- Overview and Data Controller
This Privacy Policy explains how ONOVA Clean GmbH (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit our website www.onovacleangmbh.com and use our routine household cleaning services.
We are committed to safeguarding your personal data in strict compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Data Controller Information
Company Name: ONOVA Clean GmbH
Address: Pappelallee 78/79, 10437 Berlin, Germany
Telephone: +49 15560788604
Email: [email protected]
- Types of Data We Collect
We process personal data that you provide directly to us and data collected automatically when you browse our website:
Contact and Communication Data: Name, postal address, email address, and telephone number provided via our contact or booking inquiry forms.
Service Details: Information regarding your household cleaning requirements, preferred schedules, and property specifications.
Transaction and Payment Data: Details concerning service deposits and payments processed securely via our designated payment service provider, Stripe.
Technical Data: IP address, browser type and version, time zone setting, operating system, and platform data collected automatically via server logs or cookies to ensure website functionality.
- Purpose and Legal Basis for Processing
We process your personal data based on the following legal grounds outlined in the GDPR:
Performance of a Contract (Article 6(1)(b) GDPR): To communicate regarding your cleaning inquiry, establish customized service plans, process deposits, and deliver scheduled household cleaning services.
Legal Obligation (Article 6(1)(c) GDPR): To comply with German and European commercial, tax, and retention obligations (e.g., storage requirements under the German Commercial Code – HGB and Tax Code – AO).
Legitimate Interests (Article 6(1)(f) GDPR): To ensure the security and proper technical operation of our website, prevent misuse, and manage administrative communications.
- Payment Processing via Stripe
To handle financial transactions securely, including service deposits, we utilize Stripe as our payment service provider. When you make a payment, your payment details (such as credit card information or bank details) are transmitted directly to Stripe.
Data Sharing: Stripe processes your payment data as an independent data controller or processor in compliance with international security standards (PCI-DSS).
Policy Reference: For further information regarding Stripe’s privacy practices and data processing terms, please consult Stripe’s privacy policy directly at their official website.
- Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including satisfying legal, accounting, or reporting requirements:
Inquiry and Communication Data: Retained for up to 12 months following the conclusion of our correspondence, provided no formal service contract is established.
Contractual and Transaction Records: In accordance with German commercial and tax laws (Sections 147 AO and 257 HGB), financial records, invoices, and associated contract data are retained for 10 years.
Log Files and Technical Data: Automatically deleted or anonymized after 30 days, unless required longer for investigating security incidents.
- Your Data Protection Rights
Under Chapter III of the GDPR, you possess the following rights regarding your personal data:
Right of Access (Article 15 GDPR): Request confirmation as to whether we process your data and obtain a copy of that data.
Right to Rectification (Article 16 GDPR): Request correction of inaccurate data or completion of incomplete records.
Right to Erasure (Article 17 GDPR): Request the deletion of your personal data under specific statutory conditions.
Right to Restriction of Processing (Article 18 GDPR): Request the limitation of data processing under statutory criteria.
Right to Data Portability (Article 20 GDPR): Receive your data in a structured, commonly used format for transfer to another controller.
Right to Object (Article 21 GDPR): Object to processing based on legitimate interests.
Right to Lodge a Complaint (Article 77 GDPR): File a complaint with a competent European supervisory authority, such as the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
- Data Security
We implement technical and organizational security measures designed to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security procedures are continuously reviewed and updated in alignment with technological advancements and legal standards. - Updates to This Privacy Policy
We reserve the right to modify this Privacy Policy periodically to reflect changes in legal regulations, technical developments, or our business procedures. The current version published on our website shall apply.