Privacy policy

This notice provides information pursuant to Article 13 of the General Data Protection Regulation (GDPR) on which personal data we process, for what purpose, on what legal basis and for how long.

Controller

MilieuLux
Valentin Susuri
Wiesentfelser Straße 58, 81249 München
Phone: +49 160 4094324
E-Mail: Info@MilieuLux-Reinigung-Muenchen.de

What data we process and why

Accessing the website

Data processed: IP address, time, page requested, volume of data transferred, browser and operating system identifier
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in technically sound operation and defence against attacks
Retention period: The retention period depends on the hosting provider’s configuration and will be stated here once it is settled.

Getting in touch via form, phone, WhatsApp or email

Data processed: Name, phone number, email address, property address, your message and any details you provide voluntarily
Legal basis: Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract
Retention period: until the matter is concluded; thereafter in line with commercial and tax retention periods

Appointment booking

Data processed: Name, contact details, type of appointment, date and time slot, reason
Legal basis: Art. 6(1)(b) GDPR
Retention period: until the appointment is concluded plus statutory retention periods

Digital time and cost estimate

Data processed: Your details about the property, area, condition and task, plus the calculated result; contact details only if you send the result
Legal basis: Art. 6(1)(b) GDPR where you send the result; otherwise the calculation involves no personal reference
Retention period: as for a contact enquiry

Photo and file upload for estimation

Data processed: the files you upload and their metadata
Legal basis: Art. 6(1)(b) GDPR
Retention period: automatic deletion once the enquiry is concluded; files are held in non-public storage and are not indexable

External services on page load

As long as you have not given your consent, not a single resource is loaded from a third-party server when you open this website. Fonts are held within the project, the service-area map is drawn in-house, and there is no map embed and no social media widget.

The only external service is the visitor measurement described in the next section, and it loads only after your consent. If you decline, or decide nothing at all, the number of outgoing requests remains zero.

This is verifiable: a check in the project records every outgoing request from every page type, with and without consent; the operator holds the result. The WhatsApp button is a plain link – it loads nothing unless you click it.

Visitor measurement with Google Analytics

We would like to know which pages of this website are opened and how visitors find their way here. For this we use Google Analytics 4 with the identifier G-P2MKBKY98B. The tool stores a random identifier on your device and records, among other things, the page opened, the time, the approximate region of origin, the type of device and the page you came from.

This happens only if you have given your consent. Without your consent nothing is loaded from Google, no connection to Google is made and nothing is stored on your device — apart from your decision itself. That decision is held in an entry called “ml-einwilligung”, is valid for six months and contains only one of the two words “angenommen” (accepted) or “abgelehnt” (declined).

Recipient: The recipient is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor. Google Ireland may engage Google LLC (1600 Amphitheatre Parkway, Mountain View, California, USA) and other Google group companies as sub-processors.
Transfer to the USA: Data may be transferred to the USA in the process. The basis for this is the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework; Google LLC is certified under that framework. The European Commission’s standard contractual clauses apply in addition. Despite these safeguards it cannot be ruled out that US authorities access the data without your having the legal remedies customary within the EU.
Retention period: By default in Google Analytics, the identifier on your device is valid for two years. The event data held by Google is deleted after the retention period set in the account; the GA4 default is fourteen months. Your consent itself is stored by us for six months.
Legal basis: The legal basis is your consent under Art. 6(1)(a) GDPR; for storing and reading information on your device it is required under § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).
Withdrawal: You can withdraw your consent at any time with effect for the future. The way to do so is at the bottom of every page of this website: in the last line, next to the company name, you will find “Change your consent”. Clicking it opens the request again; the lawfulness of processing carried out up to that point is unaffected.
No advertising features: Advertising features are switched off and remain so even if you consent: the settings for ad storage, ad user data and ad personalisation are permanently set to “denied”. No advertising audiences are built and no data is passed on to advertising networks.

Your rights

Access to the data stored about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21 GDPR)
Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
Complaint to a supervisory authority (Art. 77 GDPR)

Competent supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach

Competent for non-public bodies in Bavaria.