Privacy policy
Updated: 5 November 2026 · SPACEFACTORY main website
Controller
Spacefactory UG (haftungsbeschränkt), represented by Peter Grunwald
Business Tower, Seligenstädter Straße 107
63073 Offenbach am Main, Germany
Email: spacefactory25@gmail.com · Phone: +49 176 87318717
Hosting and technical operation
This website is provided through ChatGPT Sites. For EEA customers, the contractual hosting provider is OpenAI Ireland Ltd. The technical infrastructure includes Cloudflare for delivery and security and Cloudflare D1 for the enquiry database. Connection data such as IP address, time, requested URL, referrer and browser information are processed for delivery, troubleshooting and security. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in secure operation. The platform may provide technical usage data and aggregated page-view statistics. The public website can be visited without signing in. The protected internal enquiry area requires sign-in with the hosting provider, which processes the necessary account and session data.
Hosting and infrastructure providers receive data as needed for their services. Processing on our behalf is subject to the applicable data processing terms under Article 28 GDPR. Operational data is processed for as long as necessary for delivery, security and troubleshooting. Information: OpenAI data processing terms, OpenAI privacy policy and Cloudflare privacy policy.
Project enquiries and contact
We process your name, email address, phone number, property postcode and details about the project, property type, your role, timeframe and any optional project and budget information. An internal enquiry ID and submission time are added. We use these details to handle your enquiry and prepare a potential engagement under Article 6(1)(b) GDPR. Where you enquire for another person or organisation, the basis is Article 6(1)(f) GDPR and our legitimate interest in responding to business enquiries.
Details are stored in the website’s Cloudflare D1 database and are not publicly visible. The internal enquiry area is restricted to the owner. Form details are also transmitted through a protected server-side request to Google Apps Script and sent to our mailbox spacefactory25@gmail.com. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose and legal basis are the enquiry handling described above. Information: https://policies.google.com/privacy. The service can send email but cannot read our mailbox. Technical enquiry IDs, without form content, are retained for duplicate prevention for up to 30 days and cleaned up on the next successful send. If email delivery fails, the enquiry remains stored in the database. Google services may process data outside the EEA as described under international transfers. Required fields are necessary to submit the form; you can alternatively contact us directly by phone or email. Providing data is voluntary and is not a statutory obligation. Optional project and budget details help us understand the project and are not a condition for initial contact. Enquiries are not automatically passed to specialist contractors.
Records older than 180 days are deleted from the website database when the next form submission is received. This is not a scheduled daily deletion. Subsequent correspondence is retained for handling the enquiry and, where necessary, statutory retention or legal claims, on the basis of Article 6(1)(c) or (f) GDPR, restricted to those purposes. The same purposes apply to direct phone and email enquiries. Email providers involved in transport and delivery receive the necessary data. Please do not include sensitive personal information in the free-text field.
Cookies, browser storage and privacy settings
Cookies and similar technologies store or access information on your device. Strictly necessary access for a service expressly requested by you is based on section 25(2)(2) TDDDG. Optional storage would require prior consent under section 25(1) TDDDG; consent-based personal data processing would rely on Article 6(1)(a) GDPR.
Google tag AW-947230300 is loaded only after you consent. Google Analytics, social media pixels, externally embedded maps, videos and translation services are not included. The separately linked ENERGY site and other external websites have their own settings. The English version is delivered by this website without an external translation service.
| Storage | Purpose | Duration |
|---|---|---|
| sf_main_ads_v2 First-party Local Storage | Your acceptance or rejection of advertising measurement, version, timestamp and expiry. An earlier necessary-only acknowledgement does not grant advertising consent. | 180 days from selection, after which the notice reappears. A new selection replaces the entry. |
| Hosting and sign-in functions | Necessary security and session functions. Only the protected internal enquiry area requires sign-in. Public visitors do not need a website account. | Depends on the session, security function and hosting provider settings; see the provider’s privacy information. |
| Google Ads · _gcl_* (e.g. _gcl_au) | Optional attribution of advertising interactions and advertising measurement, only with consent. | Generally 90 days; use may renew the lifetime. |
Storing your requested privacy setting relies on section 25(2)(2) TDDDG and, where personal data is involved, Article 6(1)(f) GDPR: our legitimate interest in respecting your choice and avoiding repeated notices. This local selection is not transmitted to an external consent provider.
You can reopen the notice using “Cookie settings”. You can reject Google Ads or withdraw your consent for the future through “Cookie settings”. Earlier processing remains lawful. On withdrawal, accessible first-party _gcl_ cookies are deleted and the page may reload. You can delete the local entry through your browser’s website-data settings. Settings apply to the current browser and origin and are not shared across devices or domains. Without local storage support, the acknowledgement applies only to the current page.
Google Ads and consent
With your voluntary consent, we use Google tag AW-947230300 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to attribute advertising interactions and measure advertising performance. Data may include IP address, device and browser information, page views, timestamps and advertising identifiers. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG.
Without consent, we do not load the Google library or send cookieless measurement signals through this integration (Basic Consent Mode). After consent, ad_storage and ad_user_data are granted; ad_personalization and analytics_storage remain denied. We do not enable personalised advertising or Google Analytics. Names, email addresses, phone numbers and free-text enquiry content are not passed to the tag. Enhanced conversions and a separate form conversion event are not configured.
Google may process data in the USA and other countries outside the EEA under the conditions and safeguards described under international transfers. We do not control all processing and retention periods at Google. Information: Google privacy policy, Google cookies and Google advertising services. You can use the enquiry form without advertising consent.
External links and content
Fonts, images and the illustrative floor plan are delivered without external font or image services. Links lead to SPACEFACTORY INTERIOR, ENERGY and ASSET and to providers’ privacy information. Your browser contacts the destination when you open a link; the destination’s privacy policy then applies. Form details are not automatically transferred through these links.
International transfers
Hosting and infrastructure providers may process data outside the EEA, including in the United States. Depending on the applicable provider terms, transfers rely on adequacy decisions under Article 45 GDPR or appropriate safeguards, particularly EU standard contractual clauses under Article 46 GDPR. Contact us for information and, where applicable, copies of the relevant safeguards. We do not promise processing exclusively within Europe.
Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction and data portability under Articles 15–20 GDPR. You may object to processing based on legitimate interests on grounds relating to your particular situation under Article 21 GDPR. You may object to direct marketing at any time without giving reasons. Consent may be withdrawn at any time with future effect, without affecting the lawfulness of earlier processing. Contact spacefactory25@gmail.com to exercise your rights.
You may complain to a supervisory authority, particularly in the country of your residence, workplace or an alleged infringement. The authority for our registered location is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany: Complaint form.
This website does not make decisions based solely on automated processing within the meaning of Article 22 GDPR.