General
This privacy policy informs you about the type, scope, and purpose of the processing of your personal data by the data protection officer in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR).
The definitions of terms from the GDPR, particularly in accordance with Art. 4, are used as a basis.
1.1. Responsible Party
The data protection officer responsible for the Bauhow website, the Bauhow web app, and services provided in cooperation with partner companies is:
Bauhow Consulting GmbH ("Bauhow", "we")
Dammstraße 34, 47119 Duisburg
c/o Hafenstraße 2, 47119 Duisburg
Email: kontakt@bauhow.com
1.2. Data Protection Officer
You can reach the appointed data protection officer as follows:
Intelliant GmbH
Reinhardtstr. 25
10117 Berlin
Email: datenschutz@bauhow.com
Details of Data Processing
2.1. Website and Web App: Operation and Functions
When visiting our website, we process personal data as follows.
We use third-party services in this regard. This includes the use of cookies. Specific information about individual cookies and individual settings can be found under "Change settings" in our consent management.
In the consent management, you can consent to processing and object to processing based on legitimate interests. You can also adjust your preferences at a later time or withdraw your consent with effect for the future. These adjustments can be made at any time via the "Change settings" button in your browser window. Please note that without your consent, certain functions of the website may only function to a limited extent.
2.1.1. Provision of Website Content
Purpose
Establishment of the technical connection between the visitor's device and our website (session execution)
Preservation and improvement of the website functionality
Preservation and improvement of information security and data security (confidentiality, availability, and integrity) of the website (data storage in log files)
Categories of Processed Data
IP address of the accessing system
Type and version of the browser used on the device
Internet service provider of the accessing system
Date, time, and success of access
Websites of third parties from which the user's system accesses our website
Websites of third parties that are accessed by the user's system via our website
Categories of Recipients
Web hosting – Vercel, Inc.
Content Delivery Network – Cloudflare Germany GmbH
Diverse cookie providers (see consent management)
Note: Google Tag Manager (Google Inc.) - no processing of personal data
Data Transfer to Third Countries
US (Web Hosting) in accordance with appropriate safeguards under Art. 46 GDPR
US (Cookies) with corresponding consent
Storage Duration or Criteria
Session: Data deletion upon termination of the respective session
Log files: Data deletion after 7 days or anonymization
Cookies: see consent management
Legal Bases
Art. 6 para. 1 f) GDPR (legitimate interests)
Art. 6 para. 1 a) GDPR (consent – see 2.1.2)
2.1.2 Website Optimization, Reach Analysis, and Social Media Integration
We process personal data of website visitors for the purposes of website optimization and reach analysis, as well as for the integration of marketing and social media functionalities. Detailed information on these data processing activities can be found in the consent management under "Change settings." The legal basis for processing for these purposes is Art. 6 para. 1 a) GDPR (consent). The consent for this processing can be revoked at any time during the duration of this browser session in which these settings are used.
2.1.3 Web App Operation and Web App Functions
The services offered can be utilized via the Bauhow web app as well as through integrated solutions on partner websites. This includes processing data as part of the app's operation, as well as to provide features, security, and improve the offered features. The individual processing activities are performed within the scope of this document.
Purpose
Hosting of Bauhow services
Technical operation of the Bauhow web app
Provision of the app and its functions
Preservation and improvement of information security and data security
Categories of Processed Data
IP address of the end device
Internet service provider of the mobile device
Date, time of app usage
Categories of Recipients
Web hosting – Vercel, Inc.
Data Transfer to Third Countries
US (Hosting) in accordance with appropriate safeguards under Art. 46 GDPR
Storage Duration or Criteria
-
Legal Bases
Art. 6 para. 1 b) GDPR (contract fulfillment)
Art. 6 para. 1 f) GDPR (legitimate interests)
2.1.4 Contact and Demo Agreement
You can contact us on our website via the functions "Contact Sales" and "Request Free Demo."
Purpose
Contacting Bauhow
Processing and responding to submitted (contact) inquiries
Arranging and conducting product demonstrations
Categories of Processed Data
Personal identification data (name)
Contact data (email address, phone number)
Message content (optional)
IP address, log data, and tracking
Categories of Recipients
Form provider – Formspark
Automation – Zapier Inc.
CRM – Pipedrive OÜ
Data Transfer to Third Countries
US (Form) in accordance with appropriate safeguards under Art. 46 GDPR
Storage Duration or Criteria
3 months after receipt/response of the contact inquiry
Legal Bases
Art. 6 para. 1 a) GDPR (consent)
2.1.5. Newsletter and Marketing Information
A newsletter with regular updates can be subscribed to at any time on our website. This subscription is based on your consent and can be revoked at any time.
