☰

PRIVACY POLICY

1. Data Protection at a Glance

General Information

The protection of your personal data is important to us. This Privacy Policy explains how Hepha Construction GmbH collects, processes, and protects personal data when you visit and use this website.

Personal data is any information relating to an identified or identifiable natural person.

We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

2. Controller

Hepha Construction GmbH
Frauenstraße 8
12207 Berlin
Germany

Tel.: +49 3033 024496
Email: info@hepha.de
Managing Director: Sven Müller

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

3. Website Hosting – Squarespace

This website is hosted using Squarespace.

Squarespace provides the technical infrastructure required to operate and deliver this website. When you visit our website, technical information may be processed automatically. This may include:

IP address
Browser type and version
Device information
Operating system
Date and time of access
Referring website
Pages and files requested
Other technical information required for website delivery and security

The processing of this information is necessary to provide a secure, stable, and functional website.

Where applicable, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in the secure and reliable operation of our website.

Squarespace or its service providers may process personal data outside the European Economic Area (EEA). Where required, appropriate safeguards are used to ensure an adequate level of data protection in accordance with the GDPR.

4. Contact Form and Contacting Us

Our website provides a contact form that you can use to contact Hepha Construction GmbH.

When you submit the contact form, we process the information entered into the form in order to respond to and process your inquiry.

Depending on the information you provide, this may include:

Name
Email address
Telephone number
Company or organization
Content of your message
Other information voluntarily provided by you

As the website is operated using Squarespace, information submitted through the contact form may also be processed through Squarespace's technical infrastructure.

If your inquiry relates to a contract or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR.

For general inquiries, processing may be based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries and communicating with customers, potential customers, business partners, and other interested parties.

Where processing is based on your consent, Art. 6(1)(a) GDPR applies.

The same principles apply if you contact us directly by email or telephone.

5. Cookies and Consent

Our website uses cookies and similar technologies.

Cookies are small files stored on your device when you visit a website. Some cookies are technically necessary to ensure the proper operation, security, and functionality of the website.

Other cookies and technologies may be used in connection with external services such as Google Maps.

Technically necessary cookies may be used without consent where permitted by applicable law.

Cookies and technologies that are not technically necessary are used only after the legally required consent has been obtained.

Where processing is based on consent under the GDPR, the legal basis is Art. 6(1)(a) GDPR.

You may withdraw or modify your consent at any time through the cookie settings available on our website.

6. Squarespace Analytics

Our website may use analytics functionality provided by Squarespace to help us understand how visitors use our website and to improve its performance and content.

Depending on the website configuration and your cookie preferences, analytics information may include:

Pages visited
Traffic sources
Browser information
Device information
Date and time of visits
General website usage information

Where analytics technologies require consent under applicable law, they are activated only after you have provided your consent.

Where processing is based on consent, the legal basis is Art. 6(1)(a) GDPR.

7. Google Maps

This website uses Google Maps, a mapping service provided by Google, to display geographical information and locations.

When Google Maps is activated, information may be transmitted to Google. This may include, in particular:

Your IP address
Browser and device information
Information about your interaction with the map
Location-related information, depending on your device and settings

Google may also use cookies or similar technologies in connection with Google Maps.

Google Maps is activated only after you have provided the required consent, where such consent is required by applicable law.

The processing is based on Art. 6(1)(a) GDPR where you have provided consent. You may withdraw your consent at any time through the cookie settings available on our website.

Data may be processed by Google outside the European Union or European Economic Area. Where applicable, international data transfers are protected using mechanisms recognized under applicable data protection law.

8. LinkedIn

Our website contains links to our presence on LinkedIn.

When you click a LinkedIn link, you leave our website and are redirected to LinkedIn. LinkedIn may process personal data when you visit its website, particularly if you are logged into your LinkedIn account.

The data processed by LinkedIn may include your IP address, browser and device information, account information, and information about your interaction with LinkedIn.

If our website uses only a normal external link to LinkedIn, no direct connection to LinkedIn is established merely by visiting our website. Data is transmitted to LinkedIn when you click the relevant link.

The processing of personal data on LinkedIn is primarily governed by LinkedIn's own privacy policies and terms.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

Information submitted through our contact form or by email is generally retained for as long as necessary to process and respond to the relevant inquiry.

Personal data may be retained for a longer period where required by statutory retention obligations or where necessary for the establishment, exercise, or defense of legal claims.

Once the relevant purpose and applicable retention requirements no longer apply, the personal data will be deleted or anonymized.

10. Recipients of Personal Data

We may use external service providers to operate and maintain our website and related technical infrastructure.

Depending on the relevant processing activity, recipients of personal data may include:

Squarespace, as our website platform and hosting provider
Google, in connection with Google Maps
Other technical service providers where necessary for the operation and security of the website

Personal data is disclosed to third parties only where there is a lawful basis for doing so or where we are legally required to disclose the information.

11. International Data Transfers

Some of the service providers used in connection with this website may process personal data outside Germany, the European Union, or the European Economic Area.

Where personal data is transferred internationally, appropriate safeguards are used in accordance with the GDPR.

Depending on the recipient and destination country, these safeguards may include an adequacy decision by the European Commission or appropriate contractual safeguards such as Standard Contractual Clauses.

12. Your Rights Under the GDPR

Under the GDPR, you have various rights regarding the processing of your personal data, subject to the applicable legal requirements.

Right of access – Art. 15 GDPR
Right to rectification – Art. 16 GDPR
Right to erasure – Art. 17 GDPR
Right to restriction of processing – Art. 18 GDPR
Right to data portability – Art. 20 GDPR
Right to object – Art. 21 GDPR
Right to withdraw consent – Art. 7(3) GDPR

If processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

13. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect information transmitted between your browser and our website.

An encrypted connection can generally be recognized by the use of HTTPS in your browser's address bar.

14. Data Security

We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

These measures are reviewed and adapted where appropriate in accordance with technological developments and the risks associated with processing personal data.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy where necessary due to changes to our website, the services we use, or applicable legal requirements.

The current version of this Privacy Policy is available on this website.

Last updated: September 2026