Information on the processing of personal data pursuant to Art. 13 GDPR

BauWatch Group B.V. and its group companies, hereinafter BauWatch, take the protection of your personal data very seriously. When you visit our website www.BauWatch.com or use our online services, BauWatch processes your personal data in the role of the data controller within the meaning of the General Data Protection Regulation ("GDPR"). We process your data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other laws for the protection of personal data.

We provide below information pursuant to Art. 13 GDPR about the processing of your data. We hereby inform you in advance that this privacy policy only applies to our websites and does not apply to third-party websites to which we refer via links.

The current privacy policy can always be found on our website: https://www.bauwatch.com/en-gb/privacy-statement/

Who is responsible for data processing? (Art. 13 (1) (a), (b) GDPR)

Content of this Privacy Policy

When you visit our website or use our online services, we process the personal data collected in the process (e.g. name, postal address, email address, telephone number, IP address) by categories of data subjects for the purposes and on the basis of the legal foundations defined below in this section.  those described below, but only if and to the extent that the new purposes are compatible with thoseWe may also process personal data for purposes other than described below. In this case, we will inform you before your personal data is further processed.

To facilitate your reading of this Privacy Policy, you will find an overview of the topics below. You can immediately read more about each topic by clicking on it:

• Visitors to our website

• Purposes and Legal Basis of Processing

  • Cookies

  • Third-country exports (risks)

  • Use of services that utilise technically necessary cookies

    • Cookiebot

  • Use of services that utilise statistic cookies

    • Google Analytics

  • Use of services that utilise marketing cookies

    • Google Tag Manager

    • HubSpot

    • LinkedIn – Insight Tag

    • Meta Pixel

    • SoPro

    • Visual Website Optimizer

  • Use of services that employ functional cookies

    • YouTube

• Users of our offer request form

• Users of our contact form

• Users of our customer feedback form

• Use of Google reCAPTCHA for the contact form/customer feedback form

• How long will the data be retained?

• Who receives your personal data?

• What rights do you have?

  • According to Art. 15 GDPR Right of access

  • According to Art. 16 GDPR Right to Rectification

  • According to Art. 17 GDPR Right to erasure (“Right to be forgotten”)

  • According to Art. 18 GDPR Right to Restriction of Processing

  • Pursuant to Art. 20 GDPR Right to Data Portability

  • Pursuant to Art. 7 (3) GDPR Right to Withdraw Consent

  • Pursuant to Art. 77 GDPR, the right to lodge a complaint with the competent supervisory authority

• Competent supervisory authority

• Information about your right to object according to Article 21 of the General Data Protection Regulation (GDPR)

• Automated decision-making and profiling

• Amendments to this Privacy Policy

Visitors to our website

Purposes and Legal Basis of Processing    (Art. 13(1)(c), (d) GDPR)

When you visit our website, we use essential, statistical, functional, marketing or external media cookies and/or employ similar techniques such as pixels. When you visit our website for the first time, we inform you about the use of cookies and you can decide which cookies you wish to allow. You can refuse cookies and/or similar techniques by setting your internet browser not to allow cookies and/or similar techniques (e.g. ad-blockers or no-script plugins). Furthermore, you can delete all previously stored information via your browser settings.

Technical requirements

In order to establish a connection to our website, your browser transmits certain data to the web server of our website. This is a technical necessity to ensure that the information you have requested can be provided by the website. To enable this, among other things, your IP address, time zone difference to Greenwich Mean Time (GMT), date, time and frequency of website visits, visited websites and hyperlinks, the type and interface of your operating system, language and version of browser software, visited websites and hyperlinks, access status/HTTP status code, data volume transmitted each time, are stored and used for a maximum of 60 days. We reserve the right to store this data for a limited period to safeguard our legitimate interests, in order to trace personal data in the event of unauthorised access or attempts to intentionally harm us via this route (Art. 6 (1) (f) GDPR). The data will only be stored or forwarded by us for these purposes and no other, without us informing you beforehand and asking for permission.

Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website.

A cookie is information stored on your device (computer, smartphone, etc.) to, for example, recognise whether you repeatedly visit websites from the same device or browser. In general, we use cookies to analyse interest in our website and to improve the user-friendliness of our website. In principle, you can also access our website without cookies.

Cookies can generally be disabled or removed using tools available in most commercial browsers. The settings must be configured and adjusted individually for each browser you use. To this end, the different browsers offer different functions and options.

