Privacy policy
This privacy policy informs you, pursuant to Articles 12 et seq. GDPR, about the processing of personal data on https://www.pacollibau.de. Last updated: 09.09.2026. Placeholders in square brackets must be completed before going live. The German version is authoritative. This text reflects the current technical setup (no tracking, no advertising, no embedded maps).
1. Controller
Pacolli Bau
München
Deutschland
Deutschland
Telefon: +49 157 72513294
E-Mail: info@pacollibau.de
Authorised representative: [Geschäftsführer]
2. Data protection officer
We have assessed that we are not currently required to appoint a data protection officer. If an officer must be appointed in future, the name and contact details will be published here. For privacy requests, please use the contact details above.
3. Hosting and server logs
When you visit this website, the web server automatically records data transmitted by your browser (server log files). This may include: IP address, date and time of the request, time zone, requested URL, HTTP status code, amount of data transferred, referrer URL, browser type and version, and operating system. Processing is necessary to deliver the website, ensure IT security and prevent abuse.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website).
Retention: log files are usually deleted after 7 to 14 days at the latest, unless longer retention is required to investigate security incidents.
4. Contact form and email
If you write to us via the contact form or by email, we process the information you provide (name, email address, phone number if given, message content) and the time of submission. We process this data to handle your enquiry and to contact you – usually in order to take steps prior to entering into a contract for facade or insulation work.
Legal basis: Article 6(1)(b) GDPR (steps at your request prior to entering into a contract) and, where the enquiry is not directly contract-related, Article 6(1)(f) GDPR (legitimate interest in answering enquiries).
Retention: enquiries are deleted once they have been dealt with and no statutory retention duties apply (for example under German commercial or tax law if a contract follows), usually after 12 months at the latest if no contract is concluded.
Name, email and message are required to handle the enquiry. Phone is optional. Without the required information we cannot reply.
5. Email via a processor
To deliver contact enquiries we use Resend (Resend, Inc., USA) as a processor under Article 28 GDPR. Name, email address, phone (optional) and message content are transmitted to Resend so that the email can be delivered to us.
A third-country transfer to the USA may occur. Where required, we rely on appropriate safeguards under Article 46 GDPR (in particular the EU Commission’s standard contractual clauses). Further information: https://resend.com/legal/privacy-policy
7. Fonts
The fonts used on this website are served locally from our server (self-hosting). Loading a page does not establish a connection to Google Fonts or other font providers.
8. Admin area
The admin area is used only for internal management of project content. Access credentials are processed there and uploaded project files are stored. This area is not intended for website visitors.
9. Recipients
Personal data is disclosed only as necessary for the purposes stated: to our hosting provider (operation of the website) and to Resend (email delivery). We do not otherwise disclose data to third parties unless we are legally obliged to do so.
10. Your rights
You have the following rights vis-à-vis us, where the statutory requirements are met:
- Access (Article 15 GDPR)
- Rectification (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)
- Withdrawal of consent with effect for the future (Article 7(3) GDPR) – we do not currently rely on consent as a legal basis for operating this website
You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular in the Member State of your habitual residence, place of work or of the alleged infringement. For us, the competent authority is usually: [Zuständige Datenschutz-Aufsichtsbehörde des Sitzlandes]
An overview of the German supervisory authorities is available from the Federal Commissioner for Data Protection: www.bfdi.bund.de.
11. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR.
12. SSL/TLS encryption
This website is served over HTTPS with TLS encryption to protect data in transit (in particular via the contact form) against unauthorised access.
13. Changes to this privacy policy
We will update this privacy policy if the law, our services or our processing change. The version published on this page applies.