Privacy Policy

We take the protection of your personal data seriously. This policy explains what happens with your data when you use this website or book our services. Short version: we use first-party analytics only — no third-party trackers and no ads. An analytics cookie is set only if you accept it; if you decline, we keep just anonymous, aggregate counts. When you complete a booking, its details are stored in our own database so we can arrange the cleaning.

1. Data Controller

Clean Planet KG
Siebenbrunnengasse 28, 1050 Wien, Austria
E-Mail: office@cleanplanet.now
Phone: +43 660 963 20 35

2. What data we process

Booking and contact data — name, phone number, chosen service, preferred date and any message you write when you contact us via the booking form, WhatsApp, e-mail or phone.
Contract data — address of the premises, appointment details and invoicing data when you actually book a cleaning.
Job application data — when you apply through our Careers page: your name, contact details, the role you are interested in, any message, and the CV file you choose to upload. It is stored only to consider you for work and is used for no other purpose.
Server log data — our hosting provider automatically logs IP address, date, time and browser type when the site is accessed (standard web-server logs, kept short-term for security).
Usage data — anonymous, aggregate statistics about page views and button clicks (device type and referring website), described in section 5. This contains no name, e-mail or IP address.

3. How the booking works

When you complete the booking wizard and press Confirm, the details you entered (cleaning type, frequency, hours, date, and your name, phone, e-mail, address and any notes) are sent to our own server and stored in our database so our team can arrange and confirm the cleaning. The data is not sold or shared with advertisers; it is held only for the purposes below.

You can also choose to send the booking to us on WhatsApp or by e-mail. In that case your entries are handed to WhatsApp (Meta Platforms Ireland Ltd.) or your own mail app as a pre-filled message that you send yourself; WhatsApp's own privacy policy then applies and data may be processed outside the EU. Our internal booking dashboard is protected by a private access code and is not reachable by site visitors.

4. Purposes and legal basis

Answering your request and preparing a quote — Art. 6(1)(b) GDPR (steps prior to a contract).
Providing and invoicing cleaning services — Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (statutory retention duties).
Considering your job application — Art. 6(1)(b) GDPR (steps prior to an employment contract) and your consent, Art. 6(1)(a) GDPR.
Security of the website (server logs) — Art. 6(1)(f) GDPR (legitimate interest).
Anything based on consent — Art. 6(1)(a) GDPR; you can withdraw consent at any time.

5. Cookies and analytics

We use privacy-friendly, first-party analytics to understand how our site is used — which pages and buttons are popular — so we can improve it. We do not use Google Analytics or any third-party tracking or advertising service, and we never sell or share this data. When you open the site you are asked whether to allow the analytics cookie:

If you accept, we set one first-party cookie (cp_vid, kept up to 12 months) plus a short-lived session cookie (cp_sid, about 30 minutes). They hold only a random, anonymous identifier — no name, e-mail or other personal detail — used to count unique visitors and understand a visit's journey.
If you decline, no analytics cookie is set. We still keep an anonymous, aggregate count of page views and button clicks (device type and referring website only), which cannot be traced back to you.

Your choice is remembered in a small cp_consent cookie and you can change it at any time by clearing your cookies. The legal basis is your consent (Art. 6(1)(a) GDPR) for the analytics cookie, and our legitimate interest in basic anonymous usage statistics (Art. 6(1)(f) GDPR) for the aggregate counts. When you simply browse the site, your browser contacts only our own server — fonts are self-hosted and there are no third-party trackers, advertising networks or embedded maps. The providers that help us host the site and send confirmations are listed in section 6. (Our staff admin area also uses a login cookie, but that is never set for site visitors.)

6. Service providers and recipients

To run the website and answer your requests we rely on a small number of carefully selected service providers (processors under Art. 28 GDPR). They act only on our instructions:

Hosting — the website and its database run on Railway (Railway Corp.); the server and stored data are located in the EU (Amsterdam).
E-mail delivery — when you submit the booking, contact or careers form, your request is e-mailed to our office and a confirmation is e-mailed to you through Brevo (Sendinblue GmbH), a transactional e-mail provider.
Office mailbox — our office e-mail (office@ / bestellung@cleanplanet.now) is hosted on Microsoft 365 (Microsoft Ireland Operations Ltd.).
Google reviews — the star rating and a few recent reviews shown on the site are retrieved from Google (Google Ireland Ltd.) via the Google Places API on our server and cached, so your browser is not contacted by Google when you open the site. Legal basis: our legitimate interest in showing genuine customer feedback, Art. 6(1)(f) GDPR.
WhatsApp option — if you choose to send your booking on WhatsApp, it is handed to Meta Platforms Ireland Ltd. as described in section 3.

We do not sell your data or share it for advertising, and we do not collect card payments on this site — cleaning services are invoiced afterwards. Data is disclosed to authorities only where the law requires it.

Transfers outside the EU. Some of these providers belong to groups based outside the EEA (for example in the USA). Where personal data is processed outside the EEA, this happens on the basis of the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, which provide an adequate level of protection.

7. Retention

We keep personal data only as long as needed for the purposes above or as long as statutory retention periods (e.g. tax law, 7 years for invoices in Austria) require. Job applications that do not lead to employment — including any CV you uploaded — are deleted within six months, unless you agree to us keeping them on file for future openings.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise any of these, write to office@cleanplanet.now. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at).

9. Data security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

10. Changes

We may update this policy when the website or the law changes. This version is dated 27 August 2026.