This is a translation for your convenience. Only the German version of this page is legally binding.
1. Controller
A&A GbR, Rüdesheimer Straße 21, 45145 Essen, Germany Phone: +49 157 749 90 881 Email: a.shl@t-online.de
2. Overview
We only process personal data where this is necessary to operate this website and to handle your requests. We do not use analytics or tracking tools, advertising cookies or social media plugins.
3. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, technically necessary data is processed (IP address, date and time, page requested, referrer, browser and operating system) in order to deliver the website and keep it secure.
The legal basis is Art. 6(1)(f) GDPR. We have concluded a data processing agreement with Vercel. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision.
4. Request form
If you send us a request via the form, we process your details (name, phone, email, town, requested service, message and any photos you choose to upload) in order to handle your request and send you a confirmation of receipt.
Emails are sent via the service provider Resend (Resend, Inc., USA). Uploaded photos are stored with Vercel Blob (Vercel Inc., USA) and sent to us as a link. Data processing agreements are in place with both providers; transfers to the USA are based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, and otherwise our legitimate interest in answering requests (Art. 6(1)(f) GDPR). We delete your details and photos as soon as they are no longer needed to handle your request and no statutory retention obligations apply.
5. Contact by phone, email or WhatsApp
If you call us or write an email, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).
If you contact us via WhatsApp, your data is processed by WhatsApp Ireland Limited (Meta), and WhatsApp's privacy policy also applies. The WhatsApp button on this website is a simple link – no data is transferred until you click it.
7. Fonts
The fonts used on this website are hosted locally. No connection to Google or any other provider's servers is made when you visit the website.
8. Map of our service area
Some pages show a map of our service area. Map data, fonts and symbols are loaded entirely from our own server; no connection to third-party map services is made. The map data comes from OpenStreetMap (© OpenStreetMap contributors, ODbL licence) and was prepared with Protomaps.
The “Plan route” link opens Google Maps. Data is only sent to Google when you click the link; from then on, Google’s privacy policy applies.
9. Links to social networks
We link to our profiles on Facebook, Instagram and TikTok with simple links. Data is only transferred to these providers when you click a link.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent you have given at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
11. Encryption
For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.
Last updated: October 2026