Skip to content

Data protection

PRIVACY POLICY


With this privacy policy, we wish to inform you about the type, scope, and purpose of the processing of personal data on our website. Personal data is any data that relates to you personally, e.g. name, address, email address or user behaviour.

Who is responsible for data processing with us

Responsible for data processing are:

KARADAG Gebäudeservice GmbH
Seligenstädter Straße 56
63456 Hanau

Tel.: +49 6181 / 434 15 90
Fax: +49 6181 / 434 06 51

Contact details of our Data Protection Officer

You can reach our Data Protection Officer via email at or at our postal address, marked „FAO: Data Protection Officer“.

Processing your data as part of our company's core business

We process your personal data transferred to us within the scope of the contractual and pre-contractual relationship between us. The scope, nature, purpose and necessity of processing are determined by the underlying contractual relationship. For this purpose, we store and process your data in the computer systems used by us. The data processed by us include all data that you have provided for the purpose of availing contractual or pre-contractual services and that are required for the processing of your request or the contract concluded between us.

This can include, in particular, the following data:

  • Name and address

  • Email address and phone number

  • Contract data

  • Payment details.

Processing is limited to data that is necessary and appropriate to answer enquiries and/or fulfil a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or within the scope of our company's organisation for processing financial accounting and for compliance with legal obligations. In this case, only those data that are necessary and appropriate for the fulfilment of the contract or for processing financial accounting and for compliance with legal obligations will be transferred to external service providers. Processing by us will be carried out according to your instructions or legal provisions. Legal basis: The processing of your personal data and the transfer to third parties is carried out in accordance with Art. 6(1)(b) GDPR and serves to fulfil the contract between you and us. Furthermore, we will only pass on data to third parties if there is a legal obligation to do so, Art. 6(1)(c) GDPR, or if there is a legitimate interest in doing so, Art. 6(1)(f) GDPR. This is the case, for example, if it is necessary for the assertion of our claims. 

Deletion: Your data will be deleted as soon as it is no longer required for the fulfilment of contractual or legal duties of care, as well as for the handling of any warranty and comparable obligations. Statutory retention periods shall remain unaffected by this.

Web hosting

We use an internet service provider for our online presence, on whose servers the website is stored (hosting) and who makes our site available on the internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data, as well as meta and communication data on our behalf. Name and address of the internet service provider: Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen Germany You can view their data protection regulations here: https://www.hetzner.de/rechtliches/datenschutz/ The internet service provider is based outside the EU. It is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law. 

Legal basis: The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is carried out on the grounds of our legitimate interest in an efficient and secure provision of our internet services, Art. 6(1)(f) GDPR.

If you use our website purely for informational purposes, our internet service provider will only collect personal data that your browser transmits to its server. This data includes:

  • IP address

  • the date and time of access to our website

  • Time zone difference to Greenwich Mean Time (GMT)

  • Access status (HTTP status)

  • the amount of data transferred

  • the internet service provider of the accessing system

  • the browser type and version you are using

  • The operating system you are using

  • the website from which you may have arrived at our website

  • the pages or sub-pages that you visit on our website.

The aforementioned data are stored as log files on the servers of our internet service provider. This is necessary in order to display the website on the end device you are using, as well as to guarantee stability and security. In the aforementioned purposes lies our legitimate interest in data processing.

Legal basis: The data processing is based on our legitimate interest in providing our internet service efficiently and securely, Art. 6 Para. 1 lit. f) GDPR. 

Duration: The above data regarding the provision of our website will be stored for a period of 7 days and then deleted.

Biscuits

Our website uses cookies. Cookies are small text files, consisting of a series of numbers and letters, which are stored on and saved to your device. Cookies do not transmit viruses or execute programs. Rather, they primarily serve to exchange information between your device and our website in order to make our online offering more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include, in particular, session cookies. These store a so-called session ID, which allows different requests from your browser to be assigned to the common session. This allows our website to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie. You have the option to delete these cookies in your browser's security settings at any time.

