Privacy Policy

‍Note: The right-hand column and the summaries provide a brief explanation of the privacy policy and are not legally binding.  

I. SCOPE OF THE PRIVACY POLICY  

§ 1.1 Scope. This privacy policy applies to services (the "reebuild. Services") provided on https://reebuild.com/ and our other websites, mobile or desktop applications (the "Platform"), as well as other interactions (e.g., customer service inquiries, user conferences, etc.) that take place between you and us.  

The reebuild. services include, in particular:  

  • (a) visiting the platform;  
  • (b) the account to be set up by you (the "User Account");  
  • (c) the purchase of physical products via the platform; and  
  • (d) subscriptions related to construction cost management software (the "Subscription").  

In short: Please always keep this privacy policy in mind when using the reebuild. services.  

§ 1.2 Consent. If you do not agree with the terms of our privacy policy, you may not access or use the reebuild. services, the platform, or any other aspects of our business.  

§ 1.3 Third-Party Providers. This privacy policy does not apply to third-party applications or software integrated into the reebuild. services via a platform ("Third-Party Services"), or to products, services, or companies of other third parties.  

§ 1.4 Definitions. "We," "our," and "us" refer to the persons mentioned in Art. XVI.  

II.

DATA WE COLLECT AND RECEIVE

§ II.1 Registration Data. When you create a user account, we receive the following information from you or a third party ("Registration Data"):  

In short: There is content that you voluntarily upload to the platform, and there is other information that we collect and receive from you while you use the platform and the reebuild. services. Please read on to learn more about our obligations regarding such information.  

  • (a) If you register via a platform, we receive:  
    • i. your first and last name, an email address, and a password. This is mandatory information; as well as  
    • ii. if provided voluntarily by you, your phone number.  
  • (b) When registering via social logins Facebook, Google, and Apple, we receive: your first and last name and an email address in each case.  
  • (c) For personally assisted onboarding, we receive:  
    • i. your first and last name and an email address. This is mandatory information; as well as  
    • ii. if provided voluntarily by you, your phone number.  

§ II.2 Account data. When purchasing physical products or activating a subscription, you provide us or our payment service providers with billing information such as credit card details, bank details, billing address, or payment ID number ("Account Data").  

§ II.3 Other information. We also collect, generate, and/or receive other information and data ("Other Information"):  

  • (a) Usage information:   
    • i. Metadata of reebuild. services: When you use reebuild. services, metadata is generated that provides additional context about your usage behavior. For example, we can log the features, content, links, or third-party services (as defined below) that you have viewed or used.  
    • ii. Log data: Like most websites, our servers also automatically collect information when you access the platform and record it in log files. This log data includes the Internet Protocol (IP) address, the address of the website visited before using the platform, browser type and settings, the date and time of platform usage, information about browser configuration and plugins, language settings, and cookie data.  
    • iii. Device information: We also collect information about devices used to access reebuild. services, including device type, operating system used, device settings, application IDs, unique device identifiers, and crash data.  
    • iv. Location information: We receive information from you and other third parties that helps us approximate your location, such as an IP address received via your browser or device. We may also collect location information from devices, provided this is permitted in the settings of the respective device.
    • We work with Microsoft Clarity and Microsoft Advertising together to track behavioral metrics, heatmaps, and session recordings (session replay) to track how you use and interact with our website. This is done to improve and market our products and services. Website usage data is collected using first-party and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. Furthermore, we use this information for website optimization, security and fraud prevention purposes, and advertising. For more information on how Microsoft collects and uses your data, please see the Microsoft Privacy Statement.
  • (b) Third-party services:   
    • i. Where available, you may choose whether to allow or restrict third-party software integrated into the reebuild. services ("Third-Party Services"). We may also develop and offer our own applications that connect the reebuild. services with a third-party service. Once third-party services are enabled, such a provider may share certain information with us. For example, if a cloud storage application is enabled to allow the import of files into a user account, we receive your username and email address, as well as other information that this application provides to us to facilitate integration into the reebuild. services. For precise details on what data is shared with us in this process, please refer to the privacy policy of the respective third-party service.  
    • ii. When a third-party service is enabled, we are authorized to connect to and access other information provided to us in accordance with our agreement with the third-party provider. However, we do not receive or store passwords for these third-party services when we connect them to the reebuild. services.  
  • (c) Data from third parties: We may receive data about your visits to the platform, marketing campaigns, and other matters related to our business from affiliates, our partners, or other third parties. We may use this to improve our offering or to make the content provided to you more useful. We may also combine this data with other information we have collected and include data at an aggregate level, such as the language and country from which you access the reebuild. services. Or it may be more specific, for example, providing insight into how well an online marketing or email campaign performed.  
  • (d) Data from scanned documents and data collected through manual customer input: We process all data from documents uploaded by the user to the workspace and manual entries, such as: framework agreements, order confirmations, delivery notes, invoices, company and project data, bills of quantities, and subcontractor orders and invoices. We use this data to extract and process all information regarding individual order processes to enable the reebuild. services (processing into digitally available commercial information on construction material deliveries). Furthermore, we use the data to analyze ordering patterns and aggregate market data, which is made available to all users on the platform in anonymized form. Data derived from this includes order numbers, product information, quantities, prices, delivery dates, and payment terms.  
  • (e) Processing of driver location data: During individual deliveries, we process the location data of the respective driver to enable the customer to track their order in real time.  
  • (f) Additional information: We also receive other information when it is submitted to us via the platform or otherwise, such as when you participate in a contest or event, apply for a job, request support, interact with our social media channels, or otherwise contact us.  

