GDPR · Art. 13
Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:
KINDL GmbH
represented by its Managing Director Christoph Kindl
Pfarrer-Lauer-Straße 18
66386 St. Ingbert
Germany
Phone: +49 (0) 6894 920820
E-mail: info@kindl-gmbh.com
2. General Information on Data Processing
2.1 Principle
As a rule, we process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data is processed on the basis of consent only where such consent is legally required or has been obtained by us.
2.2 Legal Bases
Where we obtain the data subject's consent for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis.
Where personal data is processed for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract, Art. 6(1)(b) GDPR serves as the legal basis.
Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary for the purposes of legitimate interests pursued by our company or by a third party, and such interests are not overridden by the interests, fundamental rights, and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis.
2.3 Erasure and Storage Duration
Personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond that point where this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject.
3. Provision of the Website and Creation of Log Files
Each time this website is accessed, the server of the hosting provider automatically collects technical access data and stores it in so-called server log files. This typically includes:
- IP address of the accessing device
- Date and time of access
- Name and URL of the retrieved file
- Website from which access was made (referrer URL)
- Browser used
- Operating system used
The purpose of processing is to provide the website, ensure the stable and secure operation of the website, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free, secure, and reliable provision of our online offering.
Server log files are stored only for as long as necessary to achieve the purposes stated above. Unless longer retention is exceptionally required for evidentiary purposes or to defend against specific security incidents, the log files are generally deleted again after a short period of time.
4. Cookies and Similar Technologies
This website currently does not use cookies or similar technologies that store information on your end device or access information already stored there unless such technologies are technically necessary.
In particular, no tracking, analytics, or advertising technologies are used. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore currently not required.
Should cookies or similar technologies that are not technically necessary be used in the future, you will be informed in advance and, where legally required, asked to provide your consent.
5. Contact by E-mail or Telephone
If you contact us by e-mail or telephone, the information you provide will be stored for the purpose of processing your request and in case follow-up questions arise. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your request is related to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if such consent has been obtained.
The data you send to us remains with us until you request its deletion, revoke any consent you have given, or the purpose for storing the data no longer applies. Mandatory legal provisions, in particular statutory retention periods, remain unaffected.
The provision of your data is neither legally nor contractually required. However, without the information necessary to process your request, we may not be able to respond to your inquiry, or not fully.
6. Hosting
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
The hosting provider processes the data generated when the website is accessed, in particular server log files as described in Section 3, on our behalf as a processor.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable, secure, and efficient provision of our online offering.
We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
The recipient of the data processed in this context is our hosting service provider. Processing takes place on servers located in Germany.
7. Fonts
This website uses locally hosted web fonts. The font files are served exclusively from our own server.
No connection is made to external font services, in particular not to Google Fonts. Your IP address is not transmitted to external providers solely for the purpose of displaying fonts.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a consistent, technically reliable, and privacy-conscious presentation of our website.
8. Our Apps
Our apps are designed to operate entirely locally on the user's device. No personal data is transmitted from the apps to KINDL GmbH.
The apps contain no analytics SDKs, no tracking, no advertising IDs, and no third-party crash reporters. Usage data remains on the user's device.
App-specific privacy information is linked on the respective app page of this website.
We use the Apple App Store to distribute our iOS apps. In this context, personal data may be processed by Apple. Any such processing is carried out under Apple's responsibility and is governed by Apple's privacy information.
9. Rights of the Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
10. Automated Decision-Making
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
11. Competent Supervisory Authority
The supervisory authority responsible for us is:
Unabhängiges Datenschutzzentrum Saarland
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Germany
Phone: +49 681 94781-0
E-mail: poststelle@datenschutz.saarland.de
12. TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognize an encrypted connection by the fact that the browser address line begins with "https://" and by the lock symbol in your browser bar.
13. Currency and Changes to this Privacy Policy
This Privacy Policy is currently valid.
It may become necessary to amend this Privacy Policy as a result of further development of our website or due to changes in legal or regulatory requirements. The current version of this Privacy Policy can be accessed on this website at any time.