Skip to content

Privacy Policy

Protecting your personal data is important to us. This privacy policy explains which data we process when you visit our website and use our forms, for what purpose, and which rights you have. Note: This policy is a template and must be finalized by a lawyer or a verified generator before publication.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

K&M Haustechnik GmbH Lämmerspielerstraße 106 63165 Mühlheim am Main Germany Email: info@kundm-haustechnik.de Represented by: [PLACEHOLDER: authorized representative]

If you have any questions about the processing of your personal data, you can contact us at the address above at any time.

2. General Information and Legal Bases

We process personal data only to the extent necessary to provide a functional website and to handle your inquiries. Personal data means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).

Depending on the operation, processing is based on the following legal grounds: Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures, for example quote requests), and Art. 6(1)(f) GDPR (legitimate interest, for example in the secure and stable provision of the website).

We do not share your data with third parties unless this is necessary to fulfill the respective purpose, required by law, or you have given your consent. Where we use service providers, this is done on the basis of data processing agreements pursuant to Art. 28 GDPR.

3. Hosting with Vercel

Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access our website, Vercel automatically collects data in so-called server log files transmitted by your browser. This includes in particular the IP address, date and time of access, the page requested, and the browser type and version.

This processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast, and reliable provision of our website. The log data is not merged with other data sources.

We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. As Vercel is based in the USA, personal data may be transferred to a third country. Vercel is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the adequacy decision of the EU Commission (Art. 45 GDPR).

4. Contact and Quote Forms

When you use our contact form or the quote configurator, we process the data you provide: name, postal code/city, telephone number, email address, your details about the building and project (e.g. building type, year of construction, current heating system, timeframe; for a bathroom renovation also dimensions, desired fittings, property address, floor and access situation), any photos or floor plans you choose to upload, and an optional message. Photos are resized in your browser before sending and are transmitted to us solely as an email attachment; they are not stored on the website.

This data is processed for the purpose of handling your inquiry, contacting you, and preparing a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request).

To transmit the form data to us by email, we use the service provider Resend, Inc. (USA) as a processor. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend; any transfer to a third country takes place on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR. [PLACEHOLDER: verify transfer basis for Resend, e.g. EU standard contractual clauses or EU-US Data Privacy Framework]

We store your data only for as long as necessary to process your inquiry and any resulting contractual relationship. Statutory retention obligations remain unaffected; after that, the data is deleted.

5. Contact via WhatsApp

On our website, we offer you the option of contacting us via WhatsApp. The corresponding button links to the wa.me service. Only when you actively click this link and use the service is data processed by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (part of the Meta group of companies). This may also involve the transfer of data to third countries, in particular the USA.

Use of this contact channel is voluntary. The legal basis is your consent or your active choice of this communication channel (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures (Art. 6(1)(b) GDPR). For details on data processing by WhatsApp, please refer to WhatsApp's privacy policy. If you prefer not to use WhatsApp, you can always reach us by email or telephone.

6. Cookies and Local Storage

Our website uses only technically necessary entries in cookies or in your browser's local storage. These include storing your language setting (NEXT_LOCALE) and your decision in the cookie notice (consent status).

These entries are required for the operation of the website and do not serve to track your usage behavior. The legal basis is Art. 6(1)(f) GDPR and Section 25(2) of the German TDDDG (strictly necessary storage).

A category for statistics cookies is technically prepared in the cookie notice but is currently not active. No tracking or analytics cookies are set. Should this change, we will update this privacy policy and obtain your consent. You can revisit your cookie settings at any time via the "Cookie Settings" link in the footer.

7. Fonts

For consistent presentation, we use fonts that are hosted locally on our server (self-hosting). When you access our website, no connection is established to servers of Google or other font providers; no data is transferred to third parties in this process.

8. Your Rights as a Data Subject

With regard to the personal data concerning you, you have the following rights: the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR).

You also have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future; the lawfulness of processing carried out prior to withdrawal remains unaffected.

To exercise your rights, an informal message to info@kundm-haustechnik.de is sufficient.

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is: The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany.

9. Currency of this Privacy Policy

We reserve the right to amend this privacy policy if the legal situation, our website, or our data processing changes. The version published on this page applies in each case.

Last updated: [PLACEHOLDER: date]