§ II.4 Automatic collection. In principle, no one is legally or contractually obligated to provide registration data or other information (collectively, "Information"). However, certain information is collected automatically or is strictly necessary for the use of the reebuild. services.  

III.

HOW WE USE INFORMATION

§ III.1 User account data. We use registration data and other information collected through the use of the user account ("User Account Data") in accordance with your instructions and applicable law. In this regard, we act as a processor of such data, and you are the controller. For example, you may modify or remove data or configure specific settings.  

§ III.2 Other information. We use other information, excluding that covered in § 3.1, to pursue our legitimate interests in operating the reebuild. services, platforms, and our business. Specifically, we use other information:  

In short: we only use the data we store to provide and improve the reebuild. services and for related business purposes. Naturally, we always comply with all applicable laws.  

  • (a) to provide, update, maintain, and protect the reebuild. services and platform. This includes, in particular,:  
    • i. providing the reebuild. services in a format tailored to your location;  
    • ii. preventing and addressing service errors or security and technical issues; and  
    • iii. analyzing and monitoring usage, trends, and other activities;  
  • (b) if required by applicable law, legal process, or regulations;  
  • (c) to communicate with you by responding to your inquiries. If you contact us, we may use your other information to respond;  
  • (d) to send emails and other communications. We may send you service, technical, or administrative emails and other types of messages, such as push notifications. We may also contact you to inform you about changes to the reebuild. services, our offerings within the scope of the reebuild. services, and important notices related to the services, such as security and fraud alerts. These communications are considered part of the reebuild. services, and you therefore cannot opt out of them. In addition, we sometimes send emails or other notifications about new product features, promotional communications, or other news about our company. These are marketing messages, so you can decide for yourself whether you want to receive them. If you have any further questions about a message you have received from us, please contact us;  
  • (e) for billing, account management, and other administrative matters. We may need to contact you for billing, account management, and similar purposes, and we use account information to manage accounts and keep track of billing and payments; and  
  • (f) to investigate and help prevent security issues and abuse.  

§ III.3 Personal and anonymized data. When information is aggregated or anonymized so that it can no longer be reasonably linked to an identified or identifiable natural person, we may use it for any business purpose. To the extent that information is linked to an identified or identifiable natural person and is protected as personal data under applicable data protection law, it is referred to in this privacy policy as "personal data."  

IV.

LEGAL BASES

§ IV.1 Legal provisions. We process your data in accordance with the provisions of:  

  • (a) the General Data Protection Regulation (GDPR);  
  • (b) Austrian data protection regulations, such as the Data Protection Act (DSG); and/or  
  • (c) other national requirements applicable to the matter. This may also include laws from the country in which you reside.  

§ IV.2 Data categories. We process the aforementioned data categories in accordance with the following provisions of the GDPR:  

  • (a) Registration and account data based on Article 6(1)(a) for data where you have provided consent, and (b) for data that we necessarily require to fulfill our contractual obligations;  
  • (b) Other information based on Art. 6(1)(a) for data for which you have consented to processing, (b) for data that we necessarily require to fulfill our contractual obligations, and (f) for processing that is necessary to protect the legitimate interests of us or a third party; and  
  • (c) Legal obligation: in the event that the processing of your data is required to fulfill one of our legal obligations, this is based on Art. 6(1)(c).  

V. DATA RETENTION  

§ V.1 Settings. We retain user account data in accordance with your instructions and applicable laws. Depending on the subscription chosen, you may be able to adjust certain retention settings. The deletion of user account data may lead to the deletion or anonymization of certain associated other information.  

In short: we retain information for as long as is necessary to provide the reebuild. services or is legitimate for supporting our business.  

