Privacy policy.

1. Data controller

The controller responsible for the processing of personal data on this website is:

Urban Attic Partners GmbH
Am Flughafen 13
12529 Schönefeld
Germany
Email: hallo@urbanatticpartners.de

Data protection officer: [Check whether a data protection officer has been appointed or is legally required; if applicable, insert contact details.]

2. Accessing the website and hosting

When you visit a website, certain connection data are processed for technical reasons. Depending on the hosting configuration, these may include your IP address, the date and time of access, requested pages or files, details of your browser and operating system, any referrer URL and server response information.

This processing is intended to make the website available, diagnose errors and protect it against misuse. Where necessary for these purposes, the legal basis is our legitimate interest under Article 6(1)(f) GDPR in providing a reliable and secure website.

Hosting provider: [Insert provider, place of establishment and any relevant subprocessors.]
Server log retention: [Specify based on actual hosting settings.]
Processing outside the EEA: [Verify after selecting the provider and describe applicable legal mechanisms and safeguards, if relevant.]

Self-hosted Berlin video

This website displays a short aerial video of Berlin. The video file and preview image are delivered directly by the hosting provider serving our website rather than being embedded from iStock, YouTube or Vimeo. When these files are requested, the hosting provider processes the same technically necessary access data as for other website assets, such as the visitor IP address, date and time, and the requested file. The video player itself does not set cookies or include analytics or tracking. Where applicable, the legal basis is Article 6(1)(f) GDPR (our legitimate interest in providing a secure and functioning website). The precise retention period for server logs will be added once the hosting provider has been selected.

3. Contact by form or email

If you contact us, we process your information to identify, handle and respond to your request and to enable further communication. The intended contact form includes your name, email address, optional organisation, category of enquiry and message. If you contact us by email, we process the contact details and message content you provide.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to pre-contractual steps or a contract. For other business or general enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to process and respond to enquiries appropriately.

We retain enquiries only for as long as necessary to handle them, conduct related communications and, where relevant, comply with statutory retention requirements or establish, exercise or defend legal claims. [Define the actual internal retention and deletion rules.]

The data you enter into the contact form are sent by email to a Microsoft 365 mailbox operated by Urban Attic Partners. We use Microsoft Ireland Operations Limited as a processor for this mailbox; a corresponding data processing agreement must be ensured. [Specific retention and deletion periods and any further processors, in particular the hosting provider, are to be added once the infrastructure is finalised.]

Acknowledging that you have read this privacy policy is not separate consent to processing for marketing purposes.

4. Fonts and external resources

The fonts “Cormorant Garamond” and “DM Sans” are served locally from our own web server. As a result, no connections to Google servers are established and no personal data is transferred to Google when the page is loaded.

5. Cookies and analytics

The current website code does not use first-party analytics or marketing cookies, advertising trackers or user-profiling analytics. No consent banner is therefore planned for this self-developed preview.

After hosting and security services have been configured, we must check whether technically necessary cookies or similar technologies are used. If any additional services requiring consent are introduced, we will update the website and obtain the necessary consent before using them, where required under section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

6. Links to third-party websites

This website contains links to external services, including STYX, PH Structural Engineering and publicly available information sources. If you select a link, you will visit another website operated by a third party. The privacy notices of the respective operators apply there. Merely displaying these links does not embed third-party content.

7. Recipients and international data transfers

Where necessary, personal data may be processed by service providers assisting with the technical operation of the website and the handling of enquiries. Where legally required, we enter into appropriate contractual arrangements, including data processing agreements.

[Add the final hosting, email, contact form and, if applicable, CRM providers, as well as any transfers to third countries, once the infrastructure has been selected.]

8. Your rights

Subject to the relevant legal conditions, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object to processing based on legitimate interests (Article 21). Where processing is based on consent, you may withdraw that consent with effect for the future (Article 7(3) GDPR).

To exercise these rights, please contact us via the contact details above once the business email address has been set up.

You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. For our company, the relevant authority may in particular be the Brandenburg State Commissioner for Data Protection and Access to Information, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

9. Changes to this notice

We update this notice if the website, the providers we use or the applicable legal requirements change. The version published on this website is the applicable version.

Draft version: 16 October 2026.