The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. These cookies may store, in particular, information on language settings or log-in information.

Furthermore, we also use cookies on our website which enable an analysis of your visit to our internet pages. These cookies can store in particular information about entered search terms, frequency of page views or the use of website functions. These cookies enable us to understand how frequently and in what way the internet presence and its functions are used. They are therefore used to improve the quality and user-friendliness of our internet presence, in particular the content and functions. This allows us to continuously optimise our offering. The data collected in this way is pseudonymised by technical measures. Therefore, it is not possible to attribute the data to you. The data is not stored together with any other personal data concerning you.

Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for this is Art. 6(1) sentence 1(f) of the GDPR.

As cookies are stored on your computer, you as the user also have full control over their use. You have the option to decide via your browser's security settings whether cookies are stored at all. For example, you can choose not to accept any cookies from the outset, only accept them upon request, or set them to be deleted every time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all of the website's functions to their full extent.

Storage duration/deletion

We will delete or block your personal data as soon as the purpose of storage has been achieved or is no longer applicable. Further storage will only take place if we are required to do so by national or European regulations. The data will be blocked or deleted in this case when the storage period prescribed by the respective regulations has expired, unless we require your data for the performance of a contract concluded between us or if it is necessary for the assertion, exercise or defence of legal claims.

Information on the contact options we provide

To the extent that you contact us via email, social media, phone, fax, post, our contact form or otherwise, and in doing so provide us with personal data such as your name, phone number or email address, or provide further details about yourself or your request, this data will be stored and processed within our company for the purpose of processing your request.

Legal basis: If you submitted your request via our contact form, the legal basis for processing your data is Art. 6(1)(a) GDPR. If you submit your request within the scope of contractual or pre-contractual relationships with us, the legal basis for processing your data is Art. 6(1)(b) GDPR. If your request does not fall under one of the aforementioned categories, our legitimate interest in processing your data lies in properly answering your request in your best interest, Art. 6(1)(f) GDPR. 

Deletion: Personal data we collect will be deleted when it is no longer required. We review the necessity every 2 years. Furthermore, you can withdraw consent to data processing at any time.

Handling your data in the application process

If you apply to us, we will process the personal data that you submit to us during the application process. If you send the data by email or via a contact form on our website, the processing will be carried out electronically. If an employment contract is concluded following the application process, we will store your data for the purpose of managing the employment relationship in compliance with statutory provisions.

Purpose: The purpose is to process the application procedure.

Legal basis: The legal basis for processing your data for the aforementioned purpose is Article 6(1)(b) GDPR. 

Deletion: If an employment contract is not concluded, your data will be deleted upon completion of the application process, or at the latest 2 months after its completion. This does not apply if legal provisions prevent deletion or if further storage of your data is necessary for the purpose of evidence, for example in proceedings under the General Equal Treatment Act (AGG). The application process is considered complete upon dispatch of the rejection to you. 

Prevention: You also have the right at any time to withdraw your application or request the deletion of your personal data.

Your rights under the GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the controller named in Section 1 of this privacy policy:

  • Right to information: Under Article 15 GDPR, you can request confirmation as to whether and which personal data we process about you. Furthermore, you can demand information from us free of charge about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, and the origin of your data, provided that it was not collected by us. You also have a right to information as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to be informed about the appropriate safeguards relating to the transfer.

  • Right to rectification: Pursuant to Art. 16 GDPR, you can demand the rectification of inaccurate or the completion of incomplete personal data concerning you which is stored by us.

  • Right to erasure: Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, insofar as we do not require it for the following purposes:

    • to fulfil a legal obligation,

    • for the assertion, exercise or defence of legal claims,

    • for the exercise of the right to freedom of expression and information or

    • for the purposes of the public interest cases referred to in Article 17(3)(c) and (d) of the GDPR.

