Düsseldorf, Wuppertal, Schwelm, Ennepetal, Meerbusch, Cologne & all of NRW
+49 174 6150689 gala.bau.kurt@web.de Mon–Sat 7:00 am – 7:00 pm
Call now

Privacy Policy

This English text is a translation provided for your convenience. The German version is the legally binding one.

This privacy policy explains which personal data we process when you visit our website galabaukurt.de and when you send an enquiry to Gala Bau Kurt, for which purpose and on which legal basis this takes place, and which rights you have under the General Data Protection Regulation (GDPR; in German: Datenschutz-Grundverordnung, DSGVO).

1. Data controller

The controller within the meaning of the GDPR and of other data protection legislation is:

Gala Bau Kurt – Garten- und Landschaftsbau (garden and landscape construction)
Owner: [First name Surname]
[Street and house number]
[Postcode Town]
Germany

Phone: +49 174 6150689
E-mail: gala.bau.kurt@web.de
Website: https://galabaukurt.de

Further mandatory company details can be found in our imprint (Impressum).

Our business is not legally required to appoint a data protection officer (Datenschutzbeauftragter), and none has therefore been appointed. Please address all data protection matters directly to the contact details given above.

2. Principles and overview

Under Art. 4 No. 1 GDPR, personal data means all information relating to an identified or identifiable natural person – for example your name, postal address, telephone number, e-mail address, details of your property or the IP address of your connection. We process such data exclusively within the limits set by law, only for the purposes named in this policy and only for as long as those purposes require. Your data is never sold and is never passed on to third parties for advertising purposes.

Our website is a purely informational, statically delivered website. Personal data therefore arises in two cases only: firstly for technical reasons when the pages are called up (server log files, see section 3), and secondly when you contact us yourself – by e-mail, by telephone or via WhatsApp (sections 5 and 6). Beyond that we use no cookies, no analytics or tracking tools, no external fonts, no embedded map or video services and no social media plug-ins (section 4).

3. Hosting and server log files

Our website is hosted by an external service provider: [Hosting provider, legal form], [Street and house number], [Postcode Town], [Country]. The provider supplies the server, storage and security infrastructure and processes the data arising in the course of this exclusively on our behalf and in accordance with our instructions. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. The servers are located within the European Union; no transfer to a third country takes place in connection with the hosting.

Each time one of our pages is called up, the web server automatically collects data that your browser transmits and that is stored in what are known as server log files. The following is recorded:

  • the IP address of the requesting device (shortened where applicable),
  • the date and time of access,
  • the name and URL of the file or page retrieved,
  • the volume of data transferred and the HTTP status code,
  • the page visited previously (referrer URL), where transmitted,
  • the browser used, its version and the operating system,
  • the language setting.

The purposes of this processing are the technical delivery of the website, ensuring trouble-free operation, the analysis of faults and IT security, in particular the detection and prevention of attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure, stable and fully functioning presentation of our website. This data is not merged with other data sources and is not evaluated for marketing purposes; individual visitors are not identified.

The log files are deleted automatically after [7–14 days]. They are stored for a longer period only where a specific security incident or a suspicion of misuse makes this necessary; in such a case the records concerned are kept until the incident has been finally clarified.

4. No cookies, no tracking, no external services

We do not use cookies on this website, nor do we use comparable technologies such as local storage or session storage for analytics or recognition purposes. No information is stored on your terminal equipment or read from it that would require consent under § 25 (1) TDDDG. For this reason we do not need a consent or cookie banner. Your choice of language (German, Turkish or English – we are happy to advise you in English) is reflected solely in the address path of the respective page and is not stored on your device.

The following are likewise not used:

  • web analytics and statistics services (e.g. Google Analytics, Matomo) as well as advertising or conversion tracking (e.g. the Meta pixel, Google Ads),
  • external fonts: all typefaces are delivered from our own server; no connection is made to Google Fonts or to other font servers,
  • embedded map services: the overview map of our service area is a graphic we produced ourselves, with no connection to Google Maps or other map providers,
  • embedded videos, social media plug-ins, like buttons, chat widgets, review widgets or captcha services such as Google reCAPTCHA,
  • third-party content delivery networks for scripts, images or stylesheets.

