Privacy policy

1. Privacy at a glance

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Data collection on this website

Who is responsible for data collection?

Data processing on this website is carried out by the website operator. The contact details can be found in the section “Data controller” of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This applies in particular to data that you enter in a contact form or inquiry form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical data, such as browser, operating system, IP address, referrer URL or time of page access.

What do we use your data for?

Some data is collected to provide the website without technical errors. Other data is used, where consent has been given, to analyze website use, measure advertising success and integrate map services.

What rights do you have?

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent you have given at any time with effect for the future.

2. Hosting

External hosting

This website is hosted externally. The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website visits and other data generated through a website.

External hosting is used for the purpose of contract fulfillment toward our potential and existing customers under Art. 6 (1) lit. b GDPR and in the interest of secure, fast and efficient provision of our online offering under Art. 6 (1) lit. f GDPR. If consent has been requested, processing is based on Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG.

We use the following host:

HOSTINGER operations, UAB
Švitrigailos str. 34
Vilnius 03230
Lithuania
Email: domains@hostinger.com

3. General information and mandatory information

Privacy

We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is processed. This privacy policy explains which data we collect, what we use it for and on which legal basis processing takes place.

Data transmission on the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Data controller

Responsible for data processing on this website:

Patrick Norheimer
ZuhauseBauen
Fritz-Karl-Henkel-Straße 12–16
Hall 28
67454 Haßloch

Phone: 0176-61402069
Email: info@zuhausebauen.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose of data processing no longer applies. If you assert a legitimate request for erasure or withdraw consent to data processing, your data will be erased unless statutory retention periods or other legally permissible reasons for storage prevent this.

Legal bases for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR. If the storage of cookies or access to information on your device is concerned, processing is additionally based on Section 25 (1) TDDDG.

If your data is required for the performance of a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. If we are legally obliged to process data, processing is based on Art. 6 (1) lit. c GDPR. In other cases, processing may be based on our legitimate interest under Art. 6 (1) lit. f GDPR.

Recipients of personal data

As part of our business activities, we work with external service providers. Personal data is only passed on if this is necessary for contract fulfillment, if there is a legal obligation, if consent has been given or if another legal basis permits the transfer.

Withdrawal of your consent

Many data processing operations are only possible with your consent. You may withdraw consent already given at any time with effect for the future. The lawfulness of data processing carried out before withdrawal remains unaffected.

Right to object under Art. 21 GDPR

If data processing is carried out on the basis of Art. 6 (1) lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for such advertising.

Right to lodge a complaint with the supervisory authority

In the event of GDPR violations, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, workplace or the place of the alleged violation.

Information, rectification and erasure

Within the scope of statutory provisions, you have the right at any time to information about your stored personal data, its origin and recipients and the purpose of data processing. You also have the right to rectification or erasure of this data.

Right to restriction of processing

You have the right to request restriction of processing of your personal data. This right exists in particular if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data or you have objected to the processing.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” in the address bar of your browser.

4. Data collection on this website

Cookies

Our website uses cookies and similar technologies. Cookies are small data packets stored on your device. Some cookies are technically necessary, while others are used for analytics, advertising or the integration of external services.

Technically necessary cookies are used on the basis of Art. 6 (1) lit. f GDPR and Section 25 (2) TDDDG. Cookies and similar technologies that are not technically necessary are only used with your consent. The legal basis is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG.

You can change or withdraw your consent at any time through the cookie banner or the cookie settings on this website.

CookieFirst consent management platform

We use the CookieFirst consent management platform on this website. The provider is Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam, Netherlands.

CookieFirst is used to obtain, manage and document the legally required consent for the use of cookies, similar storage technologies and external services. CookieFirst allows you to choose which categories and services you consent to. You can change or withdraw your selection at any time through the cookie settings available on this website.

When you visit our website, a connection is established to CookieFirst's servers so that the consent prompt can be displayed, your selection can be stored and a record can be kept of consent that has been given, refused or withdrawn. In particular, the following data may be processed:

• Consent status and selected cookie categories
• Withdrawal or modification of consent
• Anonymized IP address
• Browser type and version
• Device type and operating system used
• Date and time of the consent decision
• URL of the page on which the selection was stored or changed
• Approximate country or region
• A randomly generated unique consent identifier

CookieFirst also stores technically necessary information in cookies or in your browser's local storage so that your selection can be taken into account on subsequent page visits. This information is not used for analytics or advertising purposes.

Processing takes place to fulfill our legal obligation to obtain valid consent and be able to demonstrate it, on the basis of Art. 6 (1) lit. c in conjunction with Art. 5 (2) and Art. 7 (1) GDPR. Where information is stored on or read from your device, this takes place on the basis of Section 25 (2) no. 2 TDDDG, as this processing is necessary to provide and manage the cookie settings you have requested.

CookieFirst processes the data on our behalf. We have entered into a data processing agreement with the provider in accordance with Art. 28 GDPR.

The consent records are stored for as long as necessary to fulfill our documentation and accountability obligations under data protection law. The data is then deleted unless statutory retention obligations prevent this. You can change or withdraw your consent at any time with effect for the future through the cookie settings on this website.

Further information about data processing can be found in CookieFirst's privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address

This data is not combined with other data sources. Collection is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website.

Contact form and inquiry form

If you send us inquiries via a contact form or inquiry form, the information from the form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for follow-up questions.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling inquiries addressed to us under Art. 6 (1) lit. f GDPR or on your consent under Art. 6 (1) lit. a GDPR, if requested.

The data you enter will remain with us until you ask us to erase it, withdraw your consent or the purpose for storing the data no longer applies. Statutory retention periods remain unaffected.

Inquiry by email or phone

If you contact us by email or phone, your inquiry, including all personal data arising from it, will be stored and processed by us for the purpose of handling your request.

Processing is based on Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling the inquiry under Art. 6 (1) lit. f GDPR or on your consent under Art. 6 (1) lit. a GDPR, if requested.

5. Analytics, advertising and maps

Google Analytics 4

This website uses the Google Analytics 4 web analytics service. The provider for users within the European Economic Area and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics enables us to analyze the use of our website statistically. We use the information obtained in particular to measure our website's reach, identify frequently accessed content, improve usability and assess the success of our online marketing activities.

Google Analytics is only activated after you have consented to the "Statistics" category through our cookie banner. Without your consent, Google Analytics and the analytics cookies intended for this purpose are not activated.

In particular, the following data may be processed when Google Analytics is used:

• Pages and content accessed
• Referrer URL and source of the visit
• Date, time and duration of page visits
• Clicks, scrolling and other interactions
• Technical event and usage data
• Browser type, operating system, device category and screen resolution
• Language settings
• Approximate location information
• Pseudonymous online, cookie, device and client identifiers
• IP address

According to Google, for visits from the European Union, the IP address is used only during data collection to derive approximate location information. The IP address is then discarded before it is logged or stored in Google Analytics.

Google Analytics uses cookies and similar technologies. These may include the "_ga" cookie and property-specific cookies. They are used to distinguish individual browsers or devices pseudonymously. The "_ga" cookie can generally be stored for up to two years. Details of the cookies currently in use and their specific storage periods can be found in the cookie declaration within our cookie settings.

Retention of the user and event data accessible to us is limited to a maximum of 14 months in our Google Analytics account. Aggregated reports and statistical analyses that do not allow individual website visitors to be directly identified may remain available for longer.

Processing takes place exclusively on the basis of your consent under Art. 6 (1) lit. a GDPR. Where cookies or similar technologies are stored on or read from your device, this additionally takes place on the basis of Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future through this website's cookie settings.

