Privacy & Data Protection PolicyEffective date: 14.04.2026

​

Controller: PW INFRA GmbH

​

Address: Am Seestern 4, 40547 Düsseldorf, Germany

​

Represented by: Managing Director Levend Topaloglu

​

Data Protection Contact / DPO (where applicable): info@pw-infra.com

​

 

ScopeThis Policy explains how PW INFRA GmbH (“we”, “us”, “our”) collects, uses, discloses and protects personal data collected via www.projektwerkeinfra.com (the “Website”) and in relation to our business activities. It describes data subject rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Brazilian General Data Protection Law (LGPD), and the means to exercise them. This Policy applies to visitors, clients, suppliers, applicants and other natural persons whose personal data we process.Controller & JurisdictionController for data processing related to the Website and company activities: PW INFRA GmbH (details above).For EU/EEA matters GDPR applies; for residents of California CCPA/CPRA applies; for Brazil LGPD applies where applicable.Categories of Personal Data CollectedContact & identification data: name, job title, company, e‑mail, phone, postal address.Professional data: company, role, project details you provide.Transactional data: records of services or communications.Technical & usage data: IP address, device/browser info, pages visited, referrer, timestamps, cookies and analytics identifiers.Communications: messages submitted via contact forms, email content.HR-related data (if applicable): CVs, qualifications, employment history.Purposes and Legal Bases for Processing We process personal data for the following purposes with the corresponding legal bases:To respond to inquiries, deliver services and perform contracts: performance of a contract / legitimate interest (GDPR); necessary business purpose (CCPA); legal basis under LGPD.To operate, secure and improve the Website, analytics and performance: legitimate interest (GDPR); business purpose (CCPA); LGPD legal basis.For marketing (newsletters, events) where consent is required: consent (GDPR/CCPA opt‑in where required / LGPD). You may opt out at any time.To comply with legal, tax, accounting and regulatory obligations: legal obligation.To protect our rights, property and safety and for fraud prevention: legitimate interest / legal basis.Cookies & TrackingWe use essential cookies for site function and optional cookies for analytics and marketing.On first visit you will receive a cookie banner enabling selective consent for non‑essential cookies. You may withdraw or change cookie preferences at any time via the cookie tool or your browser settings.Sharing and DisclosureWe may share personal data with: service providers (hosting, analytics, CRM, payment processors), professional advisers, auditors, banks, public authorities when legally required, and in a corporate transaction (sale/merger) subject to confidentiality and safeguards. We do not “sell” personal data for monetary consideration. Where we engage processors, we require contractual safeguards (data processing agreements, confidentiality, security).International TransfersPersonal data may be transferred outside the EEA or Brazil (e.g., to cloud providers). Where transfers occur, we use appropriate safeguards (EU Commission standard contractual clauses, adequacy decisions, or equivalent protections) to ensure an adequate level of protection. Contact privacy@projektwerkeinfra.com for specifics or copies of transfer safeguards.Data RetentionWe retain personal data only as long as necessary for the purpose collected, to meet contractual, legal and regulatory obligations, resolve disputes, enforce agreements and for legitimate business purposes. Typical retention periods: enquiries & correspondence — up to 3 years; accounting records — up to statutory periods (e.g., up to 10 years); analytics — aggregated or pseudonymised retention (e.g., up to 24 months).Data Subject Rights and How to Exercise ThemGDPR (EU/EEA): you have the right to access, rectify, erase, restrict processing, object, portability, withdraw consent, and lodge a complaint with a supervisory authority.CCPA/CPRA (California residents): right to know categories/recipients of personal data, right to access specific data, right to deletion, right to opt‑out of sale/sharing for targeted advertising, right to non‑discrimination for exercising rights, right to request correction.LGPD (Brazil): right to confirmation of processing, access, correction, anonymization/blocking/deletion, portability, information on public and private entities with which data is shared, revocation of consent, and complaint to the authority.To exercise rights: email privacy@projektwerkeinfra.com with subject “Data Subject Request” and specify: name, contact details, the right(s) you request, and any details to identify the data. We will verify identity and respond in accordance with applicable law (generally within one month; may extend where permitted).Requests from Authorized AgentsIf a request is made by an authorized agent, we may require a signed authorisation or comparable proof of authority and identity before fulfilling the request.SecurityWe implement technical and organizational measures to protect personal data (access controls, logging, encryption where appropriate, secure hosting, staff training). While we strive to protect data, no internet transmission or storage is fully secure. Report suspected incidents to privacy@projektwerkeinfra.com immediately.Data Breach NotificationIn case of a personal data breach that is likely to result in a high risk to individuals’ rights and freedoms, we will notify affected data subjects and supervisory authorities as required by applicable law (GDPR/CCPA/LGPD timeframes).Third‑Party LinksThe Website may contain links to third‑party websites. We are not responsible for the privacy practices of third parties. Please review their privacy notices.ChildrenThe Website is not directed at children. We do not knowingly collect personal data from persons under the age of 16. If you believe we have collected such data, contact privacy@projektwerkeinfra.com; we will take steps to delete it.Marketing, Opt‑Out & “Sale” / “Sharing” (CCPA/CPRA)You may opt out of marketing emails by using the unsubscribe link in any communication or by contacting privacy@projektwerkeinfra.com.Under CCPA/CPRA, if your jurisdiction considers certain disclosures “sales” or “sharing”, you may exercise your opt‑out rights. We do not knowingly sell personal data to third parties for cash consideration.Automated Decision‑Making / ProfilingWe do not use automated decision‑making or profiling that produces legal or similarly significant effects without explicit consent. If such processing is introduced, we will notify data subjects and obtain consent where required.International Recruitment / Employment CandidatesIf you submit candidacy information, we process CVs and related personal data for recruitment and HR purposes. We keep applicant data for a limited time unless you consent to longer retention.Contact & ComplaintsPrivacy contact: privacy@projektwerkeinfra.comPostal: PW INFRA GmbH, Am Seestern 4, 40547 Düsseldorf, GermanyIf you are in the EU/EEA you may lodge a complaint with the relevant supervisory authority (e.g., in Germany the state data protection authority). California residents may contact the California Attorney General. Brazilian residents may contact ANPD.Changes to this PolicyWe may update this Policy to reflect changes in law, technology or business. We will publish a revised version with a new effective date on the Website. Where required by law, we will obtain consent.AcknowledgementBy using the Website or providing personal data to us, you acknowledge that you have read and understood this Policy.