Grundrissschmiede GmbH logo

Privacy Policy

I. General information

ImmoMates GmbH, Lange Reihe 22, 20099 Hamburg (hereinafter: ImmoMates), as the operator of the website https://www.grundriss-schmiede.de/, takes the protection of personal data very seriously. We treat personal data confidentially and in accordance with the statutory data protection regulations and on the basis of this privacy policy. The legal basis can be found in particular in the General Data Protection Regulation (GDPR).

When you use this website, various personal data will be processed depending on the type and scope of use. Personal data is information that relates to an identified or identifiable natural person (hereinafter referred to as “data subject”); a natural person is considered identifiable if they can be identified directly or indirectly (e.g., by assigning an online identifier). This includes information such as name, address, telephone number, and date of birth.

This privacy policy informs you in accordance with Art. 12 et seq. of the GDPR about how your personal data is handled when you use our website. In particular, it explains what data we collect and what we use it for. It also informs you about how and for what purpose this is done.

II. Responsible party

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.). The controller within the meaning of the GDPR and the applicable national data protection laws and other data protection regulations is:

ImmoMates GmbH, Lange Reihe 22, 20099 Hamburg, represented by managing director Jan Heusinger

E-Mail: mail@grundriss-schmiede.de

III. Purposes and legal bases for data processing

1. Accessing and visiting our website – server log files

For the purpose of technical provision of the website, it is necessary for us to process certain information automatically transmitted by your browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time you visit our website and automatically stored in so-called server log files. This includes:

  • Browser type and browser version
  • operating system used
  • Website from which access is made (referrer URL)
  • Host name of the accessing computer
  • Date and time of access
  • IP address of the requesting computer

The storage of the aforementioned access data is necessary for technical reasons in order to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which is necessary and, under certain circumstances, may at least theoretically enable your personal identification. Beyond the purposes mentioned above, we use server log files exclusively for the needs-based design and optimization of our website, purely for statistical purposes and without any reference to your person. This data is not merged with other data sources, nor is it evaluated for marketing purposes.

The access data collected when you use our website will only be stored for the period of time required to achieve the above purposes. Your IP address will be stored on our web server for a maximum of 7 days for IT security purposes.

If you visit our website to find out about our range of products and services or to use them, the basis for the temporary storage and processing of access data is Art. 6 (1) (b) GDPR (legal basis), which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 (1) (f) GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically functional and user-friendly website and to ensure the security of our systems.

2. Use of cookies and related functions/technologies

We may use cookies on our website. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective, and secure, and to enable certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you visit the website again.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your device for a specified period of time or until you delete them (so-called persistent cookies). These cookies enable us to recognize your browser the next time you visit. Upon written request, we will be happy to provide further information about the functional cookies we use. Please contact us using the contact details above.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. You can regularly obtain information on how to deactivate cookies via the “Help” function of your Internet browser. If you deactivate cookies, the functionality and/or complete availability of this website may be restricted. For further cookie-specific settings and deactivation options, please also see the detailed explanations below on the cookies specifically used when visiting our website and the associated functions/technologies.

Some of the cookies we use on our website come from third parties who help us analyze the impact of our website content and the interests of our visitors, measure the performance of our website, or place targeted advertising and other content on our or other websites. We use both first-party cookies (only visible from the domain you are currently visiting) and third-party cookies (visible across domains and regularly set by third parties) on our website.

Cookie-based data processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR (legal basis) or on the basis of Art. 6 (1) (f) GDPR (legal basis) to protect our legitimate interests. Our legitimate interests in this regard lie in particular in being able to provide you with a technically optimized, user-friendly, and needs-based website, as well as in ensuring the security of our systems. You can revoke any consent you have given us at any time, e.g. by deactivating the cookie-based tools/plugins listed in detail in the following overview. You can also object to processing based on legitimate interests by adjusting your settings accordingly.

3. City maps and road maps

We use city maps and maps from “mapz” on our website. mapz.com is a service provided by Kober-Kümmerly+Frey Media AG, Rolandstraße 83, 50677 Cologne, Germany. When you access the site, your access data, in particular your IP address, the date and time of the request, the address of the website accessed and the requesting website, information about the browser and operating system used, and online identifiers (e.g., device identifiers, session IDs) are transmitted.

The use of mapz is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in offering map material for the production of classic exposés. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (1) lit. a; consent can be revoked at any time.

4. Construction interest calculator

We have integrated a construction loan calculator from drklein.de into our website. This construction loan calculator allows you to calculate the construction loan interest, monthly payments, and total costs of your financing. The provider is Dr. Klein Privatkunden Aktiengesellschaft, Hansestraße 14, 23558 Lübeck. When you access the site, your access data, in particular your IP address, the date and time of the request, the address of the website you visited and the requesting website, information about the browser and operating system used, and online identifiers (e.g., device identifiers, session IDs) are transmitted.

The use of the Dr. Klein construction loan calculator is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in simplifying the financing process as far as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (1) lit. a; consent can be revoked at any time.

5. Verification of data entry

We use Friendly Captcha on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. Friendly Captcha is used to verify whether the data entered on this website (e.g., in a contact form) is entered by a human or by an automated program. To do this, Friendly Captcha analyzes the behavior of the website visitor based on various characteristics. Friendly Captcha evaluates various information for analysis (e.g., anonymized IP address, referrer, visit time, etc.). For more information, please visit: https://friendlycaptcha.com/legal/privacy-end-users/.

The storage and analysis of data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

6. Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the above address of the controller. After deleting your customer account, your data will be deleted provided that the contracts concluded in this regard have been fully processed, there are no legal retention periods to the contrary, and we no longer have a legitimate interest in storing the data.

7. Newsletter dispatch to existing customers (opt-out procedure)

If we have received your email address in connection with the sale of goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. This is done in accordance with Section 7 (3) of the German Unfair Competition Act (UWG) by means of the so-called opt-out procedure. The prerequisite for this is that you have not objected to the use of your email address and that we clearly inform you, both when collecting your address and each time we use it, that you can object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates. A corresponding notice and a simple option to object are included in every email.

The data we collect when you subscribe to the newsletter will be used strictly for the specified purpose. You can unsubscribe from the newsletter at any time by clicking on the link provided in the newsletter or by sending a message to the person responsible mentioned above. Once you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

We use the Mailjet service provided by Mailgun Technologies Inc., 112 E Pecan Sr. #1135, San Antonio, Texas 78205, USA, to deliver our newsletter. For detailed information on the functions of Mailjet, please refer to the following link: https://www.mailjet.de/funktion/. Our newsletters contain so-called tracking pixels (web bugs), which allow us to recognize whether and when an email has been opened and which links in the email have been followed by the personalized recipient.

Mailjet also allows us to divide newsletter recipients into different categories (“clusters”). Newsletter recipients can be divided according to age, gender, or place of residence, for example. We store this data so that we can tailor our newsletters to the preferences and interests of our subscribers. Accordingly, the data collected is used to send personalized newsletters to the respective recipients.

8. Contacting us

If you contact us via one of the contact options specified in this privacy policy or in the legal notice, or via our contact form, your details and the contact information you provide (e.g., name, email address) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not pass this data on to third parties.

We will delete your request(s) and your contact details once your request has been answered conclusively. Your data will generally be stored for 6 months and deleted after this period has expired, unless you send us any follow-up requests or we need to process the data for other purposes.

This data processing is carried out on the basis of Art. 6 (1) (a) GDPR in conjunction with the consent you have given.

9. YouTube

Our website uses plugins from the YouTube video platform to embed videos and play them directly on our website. The video platform is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

YouTube videos are integrated in what is known as “extended data protection mode,” which, according to the provider, only starts storing user information when the video(s) are played. However, the extended data protection mode does not necessarily prevent data from being passed on to YouTube partners. YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video or not.

When you activate embedded videos on our website, a connection to YouTube's servers is established and data transfer begins. We have no influence on the scope and content of the data that is transmitted to YouTube and, if applicable, other YouTube partners when the plugin is activated. Among other things, the YouTube server is informed which of our pages you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. YouTube uses cookies to collect information about user behavior. The cookies remain on your device until you delete them. You can prevent YouTube from storing cookies by adjusting the settings in your browser software (see above).

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.

YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

10. Collection of personal data upon conclusion of contract and payment

We store the following personal data when you place an order:

  • Name,
  • Address,
  • phone number,
  • Email address,
  • Possibly a different delivery address,
  • Possibly an existing sales tax ID number
  • Payment details.

We use this data exclusively for the purpose of executing the contract and communicating with you as necessary in this regard. This includes the initiation, conclusion, processing, warranty, and, if applicable, reversal of the purchase contract. We store the data until the purchase contract has been fully executed. If commercial and tax retention periods apply, the storage period may be up to 10 years.

The recording and processing takes place within the framework of the contract concluded between us and the customer in accordance with Art. 6 (1) (b) GDPR. The legal basis for further storage for tax and commercial law reasons is the necessity according to the law in accordance with Art. 6 (1) (c) GDPR.

When paying via PayPal, we will pass on your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) for the purpose of processing the payment. The transfer is carried out in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

11. Online marketing and affiliate programs

We participate in affiliate partner programs. In affiliate partner programs, advertisements from a company (advertiser) are placed on websites of other companies in the affiliate partner network (publishers). If you click on one of these affiliate advertisements, you will be redirected to the advertised offer. If you then carry out a specific transaction (conversion), the publisher receives a commission for this. In order to calculate this commission, the affiliate network operator needs to be able to track which advertisement you used to find the respective offer and carry out the predefined transaction. Cookies or similar recognition technologies (e.g., device fingerprinting) are used for this purpose.

The storage and analysis of data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the correct calculation of its affiliate remuneration. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

We participate in the following affiliate programs:

  • Energy performance certificate from GreenPurpose e.K., Kaiser-Joseph-Str. 254, 79098 Freiburg
  • Construction loan calculator from Dr. Klein Privatkunden AG, Dr. Klein Privatkunden Aktiengesellschaft, P.O. Box 1350, 23503 Lübeck, Germany
  • Kaufpreis-Aufteilung.com by W Verwaltung GmbH, Fuhrmannsplatz 11, 33442 Herzebrock-Clarholz, Germany
  • Nutzungsdauer.com by W Verwaltung GmbH, Fuhrmannsplatz 11, 33442 Herzebrock-Clarholz, Germany

12. Analysis tools and advertising

a) Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is used solely to manage and display the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

The use of Google Tag Manager is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when data is processed in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

b) Matomo

This website uses the open source web analytics service Matomo. With the help of Matomo, we are able to collect and analyze data about how visitors use our website. This allows us to find out, among other things, when which pages were viewed and from which region they came. We also collect various log files (e.g., IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. We use IP anonymization for analysis with Matomo. This means that your IP address is truncated before analysis so that it can no longer be clearly assigned to you.

We host Matomo with the following third-party provider: nextcontrol GmbH, Präsident-Herwig-Straße 24, 27472 Cuxhaven, Germany.

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

c) Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example, by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when data is processed in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780

13. Other processing purposes

Compliance with legal requirements: We also process your personal data in order to fulfill other legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade, or tax law. We process your personal data in accordance with Art. 6 (1) (c) GDPR (legal basis) to fulfill a legal obligation to which we are subject.

Enforcement of legal claims: We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offenses. In this context, we process your personal data to protect our legitimate interests in accordance with Art. 6 (1) (f) GDPR (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or prevent or investigate criminal offenses (legitimate interest).

Consent: If you have given us your consent to process personal data for specific purposes (e.g., sending information materials and offers), the lawfulness of this processing is based on your consent. Consent that has been given can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future and does not affect processing that has taken place up to that point.

