Privacy Policy
Thank you for your interest in our company. Data protection is a particularly high priority for the management of DaviDO Facility Services.
1. Data controller
DaviDO Facility Services
Holteystr. 4
44267 Dortmund
Germany
E-Mail: info@davido-facility.de
2. Collection of personal data
When you use our contact form, we process the data you provide in order to respond to your enquiry.
Contact form: When you use our contact form, we store your name, e-mail address, telephone number (optional) and your message. This data is stored in our database (hosted in the United Kingdom on the basis of the EU adequacy decision) and in our e-mail system (Microsoft 365). The legal basis is your explicit consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time by sending an e-mail to info@davido-facility.de. Following withdrawal, your data will be deleted within 30 days unless a statutory retention obligation applies.
Online appointment booking
We use Microsoft Bookings (Microsoft 365) for online appointments. Opening the calendar establishes a connection to Microsoft. Your contact details, selected service and appointment details are transmitted to Microsoft to process and confirm your booking. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract). Appointment and contact details are retained only as long as needed for processing or statutory retention obligations. Please also consult the privacy information in the Microsoft booking calendar.
2a. Free photo check and free service test
Uploaded photos: As part of the free exterior check and the free service test, you can upload photos of your exterior surfaces. These photos are stored encrypted in a non-publicly accessible storage area of our backend infrastructure and are used exclusively internally to process your enquiry. Public access is not possible; retrieval is limited to authorised staff via time-limited, signed links. Server location: eu-west-2 (London, United Kingdom; EU adequacy decision).
Further details: We additionally store your contact details, property details (e.g. address, area, material, accessibility), your preferred appointment times, your message, the time of your consent, the version of this privacy policy, and a shortened, hashed form of your IP address for abuse prevention. If you reached us via an advertising campaign, we also store anonymous campaign parameters.
Purpose and legal basis: The processing is carried out to handle your free enquiry, to prepare an initial assessment, and to contact you. The legal basis is your explicit consent under Art. 6(1)(a) GDPR as well as Art. 6(1)(b) GDPR for pre-contractual measures. E-mail notifications are sent via Microsoft 365.
Storage period: Photos and enquiry data are deleted as soon as they are no longer required for processing, but at the latest 24 months after the last contact, unless a statutory retention obligation applies. You may request deletion at any time: info@davido-facility.de.
Marketing consent: If you have additionally consented to receiving information about offers and maintenance intervals, this consent is voluntary and may be withdrawn at any time with future effect.
Publication of images: Your photos will only be published, for example as a before-and-after reference, following separate, explicit consent.
3. Website analytics
Purpose: Analysis of visitor behaviour in order to improve the website and customer communication.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Categories of data subjects: Website visitors.
Categories of personal data: Anonymised visitor ID, session data, pages visited, interactions/events, consent status and time of consent.
Recipients: No disclosure to third parties.
Storage period: Analytics events, sessions and pseudonymous visitor profiles are deleted automatically after 12 months. Consent records are retained for up to 3 years to fulfil our documentation obligations.
Technical and organisational measures: Consent-first tracking: only after consent via the cookie banner is an anonymous visitor and session ID created. IP addresses are not stored in the analytics path. The data is processed in our backend infrastructure, server location: eu-west-2 (London, United Kingdom; EU adequacy decision).
You may withdraw your consent at any time via the "Privacy settings" link in the footer; a withdrawal is logged in the system and tracking stops immediately.
4. Cookies and consent management
We use technically necessary technologies so that our website functions. Optional analytics and marketing technologies are only used with your explicit consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG). Consent is voluntary and can be withdrawn at any time via the "Privacy settings" link in the footer.
Our website analytics is a first-party solution: data is processed on our own infrastructure and is not shared with advertising networks. We only collect pseudonymous usage data. Server location: eu-west-2 (London, United Kingdom; EU adequacy decision).
Postcode-based travel calculation: When you request travel calculation in the price calculator, our server sends the selected country and postcode to the OpenStreetMap search service (Nominatim). The postcode-centre coordinates are passed to the OSRM routing service to estimate a one-way road distance from Dortmund city centre. Your browser IP is not forwarded to these services; requests are made by our server. We do not persist the lookup data. Distance and costs are confirmed in the binding quote. This transfer is necessary for your requested pre-contractual estimate (Art. 6(1)(b) GDPR). Your calculator selections are temporarily saved in your browser when opening the contact form and copied into your message.
Categories processed: pseudonymous visitor and session identifiers, pages viewed and page titles, timestamps, referrer and campaign parameters (UTM), device type, browser and operating system family, screen size class, language, coarse country, and interactions such as price calculator usage, clicks on WhatsApp, phone and e-mail, and submitted enquiries.
We do not collect: IP addresses (they are not stored for website analytics), names, e-mail addresses, phone numbers, addresses, form contents, payment data, and no cross-device tracking or profiling for advertising purposes.
If your browser sends a "Global Privacy Control" signal, we treat this as an objection: analytics and marketing remain disabled until you deliberately enable them. Without consent, no analytics takes place.
Your enquiries, quotes and orders are processed independently for the performance of a contract (Art. 6(1)(b) GDPR). Withdrawing analytics consent does not affect this data.
5. Your rights
Right to access, rectification, erasure, restriction of processing, objection, data portability, and the right to lodge a complaint with a supervisory authority.
This privacy policy serves as a sample and must be reviewed by a lawyer and adapted to your specific use case.