Privacy Policy
This privacy policy explains the nature, scope and purpose of the processing of personal data when you visit our website (www.kaayo.de).
1. Responsible Entity
TÜV NORD live-expert GmbH & Co. KG
Am TÜV 1
30519 Hannover
Phone: +49 6838 97597-0
Email: liveexpert@tuev-nord.de
2. Contact Details of the Data Protection Officer
Berthold Weghaus
Am TÜV 1
45307 Essen
Email: privacy@tuev-nord.de
3. Collection and Storage of Personal Data and the Nature and Purpose of Their Use
3.1 When Visiting Our Website
You can visit our website at www.kaayo.de without revealing your identity. Your browser automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and automatically deleted after 3 months at the latest:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the requested file
- Website from which access occurred (referrer URL)
- Browser used and, if applicable, the operating system of your computer and the name of your access provider
The legal basis for the collection and processing of this data is legitimate interest (Art. 6 para. 1 lit. f GDPR).
It is done for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability, and for technical administration of website operations. We do not draw conclusions about you as a person.
3.2 Hosting and Server Location
Our website is operated exclusively on servers within the European Union. Personal data is not transferred to servers outside the EU or the European Economic Area (EEA).
Hosting is provided by a European provider operating in accordance with GDPR regulations. We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
3.3 When Using Our Contact Form
If you would like to contact us, you can use our contact form. The following data is processed and deleted after the purpose is fulfilled:
- Name
- Email address
- Content data
The legal basis for the collection and processing of this data is (Art 6 para. 1 lit. a GDPR). If you contact us to request an offer, the processing of the data entered in the contact form is for the implementation of pre-contractual measures (Art 6 para. 1 lit. b GDPR).
- Consent to store personal data
- Implementation of pre-contractual measures
The data you enter is stored for the purpose of individual communication with you. This serves to assign the inquiry and subsequently answer it.
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can send us your revocation at any time via the following email address: privacy@tuev-nord.de.
4. Automated Decision-Making and Profiling
As a responsible company, we refrain from automated decision-making or profiling when collecting your personal data.
5. Transmission of Personal Data to a Third Country
As a matter of principle, personal data is not transferred to a third country (outside the European Union or the European Economic Area). All systems and service providers we use operate their servers exclusively within the European Union and are therefore fully subject to the requirements of the General Data Protection Regulation (GDPR).
5.1 Customer Relationship Management (CRM)
For the management and processing of customer inquiries as well as maintaining our customer relationships, we use the Pipedrive service.
Pipedrive OÜ
Mustamäe tee 3a 10615 Tallinn Estonia
Personal data (e.g. contact and communication data) may be stored and processed in Pipedrive. Pipedrive processes personal data (e.g. contact and communication data) exclusively on servers within the European Union. Personal data is not transferred to third countries.
Processing is based on Art. 6 para. 1 lit. b GDPR (fulfillment of a contract or pre-contractual measures) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient customer and business management).
5.2 User statistics and web analytics (optional)
To analyze user behavior on our website, we use the PostHog service. PostHog is operated in the EU Cloud variant, which exclusively uses servers within the European Union (e.g., Frankfurt am Main, Germany).
PostHog EU Cloud – PostHog Inc.
2261 Market Street #4008 San Francisco, CA 94114 USA
Although the provider is based in the USA, data processing for our use takes place exclusively on servers within the European Union. Therefore, personal data is not transmitted to a third country. Only anonymized usage data (e.g., click behavior, page usage) is processed to better understand and optimize the use of our website.
Processing is carried out on the basis of Art. 6 (1) lit. a GDPR (consent), provided that analytics functions are optionally activated.
6. Data Subject Rights
If personal data is processed from you as a user, you are considered a data subject under the GDPR. Data subjects have the following rights vis-à-vis the responsible party:
- Right to information (Art. 15 GDPR)
- Right to correction or deletion of personal data (Art. 16, 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to notification in connection with the correction or deletion of your personal data or the restriction of processing (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to revoke given consent declarations. The legality of data processing carried out until revocation remains unaffected due to the consent valid until then. (Art. 7 para. 3 GDPR)
- Right to complain to the supervisory authority (Art. 77 GDPR)