Privacy policy

Last updated: September 2026. This is an English translation; the German version is legally binding.

1. Controller

Fresh Flush Gebäudeservice UG (haftungsbeschränkt)
Torfbruchstraße 201, 40625 Düsseldorf, Germany
Managing director: Mohamed Lmaslam
Phone: +491737033370 · Email: service@fresh-flush.de

2. General information and legal bases

We only process personal data where this is necessary to provide this website, to handle your enquiries or on the basis of your consent. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest). Information is only stored on or read from your device with your consent (§ 25 (1) TDDDG), unless it is strictly necessary (§ 25 (2) TDDDG).

3. Hosting and server log files

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) using Cloudflare Pages and delivered via the Cloudflare network. When you visit the website, the host processes technically necessary data (IP address, date and time, page requested, referrer URL, browser type and operating system). This is necessary to deliver and secure the website (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement with Cloudflare. Transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

4. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption, recognisable by “https://” in your browser’s address bar.

5. Contact and quote requests

If you contact us via the request form, email, phone or WhatsApp, we process your details (e.g. name, company, phone number, email address, type of property, required service, message and any uploaded photos or documents) in order to handle your request and prepare a quote (Art. 6 (1) (b) GDPR; otherwise Art. 6 (1) (f) GDPR). Form submissions are processed by a server function of our host (Cloudflare) and delivered to our mailbox via the email delivery service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA); the form data is not stored on the website. We have concluded a data processing agreement with Resend; transfers to the USA are based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. We also receive the page you sent the request from and any campaign parameters (see section 7). We delete request data once it is no longer needed and no statutory retention periods apply; requests that do not lead to an order are deleted after 12 months at the latest.

WhatsApp: If you contact us via WhatsApp, your messages are processed by WhatsApp Ireland Limited. The website does not embed WhatsApp; it only contains a link.

6. Request assistant

On the home page you can describe your request in your own words. The assistant matches the text to suitable services, a property type and an urgency and, if you wish, copies the result into the request form. We do not store your input. It is only stored when you send the request (see section 5).

If AI analysis is enabled, your text is sent via a server function of our host (Cloudflare) to Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104, USA), where it is processed only to produce the answer. Under the commercial API terms, the content is not used to train models. Transfers to the USA are based on the EU Commission's standard contractual clauses or, where the provider is certified, on the adequacy decision for the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual request) or (f) GDPR (legitimate interest in quick routing). If AI analysis is not available, the matching takes place only in your browser and no data is transmitted. Please do not enter sensitive data, such as health data or data about other people.

7. Campaign attribution (UTM parameters / click IDs)

If you reach our website via an ad or a link containing campaign parameters (e.g. utm_source, gclid), we read these parameters from the URL and send them along with an enquiry so we can see which channel enquiries come from. These parameters are only stored in your browser (session storage, deleted when you close the tab) if you have consented to statistics or marketing.

8. Consent management

We store your cookie banner choice in your browser’s local storage (key “ff_consent”), which is strictly necessary (§ 25 (2) no. 2 TDDDG). You can change or withdraw your consent at any time via “Cookie settings” in the footer.

9. Google Tag Manager

We use Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is only loaded after you have consented to statistics and/or marketing, and it only triggers the services you have consented to (Google Consent Mode).

10. Google Analytics 4 (statistics)

With your consent we use Google Analytics 4 to analyse the use of our website and improve it. Pages viewed, time on page, approximate location, device and browser information and interactions (e.g. clicks on the phone number, form submissions) are processed. Cookies are set (e.g. “_ga”, stored for up to 2 years). Transfers to the USA are possible; Google is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

11. Google Ads conversion tracking and remarketing (marketing)

With your consent we use Google Ads to measure whether an enquiry, phone click or WhatsApp click resulted from an ad, and to show ads to previous visitors on other websites in the Google network. Cookies/identifiers are set (e.g. “_gcl_au”, up to 90 days). With marketing consent, enhanced conversions send your email address and phone number to Google in hashed form (SHA-256) when you submit an enquiry. Legal basis: your consent.

12. Google Maps

On our contact page you can load a Google Maps map. It is only embedded after you click “Load map”; only then is data (including your IP address) transferred to Google. Legal basis: your consent.

13. Fonts

Fonts used on this website are served locally from our server. No connection to third-party servers (e.g. Google Fonts) is made.

14. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to withdraw consent at any time with effect for the future (Art. 15–20, Art. 7 (3) GDPR), as well as the right to object to processing based on legitimate interests (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority; ours is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.