Google generally processes the data collected through Google Analytics as our data processor. Use of Google Analytics is subject to the data protection and data processing terms agreed with Google.

Processing of data by Google LLC or other Google companies on servers outside the European Economic Area, particularly in the USA, cannot be completely ruled out. Google LLC is certified under the EU-US Data Privacy Framework. Data transfers to companies with the relevant certification may take place on the basis of the European Commission's adequacy decision. Where the Data Privacy Framework does not apply in an individual case, Google states that it bases the transfer in particular on the standard contractual clauses approved by the European Commission.

Further information about data processing can be found in Google's privacy policy and the Google Analytics privacy information.

Google Ads and Google Ads conversion tracking

We use the Google Ads online service. The provider for users within the European Economic Area and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Ads enables us to place advertisements in Google Search and, where applicable, on other advertising spaces within the Google advertising network. We also use Google Ads conversion tracking to determine whether users perform a particular action on our website after clicking one of our advertisements. Such an action may, for example, be submitting a contact or inquiry form or visiting a particular confirmation page.

Google Ads and conversion tracking are only activated after you have consented to the "Advertising" category through our cookie banner. Without your consent, the advertising and conversion technologies intended for this purpose are not activated.

In particular, the following data may be processed as part of conversion tracking:

• IP address
• Browser, device and operating system information
• Pages accessed and referrer URL
• Date and time of the page visit
• Click and campaign information
• Advertisement and conversion identifiers
• Google click IDs and comparable click parameters
• Pseudonymous cookie, browser or device identifiers
• Information about the conversion action performed

This data enables Google to recognize that a user reached our website through a particular advertisement and performed an action defined by us. We generally receive aggregated statistical analyses from Google and cannot directly identify individual website visitors from these reports.

In accordance with its own privacy policies, Google may use information collected through its advertising services to provide and measure advertising, prevent fraud and abuse, improve its services and, depending on the individual user's settings, personalize advertising. If a user is signed in to a Google account, Google may be able to associate the information collected with that account.

Our processing takes place on the basis of your consent under Art. 6 (1) lit. a GDPR. Where cookies or similar technologies are stored on or read from your device, this additionally takes place on the basis of Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future through this website's cookie settings.

For data processing within the general Google Ads services, we and Google generally act as independent controllers within our respective areas of responsibility. Where Google provides individual Google Ads functions as a data processor, the relevant Google Ads Data Processing Terms apply.

The specific storage period depends on the identifier or cookie technology used and the user's settings. The cookies used on our website and their respective storage periods are listed in the cookie declaration within our cookie settings.

Processing of data by Google LLC or other Google companies on servers outside the European Economic Area, particularly in the USA, cannot be completely ruled out. Google LLC is certified under the EU-US Data Privacy Framework. Data transfers to companies with the relevant certification may take place on the basis of the European Commission's adequacy decision. Where the Data Privacy Framework does not apply in an individual case, Google states that it bases the transfer in particular on the standard contractual clauses approved by the European Commission.

Further information can be found in Google's privacy policy, the information on the use of data on Google partner websites and apps and the information on advertising and privacy at Google.

Google Maps and Google Maps API

This website uses Google Maps and functions of the Google Maps Platform API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps can be used to display maps, location information and route functions on the website. When the map function loads or API requests are made, personal data may be transferred to Google. This may include in particular IP address, location data if you share it, technical device information, browser data, page accessed and time of access.

Google Maps and the Google Maps API are used to provide a user-friendly display of our locations and services. Where consent is requested, processing is based on Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG. Consent can be withdrawn at any time.

Further information about Google’s processing of personal data can be found at: https://policies.google.com/privacy?hl=en

Data transfers for Google services

When using Google services, data processing on servers outside the European Union cannot be excluded. For data transfers, Google refers to the EU-US Data Privacy Framework and to standard contractual clauses.

Further information can be found at: https://policies.google.com/privacy/frameworks?hl=en

Last updated: 29 July 2026