Privacy Policy

Last updated: [DD Month YYYY]

1. Controller

[Legal company name], [legal form]
[Street, ZIP, City, Country]
Email: support@3s-clean.com
Phone: [phone]

2. Categories of Personal Data

Depending on the services used, we process in particular:

• Identification & contact data (name, email, phone)
• Booking & contract data (service, add-ons, address, appointment, access instructions)
• Payment & invoicing data (payment method, invoice data, transaction references)
• Technical usage data (IP address, device/browser data, logs)
• Video and photo data for service documentation (if booked)
• Ratings of completed cleanings (stars and an optional comment)

3. Purposes of Processing

• Contract performance and booking management
• Payment processing and invoicing
• Customer support and complaint handling
• Quality assurance and internal documentation, including the review of ratings
• Employee safety
• Dispute resolution and legal evidence
• Compliance with legal obligations

4. Legal Bases (Art. 6 GDPR)

• Art. 6(1)(b) GDPR (contract)
• Art. 6(1)(c) GDPR (legal obligation, e.g. tax law)
• Art. 6(1)(f) GDPR (legitimate interests: security, fraud prevention, legal claims, quality)
• Art. 6(1)(a) GDPR (consent, where required, e.g. analytics/marketing)

5. Photo Documentation and Footage

We make photos before and after cleaning. If booked, we also make timelapse photos during the service, which are then assembled into video clips. We may also photo-document broken or faulty items. Any footage made may be used for quality control, as evidence of service performed and for employee safety.

Scope limits:

• only within the booked service scope;
• no filming inside drawers/wardrobes/containers unless explicitly requested;
• we avoid personal documents/photos/sensitive items where reasonably possible.

Access: secure, individual, time-limited links and role-based access control. Accessible for customers in their personal account for 7 business days following the service completion notification.
Hosting/processing: via specialised video hosting providers acting as processors (Art. 28 GDPR). No automated decision-making or profiling (Art. 22 GDPR).
Retention: standard retention of before/after photos and of photos of broken or faulty items is 6 months after service completion; timelapse photos and the video clips assembled from them are automatically and irreversibly deleted no later than 10 business days after the service completion notification. Retention may be extended for disputes or legal obligations; where a complaint or claim is raised, the relevant footage is retained until the matter is finally resolved.

Advertising use: only anonymised clips (e.g., blurring faces, documents, addresses, licence plates). If anonymisation is not feasible, we obtain separate explicit consent.

6. Ratings of a Cleaning

Once a cleaning is finished you can rate it in your customer account: one to five stars and, optionally, leave a comment.

Data processed: the star rating, the optional comment, the order it belongs to, and when it was submitted.

Voluntary: rating is voluntary. It is not a condition of the service, and not rating a cleaning does not put you at any disadvantage.

Who sees it: our office and the cleaner who carried out the rated job. Please bear that in mind when writing a comment; we also say so in the rating form itself. Other customers do not see your rating.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is assuring the quality of our service and handling complaints. Where a rating is at the same time a complaint under the contract, the processing is based on Art. 6(1)(b) GDPR.

Not published: we do not publish ratings on our website or in advertising. If we would like to quote one, we ask for your separate consent first.

No automated decision-making: ratings are read by people. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changing and deleting: you can change your rating in your customer account at any time. We will delete it on request -- contact us at support@3s-clean.com.

7. Payment Processing (Stripe)

We use external payment service providers (e.g. Stripe). We do not store full card details on our systems; we typically receive only confirmations and references required for accounting and invoicing. Payment data is processed by the payment provider according to applicable security standards (e.g. PCI-DSS).

8. Cookies & Google Analytics

We use cookies and similar technologies.

Strictly necessary cookies: for login/sessions, security, language preferences, and booking/payment flows.
Legal basis: Art. 6(1)(b) and (f) GDPR and §25(2) No. 2 TTDSG.

Google Analytics: only with your consent (Art. 6(1)(a) GDPR in conjunction with §25(1) TTDSG). IP anonymisation is enabled. You can withdraw consent at any time via cookie settings.

9. Recipients / Processors

We use service providers as processors (Art. 28 GDPR), e.g. for hosting/cloud, email/communication, payments, video hosting, and analytics. They are contractually bound to confidentiality and security.

10. Transfers Outside the EU/EEA

Where data is processed outside the EU/EEA (e.g. in connection with analytics), this is done only with appropriate safeguards (e.g. adequacy decision, EU-U.S. Data Privacy Framework, or Standard Contractual Clauses – SCCs).

11. Retention Periods

• Account data: while the account exists
• Booking/invoice data: up to 10 years (statutory tax retention)
• Before/after photos and photos of broken or faulty items: up to 6 months; timelapse photos and video clips: up to 10 business days (may be longer for disputes/legal obligations)
• Ratings: while your account exists; we delete them earlier on request

12. Your Rights

You have the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority.

13. Contact

support@3s-clean.com