Home/Privacy Policy

Privacy Policy

1. Data Controller

AHS Allround Service Owner: Ahmed Haitham Shihan Moorfleeter Str. 47 22113 Hamburg Germany Phone: +49 174 403 01 01 Email: info@ahsservice.de

2. Principles of Data Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Processing only takes place to the extent necessary for contract performance, legitimate interests, legal obligations, or based on consent.

3. Hosting

Our website is hosted by Contabo GmbH, Munich, on servers in Germany. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable website operation). More information: https://contabo.com/de/legal/privacy/

4. Encryption

This website uses SSL/TLS encryption, recognizable by the lock symbol in the browser and the "https://" protocol. The transmission of your data between your browser and our server is protected against unauthorized access.

5. Contact Form

When you use our contact form, we process the provided data (first and last name, email address, phone number, message, and desired service) to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing customer inquiries).

6. Communication via Email and Phone

When you contact us by email or phone, we process the data you provide (e.g., name, phone number, concern) to respond to your inquiry and fulfill contractual or pre-contractual obligations. Legal basis: Art. 6(1)(b) or (f) GDPR.

7. WhatsApp

Our website contains a link for contacting us via WhatsApp. A connection to the service is only established upon active clicking; no automatic loading or data transfer occurs when simply viewing the page. Please note WhatsApp's privacy policy (Meta Platforms Ireland Ltd.).

8. Map and Location

A locally stored, static map image is displayed on our contact page. No external map service is loaded when viewing the page. A link to OpenStreetMap opens the map only upon active clicking in a new tab.

9. Google Fonts

This website uses Google Fonts that are hosted locally on our server. No connection to Google servers is established when viewing the page; your IP address is not transmitted to Google.

10. Cookies and Similar Technologies

This website uses only technically necessary cookies required for the operation of the site (e.g., language settings). Analytics, tracking, or marketing cookies are not currently used. If this changes, appropriate consent will be obtained beforehand and this policy will be updated. Legal basis: Art. 6(1)(f) GDPR.

11. Server Log Files

The hosting provider automatically collects and stores information in server log files that your browser automatically transmits. These include: browser type and version, operating system, referrer URL, hostname, time of server request, and IP address. This data is needed for secure website operation and is automatically deleted after 14 days. Legal basis: Art. 6(1)(f) GDPR.

12. Links to Social Networks

Our website contains simple hyperlinks to our profiles on Facebook and Instagram. No connection to these platforms is established when visiting our website; data transfer only occurs when you actively click the respective link. Please note the privacy policies of the respective platforms.

13. Inquiry and Order Tracking

After receiving an inquiry, AHS may assign a tracking number (e.g., AHS-XXXXX). Via the tracking page, customers can view the order status, service type, scheduled appointment, and team messages. Personal data (name, phone, email, address) is not displayed on the tracking page. Access is protected by the tracking number and IP-based rate limiting. Legal basis: Art. 6(1)(b) GDPR.

14. Customer File Upload

Via the tracking page, customers can upload files (e.g., photos, PDFs). Permitted formats: JPG, JPEG, PNG, WebP, PDF. Maximum 5 files per order, maximum 10 MB each. Security checks are performed on upload (file type, MIME type, and file signature). Files are stored under randomly generated names in a non-public directory and automatically deleted after 60 days. Legal basis: Art. 6(1)(b) GDPR.

15. Documentation Photos

AHS may take photos to document the condition before, during, and after work. Only content necessary for documentation is captured; private documents, screens, license plates, and personal content are avoided where possible. Publication of photos for advertising purposes requires separate written consent. Legal basis: Art. 6(1)(f) GDPR.

16. Data Recipients

Your data may be shared with the following recipients: hosting provider (Contabo GmbH), email service provider (Zoho Corporation), communication provider (WhatsApp/Meta), to the extent necessary for contract performance or website operation. Transfer to other third parties only occurs if legally required or with your consent.

17. Transfers to Third Countries

No data is automatically transferred to third countries when visiting the website. When actively using external services (e.g., WhatsApp, social networks), transfer to third countries may occur based on standard contractual clauses or an adequacy decision.

18. Retention Period

Uploaded customer files are automatically deleted after 60 days. Data classified as spam is deleted after approximately 7 days. Documentation photos are deleted once the documentation purpose has ceased. Business and tax-relevant data is stored in accordance with statutory retention periods (up to 10 years).

19. Necessity of Data Provision

The provision of certain personal data may be necessary to process your inquiry or fulfill the contract. If the required data is not provided, we may not be able to process your request.

20. Your Rights

You have the following rights under the applicable legal provisions: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR). Consent given may be revoked at any time with future effect. To exercise your rights, contact: info@ahsservice.de

21. Complaint to the Supervisory Authority

You have the right to file a complaint with a data protection supervisory authority. The authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Str. 22, 20459 Hamburg Email: mailbox@datenschutz.hamburg.de

22. Automated Decisions

No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.

23. Updates to this Privacy Policy

This privacy policy may be updated when our services, the legal situation, or our data processing practices change. The current version is available at: https://ahsservice.de/de/datenschutz Last updated: October 2026