Should we integrate services in future that set cookies or transmit data to third parties, we will amend this privacy policy beforehand and – where required – obtain your consent pursuant to Art. 6(1)(a) GDPR and § 25 (1) TDDDG.

5. Contacting us by e-mail and telephone

If you contact us by e-mail (address or “mailto” link) or by telephone (number or “tel” link), we process the details you provide in order to answer your enquiry, arrange a free on-site visit and prepare a fixed-price quote for you. These details typically include your name, your telephone number and e-mail address, the address or location of the property, information about the service you would like and any photos or plans of your garden that you send us voluntarily.

The legal basis is Art. 6(1)(b) GDPR in so far as your enquiry is directed towards the conclusion or performance of a contract (pre-contractual measures), and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in answering enquiries addressed to our business.

Our e-mail account is held with a German provider (WEB.DE, 1&1 Mail & Media GmbH, Brauerstraße 48, 76135 Karlsruhe). Please note that the transmission of unencrypted e-mail over the internet is not fully protected against being read by third parties; please therefore do not send us particularly sensitive information by e-mail. If you contact us by telephone, we note down only those details required to deal with your request; calls are not recorded.

6. Contacting us via WhatsApp (click-to-chat)

On our website you will find buttons and links labelled “WhatsApp” that point to the address wa.me/491746150689. These are simple links (click-to-chat): merely calling up our pages transmits no data to WhatsApp or Meta, and no program code belonging to these providers is loaded on our website. Only when you actively click the link do you leave our website, whereupon WhatsApp opens on your device or in your browser.

For users in the European Economic Area, the service is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company belonging to the Meta group. You can find WhatsApp’s privacy terms at whatsapp.com/legal/privacy-policy-eea.

If you write to us via WhatsApp, WhatsApp processes your mobile number, your profile name and your profile picture as well as usage and connection data in accordance with its own terms and on its own responsibility; the message contents themselves are end-to-end encrypted. In this context, data may be transferred to Meta Platforms, Inc. in the USA and to further third countries. The transfer is based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework or on standard contractual clauses pursuant to Art. 46(2)(c) GDPR. We have no influence on the scope of this processing.

We ourselves process the content of the chat – as a rule your name, your telephone number, the description of the project and any photos you send – exclusively in order to answer your enquiry, arrange appointments and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (initiating and performing a contract) as well as Art. 6(1)(f) GDPR (legitimate interest in fast communication, which many customers expressly ask for).

Using WhatsApp is expressly voluntary. If you would like to avoid the processing of your data by WhatsApp Ireland Limited and the associated transfer to a third country, you can reach us just as easily at any time by telephone on +49 174 6150689, by e-mail at gala.bau.kurt@web.de. We delete chat histories as soon as your request has been dealt with; details relevant to a quote or an order are transferred into our order documents and treated in accordance with section 7.

7. Customer and order data

If a contract is concluded between you and us, we process your master data (name, postal address, telephone number, e-mail address), the property and measurement data of your plot, quotations, orders and records of the work carried out as well as payment and invoice data. This processing serves the performance of the contract, invoicing, the handling of warranty claims and compliance with our obligations under tax and commercial law. The legal basis is Art. 6(1)(b) GDPR as well as – for retention and accounting – Art. 6(1)(c) GDPR.

Photos taken during the works for documentation purposes are initially used internally only. Project photos are published on our website or on social networks exclusively with your prior consent pursuant to Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

8. Recipients of your data and transfers to third countries

Within our business, your data is made accessible only to those persons who need it in order to deal with your request. The only external recipients are:

  • our hosting provider acting as a processor (section 3),
  • our e-mail provider and, where applicable, the form service provider (sections 5 and 6),
  • WhatsApp Ireland Limited, if you contact us via WhatsApp (section 6),
  • our tax adviser’s office as well as our bank in connection with invoicing,
  • subcontractors, suppliers or waste disposal firms, in so far as they are involved in carrying out your order and need the data for that purpose,
  • public authorities and courts, in so far as we are legally obliged to disclose data.

Personal data is transferred to countries outside the European Union or the European Economic Area only within the framework of communication that you initiate yourself via WhatsApp (see section 6). Hosting, the e-mail account and all other processing take place within the EU or the EEA.

