Privacy policy

Translation for information only: the German version is legally binding (Datenschutzerklärung, in German). If the two versions differ, the German text prevails.

Overview

1. Data protection at a glance

The following is a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please see the full privacy policy below.

Data collection on this website: Data on this website is processed by the website operator. You’ll find the operator’s contact details in the “Data controller” section of this privacy policy or in our legal notice (Impressum). Some of your data is collected when you provide it to us (e.g., data you enter in our contact form or the live chat). Other data is recorded by our IT systems when you visit the website, either automatically or after you give your consent (e.g., technical data such as your web browser, operating system, or the time you accessed the page).

What do we use your data for? Some of the data is collected to ensure that the website works properly. Other data may be used to handle your contact requests, to prepare non-binding quotes, or to analyze how you use the website.

What rights do you have regarding your data? You have the right, at any time and free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have consented to data processing, you can withdraw your consent at any time, effective for the future. In addition, you have the right to lodge a complaint with the competent supervisory authority.

Responsibility

2. Data controller

The controller responsible for data processing on this website is:

Ruiz Büroreinigung Hamburg
Owner: Jonathan Ruiz (sole proprietorship, Einzelunternehmen)
Carl-Petersen-Straße 92b
20535 Hamburg
Germany

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, and the like).

Data protection officer: Because fewer than 20 people in our company are constantly involved in the automated processing of personal data, and none of our processing requires a data protection impact assessment, we are not legally required to appoint a company data protection officer (Section 38 of the German Federal Data Protection Act, BDSG). If you have any questions about data protection, please contact the controller named above directly.

3. General information and mandatory disclosures

Legal bases for processing: Unless this privacy policy names a more specific legal basis, we process personal data on the basis of Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (compliance with legal obligations), or Art. 6(1)(f) GDPR (legitimate interest in operating our website economically, securely, and efficiently). Where we need to access information on your device (e.g., cookies), we do so on the basis of Section 25(1) or (2) TDDDG.

Storage period: Unless this privacy policy states a more specific storage period, we keep your personal data until the purpose for processing it no longer applies. If you submit a legitimate request for deletion or withdraw your consent, we will delete your data unless statutory retention periods require us to keep it (e.g., retention obligations of up to 10 years under commercial or tax law, set out in the German Commercial Code, HGB, or the German Fiscal Code, AO).

Withdrawal of your consent to data processing: Many data processing operations are possible only with your express consent. You can withdraw any consent you have already given at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

Right to object to data collection in special cases (Art. 21 GDPR): If data processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Right to lodge a complaint with the competent supervisory authority: If the GDPR is violated, data subjects have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI) (the Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7. OG, 20459 Hamburg
Phone: 040 428 54-4040 · Email: mailbox@datenschutz.hamburg.de
Website: datenschutz-hamburg.de

Right to data portability: You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or to have it transferred to a third party, in a common, machine-readable format.

Access, correction, and deletion: Within the limits of the applicable law (Articles 15, 16, and 17 GDPR), you have the right, at any time and free of charge, to obtain information about your stored personal data, its origin and recipients, and the purpose of the processing, and, where applicable, to have this data corrected or deleted.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted (Art. 18 GDPR), for example, while the accuracy of disputed data is being checked or if the processing is unlawful.

SSL or TLS encryption: For security reasons and to protect the transmission of confidential content, such as inquiries or orders you send to us as the site operator, this site uses SSL or TLS encryption. You can tell that a connection is encrypted when your browser’s address bar changes from “http://” to “https://” and shows a padlock icon.

4. Data collection on this website

Server log files: Your browser automatically transmits certain information to us, and our hosting provider automatically collects and stores it in what are known as server log files. This information consists of:

• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer / IP address
• Time of the server request
• HTTP status code and amount of data transferred

We do not combine this data with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that its website displays without technical errors and remains stable and secure — and this requires recording the server log files. The log files are deleted within 14 days unless a security-related incident requires them to be kept longer.

Cookies & consent management (Complianz): Our website uses Complianz consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document that consent in compliance with data protection law. When you visit our website, a Complianz cookie is stored in your browser to record the consent you have given or withdrawn. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 25(2) TDDDG. For details on every cookie we set, including its duration and purpose, see our cookie policy (EU).

Local fonts (Montserrat): To display fonts consistently, this site uses local font files (Montserrat). The fonts are installed locally on our own web server. No connection is made to servers operated by Google or any other third party. Displaying the fonts does not transfer your IP address to external servers.

5. Communication & contact forms

Contacting us by email or phone: If you contact us by email or phone, we store and process your inquiry, including all personal data arising from it (name, contact details, your request, details about office space or cleaning needs), in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures (e.g., preparing a quote). In all other cases, the processing is based on our legitimate interest in handling the inquiries we receive effectively (Art. 6(1)(f) GDPR).

Contact form (Fluent Forms): If you send us an inquiry via our contact form, we store the information you enter in the form, including the contact details you provide there, in order to process your inquiry and in case of follow-up questions. We do not share this data without your consent. This data is processed on the basis of Art. 6(1)(b) GDPR to carry out pre-contractual measures (price calculation, non-binding written quote within 24 hours, site visit).

Live chat & instant pricing (Boei / Eliza): Our website offers a live chat (“Eliza”) that provides quick quotes and calculates monthly prices instantly. The provider of this service is Boei B.V., Singel 40, 3984NZ Odijk, Netherlands (a European provider subject to the requirements of the GDPR). When you use the chat, the data you enter (e.g., floor area in square meters, preferred cleaning frequency, email address for the quote) and technical connection data are processed. We process this data to carry out pre-contractual measures (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in offering customers fast, easily accessible advice (Art. 6(1)(f) GDPR).

6. Customer reviews & third-party services

Trustindex (Google reviews & Instagram feed): To display verified Google reviews and recent glimpses of our work, we embed components from Trustindex Ltd. To protect your privacy, these components load only when you scroll to the relevant section of the website (lazy loading). When they load, technically necessary connection data (including your IP address) is transmitted to Trustindex’s servers. The legal basis is our legitimate interest in presenting our company in a trustworthy and authentic way (Art. 6(1)(f) GDPR).

Links to social media & external platforms: Our website links to external profiles and platforms (LinkedIn, YouTube, Instagram, TikTok, Apple Podcasts, Spotify, WLW, Trustpilot). These are ordinary links (hyperlinks), not embedded social media plugins that transmit data as soon as the page loads. You leave our website only when you click one of these links; you are then taken to the platform in question, where that provider’s privacy policy applies.

7. Job applications & applicant data

You can apply by email (jobs@bueroreinigung-ruiz.de) for a job in commercial cleaning, such as a minijob (Minijob, a German marginal-employment job) or a part-time or full-time position. If you send us an application, we process the personal data associated with it (e.g., contact and communication data, résumé, references and certificates, notes from job interviews).

Legal basis: The data is processed to establish the employment relationship on the basis of Section 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR. When hiring cleaning staff, we also require a police clearance certificate (Führungszeugnis) and a signed confidentiality agreement (NDA) to protect our law firm and office clients.

Retention of applicant data: If we are unable to offer you a position, we keep your data for no more than six months after the application process ends so that we can defend against legal claims (in particular under the German General Equal Treatment Act, AGG). After that, the data is deleted and any paper documents are destroyed. If your application is successful, your data is transferred to our personnel files for use in the employment relationship.