Privacy Policy
1. Data protection at a glance
general information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any information that can identify you personally. Detailed information on data protection can be found in the privacy policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details are provided in the legal notice of this website.
How do we collect your data?
Some data is collected when you provide it to us, for example by filling in a contact form. Other data is collected automatically when you visit the website. This includes primarily technical data (e.g., browser type, operating system, time of access). This data is collected automatically once you enter the website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze user behavior.
What rights do you have regarding your data?
You have the right at any time, free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. You may contact us at any time at the address provided in the legal notice with any questions about data protection.
You also have the right to lodge a complaint with the competent supervisory authority. In addition, you have the right, under certain circumstances, to request the restriction of processing of your personal data. For details, please refer to the section “Right to Restriction of Processing” in this privacy policy.
2. Hosting
External Hosting
This website is hosted by an external service provider (host). Personal data collected via this website is stored on the host’s servers. This may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access logs, and other data generated via the site.
The use of the host is based on fulfilling our contractual obligations toward prospective and existing customers (Art. 6 para. 1 lit. b GDPR) and on our legitimate interest in the secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host will process your data only to the extent necessary to fulfill its performance obligations and in accordance with our instructions.
Conclusion of a Data Processing Agreement
To ensure GDPR-compliant processing, we have concluded a data processing agreement with our hosting provider.
3. General Notes and Mandatory Information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data will be collected. This privacy policy explains what data we collect, how we collect it, and for what purposes. Please note that the transmission of data over the Internet (e.g. email communication) may be subject to security vulnerabilities. Complete protection of data from access by third parties is not possible.
Note on the Controller
The controller responsible for data processing on this website is:
KITICON GmbH & Co. KG
Sibyllenstraße 18
53173 Bonn
Germany
Commercial Register: Amtsgericht Bonn, HRA 10071
VAT ID: DE365659790
Tax Number: 206/5787/1618
Managing Director: Tina Kirfel
Represented by: KITICON Verwaltungs GmbH KG
Sibyllenstraße 18
53713 Bonn
Commercial Register: Amtsgericht Bonn, HRB 28212
Tax Number: 206/5787/1629
Managing Director: Tina Kirfel
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may revoke your consent at any time. An informal email to us is sufficient. The lawfulness of the data processing carried out before the revocation remains unaffected.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right, at any time and for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The legal basis for processing can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or if the processing serves the establishment, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling to the extent it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21 para. 2 GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to have data which we process on the basis of your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only take place where technically feasible.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and the lock icon appearing in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Access, Deletion, and Rectification
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin, recipients, and the purpose of processing, and, where applicable, a right to correction or deletion of such data. You may contact us at any time at the address given in the legal notice for this purpose or with any other questions regarding personal data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time at the address given in the legal notice to exercise this right. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we will usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you may request restriction of processing instead of deletion.
- If we no longer need your personal data but you require it for the establishment, exercise, or defense of legal claims, you may request restriction of processing instead of deletion.
- If you have objected pursuant to Art. 21 para. 1 GDPR, a balancing of your interests and ours must take place. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing of your personal data.
If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
4. Data Collection on This Website
cookies
This website uses cookies. Cookies do not harm your computer and do not contain viruses. They are used to make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your device and saved by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude acceptance of cookies for certain cases or in general, and to activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are required to carry out the electronic communication process or to provide certain functions you request (e.g., shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to store cookies has been requested (e.g., consent to store analytics cookies), processing is based exclusively on Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.
Any other cookies (e.g., cookies for analyzing browsing behavior) are addressed separately in this privacy policy.
Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
5. Plugins and Tools
Adobe Fonts
This website uses web fonts provided by Adobe for the uniform display of certain typefaces. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA.
When you access this site, your browser loads the required fonts directly from Adobe to display them correctly on your device. In doing so, your browser connects to Adobe servers in the USA. Adobe thereby becomes aware that your IP address has been used to access this website. According to Adobe, no cookies are stored when providing the fonts.
Adobe is certified under the EU–U.S. Privacy Shield, which aims to ensure compliance with European data protection standards. More information: www.adobe.com.
The use of Adobe Fonts is necessary to ensure a consistent visual presentation of this website, which constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information about Adobe Fonts is available at: adobe.com
Adobe’s Privacy Policy can be found at: adobe.com
LEADINFO
We use the lead generation service of Leadinfo B.V., Rotterdam, the Netherlands. This service identifies visits from companies to our website by means of IP addresses and provides us with publicly available information, such as company names or addresses. Leadinfo also sets two first-party cookies to analyze user behavior on our site and processes domains from form entries (e.g., “leadinfo.com”) to match IP addresses with companies and improve its services. For more information, visit www.leadinfo.com.
You can opt out via www.leadinfo.com/en/opt-out. In the event of an opt-out, your data will no longer be collected by Leadinfo.
6. Specific Information for the Digital Performance Check
Legal Basis:
The provision of your data is based on the contractual relationship (Art. 6 para. 1 lit. b GDPR) between you and us. In accordance with legal obligations under the German Civil Code (BGB), we send an electronic order confirmation pursuant to Art. 6 para. 1 lit. c GDPR.
Data Concerned:
Data provided to perform the contract.
Purpose of Processing:
Fulfillment of the contract, including order placement and invoicing. Your email address is required to send the check results, and your phone number is used to clarify any questions.
Recipients:
Public authorities where overriding legal provisions apply; external service providers for data processing, hosting, email delivery, and invoicing; other external parties where you have given consent or transfer is permissible based on overriding interest.
Transfers to Third Countries:
No processors outside the EU are used.
Storage Duration:
We retain contract-related information required under commercial and tax law for the legally prescribed periods (usually 10 years).
Requirement to Provide Data:
Voluntary, but necessary for the provision of our services.
Automated Decision-Making/Profiling:
None, unless separately communicated where legally required.
Status of Privacy Policy
Our current Privacy Policy can be accessed or printed from our website. In the event of changes to laws, our internal processes, or the website, we will update the Privacy Policy accordingly. This Privacy Policy is currently valid and is dated April 6, 2021.