Privacy notice

Controller

The controller responsible for personal data processing on www.lopez-building.de is:

Lopez Building
Daniel Lopez
Possenhofener Str. 21
81476 München
Deutschland

E-Mail: lopez@lopez-building.de
Tel.: +49 155 603 489 88

Website delivery and hosting

We use Hostinger for web hosting and email. Under Hostinger’s terms, the provider for EU contracts is Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. Delivering and protecting this website involves processing the IP address, date and time, requested address, technical browser/operating-system details, referring page where applicable and response status. The purposes are delivery, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.

Contact form, email and telephone

When you contact us, we process the contact details and information you provide, such as your name, email address, telephone number and project details. The form requires a name, email address and message so we can handle and answer the enquiry. Without these details, we cannot process an enquiry through the form. Messages are sent by email to our Hostinger mailbox. The website plugin does not maintain an additional message database. Article 6(1)(b) GDPR applies to contractual enquiries and quotation requests; Article 6(1)(f) GDPR applies to other enquiries. Our legitimate interest is answering and organising business correspondence. An enquiry does not grant separate consent to advertising.

Protection against abusive enquiries

The form uses technical request validation and an invisible control field. To limit volume, the server processes the IP address and generates a hash using a secret key. WordPress stores only this hash, a counter and an expiry time for this purpose, not message content. The limit remains valid for ten minutes after the last counted request; expired entries are removed when accessed or through WordPress cleanup. Changes of IP address are not tracked to create usage profiles. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is preventing spam and overload.

Recipients and processing outside the EEA

Access is restricted to people and providers who need it for these purposes, particularly Hostinger as our hosting and email provider and its technical subprocessors. Other recipients may be involved where required by law or for a particular commission. Hostinger provides a data processing addendum. Processing outside the European Economic Area must satisfy Articles 44 et seq. GDPR. For relevant transfers to countries without an adequacy decision, Hostinger’s contractual arrangements provide in particular for EU Standard Contractual Clauses. Subprocessors and safeguards: Hostinger – Data Processing Addendum. Further provider information: Hostinger – Privacy Policy. Information about the safeguards applicable to our processing can be requested using the contact details above.

Retention

Contact and project data are processed for as long as needed to handle an enquiry, perform a commission or establish, exercise or defend legal claims. They are then deleted unless statutory retention duties require otherwise. Business records subject to mandatory retention are kept only for the relevant legal purpose. Retention of technical logs and backups depends on operational and security purposes and the deletion and backup cycles applicable to the Hostinger service booked. Processing is limited to what is necessary for those purposes. The short validity period of the enquiry limit is described in the abuse-prevention section.

Cookies, local content and external links

This website plugin uses no analytics or advertising cookies and includes images, the logo and font styling locally. It contains no Google Maps map, embedded videos, newsletter, WhatsApp, booking feature or external CAPTCHA service. WordPress may use strictly necessary login and preference cookies for signed-in users. Device access that is strictly necessary for an expressly requested feature is covered by section 25(2) TDDDG; further processing is governed in particular by Article 6(1)(f) GDPR. External information links transmit data to another website only when opened; the other operator’s notices then apply.

Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw it for the future without affecting lawful processing already carried out. Please use the contact details above. You may also complain to a data protection supervisory authority, particularly where you habitually reside, work or suspect an infringement. The Bavarian State Office for Data Protection Supervision is responsible for private businesses in Bavaria; information: www.lda.bayern.de.

Right to object under Article 21 GDPR

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will stop processing the affected data unless compelling overriding legitimate grounds or grounds for establishing, exercising or defending legal claims apply. You may object to processing for direct marketing at any time without giving reasons.

Automated decisions and changes

We do not use the data described here for solely automated decisions producing legal or similarly significant effects, or for corresponding personal profiles. Technical spam limits may temporarily block a form enquiry; you can still contact us by telephone or email. This notice will be adapted if processing or website features change.