Types of cookies

To provide you with a better understanding of the most common types of cookies, we have explained them below for your comprehension:

Session cookies

Session cookies allow users and the changes they make within a website to be recognised. They allow the website to track their movements across individual pages, so that information that has already been entered/stored does not need to be entered/stored again. An example of this are shopping baskets in web shops. The session cookie stores the selected products in the shopping cart, ensuring that it contains the correct items at checkout. Session cookies are deleted upon logout or expire as soon as the session has automatically ended.

Permanent or protocol cookies:

A permanent or protocol cookie stores the information and user settings on the user's computer for the period specified by an expiry date. This leads to faster and more convenient access, as you do not have to reset language preferences or re-enter login details, for example. The cookie is automatically deleted after the storage period expires.

Third-party cookies:

Third-party cookies generally have no impact on the use of the site, as they do not originate from the website operator. They serve, for example, the purpose of collecting information for advertising, customised content, and web statistics and passing this on to the respective third-party provider.

Tracking cookies:

Tracking cookies are special text files that provide the means to collect data on the behaviour of the internet user. This is intended to gain information about the user's areas of interest, in order to be able to launch tailored advertising offers, for example. Tracking cookies are therefore not only set up on registration but automatically when visiting the website.

Functional cookies:

Functional cookies allow this website to store information provided, such as the username or language selection, and to offer the user enhanced and personalised features based on this or to display hidden elements. They are also used, for example, to enable authentications for other applications (e.g. apps) or to share your cookie preferences or consent for the use of corresponding services (if necessary) with third parties when you click on corresponding links. Similarly, security-related cookies are to be regarded as functional cookies. You ensure that the requests within a browser session are made by the user and not by other websites. This cookie prevents malicious websites from acting on behalf of the user without the user's knowledge. Functional cookies generally collect and store only anonymised information.

The above-mentioned exemplary presentation of the most common forms of cookies is intended to give you a global overview of this form of data collection. These statements do not claim to be complete. As a result of technical IT development, it is to be expected that further types of cookies will be developed over time. Please inform yourself at regular intervals about any current changes to our Privacy Policy before using our website.

To be able to use our website comprehensively and comfortably, you should accept those cookies that enable the use of certain functions or make usage more convenient.

Third-country exports (risks)

Our website uses features from various web analytics services provided by other third parties, such as Google, Microsoft, YouTube. We will explain in more detail below which services are involved and which data are analysed.

Please note that we have no influence over the data processing by the service providers outside of our business relationship when using such services (e.g. Google, Facebook, Microsoft, YouTube). We therefore cannot rule out the possibility that the routing of data occurs via Internet servers located outside the EU. In cases of support and maintenance, as well as in individual cases where personal data is processed by the service providers for their own business purposes, access from third countries cannot be ruled out.

The transfer of your data to third countries such as the USA, where there is no GDPR-compliant and adequate level of data protection, entails certain risks, about which we would like to inform you at this point. Through national laws such as the Foreign Intelligence Surveillance Act (FISA), domestic authorities (in the USA) can access the data you have with the provider without your knowledge or consent, provided there is cause for this from the authority's perspective. Furthermore, the enforcement of your data subject rights pursuant to Art. 15 et seq. GDPR may possibly only be carried out to a limited extent.

To ensure appropriate safeguards for the protection of the transfer and processing of personal data outside the EU, Standard Contractual Clauses – EU SCC (Art. 46 (2) sentence 1 lit. c GDPR) have been concluded with the respective service providers. Insofar as the service providers are registered in the EU-U.S. Data Privacy Framework (DPF), this serves as a legal basis for the transfer of data to the United States.

Insofar as the service providers further process personal data in connection with their own business purposes, they are independent data controllers for this use and as such are responsible for compliance with all applicable laws and obligations of a data controller. When using the services, the respective terms of use and the privacy policies of the services apply.

If you voluntarily consent to the use of the analysis tools on our website, you also agree pursuant to Art. 49 (1) (a) GDPR to a potential third country transfer of your data.

Use of services that utilise technically necessary cookies

Purposes

The purposes for which we process this personal data are to ensure the correct and optimal operation of the websites. Among other things, the use of the consent manager (also known as "cookie banner") from Cookiebot is technically necessary, which stores your settings (technically necessary cookies, functional cookies, statistics cookies, or marketing cookies) so that you do not have to make the selection again during your website visits.

