Pages
Features
Your brand
Pricing
About
Contact
Products
BlitzFin
Cost calculator
Knowledge
Guide
Journal
Help
Support
Information on data protection and the processing of personal data at BlitzFin.
Please note: this English text is a convenience translation. The German version (Datenschutzerklärung) is the legally binding one. References to “Art. … GDPR” correspond to the German “DSGVO”.
The following notes provide an overview of what happens to your personal data when you visit this website. Personal data means any data by which you can be personally identified.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the controller” in this privacy policy.
How do we collect your data?
Some of your data is collected because you provide it to us. This may, for example, be data you enter into a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data (for example browser, operating system, or time of page access).
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. All your rights are listed in the section “Your rights as a data subject”.
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may primarily involve IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The host is used for the purpose of fulfilling our contract with potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR).
This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, San Francisco, CA 94107, USA). The application at app.blitzfin.com and on customer domains is delivered via the Cloudflare network (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare accepts the encrypted connection and forwards the requests to our servers at Google Cloud (transit and security service, including protection against attacks). In doing so, Cloudflare processes in particular IP addresses and technical connection data as well as the transmitted content. The legal basis is our legitimate interest in secure and fast delivery (Art. 6 (1) (f) GDPR). Data processing agreements are in place with both providers; transfers to the USA are based on the EU standard contractual clauses and the EU-US Data Privacy Framework respectively.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.
When you use this website, various items of personal data are collected. This privacy policy explains what data we collect and what we use it for.
The controller for data processing on this website is:
blue media labs GmbH
Am Isenbrink 2a
30926 Seelze
Email: info@blitzfin.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names, email addresses and the like).
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing no longer applies.
Some of the service providers named in this privacy policy are based in the USA or may transfer data there. The EU Commission has adopted an adequacy decision for the USA (EU-US Data Privacy Framework, Art. 45 GDPR); it applies to companies certified under this framework. Where a provider is not certified, we base transfers on the EU standard contractual clauses (Art. 46 (2) (c) GDPR). For each service we state whether a transfer may take place.
Our web pages use what are known as “cookies”. Cookies are small data packets and cause no damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies).
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally, and to activate the automatic deletion of cookies when the browser is closed.
The provider of these pages automatically collects and stores information in what are known as server log files, which your browser transmits to us automatically. These are:
This data is not merged with other data sources. The legal basis is our legitimate interest in providing the website in a technically error-free and secure manner (Art. 6 (1) (f) GDPR).
If you send us inquiries via the contact form, the details you provide in the inquiry form, including the contact details you give there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
The form is processed by our host Netlify (Netlify Forms, address above); the entries are stored there and delivered to us. The legal basis is Art. 6 (1) (b) GDPR where your inquiry relates to a contract or its initiation, and otherwise our legitimate interest in answering inquiries (Art. 6 (1) (f) GDPR). We delete the details once your inquiry has been fully dealt with and no statutory retention obligations apply.
To provide access to the BlitzFin Construction Cost Calculator, we collect contact details (name, email address, telephone number) and project details (building type, site area, residential units, rentable area, postal code area, planned construction start) via an onboarding form. We use this data to create your user account, prepare your construction cost estimate and send you the access link by email. The legal basis is Art. 6 (1) (b) GDPR (performance of the usage contract, or pre-contractual measures at your request).
The form is technically provided via the Typeform service (TYPEFORM S.L., Carrer de Bac de Roda 163, 08018 Barcelona, Spain). Typeform processes the form entries on our behalf.
Login to the Construction Cost Calculator is password-free, via personalized access links that we send you by email.
If you give your consent in the onboarding form to receive news information, we log the time, the IP address and the version of the consent text as a record of that consent (Art. 7 (1) GDPR, Art. 6 (1) (f) GDPR — demonstrability of consent given).
The BlitzFin application and the data processed within it (account data, project and cost data, uploaded documents such as invoices) are operated on the Google Cloud Platform (Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland). Processing and storage take place in data centers in the European Union (Frankfurt am Main region). The legal basis is performance of the usage contract (Art. 6 (1) (b) GDPR) and our legitimate interest in secure and reliable operation (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Google.
The BlitzFin application can read documents that are uploaded or received by email, such as invoices, with the help of an AI language model in order to suggest details from the document (e.g. issuer, amounts, dates) for adoption. For this we use the Gemini language model via the Vertex AI service of Google Cloud EMEA Limited (address above). The respective original document is transmitted to Google and processed there – including the personal data it contains, e.g. names, addresses and bank details.
Google processes the data as our processor. Where documents in our customers' project rooms are concerned, we act on behalf of the respective customer (see Processing on behalf of our customers).
