Privacy Policy

The controller for this website and the provider’s own processing is MEA NETZE – Franjo Pehar, Industriestraße 7, 63165 Mühlheim am Main, Deutschland. For privacy questions, requests to exercise your rights and general product enquiries, contact us through the support chat on this website or write to this postal address. Further provider details are in the Legal Notice.

When your business processes personal data about employees, customers or others using the software, you generally determine the purpose and content and are responsible for that processing. Using the software does not give the provider access to your local database or instruct us to centrally store your reports.

Depending on what you enter, the applications contain company and contact details, customers and addresses, projects, descriptions of work, worker names, working hours, materials, equipment and maintenance details, checklists, measurements, photographs, attachments and signatures. They also hold drafts, completed reports, generated PDFs, document versions and Office review, billing and handover records. Templates, favourites, language and other settings are stored locally.

Android uses its private app storage. Office stores its workspace by default in the Windows user profile at %LOCALAPPDATA%\BauDoku\Office. Core functions do not require a BauDoku account. We do not operate a central report database, cloud synchronisation service or built-in advertising, analytics or external crash-reporting service for these functions. Google Play, Windows, Android and other applications you use may carry out their own processing under their own privacy information.

Files and images are selected through system dialogs; photos use device functions. The app does not need blanket access to contacts, your microphone or location and does not track location. Android has internet permission for explicitly started device connections, optional MEA Support chat and help articles. Google Play purchases also need the relevant Google services and a connection. This does not upload reports automatically; local Android reports and PDF creation work offline independently.

You explicitly create or share PDFs, CSVs, ZIPs and other exports. You choose the location, recipient and, where relevant, another application such as email, messaging, printing or a cloud file provider. Exported files can include customer details, worker names, photographs, signatures and document metadata. Check the contents and the recipient’s authority before sharing. The service you choose processes the files according to its own terms.

Office can create a local email draft with attachments. Preparing it does not send an email; you open and send the draft yourself in your email application. Creating an export does not send the provider a copy.

When you start the Office receiver and approve a device using an invitation or connection address or optional QR code and comparison code, local connection information is stored, such as a device identifier, PC address, certificate pin, access credential and receipt status. The direct connection uses TLS with certificate pinning. Devices must be reachable through your LAN or a VPN connection you provide; BauDoku does not supply its own VPN or cloud relay.

Android sends only the explicitly prepared package of selected reports and their related data and files. In supported versions, Office can stage selected customers and projects for an approved device; Android imports them only after an active request, preview and confirmation. A failed operation may be retried explicitly. There is no general automatic background synchronisation. Received copies are then also stored on the destination device. Device approval can be revoked in Office; this does not delete previously received files.

The Windows licence activation described here is being prepared and is not publicly enabled yet. It will check Android entitlement through a licence service and link it to one Windows PC; business reports, photos and signatures are not licence evidence and are not sent to that service for this purpose. A precise description of licence data, storage and the services involved must be published before enabling this feature.

Android provides a ZIP backup and restore that you initiate through file selection. It can contain business data, media, signatures and archived documents. Purchase credentials and private device access credentials are not included in the business backup. The app is configured to exclude its private business data from Android automatic cloud backup and automatic device-to-device extraction. Operating-system and manufacturer behaviour is outside the provider’s control.

Office supports manual backups and a rotating backup that you must enable explicitly in a folder you choose. Device approvals and certificates are kept separate from business backups. Exported business ZIP files are not password-encrypted. Keep them in a protected location; a synchronised folder may send them to a cloud service you use. A restore may replace existing local data and requires particular care.

Android purchases are processed through Google Play. Google processes your Google account, payment and purchase according to its own privacy and payment information. BauDoku processes product and entitlement status and technical proof of purchase, such as a purchase token and an order identifier where available, to unlock, acknowledge and restore an entitlement. Reports are not sent to Google Play for this purpose. The app does not provide us with your credit-card number or Google account credentials.

Google Play may provide the developer with order and settlement information and aggregate installation, country and purchase statistics. This is separate from having our own in-app usage analytics. There is no central BauDoku licensing server or Windows purchase or activation service in this version. Google’s information is available at policies.google.com/privacy and in Google Play Help.

This website is delivered at baudokumini.de using Namecheap shared hosting. Cloudflare provides DNS and the delivery and security layer in front of the host. Processing may include your IP address, time, requested address, browser information, referring page, transfer size and error status. These technical data are used to deliver the website, diagnose problems and prevent abuse, on the basis of our legitimate interest in a secure and available service under Article 6(1)(f) GDPR.

The public pages contain no additional advertising or analytics trackers and load no external fonts. Technical Cloudflare statistics do not establish the identity of individual people. Cloudflare may use technically necessary security cookies or checks. Choosing a language opens its page address, and your browser may cache files. The local content editor is not published on this website.

Access and error logs are processed by the relevant service for necessary operation and security. Retention depends on its settings, security needs and legal obligations. This publication does not introduce a new automatic deletion process or an individual visitor database. Service information: https://www.namecheap.com/legal/general/privacy-policy/ and https://www.cloudflare.com/privacypolicy/. For questions about specific logs, contact us through the support chat or write to Industriestraße 7, 63165 Mühlheim am Main, Deutschland.

If you contact us through the support chat or by post, we process your contact details, message, time and any files or technical details you provide to handle your enquiry. The applications do not send us reports or diagnostic packages without your action. Provide only what is needed for assistance and redact other people’s personal information or confidential data where possible. We may ask for information needed to resolve your request. Chat processing and optional reply notifications are explained in the following section.