§ V.2 Retention period. We are entitled to retain other information concerning you for as long as is necessary to fulfill the purposes described in this privacy policy. This may include retaining your other information even after your account has been deactivated, for as long as is necessary to pursue our legitimate business interests, conduct audits, fulfill and demonstrate compliance with legal obligations, resolve disputes, and enforce our agreements.  

VI.

RECIPIENTS OF DATA SHARED BY US

§ VI.1 Policies and practices. Here we describe the circumstances under which we may share and disclose information. In principle, you set your own policies and practices for the sharing and disclosure of information, and we have no control over how you or other third parties share or disclose information.  

§ VI.2 Instructions and applicable law. We will share and disclose user account data solely in accordance with your instructions and applicable law.  

§ VI.3 Third-party service providers and partners. We may engage third-party companies or individuals as service providers or business partners to process other information and support our business. These third parties may, for example, provide virtual computing and storage services, or we may share business information to develop strategic partnerships with third-party providers to support our mutual customers. Before engaging a processor, we review their data protection, security, and confidentiality practices and enter into an agreement that sets out the relevant obligations.  

  • (a) Tools and applications connected to our platform and the reebuild. services.  

In short: we do not sell your data or otherwise share it with third parties, unless it helps us provide the reebuild. services or we are legally required to do so.  

  • i. Website activity:  
    • SiteGround Spain S.L. (Calle de Prim 19, 28004 Madrid, Spain)  
    • Dealfront Finland Oy (Kalevankatu 6, 00100 Helsinki, Finland) as part of the Dealfront Group GmbH  
    • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland)  
  • ii. Customer inquiries: We use the following services to receive and manage customer inquiries:  
    • Calendly LLC (115 E Main St., Ste A1B, Buford, GA 30518 USA)  
  • iii. Emails: We use the following services to send emails, which handle both the processing and analysis of the delivery:  
    • Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg)  
  • iv. reebuild. service performance and quality: We use the following services to monitor performance and quality:  
    • Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg)  
  • v. Customer relations and HR management: We use the following CRM software to improve customer and HR management:  
    • HubSpot, Inc. (25 First Street, Cambridge, MA 02141 USA)  
  • vi. Surveys: We use the following services to improve our products through voluntary surveys, learn more about your usage behavior, and tailor our marketing activities accordingly:  
    • TYPEFORM (Calle de Pallars 108 (Aticco), 08018 - Barcelona (Spain))  
  • vii. Cloud service providers: We use the following cloud service providers:  
    • Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg)  
    • Google Cloud (1600 Amphitheatre Pkwy, Mountain View, California, United States)  
    • Microsoft Azure (Redmond, 1 Microsoft Way, United States)  
  • (b) You can find more information about the nature, scope, purposes, and especially the opt-out options for the services described in section § 6.3(a) in the privacy policies of the respective providers.  
  • (c) Our website uses technologies from Dealfront (Dealfront Finland Oy as part of the Dealfront Group GmbH) to analyze visitor behavior. During this process, a visitor's IP address is processed. In this process, the IP address is processed to help us understand which companies (B2B) are visiting our website. As part of the processing, the IP address is enriched with associated information such as the company name or industry code. For this purpose, the website visitor's IP address and corresponding session data are compared against an extensive whitelist of known companies at the start of the session. If we process personal data in this context, we do so based on our legitimate interest (Art. 6 (1) (f) GDPR) in optimizing our products, services, sales, and marketing. To prevent this processing, website visitors can install and configure appropriate ad blockers or use no-script plugins in their browser. The Ddata whoare deleted as soon as they are no longer required for the intended purposes. However, legal retention requirements may result in a longer storage period for the data in question. We have entered into a data processing agreement with Dealfront to ensure compliance with applicable data protection standards.  
  • (d) We value the trust you place in us and are aware of our responsibility to protect your data. We therefore inform you about what data we collect when you use our products and services, why we collect it, and how we use this data to optimize our products and services. Google's privacy policy and principles describe how we handle personal data when you use our products and services, including Google Analytics. Google Analytics primarily uses first-party cookies to track visitor interactions on websites. Users can disable cookies or delete them individually. Further information. Google Analytics also supports an optional browser add-on. WIf users install and activate this, it generally preventsprevents visitor data from being collected by Google Analytics when visiting websitesHowever, the add-on only disables data collection by Google Analytics. If the Google Analytics for Apps SDK or the Google Analytics for Firebase SDK is used on a website or in an app, an app instance ID is collected in Google Analytics. This is a randomly generated number that identifies a single app installation. If a user resets their advertising ID on Android (or the IDFA on iOS), the app instance ID is also reset. If Google Analytics is implemented in apps or on websites in conjunction with other Google advertising products such as Google Ads, additional advertising IDs may be collected. Users can disable this feature in their ad settings and change their preferences for this cookie. Further information.  
  • (e) The platform also contains links to other websites. These are for informational purposes only. We have no control over these websites and the content displayed there. Such websites are therefore not covered by the provisions of this privacy policy. If you click a link, the operator of such a website may collect data about you and process it in accordance with their own privacy policy, which may differ from ours.  
  • (f) External tools and applications. In addition to the above, you have the option to interact with a number of social networks on the platform via plugins. Clicking a plugin for one of these social networks activates it and establishes a connection to the respective network's server. We have no influence over the scope or content of the data transmitted to the operator of the respective social network when the plugin is clicked.  

