Information on data protection and the processing of personal data at BlitzFin.
Please note: this English text is a convenience translation. The German version (Datenschutzerklärung) is the legally binding one. References to “Art. … GDPR” correspond to the German “DSGVO”.
The following notes provide an overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the controller” in this privacy policy.
How do we collect your data?
Some of your data is collected because you provide it to us. This may, for example, be data you enter into a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data (for example browser, operating system, or time of page access).
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted.
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may primarily involve IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The host is used for the purpose of fulfilling our contract with potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR).
This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, San Francisco, CA 94107, USA). The application at app.blitzfin.com is delivered via the Cloudflare network (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA); in doing so, Cloudflare processes technical connection data (in particular IP addresses) as a transit and security service. Data processing agreements are in place with both providers; transfers to the USA are based on the EU standard contractual clauses and the EU-US Data Privacy Framework respectively.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.
When you use this website, various items of personal data are collected. This privacy policy explains what data we collect and what we use it for.
The controller for data processing on this website is:
blue media labs GmbH
Am Isenbrink 2a
30926 Seelze
Email: info@blitzfin.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names, email addresses and the like).
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies.
Our website incorporates, among other things, tools from companies based in the USA. When these tools are active, your personal data may be passed on to the US servers of the respective companies.
Our web pages use what are known as “cookies”. Cookies are small data packets and cause no damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies).
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate the automatic deletion of cookies when the browser is closed.
The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are:
This data is not merged with other data sources.
If you send us inquiries via the contact form, the details you provide in the inquiry form, including the contact details you give there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
To provide access to the BlitzFin Construction Cost Calculator, we collect contact details (name, email address, telephone number) and project details (building type, site area, residential units, rentable area, postal code area, planned construction start) via an onboarding form. We use this data to create your user account, prepare your construction cost estimate and send you the access link by email. The legal basis is Art. 6 (1) (b) GDPR (performance of the usage contract, or pre-contractual measures at your request).
The form is technically provided via the Typeform service (TYPEFORM S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain). Typeform processes the form entries on our behalf.
Login to the Construction Cost Calculator is password-free, via personalized access links that we send you by email.
If you give your consent in the onboarding form to receive news information, we log the time, the IP address and the version of the consent text as a record of that consent (Art. 7 (1) GDPR, Art. 6 (1) (f) GDPR — demonstrability of consent given).
The BlitzFin application and the data processed within it (account data, project and cost data, uploaded documents such as invoices) are operated on the Google Cloud Platform (Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland). Processing and storage take place in data centers in the European Union (Frankfurt am Main region). The legal basis is performance of the usage contract (Art. 6 (1) (b) GDPR) and our legitimate interest in secure and reliable operation (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Google.
Paid plans are processed via the payment service provider Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Billing data (company name, billing address, VAT identification number, payment method) is collected directly by Stripe and stored there; in our application we store only a reference to the Stripe customer record, no payment method or billing data. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR). Stripe may also transfer data to Stripe, Inc. in the USA; this is based on the EU standard contractual clauses and the EU-US Data Privacy Framework respectively.
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
The newsletter is sent on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time.
For sending our emails and newsletters, and for receiving emails at application mailboxes (for example the invoice inbox addresses of the project rooms), we use Brevo (Brevo SAS, 7 rue de Madrid, 75008 Paris, France). Brevo processes the data required for this (in particular email addresses, names, telephone numbers and email content including attachments) on our behalf on servers in the European Union.
Where the Construction Cost Calculator is offered in collaboration with a partner (the partner is named in the respective onboarding form, for example Stadtblick Architekten), the consent you give there covers the receipt of news information both from us and from that partner. For this purpose we transmit your name, your email address and your telephone number to the named partner; the partner uses this data under their own responsibility for their information. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with effect for the future — toward us and toward the partner, in each case via the unsubscribe link in the respective emails or informally by message.
This website embeds videos from the YouTube website. The site operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. As a result, YouTube does not store any information about visitors to this website unless they watch the video.
This website uses the Google Maps mapping service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there.
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time on page, operating systems used and the origin of the user.
You can prevent the collection by Google of the data generated by the cookie and relating to your use of the website, and the processing of this data by Google, by downloading and installing the browser plugin.
This privacy policy was last updated on August 2, 2026.