View project
serend.design®

Privacy Policy

In short: We do not annoy you unnecessarily.

serend.design is a brand of Hartmann Contractor KG.

We appreciate your interest in our website. We are even more pleased if you can simply use this website without having to wade through a cookie banner first, as if you had accidentally opened a form at a government office.

The GDPR requires that privacy information be provided in a comprehensible, transparent, and clear manner. We think that is a good thing. That is why we are trying to do exactly that here: No legalese. No wall of text to scare you off. No 37 definitions before you find out what happens to your IP address. Spoiler: As a company, we do not see your IP address.

Our stance on cookies and tracking

We hate cookie banners.

Not because privacy is a nuisance. On the contrary. But because many cookie banners have become the exact opposite of good privacy: loud, intrusive, confusing, and often only there because some tools are running in the background that you might not even need.

Many websites use banners because they believe they have to. Often, however, it is because the website uses unnecessary tracking services, is poorly configured, or collects data that ultimately no one works with in a meaningful way.

We do things differently.

Our website is built to require as little personal data as possible. We do not use tracking cookies, do not create advertising profiles, and do not follow you across the internet. You can simply read, click, and leave. Crazy, we know.

Who is responsible?

The party responsible for this website is:

Hartmann Contractor KG
Paul-Klee-Straße 38
42781 Haan
Germany

Phone: 0202 24 30 26
Email: info@hartmann-contractor.de
Website: https://hartmann-contractor.de

What data is processed when visiting the website

When you visit our website, the server must automatically process certain technical information. Otherwise, it could not display the website to you. Unfortunately, the internet has not yet arrived at telepathy.

This may include:

  • Browser type and version
  • Operating system used
  • Date and time of access
  • Pages accessed
  • Referrer URL (the page you came from)
  • IP address
  • Technical information required for website security

That sounds like more than it is in everyday life. In short: The server technically processes that someone stopped by so that the website works and attacks can be detected. The IP address is also technically part of this—otherwise the internet would be roughly like a parcel service without a delivery address.

Important: As a company, we do not see your IP address and do not evaluate it. The host needs it technically; we have no access to it. No character profile, no purchase intent, no surprisingly accurate guess about your favorite shoes.

Whether and for how long our hosting provider stores technical access data depends on its security and operational processes as well as applicable legal requirements. Should a legitimate authority request information from the host in a legally prescribed procedure, this is not within our direct access.

In short: The host needs technical data for the website to function. We do nothing with it.

Why this data is processed technically

Technical data is processed so that the website functions reliably. This means pages can be loaded, content delivered, and technical attacks detected or averted.

This happens at the level of our hosting provider. As a company, we do not use this access data for our own evaluations. We do not create statistics, user profiles, or marketing segments from it. Not because we have forgotten how to do it—but because we do not want to.

The legal basis is our legitimate interest in the secure and reliable operation of this website in accordance with Art. 6 Para. 1 lit. f GDPR.

In short: Technically necessary. Not curious.

Analysis without digital stalking

We want to know if our website is generally working. For example, whether content is being read and which pages are helpful.

The rule here is: as little as possible, as much as necessary.

We do not use tracking cookies, advertising networks, or services that follow you across different sites. If we evaluate visitor numbers or duration of use, we do so in a data-saving manner and without identifying you as a person.

No shadow profile. No “You looked at a coffee machine yesterday, would you like some insurance to go with it today?”. Just statistics. Calm. Unexcited. The way tracking and privacy should be.

No data transfer to the USA or unnecessary third parties

We do not transfer any visitor data to providers in the USA via this website and do not pass it on to unnecessary third parties.

If we use service providers who are necessary for the operation of the website, we select them carefully and, where necessary, conclude corresponding data processing agreements. This is the part that sounds less romantic but is important.

Contacting us

When you contact us by email or telephone, we process the data you voluntarily provide. This includes, for example, your name, your email address, your telephone number, and the content of your message.

We use this data to respond to your inquiry or to prepare a possible collaboration.

Depending on the content of the inquiry, the legal basis is Art. 6 Para. 1 lit. b GDPR if it concerns pre-contractual or contractual matters, or Art. 6 Para. 1 lit. f GDPR if we have a legitimate interest in responding to your message.

In short: If you write to us, we reply. To do that, we need to know who we are replying to. Privacy can sometimes be very down-to-earth.

How long do we store data?

We store personal data only as long as is necessary for the respective purpose.

Technical server data is only stored as long as it is needed for operation, security, and error analysis. Data from inquiries is stored as long as it is necessary for processing the inquiry, a possible collaboration, or legal retention obligations.

When the purpose no longer applies and there are no legal obligations to the contrary, we delete the data. At that point, it simply is not of interest anymore.

Your rights

You have various rights under the GDPR. And yes, this list is legally important. We still try to explain it without the smoke machine.

You have the right to:

  • Access: You can ask what data we store about you.
  • Rectification: You can have incorrect data corrected.
  • Erasure: You can request that data be deleted, provided there are no legal reasons to the contrary.
  • Restriction of processing: You can request that data not be used further for the time being.
  • Data portability: You can receive certain data in a common format.
  • Objection: You can object to certain types of processing.
  • Withdrawal of consent: If you have given us consent, you can withdraw it at any time.

If you would like to exercise any of these rights, simply write to us at:

info@hartmann-contractor.de

We will get back to you. Without a 14-digit ticket number.

Right to lodge a complaint with a supervisory authority

You also have the right to complain to a data protection supervisory authority if you believe that we are not handling your personal data correctly.

The data protection supervisory authority at your place of residence or our company headquarters, for example, may be responsible.

Automated decisions and profiling

We do not use automated decision-making or profiling. Who on earth does that and thinks something decent comes out of it?!

This means: On this website, no algorithm decides whether you are likable, appear creditworthy, or are secretly a fan of bad cookie banners.

Security

We take technical and organizational measures to protect personal data.

Nevertheless, the following applies: Data transmission on the internet can never be absolutely secure. This is not an excuse, but unfortunately a reality. If you wish to send us particularly confidential information, you can also contact us by other means.

Mandatory text, but please keep it human

This privacy policy is intended to inform, not intimidate.

The GDPR requires comprehensible information. We take that seriously. That is why it does not say here: “The data subject may assert their data protection rights against the controller.”

Instead: You can write to us. We will take care of it.

Back to the home page