Legal Notice &
Privacy Policy
Legal Notice
Information according to Section 5 of the German Telemedia Act (TMG)
Blackwood Projektbau GmbH
Eisenbahnstraße 1, 79585 Steinen, Germany
Managing Director: Anton Jakobi
Eisenbahnstraße 1, 79585 Steinen, Germany
Managing Director: Anton Jakobi
Contact
Commercial Register
Registered at the District Court of Freiburg im Breisgau
Commercial Register Number: HRB 731832
Commercial Register Number: HRB 731832
VAT ID
VAT identification number according to § 27a of the German Value Added Tax Act (UStG): DE406136033
Responsible according to § 18 para. 2 of the State Media Treaty (MStV) (H3)
Anton Jakobi
Responsible according to § 18 para. 2 of the State Media Treaty (MStV) (H3)
Anton Jakobi
Disclaimer
Despite careful content monitoring, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.
Last updated: September 2025
Last updated: September 2025
Privacy Policy
Protecting your personal data is a priority for us. Below, we inform you about the collection, processing, and use of personal data on our website. This privacy policy complies with the requirements of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications-Digital Services Data Protection Act (TDDDG).
1. Controller
Blackwood Projektbau GmbH Eisenbahnstraße 1 79585 Steinen Germany
Phone: +49 174 6530470 Email: info@bw-bau.de
Phone: +49 174 6530470 Email: info@bw-bau.de
2. Data protection officer
A data protection officer is not required for our company under Art. 37 GDPR. Should this change, we will publish the contact details here.
3. Hosting and data processing
Our website is hosted by an external service provider. Personal data collected on this website is processed on the host's servers. We have entered into a data processing agreement with the provider in accordance with Art. 28 GDPR.
4. SSL/TLS encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser's address bar ("https://") and the lock icon.
5. Server log files
When you visit our website, information is automatically stored in server log files. This includes, in particular:
- IP address
- Browser type and version
- Operating system used
- Date and time of access
Processing is carried out on the basis of Art. 6(1)(f) GDPR to protect our legitimate interest in the technical stability and security of our website. The storage period is generally 30 days.
6. Contact and forms
If you contact us via contact forms, by email, or by phone, we process the data you provide exclusively to handle your inquiry. The legal basis for this is Art. 6(1)(b) GDPR (fulfillment of contract or pre-contractual measures) as well as Art. 6(1)(f) GDPR (legitimate interest in processing your inquiry). Contact inquiries are deleted after 6 months, provided there is no legal retention obligation or a further business relationship is established.
In detail, we collect the following data via our forms:
Contact form (footer): Name, email address, phone number, message, and optional request for a callback. This data is used for direct communication and to respond to your inquiries.
Briefing form ("Start project"): Name, email address, phone number, company name (optional), area in m², project type, desired services, condition of the property (e.g., complete renovation, new construction), desired start date, and optional file attachments (PDF/DWG/JPG/PNG). This comprehensive data is collected to enable a detailed project inquiry and to establish the basis for a potential collaboration. The uploaded files are stored securely and are used exclusively for project processing.
Briefing form ("Start project"): Name, email address, phone number, company name (optional), area in m², project type, desired services, condition of the property (e.g., complete renovation, new construction), desired start date, and optional file attachments (PDF/DWG/JPG/PNG). This comprehensive data is collected to enable a detailed project inquiry and to establish the basis for a potential collaboration. The uploaded files are stored securely and are used exclusively for project processing.
7. Cookies and consent management
Our website uses cookies and similar technologies to ensure website functionality, analyze usage, and support marketing efforts. A detailed description of the cookies used and your management options can be found in our cookie policy. The storage of information on your device or access to information already stored on your device is generally only carried out with your consent in accordance with § 25(1) TDDDG. Exceptions are technically necessary cookies that are essential for the operation of the website (§ 25(2) TDDDG). When you first visit our website, a cookie banner (consent tool) appears, through which you can make your selection and accept or reject certain cookies. You can revoke your consent at any time with effect for the future by adjusting your cookie settings. The legal basis for the processing of personal data via cookies (unless technically necessary) is your consent in accordance with Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.
