Privacy policy

// controller_

The controller responsible for data processing on this website is:

Jan Christopher Mühlnickel
Bachstr. 121
40217 Düsseldorf
Germany
Email: hello@builderskollektiv.de
Contact form: builderskollektiv.de/en/contact

// hosting and server log files_

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary data, such as your IP address, date and time, the page accessed, the referrer and browser and operating system information. This serves the secure and stable delivery of the website and protection against attacks.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). We have a data processing agreement with Cloudflare.

We do not store these log data ourselves. Cloudflare deletes them as soon as they are no longer needed for security and operation; the retention periods are set out in Cloudflare's privacy policy.

Transfers to the USA are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified.

// traffic statistics_

In the Cloudflare dashboard we only see aggregated traffic figures that Cloudflare collects anyway when delivering the site, such as how often the website was visited. No additional script is embedded, no cookies are set and no user profiles are created. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a simple, data-minimising analysis of usage).

// cookies and fonts_

We do not use tracking or marketing cookies. Cloudflare may set technically necessary cookies to protect the website against attacks and automated access (Art. 6(1)(f) GDPR, § 25(2) no. 2 TDDDG). All fonts are hosted locally – visiting the site does not connect you to servers of Google or other font providers.

// contact form_

If you write to us via the contact form, we process your name, email address and message to answer your request. Your details are processed via Cloudflare and delivered to us as an email by the email service Resend (Plus Five Five, Inc., USA); we have data processing agreements with both. Transfers to the USA are based on EU standard contractual clauses (Art. 46 GDPR) or the EU-US Data Privacy Framework (Art. 45 GDPR).

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering it). We delete the data once your request has been dealt with and no statutory retention obligations apply.

// contact by email_

If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR). Our mailbox runs on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); Google processes the data as our processor. Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR). We delete the data once it is no longer needed and no statutory retention obligations apply.

// links to whatsapp, instagram and linkedin_

This website links to our WhatsApp community and our profiles on Instagram and LinkedIn. These are plain links – no data is transferred until you click them. From then on, the respective provider's privacy policy applies (WhatsApp and Instagram: Meta Platforms Ireland Ltd.; LinkedIn: LinkedIn Ireland Unlimited Company).

// our whatsapp community_

When you join our WhatsApp community, the other members can see your profile name, profile picture and phone number. As admins, we see the same details and only use them to organise the community and keep you posted on dates.

The legal basis is Art. 6(1)(b) GDPR (taking part in the community). You can leave the community at any time; after that we no longer use your details. WhatsApp's own processing is governed by the WhatsApp privacy policy (Meta Platforms Ireland Ltd.).

// your rights_

You have the right to access, rectification, erasure and restriction of processing of your data, as well as the right to data portability (Art. 15–20 GDPR). Just send us an email.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Kavalleriestr. 2–4, 40213 Düsseldorf).

// right to object_

Where we process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing your data unless we can demonstrate compelling legitimate grounds. An informal objection by email is enough.

// last updated_

October 2026