Privacy Policy
Information on the collection and processing of your personal data
Privacy at a glance
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG) as well as this privacy policy. When you use this website, various personal data is collected. This privacy policy explains what data we collect, what we use it for, and how this is done.
Responsible Body
The responsible body for data processing on this website is:
Data Collection & Processing Purposes
a) Configurator & Contact Forms
When using the configurator, we collect project data (house type, plot status, budget, zip code) as well as your contact data (name, email address, phone number). We process these data to handle your inquiry and forward it to qualified modular home manufacturers (Art. 6 Para. 1 lit. b and f GDPR).
b) Chat Widget & Interactive Drawing Canvas
To conduct the interactive consultation, we store the chat history and uploaded sketches or voice messages. The data is synchronized in real-time and stored in our database to maintain the chat history between you, our team, and our AI assistant.
c) Microphone Usage & Voice Input
If you activate the dictation or voice message function in the chat, the browser accesses your device's microphone (after your explicit permission). Audio recordings for voice messages are processed temporarily and transmitted to us for consultation. The dictation function translates spoken language directly into text via local web APIs without the audio data being permanently stored by us.
d) Push Notifications
On our website, you can sign up to receive push notifications (browser messages). To be able to send you these messages (e.g., when a consultant replies to your chat inquiry), we collect and process an anonymized token of your browser. This token is stored in our Firebase database. The legal basis for this processing is your voluntary consent (Art. 6 Para. 1 lit. a GDPR). You can deactivate the receipt of notifications at any time via your browser settings.
e) Local Storage
To maintain your consultation process, your house configurations, your sketches, and your chat history even when reloading the page, we use your browser's local storage function. Here, a unique session ID ("veloft_session_id") and temporarily your chosen configuration ("veloft_pending_config") are stored on your device. This storage is technically necessary to provide the service requested by you (Art. 6 Para. 1 lit. b GDPR, § 25 Para. 2 TDDDG).
f) Cookies
We only use technically necessary cookies (e.g., "NEXT_LOCALE" to permanently store your chosen language preference). These cookies serve exclusively for error-free navigation and translation of our website. We do not use any tracking, advertising, or marketing cookies (third-party cookies). Therefore, no cookie consent banner is legally required on our website.
Data Recipients & Third-Party Providers
To provide our services, we work with reliable service providers who process your data strictly according to our instructions:
Vercel (Hosting & App Operation)
Our website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes server log files and routes network requests (Legal basis: Art. 6 Para. 1 lit. f GDPR).
Google Cloud & Firebase (Database & Storage)
The chat history, sketches, and form data are stored in Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Storage serves to provide the real-time chat functionality.
Google Gemini API (AI Services)
To analyze your sketches and generate 3D layouts, we use Google's Gemini API. Here, sketch data and textual instructions are processed to generate AI responses and visualizations.
Brevo (Email Service / SMTP)
We use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) to send emails.
Home Manufacturers (Partners)
To prepare offers, your inquiry-relevant data is forwarded to cooperating home manufacturers. This is done only on the basis of your consent (Art. 6 Para. 1 lit. a GDPR) or for contract initiation (Art. 6 Para. 1 lit. b GDPR).
Stripe (Payment Processing)
To process payments for the 'Veloft Pro' membership, we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you purchase a membership, necessary data for payment processing (such as email address and payment info) is securely transmitted to Stripe (Art. 6(1)(b) GDPR).
Your Data Subject Rights
You have the right to information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR) of your data.
Revocation & Contact:
If you have given consent to data processing, you can revoke it at any time with effect for the future. Simply contact us informally by email at info@veloft.eu. You also have the right to lodge a complaint with the competent data protection supervisory authority.