Privacy Policy

Effective Date: 01.09.2026

1. Introduction
Welcome to Streckenheld, a digital platform for the construction industry operated by Streckenheld GmbH ("we," "us," or "our"). Streckenheld comprises a software platform for construction firms (including order management, delivery tracking, invoice and delivery-note verification, and request-for-quote management) as well as a transport marketplace with a driver app. This Privacy Policy explains how we collect, use, and protect personal data when you use our website, our web application, our mobile apps, or our WhatsApp channel. We process personal data in compliance with the General Data Protection Regulation (GDPR).

2. Controller and Data Processing on Behalf of Customers

  • For the processing of personal data in connection with our website, registration, and the operation of the platform, Streckenheld GmbH is the controller within the meaning of the GDPR.
  • Where our customers upload business documents to the platform or capture data through it (e.g. purchase orders, delivery notes, invoices, contracts, offers) containing personal data (e.g. names and contact details of contact persons, signatures), we process this data as a processor on behalf of the respective customer, based on a data processing agreement pursuant to Art. 28 GDPR. In this respect the respective customer is the controller; please direct requests concerning this data to them first.

3. Data We Collect
We collect the following types of data:

  • Account Information: When you sign in using Google, Apple, Microsoft, or email OTP, we collect your name, email address, and profile picture (if available). Authentication is managed through Bubble.io.
  • Business Documents and Platform Content: Documents and data that customers and invited users (e.g. suppliers) upload to the platform or capture through it — such as purchase orders, delivery notes, invoices, framework agreements, and offers — including any personal data they contain.
  • Communication Data: Messages and documents you send us via the optional WhatsApp channel, by email, or through the contact form on our website.
  • Location Data: Drivers using the Streckenheld Driver App can opt in to share their location data to enable real-time order tracking for customers. This location data is collected only when the driver explicitly consents and enables location sharing.
  • Usage Data: We collect analytics and conversion data using Appsflyer to understand user interactions and improve our services.
  • Technical Data: Device information, IP address, and app usage statistics.
  • Website Data: When you use the contact form, we process the contact details you provide; we use Cloudflare Turnstile to protect against spam. Analytics and marketing services (Google Analytics, Google Tag Manager, Google Ads) are loaded only after your consent via the cookie notice.

4. Legal Basis for Processing
We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent, such as accepting cookies or marketing communications.
  • Contract Performance: When processing is necessary to provide our services.
  • Legitimate Interest: When we process data for fraud prevention, security, and service improvement.
  • Legal Obligations: When required by law or regulatory authorities.
  • Consent for Location Data: Location data is processed only with explicit driver consent for real-time tracking purposes.
  • Processing on Behalf of Customers: Data we process on behalf of our customers is processed according to their instructions, based on the data processing agreement (Art. 28 GDPR).

5. How We Use Your Data
We use your data for the following purposes:

  • To authenticate and manage user accounts.
  • To provide the platform features for construction firms, e.g. order management, delivery tracking, matching of delivery notes, invoices and purchase orders, and request-for-quote management.
  • AI Features: For automated document analysis (e.g. content extraction, record matching, offer comparison) and assistant features we use Google's Gemini AI API. Neither we nor Google use customer data to train AI models.
  • To provide real-time location tracking for order deliveries when drivers opt in to share their location.
  • To analyze app performance and improve user experience.
  • To track conversions and optimize marketing efforts.
  • To ensure security and prevent fraud.

6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. After this period, data is securely deleted or anonymized. For data we process on behalf of our customers, retention and deletion are governed by the data processing agreement and the instructions of the respective customer.

7. Data Sharing and Third-Party Services
We do not sell your personal data. However, we may share data with:

  • Vercel: For hosting our website and web application; processing takes place in the EU.
  • Firebase (Google): For application infrastructure and data storage; processing takes place in the EU.
  • AWS (Amazon Web Services): For cloud infrastructure and storage services.
  • Resend: For sending email notifications.
  • ByteScale: For storing files and documents.
  • Google Gemini API: For AI-supported document analysis and assistant features. Neither we nor Google use customer data to train AI models.
  • WhatsApp (Meta): If you use our optional WhatsApp channel; Meta's privacy notices apply in addition.
  • Appsflyer: For analytics and conversion tracking.
  • Google Analytics, Google Tag Manager, and Google Ads: For website analytics and conversion tracking; these services are loaded only after your consent.
  • Cloudflare Turnstile: To protect our contact form against spam and abuse.
  • Authentication Providers (Google, Apple, Microsoft): For sign-in functionality.
  • Legal Authorities: If required by law.
  • Data Transfers Outside the EU: Some of our service providers (e.g., Appsflyer) may process data outside the EU. We ensure GDPR compliance through Standard Contractual Clauses (SCCs) or other legal safeguards.

8. Data Security
We implement appropriate security measures to protect your data against unauthorized access, alteration, or destruction.

9. Your Rights Under GDPR
As a data subject, you have the following rights:

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure (Right to Be Forgotten): Request deletion of your personal data under certain conditions.
  • Right to Restriction of Processing: Limit the processing of your data.
  • Right to Data Portability: Receive your data in a structured format and transfer it to another service.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at privacy@streckenheld.com. If your request concerns data we process on behalf of a customer (e.g. the contents of uploaded business documents), please contact the respective customer as the controller first; we will support them in responding.

10. Changes to This Privacy Policy
We may update this policy from time to time. Changes will be communicated through the app or our website.

11. Contact Us
If you have any questions about this Privacy Policy or GDPR-related requests, please contact us at:

Streckenheld GmbH

Leopoldstraße 31
80802 München
Germany

Email: hello@streckenheld.com

Website: www.streckenheld.com