Thank you for your interest in ibak Hamburg. Protecting your personal data is important to us. In this privacy policy, we explain what data is processed when you visit our website, the purposes for which this is done, and the rights you are entitled to. Personal data includes all information that can be used to identify you directly or indirectly, such as your name, email address, phone number, IP address, company details, project information, or any details you provide to us via a form.
Controller
The party responsible for data processing on this website is:
ibak Hamburg GmbH, Poststraße 6, 20354 Hamburg, Phone: +49 (0)40 8894167-0, Email: contact@ibak-hamburg.com
Scope
This privacy policy applies to our website. If you are redirected to external sites via links, the privacy information of the respective provider applies there. It covers, in particular, website usage, contact inquiries, the project check, integrated third-party services, and analysis and marketing technologies, insofar as these are used on the website.
Legal Bases for Processing
We only process personal data if there is a legal basis for doing so. Depending on the processing activity, this is done in particular
- based on your consent (Art. 6 (1) (a) GDPR),
- to perform pre-contractual measures or to fulfill a contract (Art. 6 (1) (b) GDPR),
- to fulfill legal obligations (Art. 6 (1) (c) GDPR) or
- to protect our legitimate interests in a secure, functional, and efficient online presence (Art. 6 (1) (f) GDPR).
Where we use cookies or similar technologies that are not technically necessary for the operation of the website, the storage of information on your device or access to information already stored is based solely on your consent in accordance with Section 25 (1) of the TDDDG. The subsequent processing of personal data is based on the relevant provisions of the GDPR.
You may revoke your consent at any time with future effect. The lawfulness of any processing carried out prior to your revocation remains unaffected.
Data Transfer to Third Countries
When using individual services and features on our website, personal data may be transferred to recipients in countries outside the European Union (EU) or the European Economic Area (EEA), particularly the United States of America (USA).
Where such a transfer occurs, we ensure that the legal requirements of Art. 44 et seq. GDPR are met. This is done in particular on the basis of an adequacy decision by the European Commission or through the conclusion of standard contractual clauses provided by the European Commission, supplemented by additional protective measures where necessary.
Further information regarding potential data transfers to third countries can be found in the respective sections of this privacy policy concerning the services and providers used.
Hosting and Technical Provision via Webflow
Our website is hosted by Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit our website, technical data may be processed, in particular your IP address, pages visited, time of access, browser and system information, and server log files.
Webflow is used to ensure that the website is provided reliably, securely, and with high performance. Processing is carried out based on our legitimate interest in maintaining a stable and secure website, insofar as it is necessary for technical provision.
Server Log Files
When you visit our website, technical information that your browser transmits to the server is automatically processed. This may include your browser type, operating system, referrer URL, the hostname of the accessing computer, the time of the server request, and your IP address. This data is used for the technical delivery, security, and stability of the website. It is only combined with other data sources if necessary for error analysis or to defend against attacks.
Cookies and Consent Management
Our website uses cookies and similar technologies. Some of these are technically necessary for the website to function. Others are used to analyze how our website is used, to integrate external content, or for marketing purposes. Technologies that are not technically necessary are only used if you have provided your consent.
We use the Consent Pro consent management platform to manage your preferences. You can use the consent banner to select which categories of services you wish to agree to. Your decision is saved and can be changed or withdrawn at any time with future effect.
The legal basis for the use of technically necessary cookies is Section 25 (2) of the TDDDG and Article 6 (1) (f) of the GDPR. For all non-essential cookies and similar technologies, processing is based on your consent in accordance with Section 25 (1) of the TDDDG in conjunction with Article 6 (1) (a) of the GDPR.
Further information on the cookies used, retention periods, and providers can be found in the cookie settings or the consent banner. (https://www.consentpro.de/datenschutz/
Google Analytics 4
If you have provided your consent, we use Google Analytics 4 to analyze the use of our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand which content is used and how we can improve our website. This may involve processing usage data, technical information about your device and browser, truncated IP addresses, and website interactions. In principle, this analysis is not used to personally identify individual visitors.
To technically implement your consent choices, we use Google Consent Mode v2. This transmits your consent status and privacy settings to Google to manage data processing according to your selections.
Contacting us and contact form
When you contact us via email, telephone, or a contact form, we process the information you provide to handle your request. This may include your name, contact details, the message text, and any file attachments. Your data will not be shared with third parties without your consent, unless required to process your request, initiate or fulfill a contract, or comply with legal obligations.
Project check
Our website offers a project check as a preliminary inquiry tool. This allows interested parties to provide initial details about their project, building, venture, or consulting needs. This may include contact details, company information, project specifications, location, building type, desired services, timelines, and other information you voluntarily enter into the form. We use this information to categorize your request, provide an initial assessment, ask follow-up questions, and, if applicable, prepare a suitable consulting or service proposal.
Data submitted via the project check is stored only for as long as is necessary to process your request, initiate a contract, or comply with statutory retention requirements.
Applications
During the application process, we process the personal data you provide exclusively for the purpose of conducting and managing the application procedure. Access to your data is restricted to those responsible for filling the respective position. If an employment relationship is established between you and us, the application documents and personal data required for the employment relationship will be transferred to your personnel file.
If no employment relationship is established, your application documents and personal data will be deleted no later than six months after the conclusion of the application process, provided that no statutory retention obligations or other legitimate interests prevent such deletion. Storage is primarily maintained to fulfill our documentation requirements under the General Equal Treatment Act (AGG).
If you have explicitly consented to your application documents being included in our talent pool for future vacancies, we will store your data until you withdraw your consent, for a maximum of two years from the date consent was given. You may withdraw your consent at any time with future effect.
Locally hosted Google Fonts
To ensure a consistent appearance across our website, we use fonts that are hosted locally. Based on current technical standards, loading these fonts does not establish a connection to Google servers. Consequently, no personal data is transmitted to Google when these fonts are loaded.
SSL/TLS encryption and data security
Our website uses an encrypted connection. You can usually identify this by the padlock icon in your browser's address bar and the https:// prefix in the URL. We employ technical and organizational measures to protect personal data against loss, manipulation, unauthorized access, and other risks. These measures are updated in line with technological developments.
Retention period
We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention obligations.
Your Rights
In accordance with legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and the right to object to certain processing activities. To exercise your rights, you may contact the controller mentioned above. The right to lodge a complaint with a data protection supervisory authority remains unaffected.
Competent Supervisory Authority
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22, 20459 Hamburg
Phone: +49 40 42854-4040
Email: mailbox@datenschutz.hamburg.de
Web: datenschutz-hamburg.de
No Profiling / No Automated Decision-Making
There is no purely automated decision-making process on our website as defined by Art. 22 GDPR.
Data Protection Officer
heyData GmbH, Schützenstraße 5, 10117 Berlin, datenschutz@heydata.eu
Status and Updates
This privacy policy will be updated if the technical implementation of our website, the services used, or legal requirements change.
Hamburg, 09/15/2026