We use the following service that employs technically necessary cookies:

Cookiebot

The Cookiebot is a Consent Management Platform (also called a "cookie banner") that stores the cookie settings chosen by users and, in the case of third-party cookies, forwards them to the respective service providers. The data will be deleted after 60 days.

The provider of the service is Usercentrics A/S, Havnegade 39, 1058 Copenhagen. To ensure an adequate level of security in the processing of personal data, a data processing agreement pursuant to Article 28 GDPR was concluded with the service provider.

You can find the privacy policy of Cookiebot at: https://www.cookiebot.com/en/privacy-policy/

On our website, we use the following technically necessary cookies:

Personal data

The following personal data will be processed when technically necessary cookies are used:

§  Location data and IP address

§  Browser

§  Date, time, duration and frequency of website visits

§  Time zone difference to Greenwich Mean Time (GMT)

Legal basis for the use of technically necessary cookies

We process the personal data of visitors to our website for technical reasons (e.g. to optimally adjust the site to the screen size and to display the website in the correct language) and for data security reasons, for example, to identify the perpetrator in the event of an unauthorised attack on our website (Art. 6 (1) (f) GDPR).

Use of services that utilise statistic cookies

Purposes

We use statistical cookies to measure and improve the quality and effectiveness of the website.

We use the following services that employ statistical cookies:

Google Analytics

Google Analytics is a web analysis service provided by Google that tracks and analyses our website traffic. It provides insights into user behaviour on our website and helps us to better understand our target audience as well as optimise our online activities. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies about the use of our online offering (e.g., when, where, and how often you access our website, including IP address) is usually transferred to a server of Google in Ireland or the USA and stored there. What risks may arise in this regard can be found further above in our privacy policy.

In order to eliminate the personal reference of your IP address, it is immediately shortened after its collection (e.g. by using the extension "anonymizeIp()" by deleting the last 8 bits) and thus anonymised, so that disclosure of your identity via the IP address can be excluded.

Google will use the information generated about you when using this website to evaluate your use of the website, to compile reports on website activity, and, if applicable, to provide further services related to the use of this website or the internet for us or third parties. Google will not, under any circumstances, combine the transmitted IP addresses with other data stored by Google.

The service provider is Google Inc, Gordon House, Barrow Street, Dublin 4, Ireland. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. The headquarters of Google LLC is at 1600 Amphitheatre Parkway in Mountain View, California 94043.

The Google Privacy Policy can be found at: https://policies.google.com/privacy

We use the following statistical cookies from Google on our website:

Personal data

The following personal data are processed when using statistical cookies:

§  Location data and IP address

§  Browser

§  Date, time, duration, and frequency of website visits (user behaviour)

§  Time zone difference to Greenwich Mean Time (GMT)

§  Visited websites – and thus your areas of interest

Use of services that utilise marketing cookies

Purposes

Finally, we use cookies for marketing and external media. With these cookies, we will store and evaluate information about your recent visits to our website and your browsing behaviour on the various parts of our website for analytical purposes, in order to understand how people use our website, so that we can make it more intuitive. We will also track which links you have clicked on our website. We use this information to show you targeted advertising on the website that is relevant to you and that we have determined based on the content you have viewed.

We use the following services that employ marketing cookies:

Google Tag Manager

The Google Tag Manager can manage various website tags from marketers through an interface. The tool (Tag Manager, which implements the tags) is a cookieless domain and does not collect personal data. Only tags are triggered that may in turn collect data (see descriptions of Google Analytics and Google Ads). However, the Google Tag Manager does not access this data. If a deactivation has been carried out at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

Provider of the Google service is Google Inc, Gordon House, Barrow Street, Dublin 4, Ireland. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. The headquarters of Google LLC is at 1600 Amphitheatre Parkway in Mountain View, California 94043.

Further information about Google Conversion Tracking and deactivation can be found at https://tools.google.com/dlpage/gaoptout?hl=de

The Google Privacy Policy can be found at: https://policies.google.com/privacy

You can deactivate the storage and use of information based on your Google account, including your activities on YouTube and Google+, as well as the use of cookies for re-targeting purposes ("DoubleClick Cookie") by Google, by visiting the "Google Ads Settings" page at https://www.google.com/settings/u/0/ads/authenticated and setting the slider for "Interest-based advertising" to "Off". You must do this on each device you use to access our website.

