The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

BauBridge
registered business (Gewerbe, sole proprietor)

Contact details of the data controller:
E-mail: baubridge@baubridge.com

The postal address of the business is provided in the Imprint (Impressum) on this website and may be a virtual office address.

The data controller may carry out its activities and organizational project management also from outside Germany.

This does not affect compliance with the provisions of the GDPR.

In the course of using our website and services, we process in particular the following categories of personal data:

1. Contact Data
   First and last name, e-mail address.
2. Project and Property Data
   Information about planned construction and renovation works, property details, photos, videos, plans, sketches, and other project-related documents.
3. Contractual and Billing Data
   Information on project stages, confirmations, invoices, transaction status, and administrative correspondence.
4. Communication Data
   Messages sent via the website or by e-mail, timestamps, and logs related to project handling.
5. Technical Data
   IP address, browser type, operating system, access times, log files, and cookie information.

Personal data are processed for the following purposes:

1. Mediation and organization of projects between clients and contractors.
2. Handling project inquiries, offers, and project stages.
3. Documentation of project progress (e.g. work progress using photo or video material).
4. Organization of interaction with external payment service providers (without storing payment data).
5. Fulfillment of legal obligations, in particular tax and commercial retention requirements.
6. Communication with users of the website.
7. Technical operation, security, maintenance, and optimization of the website.

Personal data are processed on the basis of the following legal grounds under the GDPR:

• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – compliance with legal obligations
• Art. 6(1)(f) GDPR – legitimate interests (operation of the platform, IT security, prevention of misuse, quality control)
• Art. 6(1)(a) GDPR – consent (e.g. cookies)

Personal data are disclosed only insofar as this is necessary and legally permissible, in particular to:

1. External payment service providers
   for the execution of payment transactions.
2. Contractors / service providers
   only project-related data required for the execution of the project.
3. Technical service providers
   hosting, IT infrastructure, security, and maintenance services.
4. Legal advisors
   in the event of legal disputes or for the enforcement of legal claims.
5. Public authorities
   where there is a statutory obligation to do so.

Any disclosure is purpose-bound and carried out in compliance with the GDPR.

Personal data are stored only for as long as necessary for:

• the execution and documentation of projects,
• compliance with statutory retention obligations,
• legitimate organizational and legal purposes.

After the respective purpose ceases to apply or statutory retention periods expire, the data are deleted or blocked.

Our website uses cookies to:

• ensure the technical operation of the website,
• provide security functions,
• generate anonymous usage statistics to improve the platform.

Technically necessary cookies are used without consent.

Analytics and tracking cookies are used only after prior consent via the cookie banner.

BauBridge implements appropriate technical and organizational measures to protect personal data against:

• loss,
• unauthorized access,
• manipulation,
• misuse.

Data transmission is encrypted using SSL/TLS.

Data subjects have the following rights in particular:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Art. 21 GDPR)
• right to withdraw consent (Art. 7(3) GDPR)

Requests can be sent at any time to: baubridge@baubridge.com

Payments are processed exclusively via licensed external payment service providers.

These providers process payment data independently in accordance with their own privacy policies.

BauBridge does not receive full payment details, but only information on transaction status and project-related allocation.

If service providers located outside the European Economic Area (EEA) are used, data transfers take place only if:

• an adequacy decision of the European Commission exists, or
• EU standard contractual clauses are applied.

An adequate level of data protection is ensured in all cases.

The platform is intended exclusively for persons aged 18 and over.
Personal data of minors are not knowingly processed.

This Privacy Policy may be updated due to legal, technical, or organizational changes.

The version published on the website at any given time shall apply.