Privacy Policy
Last updated: April 24, 2025
This privacy policy explains how AVAMENT processes personal data in connection with the use of the platform, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
AVAMENT Responsible person: Ferhad Hesso (Managing Director) Josefstr. 8, 82178 Puchheim, Germany Tax number: 117/228/30743 Email: info@avament.com Phone: +49 15565426997
2. Personal Data We Process
Contact details: name, email address and phone number, for identification and communication. Project data: tasks, content and comments used to manage construction projects. Project photos: uploaded for documentation and progress visualization. Push notification tokens: used to send alerts to registered devices. Device information (e.g. device type, operating system) is not collected.
3. Purposes of Processing
Account creation and management for platform access. Project management: organizing construction projects, tasks and team communication. Photo storage for documentation and coordination. Push notifications for reminders about tasks, reports or contact requests.
4. Legal Basis
Art. 6(1)(b) GDPR (contractual necessity): for user accounts, project management and photo storage. Art. 6(1)(a) GDPR (consent): for push notifications. Art. 6(1)(f) GDPR (legitimate interest): to ensure platform security.
5. Data Sharing and Hosting
We do not share data with third parties (e.g. advertisers). Hosting partner: Contabo GmbH (ISO 27001-certified). Server location: Germany (GDPR-compliant). No data is transferred outside the EU.
6. Data Retention and Deletion
Active account data is stored until the company subscription ends. Inactive accounts are automatically deleted after three months of inactivity. Company administrators can delete or export data directly through the platform.
7. Your Rights
You have the right to access and correct your data via your company's admin role. Because AVAMENT operates on a B2B subscription model, deletion must be requested by the contracting company — individual users should contact their company administrator.
8. Technical Security Measures
Data is transmitted exclusively via HTTPS and stored using AES-256 encryption. Each company has its own separate database with no cross-company access. We do not use cookies or tracking tools (e.g. Google Analytics). Push notification tokens can be deactivated via device settings or by deleting the app.
9. B2B Model Specifics
Because companies independently manage their subscriptions and employee accounts, individual users cannot request deletion directly. Roles — Admin: full control over user data and projects. Read/Write: edit tasks and comments. Read-only: view project details only.
10. Contact and Complaints
Please direct requests to your company administrator or to info@avament.com. You also have the right to lodge a complaint with the competent supervisory authority: the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).
11. Changes to This Policy
Changes are published at least 14 days before taking effect. We notify you by email of any significant changes (e.g. new processing purposes).