Privacy policy

1. Privacy at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Data collection on this website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. The contact details can be found in the section “Controller” of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This applies in particular to data that you enter in a contact form or inquiry form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical data, such as browser, operating system, IP address, referrer URL or time of page access.

What do we use your data for?

Some data is collected to provide the website without technical errors. Other data is used, where consent has been given, to analyze website use, measure advertising success and integrate map services.

What rights do you have?

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent you have given at any time with effect for the future.

2. Hosting

External hosting

This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website visits and other data generated through a website.

External hosting is used for the purpose of contract fulfillment toward our potential and existing customers under Art. 6 (1) lit. b GDPR and in the interest of secure, fast and efficient provision of our online offering under Art. 6 (1) lit. f GDPR. If consent has been requested, processing is based on Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG.

We use the following host:

HOSTINGER operations, UAB
Švitrigailos str. 34
Vilnius 03230
Lithuania
Email: domains@hostinger.com

3. General information and mandatory information

Privacy

We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is processed. This privacy policy explains which data we collect, what we use it for and on which legal basis processing takes place.

Data transmission on the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Data controller

Responsible for data processing on this website:

Patrick Norheimer
ZuhauseBauen
Fritz-Karl-Henkel-Straße 12–16
Hall 28
67454 Haßloch

Phone: 0176-61402069
Email: info@zuhausebauen.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of data processing no longer applies. If you assert a legitimate request for erasure or withdraw consent to data processing, your data will be erased unless statutory retention periods or other legally permissible reasons for storage prevent this.

Legal bases for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR. If the storage of cookies or access to information on your device is concerned, processing is additionally based on Section 25 (1) TDDDG.

If your data is required for the performance of a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. If we are legally obliged to process data, processing is based on Art. 6 (1) lit. c GDPR. In other cases, processing may be based on our legitimate interest under Art. 6 (1) lit. f GDPR.

Recipients of personal data

As part of our business activities, we work with external service providers. Personal data is only passed on if this is necessary for contract fulfillment, if there is a legal obligation, if consent has been given or if another legal basis permits the transfer.

Withdrawal of your consent

Many data processing operations are only possible with your consent. You may withdraw consent already given at any time with effect for the future. The lawfulness of data processing carried out before withdrawal remains unaffected.

Right to object under Art. 21 GDPR

If data processing is carried out on the basis of Art. 6 (1) lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for such advertising.

Right to lodge a complaint with the supervisory authority

In the event of GDPR violations, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, workplace or the place of the alleged violation.

Information, rectification and erasure

Within the scope of statutory provisions, you have the right at any time to information about your stored personal data, its origin and recipients and the purpose of data processing. You also have the right to rectification or erasure of this data.

Right to restriction of processing

You have the right to request restriction of processing of your personal data. This right exists in particular if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data or you have objected to the processing.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” in the address bar of your browser.

4. Data collection on this website

Cookies

Our website uses cookies and similar technologies. Cookies are small data packets stored on your device. Some cookies are technically necessary, while others are used for analytics, advertising or the integration of external services.

Technically necessary cookies are used on the basis of Art. 6 (1) lit. f GDPR and Section 25 (2) TDDDG. Cookies and similar technologies that are not technically necessary are only used with your consent. The legal basis is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG.

You can change or withdraw your consent at any time through the cookie banner or the cookie settings on this website.

CookieFirst Cookie Banner

We use CookieFirst as a consent management platform. The provider is Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018DH Amsterdam, Netherlands.

CookieFirst is used to obtain, document and manage consent for the use of cookies and external services. In particular, your consent selection, technical device information, time of selection and connection data may be processed.

CookieFirst is used to fulfill legal obligations under Art. 6 (1) lit. c GDPR and on the basis of our legitimate interest in legally compliant consent management under Art. 6 (1) lit. f GDPR. Where CookieFirst stores or reads technically necessary information on the device, this is based on Section 25 (2) TDDDG.

Further information can be found in CookieFirst’s privacy policy: https://cookiefirst.com/legal/privacy-policy

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address

This data is not combined with other data sources. Collection is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website.

Contact form and inquiry form

If you send us inquiries via a contact form or inquiry form, the information from the form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for follow-up questions.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling inquiries addressed to us under Art. 6 (1) lit. f GDPR or on your consent under Art. 6 (1) lit. a GDPR, if requested.

The data you enter will remain with us until you ask us to erase it, withdraw your consent or the purpose for storing the data no longer applies. Statutory retention periods remain unaffected.

Inquiry by email or phone

If you contact us by email or phone, your inquiry, including all personal data arising from it, will be stored and processed by us for the purpose of handling your request.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling the inquiry under Art. 6 (1) lit. f GDPR or on your consent under Art. 6 (1) lit. a GDPR, if requested.

5. Analytics, advertising and maps

Google Analytics 4

This website uses Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze the behavior of website visitors. Page views, time spent, devices and browsers used, referrers, interactions, approximate location data and technical usage data may be processed.

According to Google, Google Analytics 4 does not log or store individual IP addresses. For accesses from the EU, IP addresses are used only to derive rough location data and are then discarded.

Google Analytics is used only with your consent. The legal basis is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG. Consent can be withdrawn at any time.

Further information can be found at: https://support.google.com/analytics/answer/12017362?hl=en

Google Ads and conversion measurement

This website uses Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads, we can place ads in Google Search and the Google advertising network. We can also measure whether users perform certain actions on our website after clicking an ad, such as submitting an inquiry.

Cookies, pixels, tags or comparable technologies may be used for this. In particular, IP address, technical device and browser information, pages accessed, clicks, times, campaign information and conversion data may be processed.

Google Ads and conversion measurement are used only with your consent. The legal basis is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG. Consent can be withdrawn at any time.

Further information about advertising with Google can be found at: https://policies.google.com/technologies/ads?hl=en

Google Maps and Google Maps API

This website uses Google Maps and functions of the Google Maps Platform API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps can be used to display maps, location information and route functions on the website. When the map function loads or API requests are made, personal data may be transferred to Google. This may include in particular IP address, location data if you share it, technical device information, browser data, page accessed and time of access.

Google Maps and the Google Maps API are used to provide a user-friendly display of our locations and services. Where consent is requested, processing is based on Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG. Consent can be withdrawn at any time.

Further information about Google’s processing of personal data can be found at: https://policies.google.com/privacy?hl=en

Data transfers for Google services

When using Google services, data processing on servers outside the European Union cannot be excluded. For data transfers, Google refers to the EU-US Data Privacy Framework and to standard contractual clauses.

Further information can be found at: https://policies.google.com/privacy/frameworks?hl=en

Last updated: 04 June 2026