Our website contains links to external offerings, in particular to WhatsApp and, where applicable, to trade or review portals or to profiles on social networks. When you click such a link you leave our website; from that point on, the respective provider alone is responsible for the processing of your data. Content belonging to these providers is not embedded in our pages, so no data is transmitted to them before you click. We have no influence on the design or the data protection practices of linked websites; please consult the terms that apply there.

10. SSL/TLS encryption

For security reasons and in order to protect the transmission of confidential content – such as the enquiries you send us – this website uses encryption to the SSL/TLS standard. You can recognise an encrypted connection by the fact that your browser’s address bar begins with “https://” and displays a padlock symbol. When encryption is active, the data you transmit to us cannot readily be read by third parties.

11. Storage periods and statutory retention obligations

We store personal data only for as long as is necessary for the respective purpose or as long as statutory retention obligations provide. In detail:

  • server log files: automatic deletion after [7–14 days] (section 3),
  • enquiries that are not followed by an order: deleted as soon as the matter has been finally clarified and no further questions are to be expected, at the latest, however, after six months,
  • quotations, order confirmations and other commercial and business letters: six years,
  • invoices, accounting vouchers and tax-relevant documents: eight or ten years respectively.

The retention periods follow from § 147 of the German Fiscal Code (Abgabenordnung, AO) and § 257 of the German Commercial Code (Handelsgesetzbuch, HGB); in each case they begin at the end of the calendar year in which the document was created. For the duration of the retention period we restrict the processing of this data: it is kept solely in order to fulfil the statutory obligations and is no longer used for other purposes. Once the periods have expired, the data is deleted or the documents are destroyed in a data-protection-compliant manner.

12. Your rights as a data subject

You have the following rights with regard to the personal data relating to you:

  • Access (Art. 15 GDPR): you may request information as to whether and which data we process about you, and receive a copy of that data.
  • Rectification (Art. 16 GDPR): you may request the correction of inaccurate data and the completion of incomplete data.
  • Erasure (Art. 17 GDPR): you may request the deletion of your data, in so far as no statutory retention obligations or other grounds under Art. 17(3) GDPR stand in the way.
  • Restriction of processing (Art. 18 GDPR): under the conditions set out there, you may request that we process your data on a restricted basis only.
  • Data portability (Art. 20 GDPR): you may receive the data you have provided to us on the basis of consent or a contract in a structured, commonly used and machine-readable format, or request its transmission to another controller.
  • Objection (Art. 21 GDPR): in so far as we process your data on the basis of Art. 6(1)(f) GDPR, you may object to that processing at any time on grounds relating to your particular situation. You may object at any time and without giving reasons to processing for the purpose of direct marketing.
  • Withdrawal of consent (Art. 7(3) GDPR): you may withdraw consent given to us – for example for the publication of project photos – at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

An informal message to gala.bau.kurt@web.de or to the postal address given in section 1 is sufficient to exercise your rights; you are welcome to write to us in English. We deal with your request free of charge and, as a rule, within one month. In order to avoid disclosing information to unauthorised third parties, we may ask you for details that allow your enquiry to be allocated beyond doubt.

13. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR. The competent authority is the one at your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW – the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: 0211 38424-0
E-mail: poststelle@ldi.nrw.de
Website: ldi.nrw.de

We would be glad if you approached us directly first – many matters can be resolved quickly and informally.

14. No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place. Quotations, prices and appointments are reviewed and determined by us personally; no scoring or automated assessment of you as a person is carried out.

15. Whether you are obliged to provide data

The provision of your data is required neither by law nor by contract, and you are under no obligation to provide it. Without contact details and without information about your project, however, we cannot answer your enquiry, cannot arrange a free on-site visit and cannot prepare a quote. Apart from the technically necessary server log files, our website itself can be visited without providing any personal data whatsoever.

16. Changes to this privacy policy

We adapt this privacy policy as soon as the legal situation, our working procedures or the technology used on our website changes, for instance when new services are integrated. The version published on this page applies in each case; the date of the last update can be found at the end of this page.

Last updated: 16 August 2026

Call WhatsApp E-mail