin Commissioner for Data Protection and Freedom of Information Friedrichstr. 219, 10969 Berlin, Germany
Tel: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Web: www.datenschutz-berlin.de

14. Automated Decision-Making & Profiling

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Currency and Changes to This Privacy Policy

This privacy policy is currently valid as of July 2026. Due to the further development of our website or changes in statutory requirements, an update may become necessary. The current version can be accessed on this website at any time.