Privacy policy

Draft · please have this legally reviewed before publication.

This English version is provided for information only. The German version is legally binding. Deutsch

1. Controller

DALGA BAU GmbH, Managing Director Necmi Dalga, Spaldingstraße 210, 20097 Hamburg
Phone +49 40 853 70 753 · Email [email protected]

2. Principles

This website does not set cookies, does not use any analytics or marketing services and does not embed any content from Google. Fonts and program libraries are loaded from our own server.

3. Hosting and server logs

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When the site is accessed, technically necessary data is processed (IP address, date and time, page accessed, browser information) in order to deliver the website and protect it against attacks. The legal basis is Art. 6 (1) (f) GDPR. A data processing agreement is in place with Cloudflare; Cloudflare is certified under the EU-US Data Privacy Framework. Further information: cloudflare.com/privacypolicy.

4. Enquiry form

If you send us an enquiry via the form, we process your details (name, company if applicable, email, phone if applicable, project data, message and uploaded files) in order to handle your enquiry and prepare a quotation for you. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR. The data is stored in protected storage at Cloudflare and automatically deleted after 18 months at the latest, unless a contract is concluded or statutory retention obligations apply.

So that we can handle your enquiry promptly, it is also forwarded to our mailbox by email. To send this notification we use the service Resend (Plus Five Five, Inc., USA, resend.com), sending via servers in the EU (Ireland). The form details and uploaded files are transmitted in the process. A data processing agreement is in place with the provider; insofar as a transfer to the USA cannot be ruled out, it takes place on the basis of appropriate safeguards (Art. 46 GDPR, EU standard contractual clauses). The legal basis is Art. 6 (1) (b) and (f) GDPR.

While you are filling in the form, a draft of your entries (without files) is stored exclusively locally in your browser so that nothing is lost. This draft is not transmitted to us and is deleted after submission; you can remove it at any time via your browser settings.

5. Job applications and subcontractors

If you apply via the form on our careers page, we process your details (name, phone, email if provided, desired position, information on experience, languages and driving licence, message and uploaded documents) solely to carry out the application process. The legal basis is Section 26 BDSG in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR.

Your application is stored in a protected storage at Cloudflare and forwarded to our mailbox by email; we use Resend for sending (see section 4). Only the people deciding on the hiring have access. If no employment relationship is established, we delete your data no later than six months after the end of the process; in the Cloudflare storage this happens automatically. If you are hired, the data are transferred to your personnel file.

If you register via our subcontractor page, we process the details of your company and contact person (company, name, phone, email, trades, number of workers, working area, tax/VAT number, message and uploaded certificates) to assess and initiate a cooperation. The legal basis is Art. 6(1)(b) and (f) GDPR. Storage, forwarding and deletion period are the same as for job applications.

6. Spam protection (Cloudflare Turnstile)

To protect against automated requests, we use Cloudflare Turnstile in the final step of the form. Technical data (e.g. IP address, browser and device information) is transmitted to Cloudflare in order to check whether the input comes from a human. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protection against misuse. Turnstile is only loaded once you reach the final step of the form.

7. Contact by email or phone

If you contact us by email or phone, we process your details in order to deal with your request (Art. 6 (1) (b) or (f) GDPR).

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing (Art. 15–21 GDPR). You may withdraw any consent given at any time. You also have the right to lodge a complaint with a data protection supervisory authority; in Hamburg this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information), Ludwig-Erhard-Straße 22, 20459 Hamburg.

Last updated: October 2026