HubSpot

HubSpot is a service for managing user databases. HubSpot is a CRM platform for sales, marketing, content management, and customer service. We use HubSpot on this website for our online marketing activities.

The provider of the service is HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. You can find HubSpot's privacy policy at:https://legal.hubspot.com/de/privacy-policy

We use the following marketing cookies from HubSpot on our website:

LinkedIn – Insight Tag

We use the LinkedIn Insight Tag on our website (via Google Tag Manager).

The tag is a small code snippet that we have added to our website to track conversions, retarget our website visitors, and gain additional information about the people who view our advertisements. This helps us, among other things, to design advertising outside of our website more targeted and thereby improve the relevance of our advertisements.

In this process, the referrer URL, IP address, device and browser properties, as well as the timestamp are recorded and processed by LinkedIn as part of the analysis. The IP addresses are shortened or hashed, and direct identifiers of LinkedIn members are removed within seven days to pseudonymise the data. The remaining pseudonymised data will be deleted within 90 days. LinkedIn itself does not share any personal data with us, but merely analyses your data and sends us statistical reports and notifications (in which you can no longer be identified by us).

LinkedIn members can also control the use of their personal data for advertising purposes in their account settings at https://www.linkedin.com/psettings/advertising/actions-that-showed-interest.

The provider of the service is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The headquarters of LinkedIn Corporate is located at
1000 W Maude Ave, Sunnyvale, CA 94085. Data processing is carried out under joint responsibility pursuant to Article 26 of the GDPR. You can find LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy.

We use the following marketing cookies from LinkedIn on our website:

Meta Pixel

We use the so-called "Meta Pixel" of the social network Facebook on our website. By using the Facebook Pixel, we can determine so-called "Custom Audiences," i.e., custom target groups to which you are assigned as part of the tracking through the Pixel. The Facebook advertising placed by us is subsequently only shown to those individuals who are assigned to the appropriate target group. This is intended to ensure that you only receive advertising for those products and services in which you are also interested. We would like to ensure that our advertising corresponds to the potential interests of the users and does not appear intrusive.

Through the remarketing tag, a direct connection to Facebook's servers is established when visiting the website. This communicates to Facebook which pages you have visited on our website. Facebook assigns this information to your personal Facebook user account. Further information on the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy can be found in Facebook's Data Policy (https://www.facebook.com/about/privacy/). If you do not want Facebook to directly associate the collected information with your Facebook user account, you can deactivate the remarketing function "Custom Audiences" in the settings of your user account on Facebook. You must be logged in to Facebook to do this.

The service provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The headquarters of Meta Platforms, Inc. is at 1601 Willow Road, 94025 Menlo Park, CA. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. You can find Meta's privacy policy at: https://de-de.facebook.com/privacy/policy/

We use the following marketing cookies from Meta on our website:

SoPro

The Cookie plugin.sopro.com is associated with the Sopro plugin, which has been developed for WordPress websites. This plugin is used to identify visitors who interact with Sopro campaigns. It stores information such as visited pages, timestamps, and session duration to analyse and optimise visitor interaction with the website. SoPro is a plugin that allows us to track the effectiveness of our advertising campaigns after an ad click.

Some of the cookies used are primarily employed for the management of session data and the optimisation of the user experience. There is a possibility that this may also result in the analysis of user behaviour.

The provider of this service is Prospect Global GmbH, Sopro, 27-29 North Street, Brighton, BN1 1EB. The registered office of Sopro Holdings Limited is at 33 Wrotham Road, Borough Green, Sevenoaks, Kent, United Kingdom, TN15 8DD. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. The privacy policy of Sopro can be found at: https://sopro.io/legal/

We use the following marketing cookies from Sopro on our website:

Visual Website Optimizer

We use the analysis tool Visual Website Optimizer (VWO). The service is used to analyse user interaction and thereby optimise the user experience. This can increase the conversation and usage rate of the website.

We conduct this analysis to learn more about the use of our website and thereby optimise our offerings. If you do not want data about your use of our website to be stored by Visual Website Optimizer, you can object to its use. Visual Website Optimizer offers a solution for this purpose, allowing you to make an opt-out declaration with a click, thereby preventing future analysis by Visual Website Optimizer. By using the opt-out link at http://visualwebsiteoptimizer.com/opt-out.php, a cookie for exclusion from the Visual Website Optimizer analysis tool will be set. You may object to the storage of your anonymously collected visitor data at any time for the future.

