Legal
Privacy policy
1. Controller
Controller responsible for the processing of personal data: YC Trockenbau & Sanierung Proprietor: Yurii Chyzhyk Alfred-Nobel-Straße 51 53879 Euskirchen Germany Email: jurhenbau@gmail.com Phone: +49 1577 4853278
2. Hosting and Netlify Forms
The website is technically provided through Netlify. The contact form “yc-project-enquiry” uses Netlify Forms. Netlify processes submitted form data as the technical hosting and form-processing subprocessor within the website infrastructure operated by FenLivo on YC’s behalf, so that the enquiry can be captured, stored and made available to YC for handling.
Technical provider: Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA; privacy contact: privacy@netlify.com.
Name, phone number and confirmation that the privacy policy has been acknowledged are required. Email address, project location, requested service and message are optional. The separate partner consent is required only when a partner trade is selected. Without the required details, the enquiry cannot be properly handled through the form. Netlify may additionally process technical data such as IP address, time, referrer and user agent.
3. Technical processors and recipients
For the technical operation of the website and the processing of contact forms, YC Trockenbau & Sanierung uses the processor FenLivo, proprietor Vitalii Kostiuk. FenLivo processes personal data solely on behalf of and under the instructions of YC Trockenbau & Sanierung under an agreement pursuant to Art. 28 GDPR. Netlify, Inc. is used as a technical subprocessor for hosting and Netlify Forms. FenLivo does not use YC enquiry data for its own purposes.
4. Purpose, flow and legal bases of enquiries
The flow is: visitor → Netlify Forms technical infrastructure → processing within the technical website operation administered by FenLivo on YC’s behalf → YC Trockenbau & Sanierung receives and manually handles the enquiry. Data are processed to handle the enquiry and communicate afterwards.
Where an enquiry is intended to enter into or prepare a contractual relationship, processing is based on Art. 6(1)(b) GDPR. General business enquiries are processed under Art. 6(1)(f) GDPR. Our legitimate interest is to handle and answer general business enquiries and to communicate with prospective customers and business contacts.
5. Optional disclosure to partner businesses
There is no automatic forwarding to partner businesses. Only where a partner trade is required and you actively give the separate, unticked consent may YC manually share the necessary details with a suitable independent partner business. The legal basis is Art. 6(1)(a) GDPR. Consent may be withdrawn at any time for the future; this does not affect the lawfulness of processing carried out before withdrawal.
6. International data transfers
Processing may take place outside the EU/EEA, including in the USA. Netlify states in its current Data Processing Agreement that relevant transfers to the USA may rely on the EU–U.S. Data Privacy Framework. Where that framework does not apply, Netlify provides for the EU Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914. Netlify may use subprocessors; current subprocessors and safeguards are governed by Netlify’s current legal documentation and DPA. No EU-only storage location is promised.
7. Retention and deletion
Enquiries are kept only as long as needed for handling and subsequent communication, unless statutory retention duties or legitimate interests require longer storage. You may request deletion from the controller; Netlify submissions can additionally be deleted in the responsible Netlify account.
8. Cookies, consent and external content
The website uses Google Analytics 4, a service provided by Google Ireland Limited, with Measurement ID G-L5R3C4YS8F. The purposes are to produce website statistics, analyse use of the website and measure conversions. Google Analytics is loaded only after you actively consent to optional website analytics. The legal basis for the subsequent processing is Article 6(1)(a) GDPR. Consent to the storage of information on your device or access to such information is given under Section 25(1) TDDDG. Before consent, Google Analytics is not loaded and no analytics data is sent through this integration. If you decline, Google Analytics is not loaded. Your choice is stored locally under the key “yc_analytics_consent”. You may withdraw your consent at any time with effect for the future through “Analytics settings”.
After consent, page views and the events configured on the website — “generate_lead”, “phone_click”, “email_click”, “whatsapp_click” and “email_copy” — may be sent to Google Analytics. Contact-form contents — in particular name, phone number, email address and message — are intentionally not sent to Google Analytics. User-provided data collection is disabled.
Google Signals is disabled. Advertising personalisation is disabled for all regions; the confirmed GA4 setting has 0 of 307 regions enabled. In addition, the website configuration sets both “allow_google_signals” and “allow_ad_personalization_signals” to “false”.
GA4 is configured to retain event data for two months and user data for 14 months. The option to reset the user-data retention period on new activity is enabled.
When Google Analytics is used, it cannot be ruled out that data is processed by Google companies or other recipients outside the EU/EEA, particularly in the USA. Whether and on what basis such a transfer takes place in an individual case is governed by the applicable terms and settings of the service. Processing exclusively within the EU/EEA is not guaranteed.
Meta Pixel is not used. Google Maps is not embedded. Social-media services are included only as normal external links; a connection to the provider is made only when you click the link. Technically necessary server logs or hosting-provider mechanisms may nevertheless occur.
9. Other contact channels
If you contact YC by phone, email or WhatsApp, the details you provide are processed to handle your enquiry. Depending on its content, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR; the legitimate interest is to handle and answer general business enquiries and communicate with prospective customers and business contacts.
10. Rights and complaints
Where the statutory requirements are met, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Consent may be withdrawn at any time for the future. You may also lodge a complaint with a data-protection supervisory authority, including the LDI NRW in North Rhine-Westphalia.