1. Controller and contact
BauWerkStadt GmbH
Frühlingstraße 9
55252 Mainz-KastelRepresented by managing director Guntram Norbert Buhl. No data protection officer has been appointed. For data protection questions, contact the company using the following details:
Phone: 0611 / 1884128
Fax: 0611 / 18841289
Email: info@bau-werk-stadt.eu
2. Visiting this website
When the HTML file is opened locally on your device, the website code does not make an automatic network request. If the website is hosted online, the server receives technical connection data, such as your IP address, the requested resource, time of access and browser information, to deliver the page.
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes technical access data to deliver and secure the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interests are reliable availability and protection against misuse.
STRATO states that its hosting data centers are in Germany and that visitor IP addresses are stored for a maximum of seven days to detect and prevent attacks. Access data can include the requested page, access time, browser, referring page and response status.
Depending on the hosting package, STRATO also provides access logs with altered IP addresses or hostnames and aggregated statistics. These are distinct from the seven-day security logs. The statistics can display up to 400 days; this is not a retention period for full IP addresses.
STRATO: Hosting & Datenschutz · STRATO: Logfiles & Statistik
3. Browser language and local storage
The website reads your browser language to select German or US English. No IP-based geolocation is used. If you select DE or EN, that choice is stored on your device under the local-storage key bauwerkstadt-language and read on subsequent visits. The stored value is de or en-US, not a visitor identifier.
This storage serves the language setting you explicitly selected (Section 25(2) no. 2 TDDDG). To the extent personal data is processed, the basis is Article 6(1)(f) GDPR and our interest in providing the requested language. The choice has no automatic expiry and remains until you change it or clear the website data in your browser.
This website sets no cookies and includes no visitor-tracking tools, advertising pixels, external fonts, embedded maps or third-party video players. Images and logos are embedded in the page file. Server-side access logs are described in section 2.
4. Inquiries and the project description
The project form processes the name, email address and message you enter in your browser. It does not submit them to a website server or save them in local storage. Saving the description downloads a text file to your device. Preparing an email passes the description to your email application using a mailto link; you review and send it there. The website cannot confirm that your message was sent or delivered.
Your browser or email application may retain entries or drafts according to its own settings. Downloaded descriptions remain on your device until you delete them. The information is voluntary; without a message and a way to reach you, we may be unable to respond.
If you contact us by email, phone, fax or post, we process your contact details and the content of your inquiry to respond. For a request made by a potential contracting party or an existing contract, the basis is Article 6(1)(b) GDPR. For other inquiries, it is Article 6(1)(f) GDPR, based on our interest in communicating with you and handling your request.
We retain incoming messages, including emails and voicemails, for as long as they are needed to handle your inquiry or contractual relationship or to establish, exercise or defend legal claims. We delete them when these purposes no longer apply, unless statutory retention duties require continued storage. Where retention is required by law, Article 6(1)(c) GDPR applies; use of retained data is limited to the relevant purpose. These criteria also apply to attachments, call records and telephone notes. Provider security logs and locally saved drafts are described separately.
5. Recipients and service providers
Inquiries are handled by the persons at BauWerkStadt responsible for them. Technical providers used for email, telecommunications or hosting may process data within their role. The website code itself does not automatically disclose visitor data to partners or an IP-country service.
Email through STRATO
Our email address is operated through STRATO GmbH at the address above. Email communication involves sender and recipient addresses, message contents, attachments and technical delivery data. STRATO provides mailbox storage and transmission infrastructure as a processor for our hosted email. The purposes, legal bases and retention criteria for our handling of inquiries are set out in section 4.
Telephone service through sipgate
We use sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf, Germany, for telephone service. When you call, telephone numbers, connection time and duration and the communication content are processed to establish and conduct the call. We process the information you give us to handle your inquiry on the legal bases stated in section 4. Viewing this website alone does not establish a connection to sipgate.
For telecommunications provision and its own statutory obligations, sipgate processes data under its own responsibility. Where additional stored communications or cloud functions are processed on our instructions, the relevant processor arrangements apply. sipgate states that its product infrastructure is hosted in Germany. A call being transmitted does not itself mean that an audio recording is stored.
STRATO: Datenschutz · sipgate: Datenschutz · sipgate: Sicherheit
Voicemail
If you leave a voicemail, sipgate stores your audio message and the associated connection data so that we can listen to it and respond. This processing serves the handling of your inquiry on the legal bases described in section 4; the retention and deletion criteria stated there apply. We do not use AI analysis or automated transcription of your communications, and we do not record live telephone conversations. Voicemails you leave are stored messages, not recordings of live calls.
Processing locations and international communication
The providers above identify Germany as the location of their hosting or telephone product infrastructure. Email and telephone communication can also involve the provider of the other participant, including networks abroad for international communication. Infrastructure location alone does not establish the location of every optional integration or subcontracted service.
6. Links to partner websites
Partner logos link to external websites. A connection to the linked site is established when you follow the link, not simply when this page displays a logo. The provider of the destination website is responsible for its own processing. Please consult its privacy information.
7. Your rights
Under the applicable conditions of the GDPR, you may request access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). If processing is based on consent, you may withdraw that consent for the future without affecting the lawfulness of earlier processing. Contact us using the details above.
Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. We will then stop that processing unless compelling overriding grounds or the establishment, exercise or defense of legal claims justify it. You may object to processing for direct marketing at any time.
This website does not carry out automated decisions producing legal or similarly significant effects, and it does not profile visitors.
8. Complaints
You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR, particularly in the country of your habitual residence, workplace or the alleged infringement. For the company location in Mainz-Kastel (Wiesbaden), the Hessian authority is a relevant contact:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
datenschutz.hessen.de
9. Version and changes
Last updated: September 6, 2026. We update this privacy policy when our providers, processing activities or website functions change.