Privacy Policy

The protection of your personal data is an important concern for us. Below, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of your data when using our website berghaus.house, the customer portal my.berghaus.house, and all other subdomains.

1. Controller

Controller within the meaning of the GDPR:

Contact for data protection in Germany:

For data protection inquiries, you can contact either the controller or our German contact partner. Isella Deutschland GmbH, as the service partner of the controller, is also your contact for data protection matters in the German-speaking region.

2. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website, our content, and services. The processing of personal data is generally carried out only with the consent of the user or when processing is permitted by law.

3. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

• Art. 6(1)(a) GDPR — Consent (e.g. for cookies, newsletter)
• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures (e.g. quote request, purchase contract, customer portal)
• Art. 6(1)(c) GDPR — Legal obligation (e.g. retention obligations)
• Art. 6(1)(f) GDPR — Legitimate interest (e.g. website analytics, IT security)

4. Provision of the Website and Server Log Files

Each time our website is accessed, our system automatically collects the following data and information:

• Browser type and version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing computer
• IP address
• Date and time of access

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the smooth operation of the website and improving our offering.

Storage duration: Log files are automatically deleted after 30 days.

Hosting: This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes the above-mentioned data on our behalf. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded. Data transfer to the USA is based on the EU-US Data Privacy Framework.

5. Cookies and Consent

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system.

a) Technically Necessary Cookies

These cookies are required for the operation of the website. They enable basic functions such as page navigation and access to protected areas of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

b) Analytics and Marketing Cookies

If we use analytics or marketing cookies, we obtain your consent in advance via our cookie consent banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can revoke your consent at any time with future effect by accessing the cookie settings on our website.

6. Contact Form and Email Contact

If you contact us via the contact form or by email, the data you provide (name, email address, phone number, message) will be stored for the purpose of processing your inquiry and in case of follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).

Storage duration: Your data will be deleted once your inquiry has been fully processed and no statutory retention obligations apply, but no later than after 12 months.

7. Customer Portal (my.berghaus.house)

Our customer portal my.berghaus.house allows registered users to access project-related data. We process the following personal data:

a) Quotation Phase (Prospects)

Name, email address, phone number, address, project specifications and quote versions, access credentials for the password-protected project area.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Storage duration: If no contract is concluded, the data will be automatically deleted after 12 months, unless statutory retention obligations apply.

b) Contract Customers

Contract data (purchase contract, configuration, payment information), project progress and status updates, handover protocol and approval documentation, photos and videos (e.g. during approval, warranty feedback), communication history, warranty and guarantee data.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

Storage duration: Contract-related data is stored for the duration of the contractual relationship and beyond in accordance with statutory retention periods (commercial law 6 years, tax law 10 years from the end of the calendar year of contract conclusion). Warranty-related data is retained until the expiry of the warranty period (up to 10 years).

c) Passwords and Access Credentials

Passwords are stored exclusively as encrypted hash values. Recovery of the password in plain text is not possible.

8. Cooperation between Isella Group (PL) and Isella Deutschland GmbH (DE)

The processing of your data takes place within the framework of the cooperation between the controller (Isella Group Sp. z o.o., Poland) and the service partner (Isella Deutschland GmbH, Germany). Isella Deutschland GmbH processes personal data on behalf of and under the instructions of the controller, in particular for:

• Transport and logistics
• Customer service in the German-speaking region
• On-site service and building regulation support

A data processing agreement pursuant to Art. 28 GDPR exists between both companies. Your data is processed within the European Economic Area (EEA).

If sales partners are engaged, they receive only the data necessary for consulting and mediation on the basis of Art. 6(1)(b) and (f) GDPR.

9. Data Processors and Third-Party Providers

We use the following service providers who process personal data on our behalf:

Contracts pursuant to Art. 28 GDPR have been concluded with all data processors.

10. Transfer to Third Countries

Insofar as we use service providers in countries outside the European Economic Area (EEA), the data transfer is based on an adequacy decision of the EU Commission (e.g. EU-US Data Privacy Framework) or on the basis of standard contractual clauses (Art. 46(2)(c) GDPR).

11. Your Rights as a Data Subject

You have the following rights vis-a-vis the controller regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw given consent (Art. 7(3) GDPR)

The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact: info@berghaus.house

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority in Poland:

Supervisory authority in Germany (alternatively):

You can also contact the German supervisory authority responsible for your place of residence.

13. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services. The current version can always be found on our website.