DanubeHandwerk

Privacy

DanubeHandwerk
DEHUEN

Privacy policy

1. Controller

RB INVEST Project Kft.
Moha utca 8903/12
1121 Budapest, Hungary
Email: [email protected]
Phone: +49 176 30464112

2. What data we process

  • Instant call-back widget (button on the public pages): name, phone number, e-mail address, optional question, the page visited and the language, plus your consent (documented with a timestamp and IP address).
  • Contact via WhatsApp (button inside the call-back window): tapping the WhatsApp button opens WhatsApp on your device so you can message us directly. In doing so you leave our website. We receive your phone number, the name stored in your WhatsApp profile and the content of your message. The service is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland; data may be transferred to Meta Platforms, Inc. in the USA (basis: the European Commission’s adequacy decision on the EU-US Data Privacy Framework). WhatsApp’s privacy terms apply. Nothing is transmitted to WhatsApp unless you tap the button — merely opening our page is not enough.
  • Project inquiry for companies (form on the home page): trade, number of skilled workers needed, project duration, desired start, optional project description, as well as name, company and phone number.
  • Expression of interest for skilled workers (the skilled workers form, /jelentkezes/): occupation, professional experience, German language skills, information on own tools and vehicle, the desired form of assignment, as well as name, phone number and your consent (documented with a timestamp and IP address).
  • Customer and staff portal (only with a user account): account data, sites, recorded working hours, site and documentation photos (e.g. milestone or daily documentation) and digital signatures. For evidentiary purposes, the time and IP address of individual actions (e.g. hours submission, signature, acceptance of contracts and statements of work, confirmation of rates) are logged.
  • Ratings (in the portal): customers can rate completed assignments (stars and an optional comment on the performing company or on individual staff members), and staff members can rate the site or the customer. Ratings of individual staff members are not displayed publicly; a customer rating may only be used as a reference on the website with your express consent.
  • Skilled worker onboarding (after activation, in the portal): date of birth, nationality, address, trade, tax and social security number, bank details (IBAN) and a photo or scan of your ID document (front and back). This information is required for proper registration and performance of the assignment relationship.
  • Customer billing data (after activation, in the portal): company name, contact person, billing address and VAT identification number (VAT ID) for invoicing.
  • Technical access data (server logs): IP address, time and the page accessed.
  • Origin and reach data (when forms are submitted): the country/region derived from the IP address and, where applicable, the city, as well as – if you arrived via an advertising link – the source (e.g. campaign UTM parameters), in order to evaluate where inquiries come from (Art. 6(1)(f) GDPR).
  • Reach measurement (on all publicly accessible pages): to anonymously evaluate which pages are viewed how often and which source visitors came from, for each page view we record the page opened, the source (referring website or the UTM parameters of an advertising link) and, roughly, the device type and language. In doing so no cookies are set and no IP addresses are stored; to roughly distinguish returning views we use only a daily-changing, non-reversible checksum that does not allow you to be identified (Art. 6(1)(f) GDPR).

