Privacy

Controller

The controller within the meaning of the GDPR and other national data protection laws is:

Legal bases

Where we obtain consent for processing operations, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary to perform a contract or to take pre-contractual steps, Art. 6(1)(b) GDPR applies. Where processing is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR applies. Where processing is necessary to protect legitimate interests, Art. 6(1)(f) GDPR applies.

Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on that provider's servers. The host is engaged for the purpose of contract performance (Art. 6(1)(b) GDPR) and in the interest of secure, fast provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place.

Host's privacy policy: all-inkl.com/datenschutzinformationen

Server log files

When you open this website, the host automatically collects information in server log files: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the request and IP address. This data is not merged with other sources. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in technically error-free operation and in defending against attacks.

Enquiry form

If you contact us through the enquiry form, we process the details you enter in order to answer that enquiry. The following is transmitted:

• Name
• Email address
• Phone number (optional)
• Company or organisation (optional)
• Type of enquiry, expected duration, arrival date, number of people
• Preferred unit (optional)
• Your message

The legal basis is Art. 6(1)(b) GDPR where the enquiry is directed at concluding a contract, otherwise Art. 6(1)(f) GDPR together with your consent under Art. 6(1)(a) GDPR.

The data is stored in a spreadsheet within Google Workspace and transmitted to us by email. The processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a data processing agreement under Art. 28 GDPR is in place.

We delete this data as soon as it is no longer required for the purpose of collection, at the latest once statutory retention periods expire. If no contract is concluded, we generally delete enquiries after twelve months.

Enquiries by email or phone

If you contact us by email or telephone, your enquiry including all resulting personal data is stored and processed for the purpose of handling your request. We do not pass this data on without your consent. It remains with us until you ask us to delete it, withdraw your consent, or the purpose ceases to apply. Mandatory statutory retention periods remain unaffected.

External links

On some pages we link to external services, for example a 3D walkthrough at Matterport, a video on YouTube (Google Ireland Limited) or Google Maps. This content is not embedded, only linked. Data is transmitted to the respective provider only once you actively click the link. From that point the provider's own privacy terms apply.

Browser storage

The site stores no data in your browser, neither in cookies nor in local storage.

Your rights

• Access (Art. 15 GDPR) to the data we process about you
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data
• Erasure (Art. 17 GDPR), unless exceptions apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) to processing based on legitimate interests
• Withdrawal of consent (Art. 7(3) GDPR), at any time with effect for the future
• Complaint to a supervisory authority (Art. 77 GDPR)

An informal email to info@copperroof.de is sufficient to exercise these rights.

Competent supervisory authority

SSL/TLS encryption

This site is served exclusively over HTTPS. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock symbol. The data you transmit to us therefore cannot be read by third parties.

Changes to this notice

We reserve the right to adapt this privacy notice so that it always complies with current legal requirements, or to reflect changes to our services. The new version then applies to your next visit.