If you use the functions described above to set opt-out cookies, this will result in exclusion from the respective analysis tool. The opt-out cookies are then each placed in a browser on a terminal device. It is used to check whether cookies are enabled in the visitor's browser. This cookie is a session cookie and does not store any personal data. If you use our website with multiple browsers or devices, you must set the opt-out cookie separately for each browser and each device. The opt-out cookie remains valid as long as you do not delete the cookie. If you delete the opt-out cookies, the analysis tools will be used again upon revisiting the online shop, unless you make use of the opt-out option again.

The provider of the service is Wingify Software Pvt. GmbH, Hamburg Office, Heidenkampsweg 58, Hamburg, 20097, External EU Representative: GDPR-Rep.eu, c/o Wingify Software Pvt GmbH, Schellinggasse 3/10, 1010 Vienna, Austria. The headquarters of Wingify is located at KLJ TOWER, North, Netaji Subhash Place, Pitampura, Delhi, 110034. Data processing is carried out under joint responsibility pursuant to Article 26 of the GDPR. The privacy policy of Wingfy can be found at:https://vwo.com/de/privacy-policy/

We use the following marketing cookies from visual website optimisers on our website:

Personal data

The following personal data will be processed when using marketing cookies:

§  Location data and IP address

§  User ID (UUID)

§  Device and browser properties

§  Date, time (timestamp in UTC), duration and frequency of website visits (user behaviour)

§  URLs of the first landing page of a user

§  Referrer URL

§  Date, time (timestamp) of the user's first visit to the landing page

§  Timestamp of the last server-side communication

§  Timestamp of tracking URLs

§  Clicking of online marketing campaigns

§  Time zone difference to Greenwich Mean Time (GMT)

§  Visited websites – and thus your areas of interest

§  Data you have entered in online forms (e.g. name, company, address, email address, telephone number, postcode monitoring location)

§  Data from social media profiles (employer, place of work, job title)

§  Click on external websites

§  Unique Cookie ID

§  Status of the cookies (enabled, not enabled)

§  Cookie expiration date

§  The type of cookie consent

§  Number of ad impressions per placement (frequency)

§  Last Impression (relevant for post-view conversions)

§  Opt-out information (indication that the user no longer wishes to be contacted)

Legal basis for the use of statistics & marketing cookies

Insofar as you have consented to the use of statistical and/or marketing cookies during your first visit to the website (e.g., for measuring your usage behaviour and displaying targeted advertising), we process your personal data on the basis of consent (Art. 6, (1) (a) GDPR). Via our cookie banner (accessible as an icon at the bottom left of the website), you can change your settings at any time. Upon withdrawal of your consent, your personal data will be deleted immediately.

Use of services that employ functional cookies

Purposes

Finally, we use functional cookies. Functional cookies enable this website to store information provided, such as the username, your preferences (e.g. number of search results to be displayed on a page) or language selection, and based on this, offer the user improved and personalised features. They are also used, for example, to enable authentications for other applications (e.g. apps) or to share your cookie preferences or consent for the use of corresponding services (if necessary) with third parties when you click on corresponding links. Functional cookies are also used to ensure that requests within a browser session are made by the user and not by other websites. This cookie prevents malicious websites from acting on behalf of the user without the user's knowledge.

We use the following services that employ functional cookies:

We use the following marketing cookies from Sopro on our website:

Visual Website Optimizer

YouTube

YouTube is a service that enables the playing of videos (e.g., as part of image campaigns) and provides users with the option to comment on, share, or subscribe to individual channels.

Security

The "YSC" cookie ensures that requests within a browser session are made by the user and not by other websites. This cookie prevents malicious websites from acting on behalf of the user without the user's knowledge.

Multi Media Preference (Flash Activation)

To ensure that data is not transmitted to the service provider before the activation of links to external web services (e.g. with YouTube videos), users must first actively enable the Flash function. The "CONSENT" cookie stores the status regarding its cookie choice and forwards this to YouTube when the link is clicked.

The provider of the YouTube service is Google Inc, Gordon House, Barrow Street, Dublin 4, Ireland. The headquarters of Google LLC is located at 1600 Amphitheatre Parkway in Mountain View, California 94043. Data processing is carried out under joint responsibility pursuant to Art. 26 GDPR.

