Privacy policy

1. Controller and contact

The controller responsible for the processing of personal data described in this privacy policy is:

You can use these contact details for questions about data protection or to exercise your rights.

2. Visiting the website and hosting

When you visit our website, technically necessary connection and access data are processed. This includes in particular your IP address, the date and time of access, the requested address or file, the HTTP status, technical information about your browser and operating system and, where applicable, the previously visited page if your browser transmits it. The processing serves to deliver the website, ensure its stability and security, and detect and prevent malfunctions and abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and reliably. Without the data required for the connection, the website cannot be accessed.

Technical development and administration of the website, as well as the organisation of hosting via Vercel, are handled by:

Yuliia Feshchenko (Sauber Zeit) remains responsible for the website and for the processing of personal data.

The website is provided via Volodina Web Studio’s Vercel account; Vercel provides the hosting infrastructure.

The provider of the hosting infrastructure is Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel uses an internationally distributed infrastructure to deliver and protect websites; processing may therefore also take place outside Germany.

Frankfurt am Main is set as the region for server-side executions. This does not mean that all processing takes place exclusively in Germany.

When delivering the website, Vercel may process technical connection and access data in logs, including time, requested address, HTTP status, browser identifier and region; according to Vercel’s privacy notice, IP addresses are also processed. The project logs (“Logs” in the Vercel dashboard) are retained for a maximum of 3 days according to Vercel; the paid Observability Plus extension with longer retention is not enabled for this project. This period applies to the project logs and not automatically to all other operational and security data that Vercel processes to run its infrastructure; Vercel’s retention periods under its privacy notice apply to that data. Vercel Web Analytics and Vercel Speed Insights are not enabled for this website.

To protect the website against attacks and abusive access, for example overload attacks, Vercel applies automatic protection measures (the “System Mitigations” of the Vercel Firewall). Requests are checked for suspicious patterns; security events such as showing a verification page (“Challenge”) or blocking a request may be recorded, including IP address, time, number of requests and requested address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security and availability of the website. The retention period of these security events follows Vercel’s rules for the plan used; the 3-day period stated above for the project logs does not automatically apply to them. Custom firewall rules and Vercel’s optional bot protection feature are not enabled for this website. Logs are not forwarded to external services via Log Drains, and no Vercel integrations are installed.

The website is provided via Vercel on the “Pro” plan. Vercel’s contractual terms apply, including the Data Processing Addendum, in which Vercel undertakes to process personal data on behalf of the customer only on documented instructions. Vercel engages sub-processors and publishes a current list. Vercel states that its processing takes place primarily in the United States and that data may be processed wherever Vercel or its sub-processors operate. For transfers to countries outside the European Economic Area, the Data Processing Addendum contains the European Commission’s standard contractual clauses; Vercel also states that it participates in the EU-U.S. Data Privacy Framework. You can request information on the safeguards relevant to your data and a copy using the contact details above.

Further information from Vercel: Privacy Notice, Data Processing Addendum, Sub-processors.

3. Locally hosted fonts, images and other content

The fonts Montserrat and Bodoni Moda used on the website, as well as our images, before/after photos, icons and preview graphics, are delivered via this website’s infrastructure. No connection to Google Fonts is established to load the fonts. Displaying our images does not require calling any external photo or social media widget.

Retrieving these files involves the technical access data described in section 2. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a consistent and reliable presentation of our website.

4. Cookies, browser storage and reach measurement

We do not use any analytics or advertising trackers, advertising pixels or embedded social media plugins on this website. The website does not use any cookies set by us or any persistent entries in localStorage or sessionStorage. Entries in the enquiry form and temporary interface states are processed in the page’s working memory during use.

This information relates to our website. If you open an external service such as WhatsApp, Google Maps or Facebook via a link, the respective privacy information applies there; other storage and tracking technologies may be used there.

5. Enquiry form and redirect to WhatsApp

Our enquiry form lets you prepare a message for WhatsApp. For this purpose, we process the details you enter: your name, the phone number provided, the requested cleaning service and, where applicable, the desired frequency, your preferred time for a call and your message. Your entries are first processed in the browser. The form does not send any email and does not transmit your enquiry to a form server operated by Sauber Zeit.

Only when you activate the “Send via WhatsApp” button or the corresponding redirect is WhatsApp opened via a wa.me address. This address contains the message you prepared as a URL parameter. As soon as this link is opened, the details contained in the address as well as technical connection data are transmitted to WhatsApp. The actual chat message is only delivered to us once you send it in WhatsApp. Please do not use the form for particularly sensitive information such as health data, access codes or passwords. Alternatively, you can contact us by email or phone.

