Privacy information for customers and business contacts

The controller is DMA Gebäudereinigung UG (haftungsbeschränkt), Altkönigstraße 13, 65779 Kelkheim am Taunus, represented by Deniz Aslan. Email: info@dma-gebaeudereinigung.de; telephone: +49 6195 7581984.

This notice applies to prospective customers, customers, suppliers, business partners, their contacts and employees. The general privacy policy also applies.

Depending on the relationship, we process names, company and role, business contact details, property and location information, communications, quotations, contracts, services, appointments, complaints, invoices and payment information. Data mainly comes from you, your employer, a nominated contact, lawful public business sources or participating contractual partners.

We process data to answer enquiries, prepare quotations, plan and deliver cleaning services, communicate, control quality, manage invoices and payments, and comply with legal obligations. The legal bases are Art. 6(1)(b) GDPR for contracts and pre-contractual steps, Art. 6(1)(c) GDPR for legal obligations, and Art. 6(1)(f) GDPR for efficient business communication, documentation, quality assurance and legal claims.

We process the contact, company, property and content information you submit. Complaints receive a case number. Optional PDF, JPG and PNG files are used only to handle your enquiry. Files are stored temporarily in a private server directory and removed after the transmission attempt, without being added to the WordPress media library. File names, sizes and technical file identifiers are temporarily retained to associate uploads with their submission. Upload tokens expire after 30 minutes; abandoned uploads are removed by scheduled cleanup. Please avoid unnecessary personal or sensitive information. Forms email the information to us; WordPress does not create separate customer or complaint records containing the submitted information. Further technical details are set out in the general privacy policy.

Access is limited to responsible members of our team. External recipients may include hosting, email and IT providers, tax advisers, banks, insurers, legal advisers, nominated contacts and authorities where necessary and lawful. Processors are engaged under Art. 28 GDPR where required.

Enquiries without a contract are normally deleted twelve months after completion. Contract and service data is retained throughout the business relationship and applicable evidence or limitation periods. Business correspondence is generally retained for six years, accounting records for eight years and other relevant tax documents for up to ten years.

Complaint records are normally retained until the end of the regular three-year limitation period, calculated from the end of the year in which the matter was completed. Ongoing proceedings or specific legal claims may require longer retention.

Subject to statutory requirements, you may request access, rectification, erasure, restriction, portability and objection. Contact info@dma-gebaeudereinigung.de. You may also complain to the Hessian Commissioner for Data Protection and Freedom of Information.