§ VI.4 Third-party services. You may enable third-party services. We require every third-party service to disclose all permissions for accessing information within the reebuild services, but we do not guarantee that they will actually do so. When enabled, we may share other information with third-party services. Third-party services are not owned or controlled by us, and third parties granted access to other information may have their own policies and practices for its collection, use, and disclosure.  

§ VI.5 Change regarding our company. If a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of our assets or shares, financing, public offering of securities, acquisition of all or part of our business, a similar transaction or proceeding, or steps in contemplation of such activities occurs, some or all other information may be disclosed or transferred, subject to standard confidentiality agreements.  

§ VI.6 Aggregated anonymized information. We may disclose or use aggregated or anonymized other information for any purpose. For example, we may share it with potential or existing business partners for business or research purposes.  

§ VI.7 Compliance with laws. If we receive a request for the transmission of information, we may disclose other information if we believe that the disclosure is in accordance with, or required by, any applicable law, regulation, or legal process.  

§ VI.8 Enforcement of our rights, fraud prevention, and security. We may disclose data to protect and defend the rights, property, or safety of ourselves or third parties, including enforcing contracts or policies, or in connection with investigations and the prevention of fraud or security issues.  

§ VI.9 Consent. We may share other information with third parties if we have your consent.  

VII.

COOKIES

§ VII.1 Definition. Cookies are small text files that we send to your computer or mobile device to enable the functionality of reebuild. services or to make them easier to use. New cookies are sent to every user account and browser, so they are always unique.  

In short: we have the right to collect technically necessary cookies at all times.  

§ VII.2 Types of cookies. Depending on their characteristics, cookies can be divided into different categories as shown below.  

  • (a) Storage duration:  
    • i. Temporary cookies remain only as long as your browser is open and are automatically deleted when you close your browser. They therefore only exist for the duration of your use of reebuild. services. services, i.e., a "session".  
    • ii. Persistent cookies remain until they are deleted by you or your browser, or until they expire.  
  • (b) Cookie creator:  
    • i. First-party cookies are set by us.  
    • ii. Third-party cookies are set by third parties.  
  • (c) Necessity:  
    • i. Necessary cookies are strictly required for the technical operation of the platform.  
    • ii. Non-essential cookies are used to improve and facilitate your use of reebuild. services, but are not technically strictly necessary. This includes, for example, cookies used to create personalized advertising for you.  

§ VII.3 Our cookies. We use the following cookies:  

  • (a) Necessary cookies;  
  • (b) Analytics cookies; and  
  • (c) Advertising and social media cookies.  

A detailed list of the cookies we use can be found in the appendix § 7.3 of this privacy policy.  

§ VII.4 Rejecting cookies. You can reject all cookies, except for those that are strictly necessary for reebuild. services, the necessary cookies. Such a rejection can:  

  • (a) when visiting the website via the cookie banner; or  
  • (b) be done subsequently in your browser settings. How this works depends on the browser you are using.  

You can find a link to the instructions for the most common browsers here:  

VIII.

SECURITY

§ VIII.1 We take the security of your data very seriously. We work hard to protect the other information you provide from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the other information we collect, process, and store, as well as the current state of technology. Given the nature of communication and information processing technologies, we cannot guarantee that information will be absolutely secure from intrusion by others during transmission over the internet or while stored on our systems or otherwise in our care. If you click on a link to a third-party website, you will leave the platform, and we have no control over and do not endorse the content of third-party websites.  

In short: we are constantly trying to improve the security of our system to protect your data. This is a matter of great importance to us.  

IX.

AGE RESTRICTIONS

§ IX.1 Minimum age. We only permit the use of reebuild. services by individuals who are at least 18 years old.  

In short: you may not use reebuild. services without the consent of your legal guardians if you are under 18 years of age.  

X. EFFECTIVENESS AND CHANGES TO THE PRIVACY POLICY  

§ X.1 Effectiveness. This privacy policy becomes effective on September 1, 2023.  

