Privacy Policy

1. Controller

Controller within the meaning of the General Data Protection Regulation is:

CleaningBox GmbH
Fichtenweg 20
99098 Erfurt
Germany
Email: info@cleaningbox.de

Privacy contact:

Robert Fleischhauer
Phone: 0176-63170225
Email: rf@reinigungsexperten.de

2. Data protection officer

A data protection officer has not been appointed. According to current review, there is no obligation to appoint one pursuant to Art. 37 GDPR or § 38 BDSG.

3. General information on data processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing regularly takes place only with the consent of the user or where a law permits the processing.

Typical legal bases are:

• Art. 6 (1) (a) GDPR – Consent
• Art. 6 (1) (b) GDPR – Contract / pre-contractual measures
• Art. 6 (1) (c) GDPR – Legal obligation
• Art. 6 (1) (f) GDPR – Legitimate interest

4. Hosting and server log files

This website is hosted by Lovable / Cloudflare [VERIFY HOSTING PROVIDER]. When the website is accessed, the hosting provider processes technically necessary access data:

• IP address
• Date and time of access
• Page accessed
• Referrer URL
• Browser type and version
• Operating system
• Hostname of the accessing computer

Legal basis: Art. 6 Abs. 1 lit. f DSGVO. Purpose: security, stability and technical operation of the website. Retention: max. 30 days.

5. Contact by email, phone or contact form

If you contact us by email, phone or via our contact form, the data submitted will be processed to handle your inquiry. The contact form is technically provided via the service provider Web3Forms (c/o Statichunt Technologies); form contents are transmitted via HTTPS to our email address info@cleaningbox.de.

Legal bases: Art. 6 Abs. 1 lit. b DSGVO for contract-related inquiries, Art. 6 Abs. 1 lit. f DSGVO for general inquiries.

The data will be deleted as soon as it is no longer required for processing, unless statutory retention obligations apply.

6. Cookies and consent management

We use technically necessary storage (e.g. localStorage) to persistently record your cookie choice. This processing is based on § 25 (2) TDDDG (strictly necessary). Optional cookies as well as statistics, marketing and external media services are only set or loaded after your explicit consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

You can withdraw or change your consent at any time via the "Cookie settings" link in the footer.

Categories:

• Necessary – required for operation of the website
• Statistics – only after consent
• Marketing – only after consent
• External media – only after consent

7. External media – YouTube

Videos from the YouTube platform may be embedded on this website. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We exclusively use the extended privacy mode (youtube-nocookie.com). Videos are only loaded after active consent (two-click solution). When a video starts, YouTube may transfer personal data (e.g. IP address) to Google servers – including in the USA. Legal basis: Art. 6 (1) (a) GDPR. More information at policies.google.com/privacy.

8. Google Fonts

This website currently embeds web fonts from Google Ireland Limited (fonts.googleapis.com / fonts.gstatic.com). When the page loads, your IP address may be transmitted to Google servers. Legal basis: Art. 6 (1) (f) GDPR (consistent presentation of content). [NOTE: Local hosting of the fonts is currently being reviewed to avoid external data transfer.]

9. Analytics and tracking

This website currently does not use any analytics or tracking services such as Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, Hotjar, Microsoft Clarity or Matomo. If tracking services are integrated in the future, activation will take place exclusively after prior consent via the cookie banner.

10. External links – online shop

This website links to our online shop at shop.cleaningbox.de. When you visit the shop, its own privacy policy applies, including the shop, payment and shipping providers used there.

11. CRM and lead processing

Data from contact forms and business inquiries may be processed in a CRM system for handling, follow-up and customer communication. [VERIFY CRM SYSTEM] Legal basis: Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR.

12. Your rights

You have the right at any time to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)
• Objection (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

The competent authority is generally the Thuringian Commissioner for Data Protection and Freedom of Information.

13. Status

Last updated: June 2026.