Privacy Policy

Unser Handwerk GmbH

Hohendodeleber Straße 4
39110 Magdeburg

Represented by the managing directors Julien Fuchs and Sebastian Engels.

Further details can be found in our Legal Notice .

„Unser Handwerk“ is an online platform where clients award construction projects to subcontractors. The platform is aimed exclusively at companies. In this context, we also process personal data, such as names and contact details of contact persons.

This statement informs you about which data we process, for what purpose and on what legal basis. We rely on the following legal bases of the General Data Protection Regulation (DSGVO):

• Art. 6 Abs. 1 lit. b DSGVO – performance of a contract or pre-contractual measures (e.g. user account, projects, subscription)
• Art. 6 Abs. 1 lit. c DSGVO – rechtliche Verpflichtungen (z. B. steuerliche Aufbewahrungspflichten)
• Art. 6 Abs. 1 lit. f DSGVO – berechtigte Interessen (z. B. sicherer und stabiler Betrieb der Plattform)
• Art. 6 Abs. 1 lit. a DSGVO – your consent, insofar as we obtain such consent

For the storage of information on your terminal device, § 25 of the Telecommunications-Digital-Services-Data-Protection-Act (TDDDG) additionally applies.

Our platform is operated by external service providers. These process data exclusively on our behalf.

In this process, all data that you enter or upload to the platform, as well as technical access data (see section 4), are processed.

The legal basis is Art. 6 Para. 1 lit. b GDPR, insofar as the processing is necessary for the use of the platform, otherwise Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in secure, fast and reliable operation.

We have concluded data processing agreements with the providers in accordance with Art. 28 GDPR. For transfers to third countries, see Section 13.

With every call to the platform, our hosting providers automatically store technical access data in so-called log files:

• IP address
• Date and time of access
• accessed page and referrer URL
• Browser type and version as well as operating system

We need this data to provide the platform technically, to fix errors and to ward off attacks. A consolidation with other data sources does not take place. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. The log files are deleted after a short period, provided they are not required to clarify a security incident.

For security reasons, the platform uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" in the address bar of your browser. Payment data is transmitted exclusively in encrypted form to our payment service provider.

We exclusively use technically necessary cookies and storage techniques. We do not use analysis, tracking or advertising cookies. Therefore, we do not request consent via a cookie banner.

• Login: To ensure you stay logged in, your login status is stored in your browser's local storage.
• Security: Cloudflare sets cookies to detect automated attacks and to manage data traffic.
• Payment: During the payment process, Stripe sets cookies for fraud prevention.

The legal basis is § 25 Para. 2 No. 2 TDDDG, because this storage is strictly necessary for the service requested by you. The subsequent processing is carried out according to Art. 6 Para. 1 lit. b and f GDPR. You can delete or block cookies in your browser; however, individual functions such as login will then not be available.

To use the platform, create a user account for your company. In doing so, we process:

• Company name, legal form, address and country
• Contact person's name, email address, telephone number and website
• Umsatzsteuer-Identifikationsnummer (freiwillig)
• Role as client or subcontractor
• Password (only stored encrypted)

Subcontractors can additionally create a company profile: description, trades, number of employees or gang size, operating radius, free capacities, logo and reference projects with images.

After registration, we will send an email to confirm your address. We use the data to manage your account and facilitate projects. The legal basis is Art. 6 Para. 1 lit. b GDPR. The details marked as "Mandatory" are required for use.

You can change your details at any time in the dashboard and request the deletion of your account by email to info@unser-handwerk.com demand.

Clients post projects with a description, trade, scope, period, construction site address and documents (e.g. PDF, plans, images). Subcontractors submit bids with price, start date, crew size, message and optionally a PDF. Following the award, we document the status of the project (e.g. awarded, completed).

We have deliberately staggered which data can be seen by whom:

Administrators of Unser Handwerk have access to all data, insofar as this is necessary for operation, support and the checking of violations.

The publication and disclosure within the platform is the purpose of the mediation contract. The legal basis is Art. 6 Abs. 1 lit. b DSGVO, additionally Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in a functioning mediation).

After completion of an awarded project, the client and the commissioned subcontractor can rate each other. A rating consists of stars in several criteria and an optional comment.

