Privacy policy

1. Controller

The controller for personal data processed on this website is Negoshio UG (haftungsbeschränkt), Gengerstraße 6, 40239 Düsseldorf, Germany, email: info@negoshio.com. Managing director: Chad Hladik.

2. Hosting

The website and request API are operated on Amazon Web Services (AWS) in the Frankfurt region (eu-central-1). This includes Amazon S3 (website files), AWS Lambda (request API), and Amazon DynamoDB (stored requests). AWS acts as a processor.

3. Request form

When you submit the homepage form, we process the job details you enter (category, task, the selected follow-up answer, free-text description), address (postcode and city), and contact details (name, email address, and an optional phone number). Filenames of uploaded photos may be sent; the image files themselves stay in your browser and are not stored on our servers.

The purpose is to handle your request: reviewing the details, finding matching tradespeople, comparing and negotiating, and getting back to you.

Legal bases are Art. 6(1)(b) GDPR (steps prior to entering a contract at your request) and Art. 6(1)(a) GDPR (consent via the legal notice checkbox). You may withdraw consent at any time with effect for the future, for example by emailing info@negoshio.com.

4. Retention

We keep requests for as long as needed to handle, negotiate, and document the matter, and then for any statutory retention period. Draft form data may be stored locally in your browser (session storage) and is removed when you end the session or clear storage.

5. Recipients

Only the Negoshio team accesses request data internally. Information needed to match a job may be shared with tradespeople under consideration. AWS receives data as a technical service provider. Messages to you and to tradespeople are stored and sent once email delivery is switched on. After you choose an offer, the selected business receives your contact details.

6. Log data and local storage

When you visit the site, ordinary technical log data (for example time, page requested, and coarse technical details of the request) may be processed to provide and secure the service, legal basis Art. 6(1)(f) GDPR.

The browser may use session storage or local storage to remember a form draft or a request ID on this device. This is needed to run the form and status lookup (Art. 6(1)(b) and (f) GDPR). No marketing cookies are set.

7. Measurement

If a first-party analytics endpoint is configured, we may record anonymised events (for example a page view or a submitted request, without name, email, or phone number) to improve the site. Legal basis Art. 6(1)(f) GDPR. Without a configured endpoint, no such transfer takes place.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on Art. 6(1)(f) GDPR, as well as the right to withdraw consent. A message to info@negoshio.com is sufficient.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is typically the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.