For people in the European Economic Area, WhatsApp is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp also processes data under its own responsibility in accordance with its terms of service and privacy information. In particular, your phone number, profile and communication data and technical usage data may be processed, including outside the European Economic Area, in particular in the USA. End-to-end encryption of chat messages does not prevent all processing of connection data and metadata.

We use your enquiry to handle your request, to agree on an offer and, where applicable, to prepare or carry out an order. Where your enquiry is aimed at a contract with you, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, processing is based on Art. 6(1)(f) GDPR; our legitimate interest is handling incoming enquiries. Before WhatsApp opens, you confirm in the form that you have read this privacy policy and agree to your details being transmitted to us via WhatsApp; to that extent the processing is additionally based on Art. 6(1)(a) GDPR. Consent can be withdrawn at any time with effect for the future.

Required fields are marked accordingly in the form. Without sufficient contact and order information, we may not be able to handle your enquiry. Using WhatsApp is voluntary; you can also contact us via the other channels mentioned.

The WhatsApp links in the menu, in the contact details and on the floating button also lead to this external service. There too, a connection to WhatsApp is only established when the respective link is opened.

Further information: WhatsApp Privacy Policy for the European Region. The international processing and transfer mechanisms described there must also be taken into account.

6. Contact by email or phone

If you contact us by email or phone, we process your contact details and the information you provide in order to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling your enquiry.

Our published email inbox is provided via Gmail. For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you send us an email, the email service processes in particular sender and recipient addresses, message content, any attachments and technical delivery and security data. Google may also use companies and infrastructure outside the European Economic Area for this. The terms and privacy information applicable to the account used are decisive. Merely linking our email address does not load any Gmail service in the background of our website.

Further information: Google Privacy Policy. Information on the recipients relevant to our processing and any transfer safeguards used is available on request via the contact details above.

7. External links to Google Maps and Facebook

Our website contains links to our Google Maps listing and our Facebook page. No interactive map, Facebook plugin or externally loaded Google review widget is embedded. The review information shown on our website is delivered as part of our own page.

Merely displaying these links does not establish a connection from our website to Google Maps or Facebook. When you open a link, you leave our website. The respective provider receives technical connection data and may process further data under its own terms. If you are logged in, the provider may be able to associate the visit with your account.

The provider of Google Maps in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Facebook is provided to users in the European Economic Area by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Further information: Google Privacy, Facebook Privacy.

8. Storage period and recipients

We store enquiries we receive for as long as necessary to handle them, clarify follow-up questions and, where applicable, carry out an order. Once the purpose no longer applies, the data are deleted unless statutory retention obligations or other legal reasons prevent this. Where data are required to establish, exercise or defend legal claims, they may be retained until this need no longer exists on the basis of Art. 6(1)(f) GDPR.

Documents relevant to contracts and billing may be subject to commercial and tax retention obligations. Where such an obligation exists, retention is based on Art. 6(1)(c) GDPR for the applicable statutory period. This does not mean that other data are stored indefinitely.

The retention periods of technical hosting logs are explained in section 2.

For processing by external services under their own responsibility, their privacy information also applies.

Only those persons and service providers who need the data for the purposes described have access to them. Recipients are in particular the hosting and communication providers described in this policy. Further recipients may be involved where we are legally obliged to do so or where this is necessary to enforce legitimate claims. Your enquiry is not used for newsletters or advertising merely because you contacted us.

9. Data security

The website is provided via an encrypted HTTPS connection. We take appropriate technical and organisational measures to protect personal data. However, complete protection cannot be guaranteed for every form of electronic communication. Please do not send us passwords or unnecessary sensitive information via the form or unencrypted emails.

10. Your rights

Subject to the statutory requirements, you have the right of access to your personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). Where we must inform recipients of a rectification, erasure or restriction, this is governed by Art. 19 GDPR; you can request information about these recipients.

You can withdraw any consent given at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected. A message to the contact details above is sufficient to exercise your rights. We generally respond to requests within one month; the statutory conditions for an extension remain unaffected.

Right to object under Art. 21 GDPR: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to processing for direct marketing at any time without giving particular reasons.

You also have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

For our location in Baden-Württemberg, the following authority can be contacted in particular:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
www.baden-wuerttemberg.datenschutz.de

11. Automated decisions

In connection with this website and the handling of your enquiries, we do not make any decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Art. 22 GDPR. No such profiling takes place.

12. Changes to this privacy policy

We update this privacy policy when the data processing on our website or the relevant legal requirements change.

As of 31 October 2026.