Privacy Policy

Back to homepage

1. Controller

Cavdar Construction GmbH
Geißlerpfad 22 · 13627 Berlin
Managing Director: Ferhat Cavdar
E-Mail: info@cavcon.de · WhatsApp: 0160 97663128

2. Principles of Data Processing

We process personal data exclusively in accordance with the GDPR and BDSG. Legal bases: Art. 6 para. 1 lit. a (consent), lit. b (contract performance), lit. c (legal obligation), lit. f GDPR (legitimate interests).

3. Your Rights as a Data Subject

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 para. 3 GDPR)
• Complaint to a supervisory authority

Contact: info@cavcon.de

4. Data Collection When Visiting the Website

Server log files (browser type, anonymised IP address, time, page accessed) are collected automatically and deleted after 7 days. Not personally identifiable. Legal basis: Art. 6 para. 1 lit. f GDPR.

5. Contact Form

When contacting us via the form, first name, last name and email address (mandatory fields) as well as optionally phone, client type and project description are processed. The data is used to handle your enquiry. Legal basis: Art. 6 para. 1 lit. b and f GDPR.

6. WhatsApp and Telephone Communication

WhatsApp is operated by WhatsApp Ireland Limited (Meta group). When contacting us via WhatsApp, data may be transferred to the USA. Legal basis: Art. 6 para. 1 lit. f GDPR. Privacy policy: whatsapp.com/legal/privacy-policy

If you contact us by telephone (+49 160 97663128), we process the data you provide (name, phone number, request) solely to handle your enquiry. The legal basis is Art. 6 para. 1 lit. b and f GDPR. No call data is stored automatically beyond the connection data usual at network-operator level.

7. Email Communication

Email data is stored to handle your enquiry and deleted after the matter is concluded or the statutory retention periods expire. Legal basis: Art. 6 para. 1 lit. b and f GDPR.

8. Google Fonts

This website uses Google Fonts (Google Ireland Limited / Google LLC, USA). Your IP address may be transmitted to Google's servers. Legal basis: Art. 6 para. 1 lit. f GDPR. Privacy policy: policies.google.com/privacy.

9. Formspree (Form Service Provider)

We use Formspree, Inc. (USA) for form submission. A data processing agreement (DPA) has been concluded. Privacy policy: formspree.io/legal/privacy-policy

10. Hosting

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded. Privacy policy: ionos.de/terms-gtc

11. Storage Period

Contact enquiries are stored until fully processed, then until the statutory retention periods expire (6 years pursuant to HGB). Offers and contracts: 10 years. Server logs: 7 days.

12. Cookies and Tracking

This website uses no tracking cookies, no analytics tools and no advertising cookies. Only technically necessary data is stored in the browser (language setting via localStorage, intro status via sessionStorage). No cookie consent is required.

13. Data Transfers to Third Countries

Google Fonts, Formspree and WhatsApp/Meta may transfer personal data to the USA. The basis is the EU Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

14. Data Security

The website is delivered exclusively via HTTPS (TLS). The contact form is protected against misuse by honeypot methods and client-side rate limiting. Server-side security headers (CSP, HSTS, X-Frame-Options, etc.) are active.

15. Changes to this Privacy Policy

We reserve the right to update this policy as necessary. The date of the last update is shown above.

16. Right to Lodge a Complaint

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61 · 10555 Berlin
datenschutz-berlin.de

This privacy policy has been prepared to the best of our knowledge. It does not replace individual legal advice.