§ X.2 Changes. We may update this privacy policy from time to time. Such changes may be necessary as laws, regulations, industry standards, or our business and the services we offer evolve. We will post the changes on this website and recommend that you review our privacy policy periodically to stay informed. If we make changes that significantly alter the rights granted to you under this privacy policy, we will provide additional notice, for example, via email or through the platform. If you do not agree with the changes to the privacy policy, you should deactivate your user account.  

In short: please check this page regularly, as this privacy policy may change over time.  

XI.

INTERNATIONAL DATA TRANSFERS

§ XI.1 We may transfer your personal data for processing to countries outside the European Economic Area. In doing so, we strictly ensure that the level of protection required by the GDPR is maintained during such processing.  

In short: we have entered into agreements to ensure that all your data is secure, even when processed outside the EU.  

§ XI.2 Processing under § 11.1 is based on a data processing agreement that includes the European Union Commission's standard contractual clauses.  

XII.

DATA PROTECTION OFFICER

§ XII.1 To communicate with our Data Protection Officer, please send an email to Alexander.Kornell@reebuild.com.  

In short: this is the person you can contact with any questions regarding data protection.  

XIII.

IDENTIFICATION OF DATA CONTROLLER AND DATA PROCESSOR

§ XIII.1 In certain jurisdictions, data protection law distinguishes between the "controller" and the "processor" of information. Generally, the customer is the controller of registration data and account data, and we are the processor of registration data and the controller of other information.  

In short: we acknowledge our responsibility in handling your data and our crucial role in maintaining data security and protection.  

XIV.

YOUR RIGHTS

§ XIV.1 Individuals located in certain countries, including the European Economic Area and the United Kingdom, have specific legal rights regarding their personal data. Subject to legal exemptions, you have the right to request access to information and to demand the update, deletion, or correction of such information. We strive to enable this for you using the settings and tools provided in your user account for the reebuild. services.  

In short: you have the right to know what personal data we have stored about you as an individual.  

§ XIV.2 To the extent that our processing of your personal data is subject to the EU General Data Protection Regulation (GDPR), we rely on our legitimate interests described above as the legal basis for processing your data. We may also process other information that constitutes your personal data for direct marketing purposes, and you have the right to object to our use of your personal data for this purpose at any time.  

XV.

DATA PROTECTION AUTHORITY

§ XV.1 Data Protection Authority. Subject to applicable law, you also have the right to:  

  • (a) restrict our use of other information that constitutes your personal data; and  
  • (b) lodge a complaint with your local data protection authority or the Austrian Data Protection Authority, which is our lead supervisory authority in the European Union.  

If you are located in the European Economic Area and believe that our storage of your personal data falls under the scope of the GDPR, you may direct questions or complaints to our lead supervisory authority:  

Austrian Data Protection Authority  

Barichgasse 40-42, 1030 Vienna, Austria / Europe  

Phone: +43 1 52 152-0  

Email: dsb@dsb.gv.at  

In short: our handling of data protection matters is monitored by government authorities, whom you may contact if you have any questions or concerns.  

§ XV.2 United Kingdom. If you are based in the United Kingdom and believe that we are managing your personal data under the applicable local data protection laws, you may direct questions or complaints to the UK supervisory authority, the Information Commissioner's Office.  

XVI.

CONTACT INFORMATION  

§ XVI.1 You can also contact us if you have any questions about this privacy policy or our activities, or if you wish to exercise any of your legal rights. We will respond within a reasonable timeframe. You can reach us at support@rebuild.com or at the following postal address:  

reebuild GmbH, Seidigasse 21/, 1030 Vienna / Austria.  

APPENDIX § 7.3 COOKIES  

Name
Purpose
Provider
Necessity
Retention period
Legal basis GDPR

‍
sentry-sc
Bug Reporting
Sentry, Inc.
Necessary to ensure the smooth and error-free operation of the application
12 days
Necessary for the performance of a contract
_ga_SPW5BDEQ1C
Website analytics
Google Ireland Limited
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for the performance of a contract
AMP_ba62b82db2
Bug reporting
Sentry, Inc.
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for the performance of a contract
_stripe_mid
Bug reporting
Sentry, Inc.
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for contract fulfillment
_ga
Website analytics
Google Ireland Limited
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for contract fulfillment
AMP_MKTG_ba62b82db2
Bug reporting
Sentry, Inc.
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for contract fulfillment
intercom-session-Ipvu1c5n
Image display
ImageKit Private Limited
Necessary to ensure the smooth and error-free operation of the application
1 year
Necessary for contract fulfillment