Privacy notice

Service provider and contact

FixitMo
Mohamed Othman
Str. der Pariser Kommune 11 10243 Berlin

Website operation

Cloudflare hosts the production website, server functions, database and file storage; project images, receipts and photos sent with booking requests use Cloudflare storage. Requests may include IP address, time, requested URL and technical browser information. Processing supports delivery, reliability and security of this service (Art. 6(1)(f) GDPR).

Enquiries, appointments and invoices

We process personal and company names, email addresses, phone numbers, contact preferences, billing and service addresses including city and country, job description, appointment request and optional team preference to respond, prepare a quote and organise the work. Company enquiries may include workstation counts and deadlines. Required fields allow us to handle your request; you can omit optional details. The basis is pre-contractual measures or contract performance (Art. 6(1)(b) GDPR); invoice and accounting records also fulfil legal obligations (Art. 6(1)(c)). Information is stored in the private CRM.

Photos you send with a booking request

Adding photos is optional. We use them only to understand and assess the job and to prepare a quote before Mo replies. The photos are reduced in size on your device, then stored in the private CRM and in Cloudflare storage; only the owner can open them, and they are not published or included in our offsite backups. If a request does not go ahead (it is declined, not confirmed in time or cancelled), its photos are deleted automatically 30 days later. Photos of jobs that go ahead are kept with the job record for as long as they are needed for the work and any follow-up questions; you can ask us to delete them at any time. Photos may show part of your home: please only include what helps with the job and leave out people, personal documents and other sensitive details. Videos cannot be uploaded; you can send them on WhatsApp. Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).

How you found us

When you send a booking request, the form also sends where your visit came from: campaign tags in the link you clicked (for example utm_source, or the name of an ad click ID but never its value), the domain of the website that linked to us (not the full address) and the page you arrived on. If you move to another page first, this travels along in the link; nothing is stored on your device for this. We use it to see which advertising and channels bring enquiries and what an enquiry costs us. It is stored with your enquiry in the private CRM and deleted with it. The basis is our legitimate interest in measuring our advertising (Art. 6(1)(f) GDPR); you can object at any time.

Online withdrawal

If you use the “Withdraw from contract” form, we store your name, email address, the contract details and your message with the time of receipt, send you a receipt by email and show the withdrawal to Mo in the private CRM and as a phone alert (name and contract only). We keep it as proof of your withdrawal for as long as statutory limitation and retention periods require. Legal basis: legal obligation (Art. 6(1)(c) GDPR, § 356a BGB).

Review requests after a job

After a finished job, FixitMo may ask you by email for an honest review on Google, using the email address you gave us for the job (§ 7(3) UWG; legitimate interest, Art. 6(1)(f) GDPR). You can object at any time without any costs other than the basic transmission costs: reply “Stop” or use the link in the email, and we will not send you such messages again.

Calendar and email

When Mo connects Google Calendar, job appointments and relevant job details are sent to that calendar. The website reads busy periods to prevent conflicting bookings; visitors cannot see private calendar details. Email alerts and reminders use the connected business Gmail account, or Resend when configured. Email and WhatsApp correspondence is handled through the business accounts, as requested by you.

Reading purchase receipts

For bookkeeping, the owner can photograph receipts and supplier invoices for business purchases. The photo or PDF is then sent to Anthropic, the provider of the Claude API, which reads the printed text (supplier, date, amounts, VAT) and returns it to the CRM; the owner checks every value before it is saved. Only the receipt file is sent, no other customer or CRM data. Receipts usually contain supplier details and, occasionally, names of staff or of the buyer. Anthropic acts as our processor under its data processing terms; under its commercial terms, content sent through the API is not used to train its models. Processing may take place outside the EEA, including in the USA, on the basis of the safeguards in those terms (standard contractual clauses). The receipt itself is stored with our bookkeeping records. Legal basis: our legal obligation to keep accounting records (Art. 6(1)(c) GDPR) and our legitimate interest in efficient bookkeeping (Art. 6(1)(f) GDPR).

Backups and operational alerts

When the owner enables offsite backups, encrypted copies of CRM business records and referenced files are stored in a private Google Drive folder. The recovery key is kept separately. When configured, Telegram receives operational backup-status alerts without customer names, addresses, receipt contents or invoice amounts. These optional connections are controlled by the owner. When you ask us to erase your data, it is removed from the CRM at once; records we must keep for tax law (issued invoices, payments) stay, with your other details removed. Copies of erased data can remain in the database’s 30-day recovery history and in encrypted backups until they rotate out: backups keep the last 30 days and one per month for 12 months, and a removed backup stays in the Google Drive trash for up to 30 more days. Each erasure is recorded without personal data, so that it can be repeated if a backup is ever restored.

Cookies and device storage

No advertising trackers, third-party analytics, embedded social-media feeds or external fonts are included in the current application. Public language selection uses the page URL, not a new storage entry. Earlier versions saved fixitmo-language in local storage; that entry is no longer used and can be removed through browser settings. Owner sign-in and calendar connection use authentication/security storage where necessary. Such storage supports explicitly requested sign-in or connection functions (§25(2) TDDDG). No optional tracking is enabled, so there is no “accept all” banner.

External links, photos and reviews

WhatsApp and Taskrabbit are links, not embedded widgets. Clicking them opens the respective provider, whose privacy rules apply. The gallery only publishes projects marked as permitted for publication. Taskrabbit reviews are a dated, selected collection with source links, not a live feed; the profile rating relates to the full profile. Please avoid submitting sensitive details or identifiable third parties in job photos.

Retention and international processing

Enquiries that do not become jobs are kept, so we can pick up where we left off if you get in touch again, until FixitMo deletes them or you ask us to delete them. Job, invoice and tax-related records have separate statutory retention requirements.

Cloudflare (hosting, database, storage), Google (calendar, email, backups) and Resend (email) process data on our behalf. They may process data outside the EEA, including in the USA; this is based on data-processing agreements and the providers’ EU-US Data Privacy Framework certification or standard contractual clauses.

Your rights

You may request access, correction, erasure, restriction and data portability where applicable, and object to processing based on legitimate interests. Any consent can be withdrawn for the future. Contact the email above. You can complain to a data-protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. The guided booking assistant uses fixed questions; no external generative AI service or automated decision with legal effect is used.

Berlin data-protection authority