The Google Privacy Policy can be found at: https://policies.google.com/privacy

We use the following functional cookies from YouTube on our website:

Personal data

In the use of functional cookies, the following personal data are processed:

§  Location data and IP address

§  User ID (UUID)

§  Device and browser properties

§  Date, time (timestamp in UTC), duration and frequency of website visits (user behaviour)

§  URLs of the first landing page of a user

§  Referrer URL

§  Date, time (timestamp) of the user's first visit to the landing page

§  Timestamp of the last server-side communication

§  Time zone difference to Greenwich Mean Time (GMT)

§  Visited websites – and thus your areas of interest

§  Click on external websites

§  Unique Cookie ID

§  Status of the cookies (enabled, not enabled)

§  Cookie expiration date

§  The type of cookie consent

§  Opt-out information (indication that the user no longer wishes to be contacted)

Legal basis for the use of functional cookies

Insofar as you have consented to the use of functional cookies during your first visit to the website, we process your personal data on the basis of consent (Art. 6, (1) (a) GDPR). Via our cookie banner (accessible as an icon at the bottom left of the website), you can change your settings at any time. Upon withdrawal of your consent, your personal data will be deleted immediately.

Data origin

We collect the aforementioned personal data directly from you, possibly also through the use of cookies on our website. We do not use any other sources to collect your personal data unless this is explicitly stated (e.g., via the contact or application form or the chatbot).

Deletion

We will not retain your personal data for longer than is necessary for the purposes described above. The storage duration depends on the respective type of cookies. A distinction is made between session cookies (data is only stored during the current website visit) and persistent cookies (data is stored permanently), or cookies with an individual deletion period (maximum 14 months).

The deletion period specified for the respective cookie is displayed in the cookie banner.

Users of our offer request form

When you use our request-for-quotation form, you can trust that we provide an encrypted connection with an SSL certificate during transmission. In order to create tailored offers for you and to determine which regional contacts we should involve in the project, we require information about your company, your contact details, or the planned monitoring location.

Purposes

We store your data, which you have voluntarily provided to us, in order to be able to contact you. Should you have an inquiry or a complaint, we can quickly provide you with information based on the stored data. Your data will be directly transferred to our customer management system after you click "Submit," so that we can contact you at any time if necessary, for example, if we were unable to provide you with a specific offer at that given time.

Personal data

When using our inquiry form, we process the following personal data:

§  Company

§  First name and surname

§  Telephone

§  Email address

§  Postcode/monitoring location

Legal basis

We store the information you provide in order to contact you and respond to your enquiry in the best possible way. We collect personal data on the basis of a possible contract initiation (Art. 6 (1) (b) GDPR) in order to coordinate details and requests with you and to offer you a tailored proposal. Of course, you may also provide us with your contact details via another transmission method. The storage of data in our customer information system is based on our legitimate interest in tracking inquiries and improving our services accordingly (Art. 6 (1) (f) GDPR).

Data origin

We process solely the data that you provide to us.

Users of our contact form

As a customer or prospective client, you can contact us at any time. You can do this by telephone, via email or through our contact form. Insofar as you contact us by telephone or email, we record your contact details, your request, the content of the email, or note the information you have communicated to us by telephone.

When you use our request-for-quotation form, you can trust that we provide an encrypted connection with an SSL certificate during transmission. To best respond to your request or concern, we require your first and last name, your email address, and your telephone number. You are welcome to also inform us of the location of the monitoring (insofar as it is relevant to your request) and describe your request in a free text form.

Purposes

We store your data, which you have voluntarily provided to us, in order to be able to contact you. Should you have an inquiry or a complaint, we can quickly provide you with feedback based on the stored data.

Personal data

When using our contact form, we process the following personal data:

§  First name and surname

§  Email address

§  Email Content (for enquiries via email)

§  Telephone note regarding your concern (for telephone inquiries)

§  Telephone number

Voluntarily, you can provide us with the following data so that we can resolve your request in the best possible way:

§  Place of surveillance (city or postcode)

§  Telephone number

§  Your concern, which you transmit to us via the free text field.

Legal basis

We store the information you provide us in order to contact you and respond to your enquiry in the best possible way. Of course, you may also provide us with your contact details via another transmission method. The processing of your data is therefore based on our legitimate interest in providing you with the best possible service (Art. 6 (1) (f) GDPR).

Data origin

We process solely the data that you provide to us.

Users of our customer feedback form

If you have any questions or comments about our service (e.g. a complaint), we would like to provide you with feedback as quickly as possible. To submit your request to us, you can use our customer feedback form. Our colleagues from customer support will contact you as soon as possible.

