Privacy Policy

Privacy Policy

As of: November 2025  

Introduction

We are delighted by your interest in our company. Data protection is of particularly high importance to the management of KVL Bauconsult GmbH and the other companies of the KVL Group.  
‍
Our websites can generally be used without providing personal data. However, if you wish to use special services via our website, processing of personal data may become necessary.  
‍
If processing of personal data is required and there is no statutory basis for this, we generally obtain your consent.

The processing of personal data – e.g. name, address, email address or telephone number of the data subject – always takes place in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection provisions (in particular BDSG and TTDSG).

1. Controller

KVL Bauconsult GmbH
Spichernstraße 2
10777 Berlin, Germany
Phone: +49 30 254107-0
Email: info@kvlgroup.com
Website: www.kvlgroup.com

Person responsible for content pursuant to § 18 para. 2 s. 1 MStV:
Prof. Markus G. Viering
c/o KVL Bauconsult GmbH
Spichernstraße 2, 10777 Berlin

2. Data Protection Officer

Ms Yvonne Gotscha
KVL Bauconsult GmbH
Spichernstraße 2
10777 Berlin
Email: datenschutz@kvlgroup.com
Phone: +49 30 254107-0

3. Collection of general data and information (server log files)

When you access our website, the following data is automatically collected and temporarily stored in so-called log files:
- Browser type and version
- Operating system used
- Referrer URL (previously visited page)
- Subpages accessed
- Date and time of access
- IP address
- Internet service provider of the accessing system

This data is technically necessary to display the website correctly, ensure stability and security, and detect attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Storage period: Log files are stored for a maximum of 30 days and then automatically deleted, unless further retention is required for evidentiary purposes.

4. Cookies and Consent Management

Our website uses cookies and similar technologies. Some are technically necessary, others serve analysis purposes or the display of external content.

The storage or reading of information on your end device takes place pursuant to § 25 TTDSG in conjunction with Art. 6(1)(a) GDPR only with your consent.
Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR.

You can change or revoke your cookie settings at any time via the “Cookie Settings” link at the bottom of the page.  
We ensure that no visual preference (“nudging”) for certain options occurs, so that your consent is given freely and in an informed manner.

5. Use of Cloudflare

For security and performance optimisation, we use services of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare operates a Content Delivery Network (CDN) and provides security services (e.g. DDoS protection).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation).

Data transfers to the USA are based on the EU-US Data Privacy Framework and additionally on the standard contractual clauses of the EU Commission.
Further information: https://www.cloudflare.com/privacypolicy/

6. Use of Google Analytics

Where you have consented, we use the analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to enable analysis of the use of our website. We use IP anonymisation (“anonymizeIP”).

Legal basis: Art. 6(1)(a) GDPR (consent). Revocation: possible at any time via the cookie settings.

Data transfer to the USA is based on the EU-US Data Privacy Framework and the standard contractual clauses.
Storage period: 14 months.
Further information: https://policies.google.com/privacy

7. Social Media Plugins

Our website uses social media plugins from LinkedIn and Instagram.  
These plugins are disabled by default and are only loaded after your explicit consent (Art. 6(1)(a) GDPR) (“2-click solution”).

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy

Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy policy: https://privacycenter.instagram.com/policy

8. Applications and Recruitment Processes

We process personal data of applicants in order to conduct the application process.  
This typically includes contact details, application documents, correspondence and interview notes.

Legal basis:
- Art. 6(1)(b) GDPR (performance of or entry into a contract)
- § 26 BDSG (data processing for employment purposes)
- For voluntary consent (e.g. inclusion in applicant pool): Art. 6(1)(a) GDPR

Storage period: After completion of the application process, data will be deleted no later than six months after the decision, unless another legal basis exists.

9. Contact options (email, forms)

If you contact us via email or forms, we process the data you provide solely to handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR (contractual communication) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication).

10. Rights of the data subject

You have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw your consent (Art. 7(3) GDPR)

To exercise these rights, an informal message to datenschutz@kvlgroup.com is sufficient.

11. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent supervisory authority for KVL Bauconsult GmbH:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de

12. Automated decision-making / Profiling

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.

13. Hosting & CDN

Our website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit our site, Webflow collects IP addresses in server log files, among other things. Webflow is certified under the EU-US Data Privacy Framework. Further information at: https://webflow.com/legal/eu-privacy-policy

14. Changes to this Privacy Policy

We reserve the right to occasionally update this privacy policy to adapt it to changed legal or technical requirements.  
The current version is available at any time at www.kvlgroup.com/datenschutzerklaerung.

© 2026 KVL Bauconsult GmbH