Privacy information

Controller and contact

CFS Cleanwerk24 Facility Services UG (haftungsbeschränkt), Mansfelder Straße 66, 10709 Berlin, Germany. Phone: +49 30 40739784. Email: info@cleanwerk24services.de.

This information applies to the German and English website, including archived versions.

Hosting, access logs and security

The website is hosted on servers operated by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. DOST-IT provides technical support. Requests involve processing the IP address, time, requested address, status, data volume, browser and, where transmitted, referrer information. This supports delivery, troubleshooting and protection against attacks under Article 6(1)(f) GDPR.

The hosting account is configured to retain full access logs for 30 days. The hosting provider handles their cleanup. Server-side access statistics are also generated without an analytics cookie. Previously generated statistical reports are not covered by this log retention period; their continued retention and analysis are being reviewed separately.

Our WordPress website also uses Wordfence to detect and block suspicious access. This may involve IP addresses, requested addresses and security-related events. Security measures serve our legitimate interest in operating a secure website. Necessary backups support recovery after failures and are kept with access restrictions.

Wordfence is provided by Defiant, Inc. (USA). Participation in the Wordfence Security Network is enabled and sends security information about attempted attacks, including IP addresses, to the provider. Defiant makes standard contractual clauses available for international transfers; further information is linked below.

Local privacy settings and cookies

We use our own consent controls hosted on our webspace. Displaying these controls does not contact an external consent provider. They set no cookie before you make a choice. After a choice, cfs_privacy_v1 stores whether Google Maps and website statistics are separately allowed or declined, the decision time and the notice version for up to 180 days. It contains no advertising ID or name.

Storing your privacy choice supports the management of settings you request under section 25(2) TDDDG. To the extent personal data is involved, this serves our legitimate interest in respecting and documenting your choice under Article 6(1)(f) GDPR. If cookies are blocked, your choice applies only to the open page.

Use “Privacy settings” in the footer to change your choice at any time or reset it to “Only necessary”. The website and enquiry routes remain usable without Google Maps and without statistics consent. Login and security cookies for WordPress administration are separate and concern authorised users when signing in.

Google Maps only with consent

The interactive map is optional. Its provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It loads only after your express consent. Google then receives information including your IP address, browser information and map request and may use cookies or similar storage technologies. If you are signed in to Google, Google may associate the visit with your account.

The legal bases are your consent under Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG. Processing by Google companies, including in the USA, is possible. Google's privacy information provides further details on recipients, retention and international transfers.

Withdrawal removes the embedded map and prevents further map loads through our integration. It applies for the future: we cannot retrieve data already sent or delete cookies on Google's domains from our domain. Transfers already in progress may not be stoppable.

Google describes transfer safeguards including Google LLC’s certification under the EU-US Data Privacy Framework and, where required, standard contractual clauses. Details and ways to obtain these safeguards are linked under “Google: international data transfers”.

Fonts, images, reviews and measurement services

Fonts and presentation files are loaded locally from our webspace. Displayed reviews and references are not an automatically loaded Google widget. Google Ads and advertising Tag Manager remain switched off. Agreeing to Google Maps does not enable website statistics. Cookiebot is not used.

Google Analytics only with statistics consent

Only with your separate consent do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It measures page views, successfully sent form enquiries and clicks on our phone, email and WhatsApp links to understand website use and enquiry routes. A contact click does not mean that a conversation or message actually took place. Form errors and resubmissions detected by duplicate-delivery protection are not counted as new enquiries.

Google processes cookie identifiers, device and browser information, language, visited pages and usage events. An IP address is needed for transmission; Google states that Analytics 4 does not store individual IP addresses. We do not send names, email addresses, phone numbers, messages or other form contents to Analytics. URL parameters and fragments are removed from the page and referring addresses we transmit. Google Signals, advertising personalisation and automatic form measurement are switched off.

The legal bases are your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. Without statistics consent, we do not load the Google analytics script or send analytics events, including cookieless measurement pings. The analytics cookies _ga and _ga_XVCZHRQ11K last for up to 180 days. Event and user-identifier retention in the Analytics account is set to two months without automatic renewal; aggregated reports may remain available longer.

You can withdraw consent at any time through “Privacy settings” in the footer. Further measurement then stops and we delete Analytics cookies accessible to the website. Withdrawal does not retrieve data already transmitted. Processing by Google LLC and providers in the USA is possible. Google refers to safeguards including the EU-US Data Privacy Framework and standard contractual clauses for international transfers; information is linked below.

Enquiries by form, email or phone

When you contact us, we process the contact, company and property information and message you provide to handle your enquiry. Article 6(1)(b) GDPR applies to pre-contractual or contractual matters; for other enquiries, Article 6(1)(f) applies to our legitimate interest in responding. Optional information is labelled accordingly. Fields needed to handle the enquiry are marked as required in the form. Without them, we cannot process the form enquiry. You are not obliged to provide these data; alternatively, you can contact us by phone or email.

Enquiries are delivered through WordPress with WP Mail SMTP and TLS-secured SMTP at ALL-INKL to info@cleanwerk24services.de. The recipient mailbox uses Google Workspace.

Technical duplicate-delivery protection temporarily retains a comparison value derived from the enquiry rather than its plain-text contents. This does not create an advertising profile. Messages are retained for as long as handling the enquiry and any resulting contract requires, subject to applicable statutory retention duties. Data no longer needed is deleted unless such duties or legitimate evidentiary interests require retention.

The website forms send real enquiries to CFS Cleanwerk24 Facility Services by email using the delivery route described above. This integration does not save form contents as entries in the website database. To prevent misuse, it temporarily stores keyed hashes derived from the enquiry and IP address, together with technical counters. These are valid for no more than one hour; expired values are removed by automatic cleanup. No additional browser cookies or external CAPTCHA services are used for this.

Email processing through Google Workspace may also involve international transfers to Google companies and their service providers. Google’s information on transfer safeguards is linked below.

External links and WhatsApp

Links to Google, LinkedIn, Instagram or WhatsApp open the respective provider's services, where connection data may be processed upon access. Messages through WhatsApp are also subject to the terms and privacy information of WhatsApp Ireland Limited. You can alternatively contact us by phone or email. External links are not automatically embedded chat or social-media widgets.

Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent for the future without affecting the lawfulness of processing already carried out.

You may complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. Contact us using the details above to exercise your rights. We do not use your enquiry information to make a solely automated decision about a contract with you.