8. Analysis and tracking tools
We use various analysis and tracking tools to measure and improve the appeal of our website and to optimize our marketing efforts. Unless otherwise stated, these tools are only used with your explicit consent.
Google Analytics
We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to evaluate and improve the use of our website. IP anonymization is activated, meaning your IP address is truncated before being stored. A transfer of data to the USA cannot be ruled out. Google relies on the EU-US Data Privacy Framework (DPF) [1] as well as the EU Commission's Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR. Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).
Google Tag Manager
Google Tag Manager (Google Ireland Limited) is used to manage website tags. It does not process personal data itself and does not set cookies, but it does enable the loading of third-party services that may collect data. Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).
Google Business / Google Maps:
Our website uses Google Maps to display our location and to make it easier to find us. When you visit pages that contain Google Maps, data (including your IP address and location data) is transmitted to Google servers in the USA. Google relies on the EU-US Data Privacy Framework (DPF) [1] as well as the EU Commission's Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR. Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).
9. Newsletter
If you subscribe to our newsletter, we use the double opt-in procedure. Legal basis: your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future. The data stored for this purpose will be deleted no later than after your revocation.
10. Photos, references, and employee images
Project images or photos of individuals published on our website are only used with the consent of the persons concerned. Consent can be revoked at any time.
11. Social media links and pages
On our website, you will find links to our social media profiles (e.g., Facebook, Instagram, LinkedIn). Data is only transferred to the respective providers once you click the link. For Facebook and Instagram pages, the following applies: The processing of insights data takes place under joint controllership in accordance with Art. 26 GDPR.
12. Sharing of data with third parties
Your personal data will only be shared with third parties if:
- if this is necessary for the performance of a contract (Art. 6 (1) (b) GDPR),
- if we are legally obligated to do so (Art. 6 (1) (c) GDPR),
- or if you have given your express consent (Art. 6 (1) (a) GDPR).
13. Legal basis for processing
- Art. 6 (1) (a) GDPR – Consent
- Art. 6 (1) (b) GDPR – Performance of a contract or pre-contractual measures
- Art. 6 (1) (c) GDPR – Legal obligation
- Art. 6 (1) (f) GDPR – Legitimate interest
- Section 25 (1) TDDDG – Consent for storage/access to
- Terminal equipment information
- Section 25 (2) TDDDG – Exceptions to the consent requirement (technically necessary)
14. Data subject rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether relevant personal data is being processed; if this is the case, you have a right of access to this personal data and to further information.
- Right to rectification (Art. 16 GDPR): You have the right to request the immediate rectification of inaccurate personal data. Right to erasure (Art. 17 GDPR): You have the right to request that relevant personal data be erased without undue delay, provided that one of the reasons specified in Art. 17 GDPR applies.
- Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR is met.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance.
- Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Art. 6 (1) (e) or (f) GDPR.
- Right to withdraw consent (Art. 7 (3) GDPR): You have the right to withdraw your consent at any time. As a result, we will no longer be permitted to continue the data processing based on this consent in the future.
Please use the contact details provided above to exercise your rights.
15. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful.
The responsible authority is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany
The responsible authority is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany
16. Data security
We implement technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access. Our measures are regularly reviewed and updated.
17. Storage duration
Your personal data will only be stored for as long as is necessary for the respective purpose or as required by statutory retention periods.
Specifically:
- Contact and briefing requests: 6 months (provided no further business relationship is established)
- Contract data: in accordance with statutory retention periods (6–10 years)
- Newsletter data: until consent is withdrawn
- Server log files: 30 days
The data will be deleted thereafter.
18. Changes to this privacy policy
We reserve the right to update this privacy policy to reflect changes in legal requirements, our processes, or technical adjustments. The current version is available on our website at all times.
References
EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/