When support chat is enabled, its widget loads from our own support server. When you submit a request, your name, email address, messages, the product concerned, and the origin and path of the current page are sent to that server. The page URL's query parameters and fragment are not sent. We store your request and conversation to reply and organize support. This does not give us access to your application's local data; files are transferred only when you explicitly select and send them.

JPEG, PNG and WebP images and PDF attachments are stored with the conversation in a private directory on our support hosting. They have no public file address; downloads require the conversation's access credentials or an authenticated support session. Images remain original files and may include capture time, device information or location metadata. Remove unnecessary sensitive contents and metadata before uploading.

By default, the conversation ID and secret access token are stored in sessionStorage for the current browser tab. If you voluntarily select “Remember on this device”, these credentials are also stored in this browser's localStorage and can be used in other tabs. Remembered access expires after at most 30 days; expired credentials are removed the next time the widget loads. You can switch remembering off or clear browser access in the chat at any time. This does not delete the request stored by support. Use remembered access only on a device whose other users may see the conversation.

If our own email delivery is configured, you can voluntarily enable reply notifications to the email address you supplied and disable them again in the chat. The email contains a general notice, the product and a private access link, without a copy of message contents or attachments. The link carries the secret access in its URL fragment: anyone holding it can read and reply to the conversation. Share or forward it only intentionally. Our support server sends through its configured SMTP service; your email service also processes the received message. To provide the link, we store an encrypted access token on the support server while the email setting is enabled.

When you open help, the product, selected language and any search text are sent to our support server to retrieve published help articles. The conversation also records the last visitor message that support marked as seen, allowing a read receipt to be displayed. There are no AI replies, analytics or advertising tracking. If push notifications are enabled, the operator receives only a general notice and the product, without the visitor's name, email address or message contents.

Our own support runs at https://support.meanetze.com/ on our hosting. Any enabled email notification is sent through the configured SMTP service. Conversations and attachments are stored to handle the request, necessary follow-up and any applicable evidence or retention obligations. There is no fixed automatic deletion of all conversations. Clearing browser access does not delete support data. Send a deletion request through the support chat or write to MEA NETZE – Franjo Pehar, Industriestraße 7, 63165 Mühlheim am Main, Deutschland; any mandatory legal retention remains applicable. Send only necessary information, and no passwords or confidential business documents.

We handle requests relating to a contract, entitlement or requested service under Article 6(1)(b) GDPR. Other relevant communication and handling specific abuse or security incidents may rely on our legitimate interests in reliable support and safe operation under Article 6(1)(f). Legally required retention relies on Article 6(1)(c). Where separate consent is required, we request it for the particular purpose and you may withdraw it for the future.

These bases concern our own processing. They do not replace your assessment of the basis for worker, customer, photo or signature data in reports. Without necessary contact or purchase information we may be unable to resolve a particular request or entitlement; creating a local report does not require disclosing personal information to us.

Within the provider, access is limited to people who need it for the relevant purpose. Namecheap as the host and Cloudflare as the DNS, delivery and security service may process technical data necessary to operate the website. Our own support service at support.meanetze.com processes information needed for the support function you choose. Email services, legally authorised authorities and any appointed accounting provider may also receive necessary information. We do not publish your support documents or sell report contents.

Namecheap and Cloudflare are international providers with links to the United States; processing exclusively in the EEA is not guaranteed. Their respective privacy and transfer arrangements apply to international processing. The policies linked above describe the safeguards and contact points used by those services. Local reports and direct device connections do not require sending report contents to these providers. Google services, your email provider and export or storage services you choose have their own privacy information.

Local reports and files remain until you delete them through available functions or remove the relevant app storage or Office workspace. Trash, version, backup and export copies may remain separately. Removing an application or revoking device approval does not delete already exported or received copies. You control their deletion and the retention obligations applicable to your business. We cannot remotely delete files we cannot access.

We retain support information as long as needed to address the request and document its completion. It is then deleted unless an applicable legal retention duty or a specific need to establish or defend legal claims requires it. Such information is restricted to that purpose and deleted once the requirement ends. Purchase and accounting records may be subject to statutory retention; Google manages its own information and periods. A specific period or determinable criterion for public server logs must be set before publication.

Private Android storage, local workspaces, checked imports, separate device credentials and certificate-pinned TLS help protect information. They do not guarantee complete security or encryption of every stored file. Protecting your Windows account, device lock, storage, backups and chosen recipients remains essential. Keep devices and software updated and do not share invitations or credentials with unauthorised people.

Report suspected security issues through the support chat without sending unnecessary business documents. We do not use this information for profiling or automated decisions that produce legal or similarly significant effects.

Where statutory conditions are met, you may request access to and a copy of personal data we process, correction, erasure, restriction of processing and data portability. Where processing relies on legitimate interests, you may object for reasons relating to your particular situation; an objection to direct marketing would be possible at any time without such reasons. You can withdraw consent at any time for the future. Statutory exceptions, including necessary retention and other people’s rights, are taken into account.

Send requests through our support chat or write to MEA NETZE – Franjo Pehar, Industriestraße 7, 63165 Mühlheim am Main, Deutschland. We check only identity information needed for the request and generally respond within one month; if a permitted extension is necessary, we explain the reason and duration. For reports processed only locally by a business, contact that business. You may also complain to a data protection supervisory authority, particularly where you live or work or where an alleged infringement occurred. For the stated German provider, the Hessian Commissioner for Data Protection and Freedom of Information is a relevant authority; information: datenschutz.hessen.de.

We update this policy when actual features, contact details, services or legal requirements change. The date is shown above. This text does not grant advance permission for new central services, analytics or other purposes; these need their own assessment, information and, where required, consent before use.