Privacy notice

This notice explains what happens to your data when you visit ivoria.de, write to us, call us or apply for a job with us. We have kept it as short as possible and as precise as it needs to be.

The essentials first:

• This website sets no cookies and uses no tracking. That is why you see no cookie banner here.
• Our fonts are served from our own server. Nothing is loaded from third parties when the page opens.
• We process your data in order to deal with your enquiry. We do not sell it and we do not pass it on for advertising.
• Access and erasure are informal: an email to [email protected] is enough.

How we handle your data in general

We process personal data only where there is a legal basis for it. In our case these are Art. 6(1)(b) GDPR (contract or pre-contractual steps), Art. 6(1)(c) GDPR (legal obligation, for example tax retention duties), Art. 6(1)(f) GDPR (legitimate interests) and, exceptionally, Art. 6(1)(a) GDPR (consent) where we want to do something that goes beyond dealing with your enquiry.

We collect only the data we actually need for the purpose at hand. Providing your data is voluntary; without a way to reach you we cannot reply, and without details of the property we cannot prepare the site visit.

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. We do not score you and we do not build interest profiles.

We share your data only with service providers acting as our processors (see the sections on hosting and email), with tax or legal advisers where necessary, and with public authorities where we are legally obliged to. We never share it for advertising purposes.

Contact form and callback form

When you write to us through the contact form or request a callback, we process the details you enter: your name, your email address or phone number and — depending on the form and on what you choose to give us — company, type of property, floor area, desired frequency, preferred time for the call and your message.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR, since we have a legitimate interest in answering business enquiries.

We deliberately do not ask for consent here. You will find no tick box saying „I agree to the privacy policy“. Consent would be the wrong instrument: the processing is necessary in order to deal with your enquiry, and consent that you cannot withhold without losing the reply would not be freely given and therefore would not be valid. A privacy notice is information, not a declaration to be signed. You may object at any time under Art. 21 GDPR to processing we base on legitimate interests.

Only your name and one way of reaching you — an email address or a phone number — are mandatory. Every other field is optional; it simply helps us prepare the site visit and keep it short. Please do not send special categories of personal data within the meaning of Art. 9 GDPR, such as health data, through these forms.

After submitting you receive a confirmation by email so that you know your enquiry has arrived. The enquiry itself reaches us as an email; we run no customer database on this website.

Introducing your company

If you introduce yourself as a cleaning company or self-employed specialist through the form on our partner companies page or by email, we process your details solely to assess possible cooperation. The legal basis is Art. 6(1)(b) GDPR, as this concerns the initiation of a contractual relationship at your request.

The form does not accept file attachments. Please send documents such as your trade registration, liability policy or clearance certificates by email or post once we have discussed a specific property. Only the people involved in the decision have access.

If no cooperation results, we delete your details six months after the last contact. If you would like us to keep you on file for future properties, just say so — we do that only with your express consent under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

If cooperation does result, the retention periods of commercial and tax law apply to the contract and billing records.

WhatsApp Business

We offer WhatsApp as a contact channel because many customers use it anyway. If you message us there, we process your mobile number, your profile name and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and otherwise Art. 6(1)(f) GDPR.

Using this channel means data flow to Meta. WhatsApp is provided in the European Economic Area by WhatsApp Ireland Limited, part of the Meta group. It receives at least the metadata of your communication — numbers, timestamps, device and connection data — and processes them for its own purposes too. We have no influence over this. The message content itself is, according to the provider, end-to-end encrypted. Further details are set out in the WhatsApp privacy policy.

The channel is entirely optional. Phone and email are equally available, lead to the same result and are handled just as quickly. Nobody is at a disadvantage for choosing not to use WhatsApp.

Please do not send health data or other sensitive material via WhatsApp. We delete message histories on our devices once the matter is closed and no retention obligation applies.

Hosting

This website is hosted with Railway. The application runs on servers in the European Union (Europe West region, Netherlands). The platform is operated by Railway Corporation, based in the United States. It acts as our processor under Art. 28 GDPR; for any third-country access, the European Commission's standard contractual clauses under Art. 46(2)(c) GDPR apply.

The host processes the data arising from running the website, in particular the server log files described above. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure, fast and reliably available website.

We run no customer or enquiry database on this website. Form submissions leave the server immediately as an email and are not stored there.

No cookies, no tracking

This website sets no cookies. There are no analytics or marketing tools: no Google Analytics, no tracking pixels, no fingerprinting, no remarketing lists, no consent management platform.

That is why there is no cookie banner here. Consent under § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is required only where information is stored on or read from your device that is not strictly necessary for the service you asked for. We do none of that — and a banner that asks nothing would be an annoyance without a purpose.

We learn how many people visit our pages from the server log files and, for the search results we appear in, from Google Search Console. We carry out no personal analysis of individual visitors.

Your rights

You have the following rights in relation to us:

• Access to whether and what data we process about you, for what purpose and for how long (Art. 15 GDPR)
• Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
• Erasure, unless a retention obligation stands in the way (Art. 17 GDPR)
• Restriction of processing, for instance while we verify the accuracy of your data (Art. 18 GDPR)
• Data portability in a common, machine-readable format (Art. 20 GDPR)
• Objection to any processing we base on legitimate interests (Art. 21 GDPR)

We communicate rectifications, erasures and restrictions to every recipient the data were disclosed to, where this is required under Art. 19 GDPR and not impossible.

Where you have given consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal is unaffected.

An informal message to [email protected] is enough; no particular wording is needed. We reply within one month and this costs you nothing. If we have doubts about your identity we will ask before disclosing anything — that protects your data from other people.

Encryption

For security reasons this website uses TLS encryption. You can recognise it by „https://“ in your browser's address bar and by the padlock symbol beside it.

While the encryption is active, the data you send us cannot readily be read by third parties. We also protect our systems with appropriate technical and organisational measures under Art. 32 GDPR against loss, destruction and unauthorised access. Nobody can guarantee complete protection for data transmitted over the internet.