Privacy Policy & GDPR Compliance Statement

Last updated: January 1, 2026. Effective immediately.

1. Data Controller Identification

The entity responsible for the collection, processing, and protection of personal data under the European General Data Protection Regulation (GDPR - Regulation EU 2016/679) and national data protection laws is:

Zappydoqust Structural Roofing Ltd
Kronenstraße 42, 70174 Stuttgart, Baden-Württemberg, Germany
Company Registration No: HRB 784912 / UK Reg No. 12948201
Data Protection Officer Contact: [email protected]

2. Categories of Personal Data Collected

When you interact with our website, request tenders, or book architectural surveys, we collect and process the following categories of data:

Identity & Contact Information: Full name, company affiliation, email address, direct telephone number, billing and site installation address.
Structural Property Telemetry: Address of property, architectural drawings, roof surface measurements, satellite coordinate data, and building age metrics submitted via forms.
Technical & Browsing Data: Anonymized IP addresses, browser client signatures, operating system, referrer URL, and timestamp logs for server security.

3. Legal Bases for Data Processing

All processing of personal data is carried out strictly under valid legal grounds as specified in Article 6(1) of the GDPR:

Art. 6(1)(b) Contractual Performance: Processing required to prepare itemized roofing tenders, schedule physical site audits, and fulfill construction warranty obligations.
Art. 6(1)(f) Legitimate Interests: Processing necessary to maintain server firewall security, prevent spam submission, and monitor site responsiveness.
Art. 6(1)(a) Explicit Consent: Processing of optional analytical cookies where you have explicitly opted in via our consent mechanism.

4. Data Retention Periods & Security Safeguards

Personal data associated with inquiries that do not result in a contract are retained for a maximum period of six (6) months before permanent erasure. Data associated with executed structural roofing contracts and warranty guarantees is retained for thirty (30) years in accordance with statutory building defect limitation periods and fiscal storage obligations (HGB/AO).

All communications are encrypted in transit via TLS 1.3 encryption protocols. Server infrastructure is housed in ISO 27001-certified European data center facilities with automated access controls.

5. Rights of the Data Subject

Under GDPR and international privacy frameworks, you possess the following actionable rights:

Right of Access (Art. 15 GDPR): Request a copy of all personal data held concerning your identity.
Right to Rectification (Art. 16 GDPR): Request correction of inaccurate property or contact records.
Right to Erasure / "To Be Forgotten" (Art. 17 GDPR): Request deletion of your personal data where statutory retention grounds no longer apply.
Right to Data Portability (Art. 20 GDPR): Receive your structural project telemetry in a structured, machine-readable format.
Right to Lodge a Complaint: Right to lodge a grievance with a competent European Data Protection Supervisory Authority (e.g. Der Landesbeauftragte für den Datenschutz Baden-Württemberg).