Privacy & Data Protection Policy
Effective Date: January 1, 2026 | Last Updated: February 2026
Depotrankdsh Architectural Living Ltd. ("we", "us", or "our"), operating the web portal depotrankdsh.garden, is committed to safeguarding personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR), the German Federal Data Protection Act (BDSG), and applicable international standards.
1. Data Controller Information
The responsible Data Controller for personal data collected through this platform is:
Depotrankdsh Architectural Living Ltd.
Kastanienallee 34, 10435 Berlin, Germany
Commercial Register: Amtsgericht Charlottenburg, HRB 984211 B
Designated Data Protection Officer (DPO): [email protected]
2. Categories of Data Collected & Processing Purposes
We process personal data only when a lawful legal basis exists under Article 6(1) GDPR:
- Technical Protocol Data: When accessing our architectural repositories, our web servers automatically log HTTP header requests, truncated/anonymized IP addresses, browser user-agent tokens, referring URLs, date/time stamps, and downloaded file names. This data is processed under Art. 6(1)(f) GDPR (Legitimate Interest) to ensure system stability, prevent DDoS attacks, and optimize responsive content rendering.
- Consultation & Form Submissions: If you submit an architectural inquiry or layout request via our contact interface, we collect your full name, email address, property square footage, and project descriptions. This is processed under Art. 6(1)(b) GDPR (Performance of a contract or pre-contractual steps).
- Client Preference Storage: Filter settings (such as 30m², 50m², 75m² space filters) and cookie consent records are stored locally in your browser’s `localStorage` or strictly necessary cookie partitions.
3. Third-Party Processors & Data Transfers
We do not sell, lease, or monetize user data. Personal information is only shared with verified technical sub-processors under strict Data Processing Agreements (DPAs) pursuant to Article 28 GDPR:
- Cloud Infrastructure: High-performance server hosting within the European Economic Area (EEA) equipped with TLS 1.3 encryption at rest and in transit.
- Content Delivery Networks: Cloudflare Inc. for asset caching, web application firewall (WAF) filtering, and edge DDoS protection, utilizing Standard Contractual Clauses (SCCs).
4. Data Subject Rights Under GDPR & CCPA
As a European Union citizen or user residing in applicable jurisdictions, you hold comprehensive rights regarding your personal records:
- Right of Access (Art. 15 GDPR): You may request a verified machine-readable copy of all personal records held in our systems.
- Right to Rectification (Art. 16 GDPR): You have the right to request immediate correction of inaccurate or incomplete records.
- Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may request permanent deletion of your records where retention is no longer legally mandated.
- Right to Restrict Processing (Art. 18 GDPR) & Right to Object (Art. 21 GDPR): You may challenge processing based on legitimate interest at any time.
- Right to Data Portability (Art. 20 GDPR): You may request transmission of your data directly to another architectural service provider in a structured JSON or CSV format.
To exercise any of these rights, submit your request accompanied by proof of identity to [email protected]. Responses will be issued free of charge within 30 calendar days.
5. Data Retention Periods
Server access log files are automatically expunged after 14 calendar days. Contact form inquiries and architectural consultation records are retained for the duration of the active client relationship plus statutory commercial retention periods (typically up to 6 or 10 years pursuant to Section 257 of the German Commercial Code HGB and Section 147 of the German Fiscal Code AO).
6. Right to Lodge a Complaint with Supervisory Authorities
If you believe our data processing infringes European privacy laws, you possess the statutory right to file a formal complaint with the competent supervisory authority:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin, Germany
Phone: +49 (0)30 13889-0 | Website: datenschutz-berlin.de