Purpose
Legally compliant sending of newsletters
Provision of information about news and services from Bauhow
Categories of Processed Data
Name
Email address
IP address
Log data and tracking
Categories of Recipients
Newsletter distribution – Sendinblue GmbH
Data Transfer to Third Countries
US based on appropriate safeguards under Art. 46 GDPR
Storage Duration or Criteria
Until the consent is revoked
Legal Bases
Art. 6 para. 1 a) GDPR (consent)
By subscribing to our marketing emails, you agree to receive regular email updates from Bauhow. You can revoke your consent at any time by unsubscribing using the link included in each email or by sending an email to Bauhow.
2.2. Bauhow Services in the Web App
Diverse real estate services are provided through online forms in the Bauhow web app.
The processing of personal data in all forms occurs analogously.
Purpose
Collection of relevant contact data
Booking and payment for the desired service
Provision of the desired service
If necessary, contacting to provide the services
Payment for the services
Categories of Processed Data
Personal identification data (name, address)
Contact data (email address, phone number)
Categories of Recipients
Payment processing – Stripe Payments Europe, Ltd.
Data Transfer to Third Countries
-
Storage Duration or Criteria
Processing within the scope and until the end of contract fulfillment
For compliance with legal regulations regarding retention obligations, for evidential purposes, or documentation obligations
Legal Bases
Art. 6 para. 1 b) GDPR (contract fulfillment)
2.2.1. Bauhow Services through Partner Sites
If you book the Bauhow service through a partner website, your data will be transmitted to this partner after the service is provided. This allows the partner to continue supporting you with the real estate topics you selected during the process.
2.2.2. Bauhow Services at Bauhow with Further Consulting by Specialized Companies
If you book the Bauhow service directly at Bauhow, we also offer you support to connect with qualified partners and specialized companies. There are multiple opportunities to voluntarily consent to the further processing of your data. These consents can be revoked informally at any time with effect for the future. Please note that once processing activities (e.g., data transfer) may already be completed at this point. In this case, your data will be deleted once the purpose has lapsed.
After your data is forwarded to Bauhow's partners, further processing will be carried out by our partners under separate responsibility.
List of our partners:
Vaillant Deutschland GmbH & Co. KG
https://www.vaillant.de/ueber-uns/datenschutz/
Rights of the Data Subject
If personal data is processed about you, you are a data subject within the meaning of the GDPR. You have the following rights against the controller:
3.1. Right of Access
You have the right under Art. 15 GDPR to request confirmation from us as to whether we process personal data concerning you. If this is the case, you can request the following information from us: purposes of processing; category of personal data being processed; recipients or categories of recipients to whom your data has been or will be disclosed; planned storage duration or, if specific details cannot be provided, criteria for determining the storage duration; existence of a right to rectification, erasure, restriction of processing, or objection; existence of a right to lodge a complaint with a supervisory authority; origin of your data if it was not collected by us; existence of automated decision-making including “profiling” and, where applicable, significant information regarding their details; transfer of personal data to a third country or to an international organization; appropriate safeguards under Art. 46 GDPR in connection with the transfer.
3.2. Right to Rectification
You have the right under Art. 16 GDPR to request without delay the rectification or completion of your personal data stored with us.
3.3. Right to Restriction of Processing
You have the right under Art. 18 GDPR to request the restriction of processing your personal data, as long as the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure, and we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
3.4. Right to Erasure
You have the right under Art. 17 GDPR to request the erasure of your personal data stored with us, as long as the processing is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
3.5. Right to Notification
If you have asserted your right to rectification, erasure, or restriction of processing against the controller, we are obliged under Art. 19 GDPR to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
3.6. Right to Data Portability
You have the right under Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.
3.7 Right to Object
You have the right under Art. 21 GDPR to revoke your consent given once at any time against us. We will then no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data concerning you is processed for purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent it is related to such direct marketing. If you object to processing for the purposes of direct marketing, personal data concerning you will no longer be processed for these purposes.
3.8. Right to Withdraw Consent to Data Processing
You have the right under Art. 7 para. 3 GDPR to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3.9. Right to Lodge a Complaint with a Supervisory Authority
You have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual residence, workplace, or the place of the alleged infringement. For Bauhow, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible.
Current Status and Changes to this Privacy Policy
This privacy policy applies in its respective valid version. The current privacy policy can be accessed and printed at any time on the website at https://bauhow.com/datenschutz.
As of: 06-2024
