Privacy Policy

1. Controller

Deck&Dach UG (haftungsbeschränkt), Urbanstraße 26/1, 72555 Metzingen, Germany

Phone: +49 1567 9779272

Email: mail@deckunddach.de

2. Hosting (Cloudflare)

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary connection data (e.g. IP address, date and time of access, requested page, browser information) to deliver the website and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and performant operation). Cloudflare is certified under the EU-U.S. Data Privacy Framework.

3. Collection and processing of personal data

We collect personal data when you provide it to us as part of a booking inquiry or contact request (form, email, phone, WhatsApp). The data is used to process your inquiry and to communicate with you (Art. 6(1)(b) GDPR).

4. Contact forms (Formspree)

Our contact and enquiry forms use Formspree (Formspree, Inc., USA). The data you enter is transmitted to us via Formspree and processed on servers in the USA. Legal basis: Art. 6(1)(b) GDPR (processing of your inquiry). Alternatively, you can always contact us by email or phone.

5. WhatsApp

If you contact us via WhatsApp (WhatsApp Ireland Limited), WhatsApp's privacy policy additionally applies. Use is voluntary; legal basis: Art. 6(1)(b) or (f) GDPR.

6. External links

Our website contains links to external services (e.g. Google Maps and Apple Maps for route planning, our online shop Cardiverse Odyssey and our brand FORM & SYSTEM). When you click them you leave our website and the respective provider's privacy policy applies. These services are not embedded on our website itself.

7. Data sharing

Your data is only shared with third parties where required for the fulfilment of contractual obligations (e.g. the service providers listed above) or where we are legally obliged to do so.

8. Cookies and local storage

This website itself does not set any cookies and does not use any marketing services. The audience measurement described in section 9 works without cookies and without any script in your browser.

9. Audience measurement (Plausible Analytics)

We do not set cookies and do not load any analytics or advertising scripts. So that we can see which pages are read, where visitors come from and how many enquiries a campaign brings, our server transmits the following data to Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia) on every page view, when the confirmation page is opened after a form has been sent, and when a WhatsApp link is clicked: the requested address without any parameters other than campaign identifiers (utm_…), the referring page without parameters, your IP address and your browser identifier (user agent). For a WhatsApp link we only transmit where on the page it was clicked, never the text of your message.

Plausible processes this data as our processor on servers in the EU. It derives a daily identifier from it using a random value that is deleted every day, and does not store your IP address or browser identifier. Only aggregated data such as page, source, country, device type and event is stored.

The legal basis is our legitimate interest in an understandable website and in evaluating our advertising (Art. 6(1)(f) GDPR). If your browser sends “Global Privacy Control” or “Do Not Track”, we do not transmit anything.

10. Storage duration

We store your personal data only as long as necessary for the fulfilment of the stated purposes or as required by statutory retention obligations (e.g. commercial and tax law).

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Simply contact mail@deckunddach.de.

12. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.