  • Right to restriction of processing: Under Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if

    • the accuracy of the data you dispute, for a period that allows us to verify the accuracy of the personal data,

    • the processing of your data is unlawful, but you refuse its erasure and instead request the restriction of its use,

    • we no longer need the personal data for the purposes of processing, but you require the data for the establishment, exercise or defence of legal claims

    • you have objected to the processing of your data under Art. 21 GDPR, but it is not yet established whether the legitimate grounds that entitle us to continue processing despite your objection outweigh your rights.

  • Right to be informed: If you have exercised your right to rectification, erasure or restriction of processing towards us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of the rectification or erasure of the data or the restriction of its processing requested by you, unless this proves impossible or involves disproportionate effort. You have the right to be informed by us about these recipients.

  • Right to data portability: In accordance with Art. 20 GDPR, you can request that we receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller.

  • Right to complain: Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. For this, you can contact the supervisory authority of your place of residence, your place of work, or our registered office.

Right of withdrawal

In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent to the processing of your data at any time. Your withdrawal of consent will not affect the lawfulness of any processing of your personal data that occurred before the withdrawal.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on Article 6(1)(f) of the GDPR (processing for the purposes of the legitimate interests pursued by us). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right to object, we ask you to outline the reasons. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests and rights.

Regardless of the foregoing, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please submit your objection to the contact address of the person in charge specified above.

Google Maps

We use components from „Google Maps“ on our website, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as „Google“).

Geographical information is visually presented via Google Maps. In doing so, Google collects and processes the visitor's IP address. This is transmitted to Google regardless of whether Google Maps is actually used or whether you are logged into your Google Account. Your IP address is assigned to your Google Account if you are logged into it when visiting our website. This data is transferred to Google's external servers in the USA. Google is a participant in the Privacy Shield agreement and is certified for data processing according to European standards. Google may pass on this data, collected via the technical process, to third parties. 

Purpose: The integration of Google Maps serves for simplified visualisation and navigation in the context of visiting our site. Google's data processing is for the purposes of advertising, market research, website design, and providing needs-based advertising. 

Legal basis: We use Google Maps based on our legitimate interest in optimising and designing our online offering, Article 6(1)(f) GDPR. 

Prevention: You can prevent the data from being assigned by opting out of the use of Google Maps on our website and by logging out of your Google Account before your visit. You can also disable JavaScript in your browser to prevent the map from displaying. We further refer you to Google's privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html

Third-party information

Registered Office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google reCAPTCHA

To protect your requests via the internet form, we use the reCAPTCHA service from Google Inc. (Google). This query is used to distinguish whether the input is made by a human or is being misused by automated, machine processing. The query includes the transmission of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and further used there. However, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCaptcha will not be merged with other data from Google. The deviating data protection provisions of Google apply to this data. Further information on Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

Purpose: The purpose of our use of the service lies in the aforementioned interests. 

Legal basis: We use Google (Invisible) reCAPTCHA on the basis of our legitimate interest in the secure and efficient provision and optimisation of our online service, Art. 6 para. 1 f GDPR. Prevention: For the use and blocking of cookies, we refer to the information provided above under the heading „Cookies“. If you are not logged into your Google Account when you access our site, the IP address transmitted to Google via the service will not be merged with other data from Google. Therefore, you must log out of Google before you visit our site if you want to prevent your IP address from being merged with other data. Google has submitted to and been certified under the Privacy Shield agreement concluded between the European Union and the United States. This commits Google to comply with the standards and regulations of European data protection law. You can find more detailed information in the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Third-party information

Registered Office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Web Fonts

We use „Google Web Fonts“, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website.

The service enables us to integrate the display of external fonts (web fonts) into the design of our website and to display them correctly when the website is rendered. This opens up specific design possibilities that we want to use to make our website's design more user-friendly. These web fonts are integrated via a server call. The fonts are delivered compressed from this server to your browser and unpacked there. This server is regularly located in the USA. If you visit one of our pages where we integrate Google Fonts, it will be transmitted to Google which of our internet pages you have visited. In addition, the IP address of the visitor's device's browser is stored by Google. 

