Skip to content
0174 1936034 Request a fixed price
Legal

Privacy policy

This is a translation. Only the German version is legally binding.

Status: October 2026

1. Privacy at a glance

This policy describes which personal data are processed when you visit this website and when you send an enquiry through our forms, for what purpose and on what legal basis. The controller is AIGNER BAU, owner and managing director Cihan Savas Kurtulus (section 3).

In short: the website is hosted by Cloudflare. We store enquiries from the forms and the price calculator in a database at Cloudflare and send them to our team by email; the email is sent via the service Resend. Cloudflare Turnstile protects the forms against spam. Google Analytics only runs if you agree in the banner. Without your consent this website loads nothing from Google.

2. Hosting and editing

Cloudflare Workers

This website is delivered via Cloudflare Workers (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When the site is accessed, Cloudflare processes technically necessary data such as IP address, date and time, the address requested, browser and operating system in order to deliver the site securely and fend off attacks. This connection data is only stored for as long as is necessary for operation and security. The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; the standard contractual clauses of the EU Commission apply in addition.

Keystatic Cloud

We maintain the content of this website with Keystatic Cloud (Thinkmill Labs Pty Ltd, Australia). The service only processes data of the people who sign in there to edit content, not the data of visitors to this website. The legal basis is our legitimate interest in maintaining the content securely and easily (Art. 6(1)(f) GDPR). The transfer to Australia is based on the standard contractual clauses of the EU Commission.

3. General and mandatory information

Controller

AIGNER BAU
Owner and managing director: Cihan Savas Kurtulus
Highlight Tower 1, c/o Design Offices
Mies-van-der-Rohe-Straße 6
80807 München
Phone: 0174 1936034
Email: info@kernsanierung.com

Data protection officer

We are not legally obliged to appoint a data protection officer. If you have any questions about data protection, please contact us at the address given above.

Legal bases

We only process data where there is a legal basis: your consent (Art. 6(1)(a) GDPR, and additionally § 25(1) TDDDG where your device is accessed), pre-contractual measures and contracts (b), legal obligations (c) or our legitimate interest (f). The basis that applies is given in the individual sections.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You can also lodge a complaint with a data protection supervisory authority; in Bavaria this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.

Right to object under Art. 21 GDPR

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can object to processing for advertising purposes at any time without giving reasons. An informal message to info@kernsanierung.com is sufficient.

Storage period

We delete enquiries that do not lead to an order no later than six months after the last communication. If a contract is concluded, we keep the documents for as long as commercial and tax law requires, usually six to ten years (§ 257 HGB, § 147 AO).

Encryption

For security reasons this website uses TLS encryption. You can recognise it by “https://” in the address bar and the padlock symbol in your browser. When encryption is active, what you send through the forms cannot be read by third parties.

4. Data collection on this website

Cookies and storage in your browser

Without your consent this website sets no cookies. The only things stored in your browser are your choice in the consent banner (six months, localStorage) and, until you close the window, which pages and campaigns brought you here (sessionStorage). This information only leaves your browser when you submit a form. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

Enquiries via the forms and the price calculator

When you write to us using the contact form or the price calculator, we process your details (for example name, phone, email, address of the project, message, chosen configuration and calculated price) and the information about which pages and campaigns brought you to us. We use this data to answer your enquiry, advise you and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures), and in addition (f) (legitimate interest in handling enquiries).

We need the fields marked with * in order to handle your enquiry. Without these details we cannot prepare a quote for you. All other details are voluntary.

We store your details in a database at Cloudflare (Cloudflare D1, provider see section 2) and send them to our team by email. To send the email we use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend processes the details from the form and the delivery information of the message. A data processing agreement is in place with Resend; the transfer to the USA is based on the standard contractual clauses of the EU Commission. For the storage period see section 3.

Referral programme

If you refer a prospective client to us via the referral form, we process your own details (name, company, email, phone) and, as soon as a bonus becomes due, the bank details needed for the payment. The legal basis is Art. 6(1)(b) GDPR, as we make an agreement with you about the bonus. We keep the payment documents for the periods required by tax law.

In doing so we also receive data of the prospective clients referred. Please only refer people who agree to this. We use this data only to contact the prospective clients and inform them of the source of the data at the first contact (Art. 14 GDPR). The legal basis is our legitimate interest in handling the referral (Art. 6(1)(f) GDPR).

Spam protection with Cloudflare Turnstile

To protect against misuse and automated enquiries we use Cloudflare Turnstile in the forms (provider see section 2). Turnstile checks whether the enquiry comes from a human and processes technical characteristics of your browser and your IP address for this. The script only loads when a form comes into view. The legal basis is our legitimate interest in protecting the forms against misuse (Art. 6(1)(f) GDPR). In addition, we count per IP address how many enquiries arrive within one hour; only a non-reversible hash value is stored for this, and it is deleted after one hour.

5. Analytics and external services

Google Analytics 4 (only with your consent)

With your consent we use Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, integrated via the Google Tag. This shows us how this website is used. Cookies are set and data such as IP address, pages viewed, device and browser are transferred to Google, including to the USA. Google is certified under the EU-US Data Privacy Framework. Google signals and personalised advertising are switched off. The data is deleted in Google Analytics after 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent nothing is loaded from Google. We store your choice in your browser for six months. You can change or withdraw it at any time via the “Cookie settings” link at the bottom of every page.

Fonts, maps, phone and WhatsApp

All fonts are hosted on our own server; no fonts are loaded from Google. We do not embed any maps. If you use the WhatsApp link, the privacy policy of WhatsApp (Meta Platforms Ireland Limited) applies. Our website does not transfer anything to WhatsApp before you click the link.

6. Changes

We adapt this privacy policy when the website or the legal situation changes. The version published here at any given time applies.