Privacy Policy

Introduction

The protection of your personal data is very important to us. In this privacy policy, we transparently inform you about the processing of your data when you visit our website ki-katapult.de and when you use our services.

This privacy policy is effective as of August 27, 2026 and complies with the requirements of the EU General Data Protection Regulation (GDPR), and the German Federal Data Protection Act (BDSG).

1. Responsible Party (§ 5 DDG, Art. 13 GDPR)

As a sole proprietor, I am not required to appoint a data protection officer under Art. 37(1) GDPR. For questions regarding data protection, please contact the address listed above.

2. Scope of Data Collection and Processing

2.1 Automatic Data Collection During Website Visit (Server Logfiles)

When you visit our website, technical data is automatically transmitted by your browser to our web server and stored in so-called server logfiles:

• IP address of the requesting computer (shortened after 24–48 hours)
• Date and time of access
• Name and URL of the requested file
• Website from which the request was made (referrer URL)
• Browser used and possibly operating system of your computer
• Name of your Internet access provider

Purpose: This data is technically required for providing the website, ensuring IT security, and diagnosing errors.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in secure and functional website operation).

Storage Duration: Maximum 30 days, unless longer retention is required for security reasons.

2.2 Language Setting (localStorage)

Our website allows you to choose between German and English languages. Your selected language preference is stored locally in your browser (HTML5 Web Storage / localStorage).

Stored Data: Language code ("de" or "en")

Purpose: User convenience – your language preference is retained on each return visit.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in improved user experience).

Storage Duration: Indefinite, until you manually clear browser data.

3. Integration of Third-Party Services (Fonts, Hosting, Analytics)

To optimize loading times, we integrate external services. When you visit our website, data (particularly your IP address) is transmitted to the following third-party providers:

3.1 Google Fonts

Service: Provision of web fonts (typefaces: Saira, Saira Condensed, JetBrains Mono)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data Transfer: Font files are loaded from Google servers when the website is accessed.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent and fast presentation of the website).

Privacy Policy: https://policies.google.com/privacy

3.2 Hetzner Online GmbH (Hosting)

Service: Website hosting and provision

Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

Server Location: Falkenstein Data Center (Germany)

Data Transfer: When the website is accessed, your IP address is captured by Hetzner servers and stored in server logfiles (see Section 2.1).

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

Data Processing Agreement (DPA): A data processing agreement exists with Hetzner according to Art. 28 GDPR.

Privacy Policy: https://www.hetzner.com/de/rechtliches/datenschutz

3.3 Umami Analytics (Web Analytics)

Service: Web analytics for capturing anonymous usage statistics

Operation: Self-hosted at analytics.ki-katapult.de

Software: Umami Analytics (Open Source, privacy-friendly)

Captured Data:

• Anonymized IP address (shortened, no identification possible)
• Visited pages and time spent
• Browser type and operating system (anonymized)
• Referrer URL (source of visit)

No Cookies: Umami uses no cookies.

Purpose: Anonymous analysis of user behavior to improve website usability.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing and optimizing our web offering).

Storage Location: All data is stored exclusively on our own servers in Germany (Hetzner Falkenstein). No data is transferred to third parties.

Storage Duration: Maximum 12 months.

Opt-Out: Since no personal data is stored, an opt-out is not required. If you wish to prevent data collection regardless, you can disable JavaScript in your browser or use browser extensions such as uBlock Origin.

4. Contact via E-Mail

When you contact us via e-mail, your information is stored with us.

Purpose: Processing your inquiry and customer communication.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry).

Storage Duration: Until complete processing, then maximum 6 months for any follow-up questions (unless legal retention obligations apply).

5. Data Security

We use technical and organizational security measures to protect your data:

• SSL/TLS Encryption: All data transfers are encrypted (HTTPS).
• Access Restrictions: Access to personal data is limited to authorized persons only.
• Regular Security Updates: Software and systems are regularly updated.

Data transfer over the Internet may have security gaps. Complete protection is not possible.

6. Storage Duration and Deletion

We store personal data only as long as necessary:

• Server Logfiles: Maximum 30 days (IP addresses are anonymized after 24–48 hours).
• E-Mail Inquiries: Until complete processing, then maximum 6 months.
• localStorage (Language Setting): Indefinite, until manual deletion by the user.

After the storage period expires, personal data is deleted or anonymized, unless legal retention obligations apply.

7. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

7.1 Right of Access (Art. 15 GDPR)

You have the right to obtain information at any time about the personal data stored with us.

7.2 Right of Rectification (Art. 16 GDPR)

You have the right to have incorrect or incomplete data corrected.

7.3 Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR)

You have the right to request deletion of your personal data, provided one of the legal grounds applies.

7.4 Right to Restrict Processing (Art. 18 GDPR)

You have the right to request restriction of processing of your data.

7.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data you have provided in a structured format.

7.6 Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your data.

7.7 Withdrawal of Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you may withdraw it at any time with effect for the future.

8. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

Responsible Supervisory Authority for Brandenburg:

9. Cookies and Tracking

This website does not use traditional tracking cookies or advertising trackers.

We do, however, use Umami Analytics (see Section 3.3) for privacy-friendly, anonymous web analytics. Umami uses no cookies and stores no personal data – only anonymized usage statistics.

The only local storage is via HTML5 Web Storage (localStorage) to save your language preference.

10. Automated Decision-Making and Profiling

We do not use automated decision-making procedures that produce legal effects against you.

11. Changes to This Privacy Policy

We reserve the right to update this privacy policy. The current version can always be found on this page.

Last Updated: August 27, 2026

12. Data Protection Contact

For questions about the processing of your personal data or to exercise your rights, please contact us: