Privacy policy

1. Controller

The controller responsible for data processing on this website is:

2. Collection and storage of personal data

2.1 When you visit the website

When you access our website, the browser on your device automatically sends information to our website's server. This information is stored temporarily in a so-called log file. The following information is collected without any action on your part and stored until it is deleted automatically:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file retrieved
• Website from which access was made (referrer URL)
• Browser used and, where applicable, your computer's operating system

This data is processed on the basis of our legitimate interest in ensuring a smooth connection, system security and stability, and the administration of the website (Art. 6(1)(f) GDPR).

2.2 When you use our contact form

For questions of any kind, we offer you the option of contacting us via a form provided on the website. In doing so, we process the data you provide (name, email address, subject and message) in order to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

Messages submitted via the contact form are sent and stored through our own email mailbox with the hosting provider united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany, which we use as a processor. The data is processed exclusively within the European Union; no transfer to a third country takes place. We store your details for the purpose of handling your enquiry and in case of follow-up questions.

2.3 For the suitability check and when ordering the PK KI-Box

In the suitability check we process your answers to the questions about your business and your email address. We use them to send you the result by email and to get in touch about your enquiry. When you place an order, we also process your company name, VAT identification number, contact person, email address, phone number, delivery address and payment method in order to review the order and conclude the rental contract. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of the contract).

To verify the VAT identification number, it is transmitted to the European Commission's VAT Information Exchange System (VIES). As with the contact form, messages are sent and stored through our mailbox with united-domains AG.

3. Disclosure of data

Your personal data is not transferred to third parties for any purposes other than those listed below. We only pass your personal data on to third parties if:

• you have given your express consent (Art. 6(1)(a) GDPR)
• disclosure is necessary to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed (Art. 6(1)(f) GDPR)
• there is a legal obligation to disclose the data (Art. 6(1)(c) GDPR)
• this is legally permissible and necessary for the performance of contractual relationships with you (Art. 6(1)(b) GDPR)

4. Your rights

You have the following rights towards us with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR).

5. Cookies

Our website uses cookies. Cookies are small text files that your browser stores on your device. They do not harm your device and do not contain viruses.

Most of the cookies we use are so-called session cookies. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

6. Meta Pixel

Our website uses the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It lets us measure the effect of our ads on Facebook and Instagram and show visitors of our website relevant ads there.

The pixel sets a cookie and, when a page is opened or certain actions are taken, such as requesting information or booking an appointment, sends data to Meta, including your IP address, browser and device details and the page visited. Meta may link this data to your Facebook or Instagram account and transfer it to the USA; Meta is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future. See Meta's privacy policy at https://www.facebook.com/privacy/policy and the ad settings at https://www.facebook.com/adpreferences.

7. Google Ads

Our website uses Google Ads conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us measure whether visitors who reach us through a Google ad request information or book an appointment.

The tag sets a cookie and, when a page is opened or one of these actions is taken, sends data to Google, including your IP address, browser and device details and the page visited. Google may transfer the data to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future. See Google's privacy policy at https://policies.google.com/privacy and the ad settings at https://adssettings.google.com.

8. Data security

During your visit to the website we use SSL/TLS encryption with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.