This is a translation for your convenience. Only the German version is legally binding: Datenschutz (Deutsch)
Privacy policy
Protecting your data matters to us. This website uses no cookies, no tracking and no analytics tools. Fonts and images are loaded directly from our server, not from third parties.
1. Controller
Biru BauOwner: Nidal Biru
Mehringdamm 53
10961 Berlin, Germany
Phone: +49 176 70947673
Email: biruubaunidal@gmail.com
2. Hosting and server logs
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data such as your IP address, date and time, the page requested, browser and operating system in order to deliver the site and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; in addition, a data processing agreement with standard contractual clauses is in place. More information: Cloudflare privacy policy.
3. Contact by phone or email
If you call or write to us, we process your details (e.g. name, phone number, your request) in order to answer your enquiry and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). We delete the data once it is no longer needed, unless statutory retention periods apply (e.g. for quotes and invoices).
4. Enquiry forms and WhatsApp
Our enquiry forms do not store any data or transmit it to our server. When you submit a form, your entries are simply used to prepare a message and WhatsApp is opened. The message is only sent to us once you send it yourself in WhatsApp. The same applies to the WhatsApp buttons.
WhatsApp is a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland (Meta). When you use it, WhatsApp processes your phone number and usage data, among other things; this may involve a transfer to the USA. Meta is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR or your consent through voluntary use (Art. 6(1)(a) GDPR). If you prefer not to use WhatsApp, you can also reach us by phone. More information: WhatsApp privacy policy.
5. Links to Instagram
We link to our profile on Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are simple links; data is only transferred when you click a link and open Instagram. The Instagram privacy policy applies there.
6. Digital assistant
On the home page you can voluntarily use our digital assistant. It answers automatically using artificial intelligence; its answers are non-binding and do not replace a quote or professional advice on site. The assistant is labelled as such.
Your messages, the page language, the section you are viewing and – only if you attach one yourself – a photo are sent to Cloudflare Workers AI to generate the answer (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; certified under the EU-US Data Privacy Framework, data processing agreement with standard contractual clauses). Processing takes place only to generate the respective answer. We do not store conversations or photos on our servers and do not log any content. To prevent misuse, your IP address is counted briefly in memory (request limit) and not stored.
The conversation history is kept only in your browser (sessionStorage) and deleted when you close the tab. The project summary is only sent to us if you send it yourself via WhatsApp (see section 4). Please do not enter sensitive data.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and our legitimate interest in answering enquiries quickly (Art. 6(1)(f) GDPR). Use is voluntary; you can always reach us by phone, email or WhatsApp.
7. Language setting
If you choose a language using the language selector, your choice is stored only locally in your browser (localStorage) so that the site can remember it. It is not transmitted to us or to any third party. You can delete it at any time in your browser settings.
8. Your rights
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. Simply contact us using the details above.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de.
9. Last updated
October 2026. We update this policy whenever the website or the legal situation changes.