Controller

The controller within the meaning of the GDPR is: Schreider-Baukeramik GmbH, Rüderstr. 4, 26382 Wilhelmshaven, Germany.

Telephone: 04421 / 9646506. E-mail: info@schreider-baukeramik.com. Website: www.schreider-baukeramik.com.

Data protection officer

Data protection officer: Mr Sergej Lastowski, Schreider-Baukeramik GmbH, Rüderstr. 4, 26382 Wilhelmshaven, Germany.

Telephone: 04421 / 9646506. E-mail: info@schreider-baukeramik.com.

General information

You can generally use this website without providing personal data. Personal data is processed when you contact us voluntarily, use forms, or when technical data is required for secure operation.

Processing is based on the GDPR, the TDDDG, and applicable German data protection law. Absolute security of data transmission on the internet cannot be guaranteed.

Hosting and server log files

This website is hosted by Vercel Inc. When you access the site, technically necessary access data may be processed, such as browser type, operating system, referrer, pages visited, date and time of access, IP address, and similar data.

This data is used to deliver the website correctly and to maintain security and stability. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Data is not merged with other sources unless stated otherwise.

Database and application data

Form data, applications, project inquiries, reviews, and internal administration data are stored in a MongoDB database (MongoDB Atlas or comparable hosting). Processing serves website functionality and handling your requests.

Legal bases depend on the case: Art. 6(1)(a) GDPR (consent), (b) GDPR (contract/pre-contract), or (f) GDPR (legitimate interest in managing requests securely).

Contacting us

If you contact us by e-mail, telephone, or fax, the data you provide will be processed to handle your inquiry and any follow-up questions.

Data is not shared with third parties unless necessary to process the inquiry or required by law.

Project inquiries

If you use the online project inquiry form, we process the data you provide (e.g. name, e-mail, phone, message, language) and optional uploads (PDF or images). Uploads are stored on Vercel Blob (Vercel Inc.).

We send confirmation and notification e-mails via Resend. Processing is for handling your inquiry; you give the required consent in the form. Legal basis: Art. 6(1)(a) and (b) GDPR.

Applications

If you apply via our online form, we process your data (e.g. name, e-mail, phone, message) and your CV (PDF or Word) stored on Vercel Blob.

Internal contacts are notified by e-mail (Resend). If no employment relationship is established, application documents are deleted after the process ends in line with legal requirements, unless retention obligations apply.

Customer reviews

If you submit a review, we process the data you provide (e-mail required; optional name, phone, rating, comment, language). After approval, name (if provided), rating, and comment may be shown publicly; e-mail and phone are not published.

You give the required consent in the form. Legal basis: Art. 6(1)(a) GDPR. We may block e-mail addresses in case of misuse.

E-mail delivery (Resend)

We use Resend for transactional e-mails (confirmations, internal notifications, replies). E-mail addresses and content required for delivery are processed.

Legal basis: Art. 6(1)(b) or (f) GDPR. Transfers to third countries may occur; the provider offers appropriate safeguards (e.g. standard contractual clauses) where required.

Cookies, local storage, and service worker

Optional analytics and advertising measurement (Google Tag Manager / Google Analytics) loads only after you consent via the cookie banner. Until then Google Consent Mode remains denied. Locale detection via locale cookies is disabled.

Technically necessary storage: localStorage for appearance (light/dark), optional build ID, your marketing consent (analytics/advertising), and access tokens for inquiry/review status; sessionStorage for Google Maps embed consent.

A service worker may cache public assets and visited pages. See the Cookie Notice for details.

Web analytics and advertising (optional)

If you consent, we use Google Tag Manager and optionally Google Analytics to evaluate website use (e.g. pages visited, contact clicks, form submissions). Conversion events for Google Ads may be recorded optionally.

Legal basis: Art. 6(1)(a) GDPR and Section 25 TDDDG. You can withdraw consent anytime via “Cookie settings” in the footer. Google privacy policy: https://policies.google.com/privacy

Google Maps

On the contact page you can load an embedded Google Maps map only after explicit consent (two-click solution). When loaded, your browser connects to Google; data such as your IP address may be transmitted to Google.

The address is also available as an external Google Maps link. Legal basis for the embed: Art. 6(1)(a) GDPR (consent) and Section 25 TDDDG. Google privacy policy: https://policies.google.com/privacy

Protected admin area

Authorized staff may sign in to the protected admin area via Google (OAuth). Google account data (e.g. e-mail, name, profile image, Google ID) and session information are processed and stored.

Authorized users may optionally enable web push notifications; push endpoints and cryptographic keys are stored. This processing affects internal users only, not public website visitors.

Processors

We use the following service providers as processors where personal data is processed: Vercel (hosting, blob storage), MongoDB Atlas (database), Resend (e-mail), Google (Maps embed after consent; optional analytics/advertising via Tag Manager after consent; Google OAuth in admin).

Data processing agreements or comparable arrangements are concluded with these providers where legally required.

Data subject rights

Under the GDPR you have rights including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

Please contact info@schreider-baukeramik.com. You may also lodge a complaint with a supervisory authority.

• Access to personal data processed about you
• Rectification of inaccurate or incomplete data
• Erasure or restriction of processing
• Objection to processing based on legitimate interests
• Withdrawal of consent with effect for the future
• Complaint to a competent supervisory authority

Legal bases and retention

Processing is based on Art. 6(1)(a), (b), (c), or (f) GDPR as applicable. Data is stored only as long as necessary for the purpose or as required by law.

No automated decision-making or profiling takes place.