Privacy policy
This notice explains how personal data is processed when you visit this website, pursuant to Art. 13 GDPR. The German version is legally binding. [Draft – to be reviewed by a lawyer before launch.]
1. Controller
Rosemary Wiezoreck Teubeliusweg 17 95030 Hof Germany Email: kontakt@kienta.de
2. Purposes and legal bases
Providing the website: when you access it, technically necessary data (IP address, timestamp, requested resource, browser type) is processed in server logs. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).
Contact form and email: the details you provide (name, company, email address, message) are processed to answer your enquiry – to initiate or perform a contract (Art. 6 (1) (b) GDPR) or on the basis of our legitimate interest in communication (Art. 6 (1) (f) GDPR).
Insights mailing list: your email address is processed on the basis of your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time with future effect.
3. No cookies, no tracking
This website sets no analytics or marketing cookies and embeds no tracking services, so no cookie banner is required. Fonts are self-hosted; no request is made to third-party servers.
4. Hosting (processor)
The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, which processes server log data on our behalf. A data processing agreement is in place; transfers to the USA are based on the standard contractual clauses and/or the EU-US Data Privacy Framework. [Confirm before launch.]
5. Email delivery (processor)
Messages submitted through the contact form are delivered using Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The form data you enter is transmitted to Resend. A data processing agreement is in place. [Conclude and confirm before launch.]
6. Appointment booking
[Only relevant once the calendar embed is enabled:] We embed Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA) as an iframe for scheduling. Loading the calendar transmits your IP address and browser data to Calendly, which sets its own cookies. The legal basis is Art. 6 (1) (b) or (f) GDPR.
7. Retention
Server logs are deleted after [period]. Contact enquiries are retained for as long as needed to handle them and thereafter within the statutory retention periods (generally six or ten years under the HGB and AO).
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). Consent given may be withdrawn at any time with future effect.
An informal message to kontakt@kienta.de is sufficient to exercise these rights.
9. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA).