Privacy policy
Privacy policy
This policy describes which personal data we process on this website, for what purpose and for how long. The draft describes the processing actually implemented — the legally binding final version must be reviewed by a lawyer before launch.
TODO: legal review before publication
This text is a technically accurate draft, not legal advice. The controller's details are now filled in; still outstanding are whether a data protection officer must be appointed, the specific data processing agreements with the providers named below, and — once the AI provider is connected — naming it together with the transfer instrument. Have it reviewed by a lawyer before launch.
Controller
The controller within the meaning of Art. 4(7) GDPR is Martin Marcinko, Planegger Str. 40, 82110 Germering, Germany.
Phone: +49 176 7091 1464 · Email: kontakt@bayreno.de
Photos in the quote tool
When you use the quote tool you upload photos of the rooms to be cleared. Those photos may contain personal data, such as furnishings, documents or images of people. Please do not upload photos in which people are identifiable, and cover any visible documents.
The purpose of the processing is solely to produce a non-binding price estimate and to have our staff review it. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give expressly before uploading and may withdraw at any time.
The photos are stored with Vercel Inc. in the Vercel Blob service with private access. They are not reachable at a public address; our staff receive time-limited signed links valid for 14 days. The retention period is 90 days from upload, after which the files are deleted.
To evaluate the photos we use an AI provider, to whom the photos are transmitted for that purpose. They are not passed to any other third party. TODO: once the AI provider is connected, name the provider, its place of establishment, the legal basis for the transfer and the data processing agreement here; for a provider outside the EU, the transfer instrument under Art. 44 et seq. GDPR must also be stated.
Questionnaire answers and postcode
Together with the photos we process your answers on the floor, the distance to the parking space, the lift and the number of items that will not fit in it, as well as the property's postcode. These details are necessary for the estimate. The legal basis is Art. 6(1)(a) and (b) GDPR.
Every estimate generated is emailed to us, even if you leave no contact details. That email contains the price range shown, your questionnaire answers, the postcode and the links to the photos, so that our staff know what you were shown if you call.
Contact details for a binding quote
If you request a binding quote after the estimate, we process your name, telephone number, optionally your email address and your preferred date. The purpose is to contact you and prepare the quote; the legal basis is Art. 6(1)(b) GDPR.
We use the Resend service to send these notifications. The data is processed solely to deliver the email.
Chat assistant
The assistant on this website answers questions about prices, process, disposal and service area. Your messages are transmitted to Anthropic for that purpose and processed there. Please do not enter health data, payment details or other sensitive information in the chat.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries outside business hours. In the current version, chat transcripts are not stored on our systems.
Server logs and hosting
This website is hosted by Vercel Inc. When you visit, technical access data is processed, in particular the IP address, the time, the address requested and the volume of data transferred. This processing is technically necessary to provide the website; the legal basis is Art. 6(1)(f) GDPR.
We limit the number of requests to the quote tool and the assistant per IP address in order to prevent automated abuse. IP addresses are held briefly in memory for that purpose and are not stored permanently.
Cookies, tracking and analytics
This website sets no analytics or marketing cookies and embeds no tracking services. There is therefore no cookie banner either.
Your choice between gross and net prices is stored only locally in your browser (localStorage) and is not transmitted to us.
TODO: if analytics or a consent tool is added later, this section must be replaced and a consent banner added. The place to do that is documented in the README.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Consent once given may be withdrawn at any time with effect for the future.
If you want your uploaded photos deleted before the 90 days expire, a short message to the address in the imprint is enough. We will then delete them without delay.
You also have the right to lodge a complaint with a supervisory authority; for Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht.