Privacy Policy

Language notice: This translation is provided for the convenience of visitors. If it differs from the German version, the German version is authoritative to the extent permitted by law. This does not restrict any statutory rights. handmen.de/datenschutz

1. Controller

The controller responsible for processing personal data on this website within the meaning of Article 4(7) GDPR is:

Questions about data protection and requests to exercise your rights may be sent to the email address stated above.

2. Principles and legal bases

We process personal data only as necessary to provide the website, process enquiries, take steps before entering into a contract, perform a contract, meet legal obligations or—after consent—measure website reach and usage.

• Article 6(1)(b) GDPR: pre-contractual steps and contract performance at your request.
• Article 6(1)(c) GDPR: compliance with legal obligations.
• Article 6(1)(f) GDPR: legitimate interests in a secure, stable website, business communications and search visibility.
• Article 6(1)(a) GDPR / Section 25(1) TDDDG: voluntary consent to Google Analytics.

3. Hosting through ChatGPT Sites

This website is hosted through ChatGPT Sites by OpenAI. For users in the European Economic Area, the relevant contracting entity is OpenAI Ireland Ltd. OpenAI processes data required for hosting, maintenance, security and support on our behalf.

When the website is accessed, the data processed may include the IP address, date and time, requested URL, referrer, HTTP status, browser and device information, and security logs. The purposes are technical delivery, protection against attacks, troubleshooting and availability. The legal basis is Article 6(1)(f) GDPR.

ChatGPT Sites Terms · ChatGPT Sites Data Processing Addendum

4. Encrypted transmission

The website is delivered through an encrypted HTTPS connection. This protects transmitted content against unauthorised interception in transit, although absolute security cannot be guaranteed.

5. Contact by email

If you contact us by email, we process your sender address, message content, attachments and necessary metadata. The mailbox is provided through Gmail by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing is carried out to answer the enquiry and, where applicable, to take pre-contractual steps or perform a contract under Article 6(1)(b) GDPR. General business communication is also based on Article 6(1)(f) GDPR; statutory retention on Article 6(1)(c) GDPR.

Photographs cannot be uploaded through the website. If sent separately by email, please include only images needed to assess the work and avoid faces, identity documents, nameplates or other unnecessary personal information.

Google Privacy Policy

6. Enquiry forms and Formspree

The enquiry forms use Formspree, a service provided by Formspree, Inc. The technical endpoint is https://formspree.io/f/xpqvyvdv. Form data is sent from your browser to Formspree and forwarded to our Gmail mailbox.

• full name and email address;
• optional telephone number and street/house number;
• postcode, city, selected service, property type and timeframe;
• description, language version, source page, stable service identifiers and submission time;
• technical connection data used for transmission, misuse prevention and troubleshooting.

Required fields are necessary to answer the enquiry. The legal basis is Article 6(1)(b) GDPR and, for security, Article 6(1)(f) GDPR. The checkbox merely confirms that this policy has been read; it is not advertising consent. Names, contact details, addresses and free-text form content are not sent to Google Analytics.

Formspree Privacy Policy

7. Consent management and local storage

On the first visit, the website offers necessary functions and optional analytics. Your choice is stored only in browser local storage under handmen-cookie-consent-v2. Stored values are the consent version, the necessary category, the analytics choice and the timestamp.

This storage is necessary to respect your choice. Device access is based on Section 25(2) no. 2 TDDDG; where personal, processing is based on Article 6(1)(f) GDPR. The entry remains until deletion, reset or a new consent version. You can change your choice through Cookie settings in the footer.

Storage overview

8. Google Analytics 4

With express consent, we use Google Analytics 4 by Google Ireland Limited. The measurement ID is G-ZVCBV59CRD. The Google tag is blocked and loaded only after analytics consent.

Under Google Consent Mode, analytics_storage, ad_storage, ad_user_data and ad_personalization start as denied. Only analytics_storage becomes granted after consent. Google Signals and advertising personalisation are disabled.

Events may include page_view, form_start, generate_lead, quote_request_click, email_click, language_switch, scroll, session_start and user_engagement. The site_language parameter distinguishes German, English, Russian and Ukrainian pages. No personal form content is sent as an Analytics parameter.

Event and user data retention is configured for 14 months. Browser cookies normally last up to two years unless deleted earlier or consent is withdrawn. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Google Business Data Responsibility · Google Privacy Policy · Google Analytics data retention

9. Google Search Console

We use Google Search Console to monitor indexing, technical availability and aggregated search performance. It may report queries, impressions, clicks, average positions, pages, countries, devices and crawling or indexing errors.

Ownership is verified through a DNS TXT record and/or a static verification file. No separate Search Console tracking script is embedded and Search Console sets no additional cookies through this website. The sitemap is https://handmen.de/sitemap.xml. The Search Console property is linked to GA4 for aggregated reports; this does not activate Analytics before consent.

Use of aggregated reports is based on Article 6(1)(f) GDPR: our legitimate interests in technical operation, search accessibility and improvement of the website.

10. Recipients and processors

• OpenAI Ireland Ltd. — hosting, maintenance, security and support;
• Formspree, Inc. — transmission of form enquiries;
• Google Ireland Limited — Gmail, Search Console and, only after consent, Google Analytics 4;
• IT or professional advisers where necessary and contractually protected;
• authorities where disclosure is required by law.

We do not sell personal data or disclose it for independent third-party advertising.

11. Transfers to third countries

Processing by OpenAI, Formspree and Google outside the EU or EEA, particularly in the United States, cannot be ruled out. Where no adequacy decision under Article 45 GDPR applies, transfers rely on appropriate safeguards under Article 46 GDPR, especially the EU Standard Contractual Clauses and supplementary measures where required.

12. Retention periods

We retain personal data only as long as required for its purpose. It is then deleted or anonymised unless statutory duties or legitimate interests, including legal claims, require longer retention.

• Enquiries without a contract: generally no later than 12 months after final handling.
• Contract and accounting records: applicable commercial and tax-law periods.
• Hosting/security logs: only as required for operation, troubleshooting and security.
• Formspree and Gmail: until deletion from the relevant systems, subject to legal duties and provider security logs.
• Google Analytics: 14 months for event/user data; cookies normally up to two years.
• Search Console: according to Google’s current product and account settings; no separate visitor profile is created by this website.

13. Requirement to provide data and automated decisions

Fields marked as required are necessary to assess and answer the enquiry. Without them, the form cannot be processed; email is available as an alternative. No solely automated decision with legal or similarly significant effects under Article 22 GDPR is made, and no advertising profiling takes place.

14. Your rights

• access under Article 15 GDPR;
• rectification under Article 16 GDPR;
• erasure under Article 17 GDPR;
• restriction under Article 18 GDPR;
• data portability under Article 20 GDPR;
• objection under Article 21 GDPR;
• withdrawal of consent with future effect under Article 7(3) GDPR.

Right to object: Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. This website currently conducts no direct marketing based on personal data.

15. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data-protection supervisory authority. The authority particularly relevant for Hesse is:

You may also contact the authority for your habitual residence, place of work or the location of the alleged infringement.

16. Updates to this Privacy Policy

We update this Privacy Policy when the law, service providers or technical configuration changes. The current version is permanently available at handmen.de/en/privacy-policy.

Last updated: 25 July 2026