Reviews only become visible once both parties have submitted a review or 14 days have passed. They appear on the profile of the reviewed company; the reviewed company can reply publicly once. We may hide reviews that violate our terms of use.

Reviews create trust between business partners and are part of our mediation service. The legal basis is Art. 6 Para. 1 lit. b GDPR as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest in transparent information about business partners). You can object to the publication of a review about you (see section 15).

For the project radar and the maps on the project pages, we use map material from OpenStreetMap. The provider is the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

When loading the map, your browser retrieves map tiles directly from OSMF servers. In this process, your IP address is transmitted to the OSMF. Furthermore, we use the OSMF service Nominatim to convert company and site addresses into coordinates. For this purpose, the respective address is transmitted to the OSMF.

On the public map, we only show projects as a circle with a radius of approximately 3 km at a slightly offset position. The exact location is only visible to the parties involved after the award.

After the award, we provide a "Plan route" link. Only when you click on it will Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) open in a new window with the construction site address. Google's privacy policy applies. No data is transferred to Google without a click.

The legal basis is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in a clear presentation of the projects. An adequacy decision by the EU Commission exists for the United Kingdom. Further information: Privacy Policy of the OSMF .

We send emails via the service Resend. Provider is Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Shipping takes place via servers in the EU (Ireland). Your email address, your name and the content of the message are processed.

We send in particular:

• Emails for account confirmation and password reset
• Notifications regarding bids, awards and completed projects
• Reminders of bidding deadlines and open ratings
• a daily overview of new projects that match your trades and your operating radius

You can unsubscribe from reminders and the daily overview in the dashboard under “Notifications” or via the unsubscribe link in every email. To ensure that no email is sent twice, we log the dispatch.

The legal basis is Art. 6 Para. 1 lit. b GDPR, as notifications are part of our brokerage service. We have concluded a data processing agreement with Resend.

For the paid Premium subscription, we use the payment service provider Stripe. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

When completing the subscription, the company name, billing address, email address, VAT identification number and your payment data (e.g. credit card, PayPal or SEPA direct debit) are processed. You enter payment data directly at Stripe; we do not receive full card details. Stripe also calculates the VAT, creates invoices and provides a customer portal where you can manage and cancel your subscription. We receive information from Stripe regarding the status of your subscription and your payments.

The legal basis is Art. 6 Para. 1 lit. b GDPR (performance of contract) as well as Art. 6 Para. 1 lit. c GDPR (tax and commercial law obligations). Stripe processes certain data for fraud prevention under its own responsibility and may transfer data to Stripe, Inc. in the USA. Further information: Stripe Privacy Policy .

If you contact us by email or telephone, we process your details (e.g. name, company, contact details and content of your enquiry) to process your request. The legal basis is Art. 6 para. 1 lit. b GDPR if your enquiry is related to a contract, otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to enquiries). We delete the data as soon as your enquiry has been resolved and there are no conflicting retention obligations.

Some of our service providers are based outside the EU or use subcontractors there. As a result, data may be transmitted to the USA, Singapore or the United Kingdom.

We only transfer data if an appropriate level of data protection is ensured:

• United Kingdom: Adequacy decision of the EU Commission
• USA: Certification of the recipient according to the EU-US Data Privacy Framework, where available, otherwise EU standard contractual clauses
• Singapore: EU Standard Contractual Clauses

You can request copies of the respective guarantees from us.

We only store personal data for as long as is necessary for the respective purpose or as required by law.

You have the following rights against us regarding your personal data:

• Auskunft (Art. 15 DSGVO)
• Berichtigung (Art. 16 DSGVO)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 DSGVO)
• Withdrawal of consent granted with effect for the future (Art. 7 para. 3 GDPR)

Right to object according to Art. 21 GDPR: If we process data on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR), you may object at any time for reasons arising from your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, an email to info@unser-handwerk.com .

You also have the right to complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Leiterstraße 9, 39104 Magdeburg.

Automated decision-making within the meaning of Art. 22 GDPR does not take place.

The use of the contact data published in the imprint for the purpose of sending advertising and information materials not expressly requested is hereby objected to. We reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam emails.

We will adjust this privacy policy if our platform or the legal situation changes. The current version on this page applies.

As of: October 2026