Privacy Policy

1. General Information

This Privacy Policy informs you about what personal data is collected when you visit our website, how we process it, and what rights you have.

We take the protection of your personal data very seriously and treat it confidentially in accordance with applicable data protection laws – in particular the GDPR, the German Federal Data Protection Act (BDSG), and the TDDDG in its current version.

2. Controller

3. Hosting & Server Log Files

Our website is hosted by:

Processing is based on a data processing agreement pursuant to Art. 28 GDPR. All servers are located exclusively in Germany or within the EU.

When you visit our website, IONOS automatically records the following data in server log files:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing device
• Time of the server request
• IP address (anonymised)

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the website). Data is deleted no later than 30 days after collection.

4. Legal Bases for Data Processing

We process your personal data on the following legal bases pursuant to Art. 6 GDPR:

• Art. 6(1)(a) GDPR – Consent of the data subject
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – Compliance with a legal obligation
• Art. 6(1)(f) GDPR – Legitimate interests of the controller

5. Contact Form & Email Contact

When you contact us via our contact form or by email, the data you provide (name, email address, phone number, message content) will be stored to process your enquiry. We will not share this data without your explicit consent.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to customer enquiries) or Art. 6(1)(a) GDPR (consent).

Your data will be deleted once your enquiry has been fully processed and no statutory retention obligations apply. As a rule, data is retained for a maximum of 6 months after completion of correspondence, provided no contract has been concluded.

6. Cookies

Our website uses only technically necessary cookies. These are permitted without consent pursuant to Section 25(2)(2) TDDDG, as they are strictly required for the operation of the website.

The following cookies are used:

• Language setting – Stores your preferred language (validity: 12 months)
• Cookie consent – Stores your cookie consent decision (validity: 12 months)

Tracking cookies, analytics cookies, or third-party cookies are not used. You may disable technically necessary cookies via your browser settings, although this may affect website functionality.

7. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can identify an encrypted connection by the "https://" in your browser's address bar and the padlock symbol.

8. Disclosure of Data to Third Parties

Your personal data will not be disclosed to third parties as a matter of principle. Exceptions apply only in the following cases:

• You have given your explicit consent (Art. 6(1)(a) GDPR)
• Disclosure is necessary for the establishment, exercise, or defence of legal claims (Art. 6(1)(f) GDPR)
• There is a legal obligation to disclose (Art. 6(1)(c) GDPR)

9. Data Retention Period

We store your personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. tax retention obligations of 10 years pursuant to Section 147 of the German Fiscal Code). Upon expiry of these periods, data is routinely deleted.

10. Your Rights as a Data Subject

You have the following rights at any time:

• Right of access (Art. 15 GDPR) – Regarding your personal data stored by us
• Right to rectification (Art. 16 GDPR) – Immediate correction of inaccurate data
• Right to erasure (Art. 17 GDPR) – Deletion under certain conditions
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) – To the processing of your data
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us at: info@ab-bauing.de

You may withdraw any consent you have given at any time by sending us an informal email. The lawfulness of processing carried out prior to withdrawal remains unaffected.

11. Competent Supervisory Authority

In the event of GDPR violations, you have the right to lodge a complaint with the competent supervisory authority:

12. Updates to this Privacy Policy

This Privacy Policy is currently valid as of May 2025. As our website evolves or legal requirements change, updates may be necessary. The current version can be accessed on our website at any time.