Purposes

We store your data, which you have voluntarily provided to us, in order to be able to contact you. Should you have an inquiry or a complaint, we can quickly provide you with feedback based on the stored data. We are also pleased to receive positive feedback that you provide us through the customer feedback form.

Personal data

When using our customer feedback form, we process the following personal data:

§  First name and surname

§  Email address

You may voluntarily provide us with the following data—if they are readily accessible—so that we can resolve your issue in the best possible way:

§  Company name

§  Telephone number

§  Contract ID (SC/VA number)

§  Monitoring location

§  Your concern as free text

§  Object ID (tower number)

Legal basis

We store the information you provide in order to contact you and respond to your enquiry in the best possible way. We collect personal data on the basis of a possible contract initiation (Art. 6 (1) (b) GDPR) in order to coordinate details and requests with you and to offer you a tailored proposal. Of course, you may also provide us with your contact details via another transmission method. The storage of data in our customer information system is based on our legitimate interest in tracking inquiries and improving our services accordingly (Art. 6 (1) (f) GDPR).

Data origin

We process solely the data that you provide to us.

Use of Google reCAPTCHA for the contact form/customer feedback form

In order to use our contact form or our customer feedback form, or to submit your request to us, you must first accept the necessary services from reCAPTCHA and thereby unlock the content. This ensures that the request is not made by a robot. Only after activating the reCAPTCHA content can you indicate that you are not a robot and subsequently submit the form to us. The confirmation request is time-limited and must subsequently be repeated.

Purposes

reCAPTCHA is used to verify whether data input on our websites (e.g. in a contact form) is carried out by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor visits the website. For analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, set languages in the browser, screen and window resolution, time zone or the plugins installed in the browser). The data collected during the analysis will be forwarded to Google.

Provider of the reCAPTCHA service is Google Inc, Gordon House, Barrow Street, Dublin 4, Ireland. The data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. The headquarters of Google LLC is at 1600 Amphitheatre Parkway in Mountain View, California 94043.

For more information on Google reCAPTCHA and deactivation, visit https://cloud.google.com/recaptcha/docs/manage-keys?hl=de

The Google Privacy Policy can be found at: https://policies.google.com/privacy

Personal data

When using the Google reCAPTCHA service, we process the following personal data:

§  IP address

§  Languages set in the browser

§  Screen and window resolution

§  Time zone

§  Plugins installed in the browser

§  Activation/Consent to load reCAPTCHA content in order to accept these

§  Accepted reCAPTCHA Contents ("I am not a robot")

Legal basis

We use reCAPTCHA within the scope of legitimate interest pursuant to Art. 6 (1) (f) GDPR, to protect against attacks by bots.

Data origin

We process solely the data that you provide to us.

Delele

We store the data only for as long as is necessary to fulfil the purpose.

How long will the data be retained? (Art. 13 (2) (a) GDPR)

In principle, we only store your data for as long as it is necessary to achieve the purpose.

When processing your personal data based on legitimate interest pursuant to Art. 6 (1) (f) GDPR, we store your data until our legitimate interest in data processing or the purpose of data processing ceases, or you object to the data processing. Further information about your right to object pursuant to Art. 21 GDPR can be found below.

Data that we process to fulfil our contract (Art. 6 (1) (b) GDPR) are generally retained for a period of 10 years after the termination of the business relationship. Insofar as you are a prospective customer, we will delete your data after a maximum of 3 years, provided no business relationship has been established.

Data that we process based on your consent pursuant to Article 6 (1) (a) GDPR, we store until revocation.

Who receives your personal data? (Art. 13 (1) (e), (f) GDPR)

We treat your personal data confidentially and do not generally disclose it to third parties, unless you have given your consent or the provision is due to a legal or contractual obligation. We work closely with some companies. These companies support us in fulfilling our tasks. These partners work on our behalf and are contractually bound to our data protection regulations.

To the extent necessary for the purposes described below, we will disclose your personal data to the following (categories of) recipients:

• Group companies, insofar as this is necessary for compliance with regulations, for the review of internal reports or for security purposes, or for the fulfilment of an agreement with the individuals concerned.

• Government agencies, courts, regulatory authorities, law enforcement agencies or intelligence services, if we are legally obliged to provide personal data.

