Privacy policy.

We take the protection of your personal data very seriously. This privacy policy explains what personal data we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

Rheindorf, Wegmann & Hack GbR, Hegebachweg 16, 53902 Bad Münstereifel
Email: info@brutalismcologne.com

2. Personal Data We Collect

We only process personal data that you voluntarily provide to us when you:

  1. Use our contact form

  2. Subscribe to our newsletter

We do not collect or process personal data automatically beyond what is technically necessary for operating the website (e.g., IP address in server logs).

3. Contact Form

If you contact us via the contact form, we process the data you enter into the form, such as:

  • Name

  • Email address

  • Message content

Purpose: To respond to your inquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in effective communication).

We store your data only for as long as necessary to process your request.

4. Newsletter Subscription

If you choose to subscribe to our newsletter, we collect:

  • Email address

  • Optional information you voluntarily provide

Newsletter registration is always voluntary and requires your explicit consent (double opt-in).

Purpose: To send you newsletters and updates.
Legal basis: Art. 6(1)(a) GDPR (consent).

You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter or by contacting us directly.

5. Data Retention

We store personal data only for as long as necessary:

  • Contact form data: until your inquiry is fully processed.

  • Newsletter data: until you unsubscribe.

Afterward, the data is deleted unless legal retention obligations apply.

6. Disclosure of Data to Third Parties

We do not share your personal data with third parties unless:

  • You have explicitly consented, or

  • We are legally obligated to do so, or

  • We use service providers (e.g., email newsletter providers) who act as data processors under Art. 28 GDPR.

Any such providers are bound by strict contractual obligations to protect your data.

7. Your Rights Under the GDPR

You have the right to:

  • Access your personal data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent at any time (Art. 7 GDPR)

  • Object to processing based on legitimate interests (Art. 21 GDPR)

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

8. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, misuse, loss, or destruction.

9. Changes to This Privacy Policy

We may update this privacy policy to reflect legal or technical changes. The latest version is always available on this website.