In the settings of a project room we show the location of the construction site on a Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For this, the site address as well as your IP address and technical details of your browser are transmitted to Google; Google may also transfer this data to servers in the USA (basis: EU-US Data Privacy Framework). The legal basis is our legitimate interest in a clear presentation of project data (Art. 6 (1) (f) GDPR). Further information: https://policies.google.com/privacy.
Paid plans are processed via the payment service provider Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Billing data (company name, billing address, VAT identification number, payment method) is collected directly by Stripe and stored there; in our application we store only a reference to the Stripe customer record, no payment method or billing data. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR). Stripe may also transfer data to Stripe, Inc. in the USA; this is based on the EU standard contractual clauses and the EU-US Data Privacy Framework respectively.
To improve the application and detect errors, we record which features are used (e.g. login, creating a project room, creating an estimate), each with the time and the identifiers of the user account, the organization and the project room. The content of documents or project data is not recorded. The analysis is carried out exclusively internally; no data is passed on to third parties. The legal basis is our legitimate interest in improving our offering and keeping it free of errors (Art. 6 (1) (f) GDPR).
You can connect BlitzFin yourself to an AI assistant, such as ChatGPT (OpenAI) or Claude (Anthropic). After you log in and grant access, the assistant can retrieve data from your BlitzFin account within your permissions, e.g. cost overviews or open invoices, and save estimates to your account. Without an account, only the construction cost estimate is available; for it we process only the details the assistant submits for the estimate.
The transfer to the assistant takes place at your initiative (Art. 6 (1) (b) GDPR). The provider of the assistant is not our processor but processes the data under its own terms and privacy notices. You can disconnect at any time in the assistant's settings.
When companies use BlitzFin for their construction projects, we process the content of their project rooms – such as documents, invoices and details of contractors and project participants – on behalf of these customers. In this respect, the controller within the meaning of the GDPR is the respective customer; this is governed by our data processing agreement (DPA). The service providers we use for this are listed on our subprocessors page.
If you are recorded in a project room, e.g. as a contractor, please contact the company that operates the project room with questions about your data. We forward inquiries that reach us to that company.
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
The newsletter is sent on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time.
For sending our emails and newsletters, and for receiving emails at application mailboxes (for example the invoice inbox addresses of the project rooms), we use Brevo (Brevo SAS, 7 rue de Madrid, 75008 Paris, France). Brevo processes the data required for this (in particular email addresses, names, telephone numbers and email content including attachments) on our behalf on servers in the European Union.
Where the Construction Cost Calculator is offered in collaboration with a partner (the partner is named in the respective onboarding form, for example Stadtblick Architekten), the consent you give there covers the receipt of news information both from us and from that partner. For this purpose we transmit your name, your email address and your telephone number to the named partner; the partner uses this data under their own responsibility for their information. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time with effect for the future — toward us and toward the partner, in each case via the unsubscribe link in the respective emails or informally by message.
This website embeds videos from the YouTube website. The site operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. As a result, YouTube does not store any information about visitors to this website unless they watch the video.
On our contact page we embed a booking calendar provided by Cal.com so you can arrange a call without going through the form. The provider is Cal.com, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. We use the European instance of the service (app.cal.eu); according to the provider, data is stored and processed exclusively within the European Union.
The calendar loads as soon as you open the contact page. Doing so establishes a connection to the provider's servers and transmits your IP address and technical details about your browser — this is technically necessary to display the calendar. If you book a slot, we additionally process the details you enter (name, email address, time slot and any message) in order to confirm and hold the appointment.
The legal basis is our legitimate interest in simple and reliable scheduling with prospective customers (Art. 6(1)(f) GDPR); where the booking serves to initiate a contract, Art. 6(1)(b) GDPR applies in addition. A data processing agreement under Art. 28 GDPR is in place with the provider. If you prefer not to use the calendar, the contact form on the same page and email to info@blitzfin.com remain fully equivalent ways to reach us.
Further information is available in the provider's privacy policy: https://cal.com/privacy.
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time on page, operating systems used and the origin of the user.
We load Google Analytics only if you have consented via our cookie banner. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Without your consent, Google Analytics is not loaded and no data is transmitted to Google. Google Analytics 4 does not store IP addresses. Google may transfer data to Google LLC in the USA; this is based on the EU-US Data Privacy Framework.
You can withdraw or change your consent at any time with effect for the future by opening the cookie settings via the cookie icon at the bottom left.
Where the statutory requirements are met, you have the following rights with respect to us:
Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. You may object to the use of your data for direct marketing at any time without giving reasons.
An informal message to info@blitzfin.com is sufficient to exercise your rights.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the data protection supervisory authority of the state of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.
This privacy policy was last updated on October 2, 2026.