Purpose: The aforementioned interests represent the purpose of using Google Web Fonts.

Legal basis: We use Google Web Fonts based on our legitimate interest in optimising and designing our online offering, Article 6(1)(f) GDPR.

Third-party information

Registered Office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Integration of third-party services and content

When using our online services, it may happen that services from third-party providers, such as fonts or icons from other websites, are integrated. This site uses Web Fonts, provided by Fonticons, Inc., for a consistent display of fonts and icons. When you visit our online services, your browser loads the required Web Fonts into your browser cache to display texts and fonts correctly. For this process, your browser must establish a connection to Fonticons, Inc.'s servers. This informs Fonticons, Inc. that our online services have been accessed via your IP address. The use of Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Standard fonts from your computer are used if these Web Fonts cannot be loaded.

Further information about Font Awesome can be found at https://fontawesome.com/help and in the privacy policy of Fonticons, Inc.: https://fontawesome.com/privacy.

Limit Login Attempts Reloaded

This website uses the security plugin „Limit Login Attempts Reloaded“. This plugin stores necessary IP addresses in an anonymised form to protect against brute-force login attacks. The IP address is stored in anonymised form on our own server for 7 days and then deleted.

„Limit Login Attempts Reloaded“ protects this website from unauthorised access and therefore represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. No data is transferred to the developers of this plugin. You can find further information here: https://de.wordpress.org/plugins/limit-login-attempts-reloaded/

NinjaFirewall (WP Edition)

This website uses the security plugin „NinjaFirewall (WP Edition)“. This plugin stores necessary IP addresses in anonymised form to protect against attacks. The IP address is stored in anonymised form and deleted after 7 days.

„NinjaFirewall (WP Edition)“ protects this website from unauthorised access and therefore represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. No data is transferred to the developers of this plugin. Further information can be found here: https://de.wordpress.org/plugins/ninjafirewall/

Our online presences on social networks

We maintain an online presence on the social networks listed below. If you visit one of these presences, your usage data will be collected and processed by the respective provider. This is usually done via cookies, which are stored on the end device you are using. For the definition of cookies, see above under the relevant heading. With these cookies, your usage behaviour and interests are stored and corresponding usage profiles are created. Usage profiles may also store data independently of the device you are using. This is particularly the case if you are a member of the respective platform and are logged in.

The data collected is generally used by the provider for advertising and market research purposes by creating usage profiles from your user behaviour. These, in turn, can be used by the providers to show you interest-based advertising. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data may be linked to it. To prevent such a link to your data, you can log out of the provider's service before visiting our website.

For what purpose and to what extent data is collected by the provider can be found in the respective privacy policies of the providers, which are provided below. We ourselves have no influence on what data is collected and how this data is used by the provider. If you wish to request information on this in detail or to exercise your rights as a data subject, you can most effectively do so directly with the respective provider, as only the respective provider has access to your data.

We would like to inform you that your user data may be transferred and processed outside of the European Union. In this case, there is a risk that the enforcement of your data subject rights may be complicated. US providers certified under the Privacy Shield have committed to complying with EU data protection standards. You can find information on whether the respective provider holds such a certificate in the information about the providers listed below.

Legal basis: If you have been asked for consent to data processing by one of the providers listed below, the legal basis for processing is Art. 6(1)(a) GDPR. In all other cases, your data will be processed based on our legitimate interests in contacting you and communicating with you, Art. 6(1)(f) GDPR. 

Prevention: For the respective opt-out options, please refer to the information from the providers linked below.

We maintain online presences on the following social networks:

Instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043 – USA

Based in the EU: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich – Germany

Facebook

Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Registered office in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

Google Universal Analytics

We use “Google Universal Analytics”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.

