1. Controller for Data Processing
The controller in accordance with Art. 4 (7) GDPR is:
COzwei GmbH
Gutenbergstraße 16a
70176 Stuttgart
Germany
Email: datenschutz@cozwei.de
Phone: +49 711 12171034
2. Data Protection Officer
You can reach the Data Protection Officer of COzwei GmbH at datenschutz@cozwei.de or by mail at the above address, adding the reference "Data Protection Officer."
3. Access to Our Website
When you visit our website, we process personal data to ensure the smooth, functional, and secure operation of our website. The following data may be processed (so-called log files):
- Operating system and current IP address (last octet shortened) of the device you use to visit our website
- Browser (type, version, and language setting)
- Amount of data retrieved
- Date and time of access
- URL of the previously visited website (referrer)
- URL of the (sub)page you access on our website
- Internet service provider of the accessing system
Collecting log files is technically necessary to display our website and ensure its stability and security. This is also our legitimate interest in processing the data. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR. The hosting of this website is carried out by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, with whom we have concluded a data processing agreement. Your data is processed in a German data center and anonymized immediately after collection.
4. Contact Forms
If you contact us via our form, we require the data marked as mandatory fields. You can also contact us through our website regarding potential funding for your renovation project through the Kreditanstalt für Wiederaufbau (KfW) and the Federal Office for Economic Affairs and Export Control (BAFA), as well as for other quote requests. In such cases, we may process your name, email address, home address, phone number, and information about the buildings to be renovated. Mandatory information without which contact is not possible is marked with an asterisk.
The processing of the data is based on Art. 6 (1) sentence 1 lit. b GDPR as part of initiating or performing pre-contractual measures or on our legitimate interest in processing and responding to your inquiry in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Any additional information is voluntary and based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Your personal data will be deleted—subject to statutory retention obligations—once the storage purpose ceases to apply, your request has been fully processed, and no further communication with you is necessary or desired.
To provide the contact form, we work with Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. Data processing generally takes place within the EU. As data transfer to Microsoft in the USA (a third country) cannot be entirely ruled out, we have concluded a data processing agreement with Microsoft applying the EU Standard Contractual Clauses, available on the European Commission's website.
5. Google Tag Manager
We use the Google Tag Manager service from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager enables us to integrate scripts and plug-ins on our website more quickly and conveniently. We have concluded a data processing agreement with Google. The Google Tag Manager is an auxiliary service that processes personal data only for technically necessary purposes. It loads other components that may, in turn, collect data. The Google Tag Manager itself does not access this data. The legal basis is your voluntary consent under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with future effect via our consent management. Processing generally takes place in the EU; however, as a data transfer to the USA cannot be entirely excluded, we have concluded a data processing agreement with Google applying the EU Standard Contractual Clauses.
6. Cookies
When using our website, cookies are stored on your device. Cookies are small text files assigned to your browser and stored on your hard drive, allowing certain information to be transmitted to the party that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.
We use technically necessary cookies required for the provision of the website. The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR, with our legitimate interest being the technically flawless and user-friendly presentation of the website. For cookies not technically required, processing is based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Consents are obtained via our cookie banner. You may withdraw your consent at any time without providing reasons, with effect for the future. More information about the cookies used can be found in our cookie banner.
6.1 Google Analytics
We use Google Analytics, a web analytics service from Google Ireland Limited, to analyze website usage. The cookie used allows analysis of website use. The generated information may also be transmitted to and stored by Google LLC servers in the USA. We have enabled IP anonymization to ensure your IP address is shortened before processing. The legal basis is your consent under 25 (1) TTDSG, Art. 6 (1) lit. a GDPR. Data is stored for 14 months and then automatically deleted.
6.2 Google Adsense
We use Google Adsense to track whether you access our website through an ad we placed in the Google network. Personal data such as interaction data with ads and your IP address may be processed. Legal basis is your consent under 25 (1) TTDSG, Art. 6 (1) lit. a GDPR. Data is deleted after 90 days.
6.3 Google Optimize
We use Google Optimize to test and improve our website. Data may be processed in the USA. IP anonymization is enabled. Legal basis is your consent under 25 (1) TTDSG, Art. 6 (1) lit. a GDPR.
7. Your Rights
You have the right to request confirmation of whether we process personal data concerning you. If so, you have the right to access this data and the information listed in Art. 15 GDPR. You also have the rights to rectification (Art. 16 GDPR), restriction of processing (Art. 18 GDPR), deletion (Art. 17 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR). If processing is based on your consent, you may withdraw consent at any time (Art. 7 (3) GDPR). You also have the right to lodge a complaint with a supervisory authority if you believe processing violates data protection law (Art. 77 GDPR).
8. Changes to This Privacy Policy
We reserve the right to change this privacy policy at any time, in compliance with applicable data protection regulations. The current version is dated June 2022.
