Note: This is a template document. Before publication it must be adapted by a qualified person (DPO / lawyer) to the actual processing operations of FormaHaus GmbH.
1. Controller
FormaHaus GmbH
Friedrichstraße 50, 10117 Berlin, Germany
Email: privacy@formahaus.de
Phone: +49 30 1234 5678
2. What data we process
- Contact data: name, email, phone, address, country
- Project data: area, location, wishes, planned timing
- Technical data: IP address, browser, language, visit timestamp, pages visited
- Cookies: only functional and — with consent — analytical
3. Purposes and legal bases
- Responding to inquiries — Art. 6(1)(b) GDPR (contract preparation) or (f) (legitimate interest)
- Preparing individual quotes — Art. 6(1)(b) GDPR
- Analytics — Art. 6(1)(a) GDPR (consent)
- Legal obligations — Art. 6(1)(c) GDPR
4. Retention period
- Inquiries without contract: up to 6 months after last contact
- Contract data: per statutory retention periods (typically 10 years)
- Cookies: per cookie banner settings, max. 12 months
5. Recipients
Your data may be shared with:
- Construction partners (Stalart, Remagin, local contractors) — only as needed to fulfill your inquiry
- IT providers (hosting, email) under data processing agreements per Art. 28 GDPR
- Authorities — only as legally required
Transfer to third countries (outside EU/EEA) does not occur. If necessary in individual cases, only based on appropriate safeguards (e.g. EU Standard Contractual Clauses).
6. Your rights
You have the right at any time to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) — "right to be forgotten"
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent for future
- Lodge a complaint with the supervisory authority
7. Cookies
- Essential — no consent required
- Analytics — only with consent
- Marketing — currently not used; with consent only
8. Automated decision-making
We do not use automated decision-making (including profiling) within the meaning of Art. 22 GDPR.
9. Changes
We reserve the right to update this privacy policy to reflect current legal requirements or service changes. The current version is always available on this page.