Privacy policy

Controller

Grandmont Group UG. Full contact details in the legal notice (Impressum).

Contact / quote request form

When you submit a request via the form, we process the data you provide: contact detail (phone or email), postcode/location, requested service, free-text description, and at least one uploaded photo (up to 10 photos).

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request).

Uploaded photos are re-encoded server-side, which strips metadata (including EXIF/GPS location data). Files are not stored in a publicly accessible location, but in a private storage area with restricted access.

Request data is retained for the duration of processing plus a 90-day retention period, after which it is automatically deleted unless a legal retention obligation applies.

For internal notification of new requests, data may be forwarded to a messaging service (Telegram). Only the data you provided in the form is transmitted.

Hosting

This website runs on a self-managed server (VPS) within the EU. Form data is not transmitted to third-party hosting providers.

Cookies & tracking

This website currently does not use analytics or marketing cookies. Technically necessary session mechanisms (e.g. form protection) may be used. Should analytics/advertising tracking be added in the future, a consent solution will be implemented beforehand and this policy updated accordingly.

Your rights

You have the right to access, rectify, erase, restrict processing of, port your data, and object to the processing of your personal data, as well as the right to lodge a complaint with a supervisory authority.