Privacy notice

At a glance

• No cookies, no tracking, no analytics or advertising services – and therefore no cookie banner.
• Our server logs requests with truncated IP addresses only.
• Whatever you tell us via the form, by email or by phone is used solely to deal with your request.
• We do not pass on any data for advertising purposes, and we do not sell any data.

Controller

loga Bau GmbH, represented by the Managing Director, Lokman Yalniz
Hansastraße 10-12, 68169 Mannheim
Phone: 0621 496 320 55
Email: info@logabau-gmbh.de

Data protection officer: [sofern benannt: Name und Kontakt ergänzen – sonst diesen Absatz entfernen]

Hosting and server logs

This website runs on the WordPress content management system. It is delivered by our own web server, which runs in a Docker container at [Hoster/Rechenzentrum bitte ergänzen]. We have concluded a data processing agreement pursuant to Art. 28 of the General Data Protection Regulation (GDPR) with the hosting provider.

When you open a page, your browser necessarily transmits your IP address to our server for technical reasons, so that the server can send the page back to you. For each request, we record only the following in the server log:

• date and time,
• request method and requested path (without any appended URL parameters),
• HTTP status code and response time,
• your IP address in truncated form: for IPv4 without the last byte (203.0.113.42 becomes 203.0.113.0), for IPv6 only the first 48 bits.

Because of the truncation, we cannot attribute the entries to any individual. We use the log to ensure the operation of the website, to identify errors and to detect attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and functioning website. The logs are rotated by size (at most three files of 10 MB each); once this limit is reached, the oldest file is deleted automatically. Depending on visitor numbers, the logs therefore cover a period ranging from several weeks to a few months.

[bitte prüfen: Führt ein vorgeschalteter Reverse-Proxy, eine Firewall oder der Hoster eigene Zugriffsprotokolle mit vollständiger IP-Adresse? Falls ja: Umfang und Speicherdauer hier ergänzen.]

No cookies, no tracking

This website does not set any cookies and does not use local storage or comparable storage technologies. There are no analytics, tracking or advertising services, no social media plugins and no embedded maps or videos. Fonts and map images are hosted on our own server; when you visit this website, your browser does not connect to any third-party servers.

Because we neither store nor read any information on your device, no consent is required under § 25 TDDDG (German Telecommunications and Digital Services Data Protection Act). This is why you will not see a cookie banner on our website. Only editors logging in to the admin area receive technically necessary login cookies from WordPress.

Enquiry form

You can use the form on our contact page to describe your project to us. The required fields are name, email address and message. Phone number, type of project, project location and preferred timeframe are optional – this information helps us to assess your enquiry more quickly. In addition, the form transmits the language version of the website from which you send it.

Purpose and legal basis

We process your information in order to respond to your enquiry and, where applicable, to prepare a quotation for you. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). If your message does not relate to a contract, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is responding to your request.

Transmission

Your entries are transmitted to our server in encrypted form (TLS) and forwarded from there, also encrypted, as an email to our mailbox at [E-Mail-Anbieter bitte ergänzen]. We have also concluded a data processing agreement pursuant to Art. 28 GDPR with this provider. If the email cannot be sent for technical reasons, the enquiry is temporarily stored on the server with access protection so that it is not lost, and is deleted automatically after 30 days. We do not include your IP address either in the email or in the temporary storage.

Spam protection without third-party services

We do not use CAPTCHAs or external services. Instead, the form contains a field that is invisible to humans and is filled in only by automated programs, and we check whether a plausible amount of time has passed between loading the page and submitting the form. Nothing is stored on your device for this purpose. We also limit the number of enquiries per IP address; to do so, the server stores a non-reversible hash value of your IP address, generated with a secret key, in its database for a maximum of 15 minutes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against misuse.

Storage period

We store your enquiry until it has been dealt with. If a contract is concluded, we retain the related correspondence for the statutory retention periods (§ 257 HGB (German Commercial Code), § 147 AO (German Fiscal Code) – 6 to 10 years depending on the document) and for as long as we need it to handle warranty claims, i.e. claims for defects (Art. 6(1)(c) and (f) GDPR). If no contract is concluded, we delete the enquiry after [6 Monaten – bitte bestätigen]. Applications received via the form are handled as described in the Applications section.

Contact by email and phone

If you send us an email or call us, we process your contact details and your request for the same purposes, on the same legal bases and with the same retention periods as for the enquiry form. Emails are generally encrypted in transit between mail servers, but they are not end-to-end encrypted. Please bear this in mind when sending sensitive documents.

Applications

On our careers page, we invite speculative applications by email or via the enquiry form (option ‘Job application’). Files cannot be uploaded via the form. We process your application data in order to decide whether to establish an employment relationship (Art. 6(1)(b) GDPR). Only the persons involved in the selection process have access to this data.

If we hire you, we add the necessary data to your personnel file. Otherwise, we delete your documents six months after the application process has been completed. Until then, we retain them so that we can defend ourselves against possible claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR). We will store your application for longer – for example, for future vacancies – only with your consent (Art. 6(1)(a) GDPR).

External links and our Facebook page

We refer to our Facebook page and to Google Maps (for example via ‘Get directions’) by means of simple links only. As long as you do not click on them, no data is transmitted to these providers. Once you click, the provider’s own privacy policy applies.

The following also applies to our Facebook company page: Meta Platforms Ireland Limited (Dublin, Ireland) compiles statistics (‘Page Insights’) from interactions with the page. We are joint controllers with Meta for this (Art. 26 GDPR; CJEU, judgment of 5 June 2018, C-210/16). We receive only aggregated statistics, for example on reach and interactions, and cannot identify any individual persons from them. The legal basis for our part of the processing is Art. 6(1)(f) GDPR; our legitimate interest is assessing the impact of our page.

In the joint controller arrangement, Meta has assumed primary responsibility for the Insights data and for fulfilling your rights. Meta explains which data it processes for this purpose in its Information about Page Insights data. You can exercise your rights against Meta or against us; where necessary, we will forward requests addressed to us to Meta.

Recipients and third countries

Within our company, your data is accessible only to those persons who need it to process your request. External recipients are our hosting provider and our email provider, which act as processors solely on our instructions, as well as bodies to which we are legally obliged to transfer data (e.g. tax authorities). We do not transfer any data to countries outside the EU or the EEA. [bitte bestätigen: Rechenzentren von Hoster und E-Mail-Anbieter liegen in der EU/im EWR]

Your rights

You have the following rights in relation to us:

• access to the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR) and
• data portability (Art. 20 GDPR).

You may withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). For all requests, an informal message to info@logabau-gmbh.de is sufficient.

Right to object under Art. 21 GDPR

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority competent for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
Heilbronner Straße 35, 70191 Stuttgart
www.baden-wuerttemberg.datenschutz.de

However, you are welcome to contact us first – a matter can often be resolved directly.

Further information

Encryption

The connection to this website is encrypted using TLS. You can recognise this by ‘https://’ in the address bar of your browser.

Obligation to provide data

You are under no statutory or contractual obligation to provide us with any data. However, we cannot process an enquiry submitted via the form without the information in the required fields.

No automated decision-making

We do not engage in automated individual decision-making or profiling (Art. 22 GDPR).

Changes

We will update this privacy notice if our website or the legal situation changes. The version published here applies.