Date of this Privacy Policy: June 2026
1. Data Controller
DETAIL Architecture GmbH
Messerschmittstraße 4
80992 Munich, Germany
E-Mail: datenschutz@detail.de
DETAIL Architecture GmbH is a wholly owned subsidiary of VMN media, Utrechtseweg 44, 3704 HD Zeist, Netherlands.
2. General Information on Data Processing
We process personal data exclusively in accordance with: the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Digital Services Act (DDG), the German Telecommunications and Digital Services Data Protection Act (TDDDG).
Processing is carried out only:
- to provide the website
- to fulfill contractual obligations
- for optimization purposes
- on the basis of your consent
3. Data Protection Officer (DPO)
DETAIL Architecture GmbH has appointed an external Data Protection Officer:
HBSN GmbH
Berliner Str. 52F
38104 Braunschweig, Germany
E-Mail: datenschutz@hbsn-gruppe.de
4. Provision of the Website (Server Log Files)
When visiting our website, the following data are automatically processed:
- IP address
- Date and time
- Browser type and version
- Operating system
- Referrer
Purpose:
- System security
- Stability
Legal Basis:
Art. 6 (1)(f) GDPR
§ 25 (2) TDDDG
Retention period: Maximum 14 days
5. Collection, Processing And Use of Personal Data
We collect personal data, including in particular:
- Name and address
- Contact details
- Order information
All data are transmitted in encrypted form (TLS/SSL). Passwords are stored in encrypted form.
The data are used exclusively for contract fulfillment and for providing our services.
6. Customer Account
We offer you the option of creating a password-protected customer account. The data are stored to simplify future orders.
You may object to this use at any time.
7. Contract Fulfillment
For the purpose of processing your order, your data will be shared with service providers required to perform the contract (e.g., shipping providers).
Legal Basis: Art. 6 (1)(b) GDPR
8. Newsletter And Email Marketing
Processed Data:
- Email address
- Country (optional information)
Purpose:
-
Sending information
Legal Basis: Art. 6 (1)(a) GDPR
You may withdraw your consent at any time.
6. Cookies And Consent Management
We use cookies and similar technologies.
Legal Bases:
§ 25 (1) TDDDG (consent)
§ 25 (2) TDDDG (technically necessary)
Art. 6 (1) GDPR
Consent is obtained through a consent management tool and may be withdrawn at any time.
We use the consent management tool Didomi to manage users' consent for the use of cookies and similar technologies.
Provider:
Didomi SAS
137 Boulevard de Sébastopol, 75002 Paris, Frankreich
www.didomi.io
Privacy Policy: https://www.didomi.io/de/privacy-policy
Didomi collects and stores the consents you have provided, as well as additional technical data (e.g., IP address in anonymized form, time of consent, browser information) in order to demonstrate compliance with legal requirements.
Legal Bases:
Art. 6 (1)(c) GDPR (compliance with legal obligations)
Art. 6 (1)(f) GDPR (proof/documentation of consents)
§ 25 (1) TDDDG (consent management)
The data are stored for as long as necessary to fulfill the legal documentation and record-keeping requirements.
10. Web Analytics
Google Analytics 4
Provider:
Google Ireland Limited https://policies.google.com/
Privacy Policy: https://policies.google.com/privacy
Purpose:
- Analysis of user behavior
- Optimization
Legal Bases:
Art. 6 (1)(a) GDPR
§ 25 (1) TDDDG
Data Transfer:
USA (EU-US Data Privacy Framework)
INFOnline
Provider:
INFOnline GmbH https://www.infonline.de
Privacy Policy: https://www.infonline.de/datenschutz/
Purpose:
- Analysis of user behavior
- Optimization
- Publication of the performance metrics "Page Impressions" and "Visits" to the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW) https://www.ivw.de
Legal Bases:
Art. 6 (1)(a) GDPR
§ 25 (1) TDDDG
IO technologies
Provider:
IO Technologies (Esterson Limited) https://iotechnologies.com/pp
Privacy Policy: https://iotechnologies.com/gdpr
Purpose:
- Analysis of user behavior
- Optimization
Legal Bases:
Art. 6 (1)(a) GDPR
§ 25 (1) TDDDG
11. Online Marketing
Google Ads
Provider:
Google Ireland Limited https://ads.google.com/
Privacy Policy: https://policies.google.com/privacy
Legal Bases:
Art. 6 (1)(a) GDPR
§ 25 (1) TDDDG
12. Transfer of Data to Third Countries
Data may be transferred to the United States when using:
- Google services
- Meta services
Safeguards:
- EU-US Data Privacy Framework
- Standard Contractual Clauses (SCCs)
13. Social Media
We maintain profiles on the following platforms:
Meta Platforms Ireland Limited (Facebook / Instagram)
https://www.facebook.com/privacy/policy/
Pinterest
https://policy.pinterest.com/de/privacy-policy
LinkedIn Ireland Unlimited Company
https://www.linkedin.com/legal/privacy-policy
When you visit these platforms, your data are processed by the respective providers.
Legal Basis:
Art. 6 (1)(f) GDPR
14. Sweepstakes / Prize Draws
When you participate in a sweepstake (prize draw), we process your personal data for the purpose of conducting the prize draw, for statistical purposes, and for notification by email.
Data is shared only with the sweepstakes partner for the purpose of prize fulfillment and delivery.
The data will be deleted as soon as they are no longer required, unless statutory retention obligations prevent their deletion.
Legal Basis: Art. 6 (1)(a) GDPR
15. Events
15.1 Registration for DETAIL Events
When you register for a DETAIL event, we collect the following data:
- Company
- Name
- Address
- Telephone number
- Email address
- Where applicable, payment details for paid events
We process your personal data for the purpose of organizing and administering the event and, where events are conducted in cooperation with partners, share the data with the respective partner. We also use your email address to advertise similar services; you may object to such use at any time. During events, photographs and video recordings may be created and published for press, public relations, and marketing purposes.
15.2 Photographs and Video Recordings
During events, photographs and, where applicable, video recordings are made and published on the website and on social media channels for press and public relations purposes. Presentations may be livestreamed, recorded, and made available to registered participants for up to two weeks. We use your contact details for the administration of the event and may, where applicable, share them with moderators. You may object to the processing of your data at any time by email.
15.3 Consent to the Disclosure of Data to Third Parties (Sponsors)
By participating in our professional events, you consent to the disclosure of your name and email address to event sponsors so that they may send you product information and other relevant communications. You may withdraw your consent at any time.
15.4 Competitions
To participate in the DETAIL Award and the DETAIL Product Award, the provision of personal data is required.
The following data are collected, stored, processed, and/or used (collectively referred to as "participant data"):
- Names
- Contact details
- Email addresses
- Telephone numbers
- Product- and project-related data and images
Participant data are stored electronically and may, where applicable, be processed by commissioned agencies or cooperation partners. Data will only be disclosed to third parties with your express consent. The data are treated confidentially and used exclusively for the administration and conduct of the competition. Statutory retention obligations apply for up to ten years. After that, the data will be deleted unless further retention is required or has been expressly requested.
Legal Basis: Art. 6 (1)(b) GDPR
16. Your Rights
You have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data relating to them infringes the GDPR (Article 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
17. Retention Period
Data will be deleted when:
- the purpose for which they were collected no longer applies; or
- statutory retention periods have expired.
Retention period:
- 6–10 years (statutory tax retention period)
18. Data Security
We implement the following technical and organizational measures:
- TLS encryption
- Access restrictions
- Security monitoring
19. Protection of Minors
Persons under the age of 16 may not submit personal data without the consent of their parent(s) or legal guardian(s).