Privacy & Data
Privacy policy under the GDPR · As of October 2026
Controller
The controller responsible for data processing on this website is:
BUILD ICONIC GLORY UG
Auf der Hardt 51, 64291 Darmstadt, Germany
Email [email protected]
Phone +49 (0)171 1904030
General
We treat your personal data confidentially and in accordance with the statutory provisions (GDPR, BDSG, TDDDG) and this privacy policy. As a rule, you can use this website without providing any personal data.
Unless a more specific storage period is stated in this policy, we keep your data only as long as the respective purpose requires. Where statutory retention periods apply, for example under commercial and tax law (usually 6 or 10 years), we delete the data once these periods have expired. There is no automated decision-making, including profiling (Art. 22 GDPR).
Hosting
This website is hosted on servers operated by Russmediatec (owner Denis Russ) in Dettingen/Teck, Germany. When you visit the site, the data required to deliver it is processed, in particular your IP address. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in providing the website reliably. A data processing agreement (Art. 28 GDPR) is in place with Russmediatec. The data is processed exclusively on our instructions and within Germany.
Server log files
The web server automatically stores information transmitted by your browser: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. This data is not combined with other data sources and is only kept as long as necessary for secure and error-free operation; it is then deleted or anonymised. The legal basis is Art. 6(1)(f) GDPR.
Content delivery network (Cloudflare)
To deliver this website quickly and protect it, we use the content delivery network and security service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. All requests are routed through Cloudflare servers. Cloudflare processes in particular your IP address and technical details of the request, such as the page requested, the time and browser information, to deliver content quickly and fend off attacks such as DDoS. The legal basis is Art. 6(1)(f) GDPR.
A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Transfers to the USA are covered by Cloudflare's certification under the EU-US Data Privacy Framework (Art. 45 GDPR) and additionally by EU standard contractual clauses. More information: cloudflare.com/privacypolicy.
SSL/TLS encryption
This website uses SSL/TLS encryption to protect the transmission of confidential content, such as requests you send via the contact form. You can recognise an encrypted connection by “https://” in your browser's address bar.
Contact form and email delivery
If you contact us by email, phone or via the contact form, we process your details (name, email address, optionally team or company and phone number, interest and message) to answer your request and any follow-up questions. Form data is transmitted in encrypted form to a service of Cloudflare, Inc. (Cloudflare Workers) and delivered from there to our mailbox as an email via Microsoft 365 (Microsoft Ireland Operations Ltd.). The contents are only forwarded, not stored or logged. The legal basis is Art. 6(1)(b) and (f) GDPR. We do not pass this data on without your consent. Data processing agreements (Art. 28 GDPR) are in place with Microsoft and Cloudflare; transfers to third countries are covered by the EU-US Data Privacy Framework and EU standard contractual clauses.
Providing your data is voluntary. Without your name, email address and message we cannot process your request. We delete your details once your request has been completed and no statutory retention obligations apply.
Spam protection (Cloudflare Turnstile)
To protect the contact form against automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile is only loaded from challenges.cloudflare.com when you scroll close to the form or use it, and checks whether the input comes from a human. Technical information about your browser and your IP address is transmitted to Cloudflare and evaluated. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in preventing spam and abuse. The access to information on your device required for this is strictly necessary to provide the contact form under Section 25(2) no. 2 TDDDG. Transfers to the USA are covered by the EU-US Data Privacy Framework. More information: cloudflare.com/privacypolicy.
Language setting and local storage
We do not use analytics or marketing cookies or any tracking tools.
Language: Which language version you see depends on the preferred language set in your browser: German leads to the German version, any other language to the English one. This check takes place only in your browser; nothing is transmitted or stored.
Language cookie: If you switch the language yourself, we store your choice in a cookie named “lang” (content only “de” or “en”, lifetime 1 year) so that your choice takes priority over your browser language.
Session storage: For the intro animation we store a technical flag in your browser's session storage so that it appears once per visit. It is deleted when you close the browser.
Neither contains personal data and both stay on your device. As they only serve a setting you explicitly chose or the display of the page, they are permitted without consent under Section 25(2) no. 2 TDDDG.
Fonts, images and videos
All fonts, images and videos on this website are delivered locally from our own web server. Visiting the pages does not establish a connection to Google, YouTube or other third-party providers.
Links to social networks
We link to our profiles on Instagram, LinkedIn and YouTube. These are plain links, not embedded content. Only when you click a link are you taken to the provider's site, where its own privacy policy applies.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20) at any time. Simply contact [email protected].
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 31 63, 65021 Wiesbaden, Germany (datenschutz.hessen.de).
Right to object (Art. 21 GDPR)
Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to [email protected].