Privacy Policy

1. Data Controller

Mutawackil Ahmad
MAMAH – Haus- & Objektservice
Bahnhofstraße 4
92665 Altenstadt a. d. Waldnaab
Germany

Email: service@mamah-service.de
Phone: +49 160 91181151

2. General Information on Data Processing

We process personal data only to the extent necessary to provide this website, handle requests, and communicate with you, or where another legal basis applies.

Personal data is processed in accordance with applicable data protection legislation, particularly the General Data Protection Regulation (GDPR).

3. Hosting and Server Log Files

This website is hosted by Hostinger. Under the current contractual terms for customers in EU countries, the contracting party is HOSTINGER INTERNATIONAL LIMITED, 61 Lordou Vironos str., 6023 Larnaca, Cyprus.

When you access this website, the hosting provider processes technically necessary access data in server log files. This may include, in particular, your IP address, the date and time of access, the requested resource, browser and device information, and other technically necessary connection data.

Where necessary, this data is processed to provide the website securely and reliably, analyze errors, and prevent misuse and security risks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and functional website.

Where Hostinger processes personal data on our behalf, this is governed by a data processing agreement. Hostinger may use subprocessors to provide its services. Where personal data is transferred outside the European Economic Area to countries without an adequacy decision, Hostinger provides appropriate safeguards, particularly the EU Standard Contractual Clauses.

Further information about data protection at Hostinger is available in Hostinger’s Privacy Policy.

4. Request Form and Contact

When you contact us using the request form, we process the data you enter to review and handle your request and agree on the next steps.

The data processed may include, in particular, your selected service category, task description, uploaded photos or files, postal code and town, a preferred appointment date if provided, first and last name, phone number, and your email address if provided.

We process this data to handle your request, assess the scope of services, prepare a quotation or appointment, and take steps prior to entering into a contract. The legal basis is Article 6(1)(b) GDPR.

Information submitted through the form is processed and stored within our website system. It is also sent to us by email so that we can handle your request. Uploaded photos or files may also be technically processed and transmitted in connection with your request.

Please submit only personal data that is necessary to handle your request, particularly when uploading photos or files through the request form.

Information marked as required must be provided for us to handle your request. Without this information, we may be unable to process it. Information marked as optional, particularly your email address, uploaded photos or files, and a preferred appointment date, is voluntary.

We do not carry out automated decision-making, including profiling.

5. Protection Against Automated Submissions

We use a technical honeypot feature to protect our request form against automated submissions, spam, and misuse. This uses a form field that is not relevant to regular users to detect and reject automated submissions.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is to protect our website and request form against spam, misuse, and automated attacks.

No external CAPTCHA service is currently used for this protective feature.

6. Contact by Email, Phone and WhatsApp

When you contact us by email, phone or WhatsApp, we process the personal data you provide to the extent necessary to handle your request and communicate with you. When you contact us via WhatsApp, this includes, in particular, your phone number, your displayed profile name, and the messages and attachments you send us.

If your communication relates to a specific service request, the preparation of a quotation, or an existing contractual relationship, the legal basis for processing is Article 6(1)(b) GDPR.

In other cases, where necessary, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to appropriately handle and respond to incoming inquiries.

We use WhatsApp Business to communicate via WhatsApp. The service provider in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Using this contact method is voluntary. Alternatively, you can contact us through our request form, by email or by phone.

The WhatsApp link on our website is an external link. The linked WhatsApp service is accessed only when you click this link. At that point, technical data such as your IP address and browser information may already be transmitted to the provider.

When you use the service, WhatsApp processes account, device, connection and usage data, among other information, under its own responsibility. This may involve processing outside the European Economic Area, particularly in the United States. WhatsApp’s Privacy Policy describes the mechanisms used for these transfers, including the EU-US Data Privacy Framework and EU Standard Contractual Clauses.

Further information is available in WhatsApp’s Privacy Policy.

The retention period depends on the purpose of the communication and the principles described in the “Data Retention and Deletion” section.

7. Data Retention and Deletion

Form submissions stored in our website system through the request form are generally retained for six months and then deleted, unless statutory retention obligations or other legitimate reasons require longer storage.

IP addresses and, where collected, location information processed by the form system are generally anonymized or deleted after seven days.

Data submitted as part of a request by email or WhatsApp, or required to handle the request, is stored only for as long as necessary to process and document that request. If a request leads to a contractual relationship, data needed to perform the contract, issue invoices or meet statutory retention obligations may be retained for longer in accordance with the applicable statutory periods.

8. Your Rights as a Data Subject

Subject to the applicable legal conditions, you have the right to access information about the processing of your personal data and to have inaccurate or incomplete data rectified. You may also request the erasure of your data or restriction of its processing.

Where the legal conditions are met, you also have the right to data portability and the right to object to the processing of your personal data. This applies particularly to processing based on Article 6(1)(f) GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with a data protection supervisory authority. The following authority is particularly responsible for private-sector organizations in Bavaria:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Email: poststelle@lda.bayern.de
Phone: +49 981 180093-0

The right to lodge a complaint is provided for in Article 77 GDPR.

9. SSL/TLS Encryption

This website uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content.

You can generally recognize an encrypted connection by a website address beginning with “https://” and your browser indicating a secure connection.

Encryption protects the data you submit through this website against unauthorized access during transmission.

10. Cookies and Similar Technologies

With its current technical configuration, this website does not use cookies for analytics, marketing, or advertising purposes during ordinary visits.

This website uses your browser’s session storage. WordPress stores the result of a check to determine whether your browser can correctly display emojis and flags, together with a timestamp, under the key “wpEmojiSettingsSupports”. This avoids repeating the check when you move between pages. This entry is used to display symbols and is not used for analytics, marketing, or advertising purposes. The storage is tied to the respective browser session.

If additional services or functions requiring consent are introduced in the future, the data protection information will be updated accordingly and, where legally required, consent will be obtained before they are used.

11. Recipients and Data Processing on Our Behalf

To provide this website, technically process the request form, and handle incoming requests, personal data may be transmitted to or processed by technical service providers to the extent necessary for the relevant service.

These include, in particular, hosting and email communication providers. Where such providers process personal data on our behalf, this is governed by appropriate data processing agreements in accordance with Article 28 GDPR.

Personal data is disclosed to other third parties only where a legal basis exists, this is necessary to take steps prior to entering into a contract or to perform a contract, a legal obligation applies, or appropriate consent has been given.

12. Updates and Changes to This Privacy Policy

This Privacy Policy reflects the current state of our website and the technical functions currently in use.

We reserve the right to update this Privacy Policy if the technical functions, services used, legal requirements, or nature of data processing change.

Last updated: September 2026