IV. Recipients of data

Within ImmoMates, those departments that need your data to fulfill our contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us (e.g., technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. We limit the disclosure of your personal data to what is necessary, taking into account data protection regulations. In some cases, the recipients receive your personal data as processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently under their own data protection responsibility and are also obliged to comply with the requirements of the GDPR and other data protection regulations.

Finally, in individual cases, we transfer personal data to our advisors in legal or tax matters, whereby these recipients are bound to special confidentiality and secrecy due to their professional status.

V. Data transfer to third countries

When using the above-mentioned tools, e.g. Google, we may transfer your IP address to third countries (see above). Apart from this case, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations, unless expressly stated otherwise in this privacy policy.

VI. Duration of data storage

We initially process and store your personal data for the period required for the respective purpose of use (see above for the individual processing purposes). This may also include the periods during which a contract is being initiated (pre-contractual legal relationship) and a contract is being executed. On this basis, personal data is regularly deleted in the course of fulfilling our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:

  • Compliance with statutory retention requirements
  • Preservation of evidence, taking into account the statute of limitations

VII. Data security

We protect personal data using appropriate technical and organizational measures to ensure an adequate level of protection and to safeguard the personal rights of the individuals concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment we use and to protect personal data from unauthorized access by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your contact requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is therefore not possible.

VIII. Your rights as a data subject

Under the legal requirements, you are entitled to the following rights as a data subject:

Right to information: You are entitled at any time to request confirmation from us under Article 15 of the GDPR as to whether we are processing personal data relating to you; if this is the case, you are also entitled under Article 15 of the GDPR to information about this personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, origin of the data, use of automated decision-making and, in the case of third-country transfers, the appropriate safeguards) and a copy of your data.

Right to rectification: Pursuant to Art. 16 GDPR, you have the right to request that we rectify any personal data stored about you if it is inaccurate or incorrect.

Right to erasure: You are entitled to request that we erase personal data concerning you without undue delay under the conditions set out in Art. 17 GDPR. The right to erasure does not apply, among other things, if the processing of personal data is necessary, for example, to fulfill a legal obligation (e.g., statutory retention obligations) or to assert, exercise, or defend legal claims.

Right to restriction of processing: You have the right to request that we restrict the processing of your personal data under the conditions set out in Art. 18 GDPR.

Right to data portability: Under the conditions set out in Art. 20 GDPR, you have the right to request that we provide you with the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.

Right of withdrawal: You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. To declare your revocation, simply send us an informal message, e.g., by email.

Right to object: You have the right to object to the processing of your personal data under the conditions set out in Art. 21 GDPR, in which case we must stop processing your personal data. The right to object only applies within the limits provided for in Art. 21 GDPR. In addition, our interests may prevent us from terminating the processing, meaning that we are entitled to process your personal data despite your objection. We will take any objection to direct marketing measures into account immediately and without further consideration of the existing interests.

Information about your right to object pursuant to Art. 21 GDPR

You have the right to object at any time to the processing of your data on the basis of Art. 6 (1) (f) GDPR (data processing based on a balancing of interests) or Art. 6 (1) (e) GDPR (data processing in the public interest) if there are reasons for this arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

The objection can be made informally and should be addressed to:

ImmoMates GmbH, Lange Reihe 22, 20099 Hamburg, represented by managing director Jan Heusinger

Email: mail@grundriss-schmiede.de

Right to lodge a complaint with a supervisory authority: Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a competent supervisory authority. In particular, you can lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, E-Mail: mailbox@datenschutz.hamburg.de

Other concerns: We are happy to assist you with any further questions or concerns regarding data protection. Please send any such inquiries or requests to exercise your rights above in writing to our address above or by email to mail@grundriss-schmiede.de.

IX. Obligation to provide data

You are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or respond to your inquiries. Personal data that we do not require for the above-mentioned processing purposes is marked as voluntary information.

X. Automated decision-making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

XI. Current status and changes to this privacy policy

  • This privacy policy is currently valid and was last updated on March 20, 2025.
  • Due to the further development of our website and offers on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy.
Copyright © 2026 Grundriss Schmiede. All rights reserved.
Data Privacy | Grundriss Schmiede