3. Purposes and legal bases

  • Instant call-back: contacting you by phone about your question; the e-mail address serves as a second route should we fail to reach you by phone. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request).
  • WhatsApp contact: replying to your message. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Use is voluntary — the form is available to you as an equivalent alternative.
  • Project inquiry (companies): processing your inquiry, getting in touch and putting together a team proposal. Legal basis: Art. 6(1)(b) GDPR (steps taken prior to entering into a contract, at your request).
  • Expression of interest (skilled workers): inclusion in our internal pool of skilled workers and getting in touch as soon as a suitable project comes up. Legal basis: Art. 6(1)(a) GDPR (your consent via the checkbox in the form). You can withdraw your consent at any time without any formality (an email or phone call is enough) – your data will then be deleted without delay; the lawfulness of processing carried out up to the withdrawal remains unaffected.
  • Portal (customers and staff): performance of the contractual or assignment relationship (Art. 6(1)(b) GDPR). Logging the time and IP address of hours submissions and digital signatures serves to make the settlement verifiable (Art. 6(1)(f) GDPR – legitimate interest in tamper-proof, traceable accounting).
  • Ratings: quality assurance, fair cooperation and internal management of assignments. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in quality and smooth handling); publishing a customer rating as a reference takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR).
  • Reminder and follow-up emails: for an expression of interest that has not yet been confirmed, we send a one-time reminder with a fresh confirmation link; we remind activated but not yet completed portal accounts to finish onboarding; for company inquiries we may follow up once. Legal basis: Art. 6(1)(a) GDPR (for skilled workers, within the scope of your consent) or Art. 6(1)(b) GDPR (pre-contractual and contractual communication).
  • Skilled worker onboarding (ID and registration data): verification of identity as well as proper registration and performance of the assignment relationship. Legal basis: Art. 6(1)(b) GDPR (assignment/employment relationship) and Art. 6(1)(c) GDPR (compliance with legal obligations, in particular tax and social security reporting and evidence obligations). The ID document is stored in a restricted, non-public area; access is limited exclusively to the administration, and every access is logged.
  • Customer billing data: issuing proper invoices (for intra-Community services under the reverse-charge procedure). Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(c) GDPR (tax obligations).
  • Server logs: ensuring stable and secure operation of the website (Art. 6(1)(f) GDPR).
  • Language cookie: the dh_lang cookie stores your language choice (German/Hungarian/English). It is purely functional and is not used for any tracking (Art. 6(1)(f) GDPR).
  • Reach measurement: evaluating the use of our pages (which content and advertising channels work) in order to improve our offering. Measurement is carried out cookie-free and without storing your IP address. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a data-minimising reach analysis).

4. Recipients of the data

  • Email delivery: to send the form notifications we use the service Brevo (Brevo SAS, Paris, France – processing within the EU, data processing agreement in place).
  • Hosting: our website is operated at Contabo GmbH (Germany, server location Germany) (data processing).
  • Delivery and protection of the website: we use the CDN and security service Cloudflare. In doing so, connection data (e.g. IP addresses) may also be transferred to third countries; Cloudflare is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses apply in addition.
  • Translation service: to translate free text in the portal (e.g. customer notes, site documentation and ratings between the portal languages German, Hungarian, English, Polish and Slovenian) we use AI-based translation services: primarily Google’s Gemini API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; under the Gemini API terms of service the provisions for paid services apply to users in the European Economic Area — the transmitted text is therefore not used to train the models and is not reviewed by humans; third-country transfers are safeguarded by EU Standard Contractual Clauses) and, as a fallback, the API of Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (PR China; third-country transfer without an adequacy decision — only the free text to be translated is transmitted, no account or contact data). Please do not enter sensitive personal data in free-text fields.
  • Authorities and public bodies: where required by law, we transfer registration and settlement data to the competent bodies (e.g. tax and social security authorities, customs) as well as, where applicable, to a tax advisor engaged by us.
  • Skilled workers‘ data: information from expressions of interest is shared with client companies only in the context of a specific project coordination and only to the extent necessary. There is no public list and no viewable profile.
  • No data is passed on for advertising purposes.

5. Storage period

  • Call-back requests: for the duration of processing; deleted no later than 12 months after the last contact.
  • Project inquiries: for the duration of processing; if no cooperation comes about, we delete the inquiry at the latest 12 months after the last contact. If a contract is concluded, the statutory retention periods apply (up to 10 years, HGB/AO).
  • Skilled workers‘ expressions of interest: for as long as your consent exists, at most 24 months after your last response; immediately upon withdrawal.
  • Portal and billing data: in accordance with the statutory retention periods.
  • Skilled workers‘ ID documents and registration data: if no cooperation comes about (e.g. rejection of the registration), the ID documents are deleted without delay. Where an assignment relationship exists, they are stored for its duration and thereafter in accordance with the statutory retention periods.
  • Customer billing data: in accordance with the statutory tax and commercial retention periods of up to 10 years.
  • Server logs: 14 days.
  • Reach measurement: 120 days; the raw records are then deleted automatically.

6. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, simply contact us informally at: [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for the controller’s registered office.

7. Cookies

This website sets only functional cookies: the dh_lang language cookie and – exclusively for portal users after logging in – the WordPress login cookies. No tracking or analytics cookies are used. Our reach measurement (see section 2) also works entirely without cookies. Your display preference (light/dark) is stored solely locally in your browser (dh_theme in local storage) and is not transmitted to us.

8. No automated decision-making

No solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. Decisions on assignments, activations or any bonus payments are always made by a natural person.

Last updated: 16 July 2026