We use Google Universal Analytics to track visitor traffic on our website and analyse it statistically. Among other things, Google Universal Analytics collects data on which website you came from to reach our site (known as a ‘referrer’), which subpages of the website you accessed, how often and for how long a subpage was viewed, and what interactions you carried out. To collect and store this data, Google Analytics places a cookie on the device you are using (see the definition of this term above under the heading ‘Cookies’). The cookie collected data on the pages you have visited, including your IP address, and transmits this to Google servers in the USA. However, data processing is also possible without the use of cookies, provided that Google Universal Analytics has been implemented on the website. We use the AnonymizeIP function to anonymise your IP address, so that it is truncated and can no longer be linked to your visit to our website. Google does not associate any further information transmitted with the anonymised IP address or link it to it. The information generated in this way is transmitted to Google’s servers in the USA and stored there. Google may pass on this personal data, collected via the technical process, to third parties. We have concluded a data processing agreement with Google. Under this agreement, Google is authorised and obliged to evaluate the information obtained on our behalf and to compile statistical reports for us on the nature and extent of website usage. These statistics enable us to continuously improve our offering, carry out a cost-benefit analysis of our online marketing, and make our website more interesting and user-friendly for you as a user.  Legal basis: We use Google Universal Analytics on the basis of our legitimate interest in the analysis, optimisation and economic operation of our online offering, Article 6(1)(f) of the GDPR. Deletion: The data collected and transmitted by us in this way is automatically deleted after 26 months. Further information on Google’s terms of use and data protection can be found at https://www.google.de/analytics/terms/de.html. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the features of our website to their full extent. Alternatively, you can prevent cookies from being stored by setting a so-called opt-out cookie, which will prevent your data from being collected on our website in future. You can configure your opt-out settings by clicking on the following slider:

Furthermore, you have the option to prevent the storage of cookies by adjusting your browser settings. Cookies that have already been set can be deleted by you at any time.

Third-party information

Registered Office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Demographics in Google Analytics

This website uses the “demographics and interests” function of Google Analytics. This allows for the creation of reports that include information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be attributed to specific individuals. You can disable this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

https://tools.google.com/dlpage/gaoptout?hl=de

Browser plugin

You can prevent the storage of cookies by adjusting your browser settings; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Tracker

jsdeliver.net / jsdeliver.com/ cdn.jsdelivr.net

JavaScript code from Prospectone Sp. z o.o., ul. Krolweska 65A, 30-081, Krakow, Poland (hereinafter: jsdeliver.net / jsdelivered.com / cdn.jsdelivr.net) is loaded on our website. The JavaScript code gstatic.com is part of Google for evaluating website statistics. If you have JavaScript enabled in your browser and do not have a JavaScript blocker installed, your browser may transmit personal data to jsdelivered.net / jsdelivered.com. You can find more information on this in the privacy policy of jsdelivered.net / jsdelivered.com: https://www.jsdelivr.com/about. To prevent the execution of JavaScript code from jsdelivered.net / jsdelivered.com / cdn.jsdelivr.net / gstatic.com and fonts.googleapis.com entirely, you can install a JavaScript blocker (e.g. www.noscript.net or www.ghostery.com).

Objection to advertising emails

The use of contact details published within the legal notice for sending unsolicited advertising and information materials is hereby objected to. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example via spam emails.

SSL encryption

For security reasons and to protect the transmission of sensitive content, such as the enquiries you send to us as the site operator, this page uses SSL encryption. You can recognise an encrypted connection by the address bar in your browser changing from “http://” to “https://” and by the padlock symbol in your browser bar. 

Safety measures

In addition, we implement state-of-the-art technical and organisational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.

Currentness and change of this privacy policy

This privacy policy is currently valid and is dated May 2024. Due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.

This privacy policy was created with the help of SOS Law created. You can find the data protection declaration generator here. SOS Law is a service offered by Mueller.legal Lawyers Partnership based in Berlin.

Karadag White


Karadag Building Services Ltd
Seligenstädter Str. 56
63456 Hanau