• Our auditor, our legal advisors, and other professional service providers whom we have engaged for compliance reasons

• Suppliers of the IT services we use

• Providers of services that we use to measure the effectiveness of our services and websites

• Third parties who wish to purchase BauWatch or one or more of its corporate divisions, or who are interested in doing so, including parties involved in advising on such a transaction.

What rights do you have? (Art. 13 (2) (b), (c), (d), (e) GDPR)

Each data subject has the following rights:

▪          According to Art. 15 GDPR Right of access

You have the right to request information about the personal data we process, in particular regarding the purposes, the affected categories of personal data, the (categories of) recipient(s), the retention periods or the criteria for determining them, the source of the personal data, the existence of automated decision-making, and the appropriate safeguards in the event of a transfer of data outside the EEA.

▪          According to Art. 16 GDPR Right to Rectification

You have the right to have incorrect data that we process about you corrected and incomplete data completed by us. Furthermore, you have the right to restrict data processing upon your request in the following cases:

o   If you contest the accuracy of the data, you can request us to restrict data processing during the period in which we verify the accuracy of the data.

o   If the processing is unlawful and you request the restriction of use of the data instead of the deletion of the data

o   If we no longer need your personal data for processing purposes, but you still require it for the establishment, exercise, or defence of a legal claim

o   If you have objected to the processing of your data and are awaiting our response on whether our legitimate interests outweigh your interests

▪          According to Art. 17 GDPR Right to erasure (“Right to be forgotten”)

In the following cases, you have the right to request that we delete your personal data:

o   If we no longer need the data for the purposes for which they were collected or obtained

o   If you have withdrawn your consent, provided that the processing of your data is based on consent and we also have no other legal basis for the processing of your data.

o   If you have objected to the processing of your data and we do not have an overriding legitimate interest, or if you have objected to the processing of your data for direct marketing purposes

o   If we are required to delete personal data in order to comply with a legal obligation imposed on us

o   If we have collected personal data in connection with the provision of digital services for minors.

Please note that this does not apply in all cases. We are not required to delete your personal data if we need it, among other things, for the establishment, exercise, or substantiation of legal claims.

▪          According to Art. 18 GDPR Right to Restriction of Processing

We will practically no longer process your personal data, apart from its storage.

▪          Pursuant to Art. 20 GDPR Right to Data Portability

If we process your personal data with your consent or in fulfilment of a contract with you AND the processing is automated, you have the right to receive your data from us or to have it transferred to a third party in a commonly used file format.

▪          Pursuant to Art. 7 (3) GDPR Right to Withdraw Consent

If your personal data is processed on the basis of consent, you have the right to withdraw the given consent. Please note that the withdrawal of your consent does not affect the data processing that took place before the withdrawal of your consent.

You can exercise all the aforementioned rights by sending an email to [email protected], clearly describing your concern. Please note that we must verify your identity before we can respond to your request. How we do this depends on your specific situation.

▪          Pursuant to Art. 77 GDPR, the right to lodge a complaint with the competent supervisory authority

If you wish to exercise your rights, please contact the above-mentioned contact option.

Furthermore, you have a right to object, which we explain in more detail at the end of this privacy notice.

Competent supervisory authority

For UK

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Tel:  +44 303 123 1113

E-Mail: [email protected]

For Ireland:

Data Protection Commission

21 Fitzwilliam Square

D02 RD28 Dublin 2

Tel. +3531 7650100 +353 1800437 737

E-Mail: [email protected]

Information about your right to object according to Article 21 of the General Data Protection Regulation (GDPR)

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you, which is based on Article 6(1)(f) of the GDPR (data processing on the basis of a balance of interests); this also applies to any profiling based on this provision within the meaning of Article 4(4) GDPR.

If you lodge an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

You can object to the processing of your personal data by sending an email to [email protected], clearly describing your concern. Please note that we must verify your identity before we can respond to your request. How we do this depends on your specific situation.

The objection can be made without formality and should preferably be addressed to our Data Protection Officer (contact details see above).

Automated decision-making and profiling

We do not process your personal data to make automated decisions without human intervention or to create a profile of you based on your personal data.

Amendments to this Privacy Policy

We reserve the right to amend the privacy policy to adapt it to new legal data protection requirements and other changes in the factual or legal situation. Therefore, please always inform yourself about the current privacy policy at the beginning of your use of our website.

The current version of the privacy policy can be found at:

https://www.bauwatch.com/en-gb/privacy-statement/

Latest version: 31 March 2025