Privacy Policy
1. Overview of data processing
Introduction
The following details provide an overview of how personal data is processed when visiting this website. Personal data comprises any information through which a natural person can be directly or indirectly identified.
Data collection on this website
Responsibility for data processing
The controller for data processing on this website is the company named in the controller section below. Corresponding contact information can be obtained directly from that designated section.
Method of data collection
Personal data is collected when visitors communicate information voluntarily as part of an enquiry. This relates specifically to details entered into the contact form. Furthermore, technical information is processed automatically by the server infrastructure of the hosting provider whenever the website is accessed. This includes the internet browser used, the operating system, and the exact time of access.
Purposes of processing
Data is processed for the technical delivery of the website and the administration of incoming contact requests.
Rights of data subjects
Every data subject has the right to receive information free of charge regarding the origin, recipients, and purpose of stored personal data. Data subjects also possess the right to demand rectification or erasure of such records. Consent previously granted may be revoked at any time with future effect. Under applicable statutory requirements, data subjects also maintain the right to demand restriction of processing. You additionally hold the right to have information that is processed automatically on the basis of consent or in performance of a contract handed over to yourself or a third party in a standard, machine readable format. Furthermore, you have the right to lodge a formal complaint with the competent supervisory authority.
Right to object
Whenever data processing is based on Article 6 Paragraph 1 letter f GDPR, you maintain the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
If you file an objection, we will cease processing the affected personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, fundamental rights, and freedoms.
SSL or TLS encryption
For security purposes and to protect the transmission of confidential communications, such as enquiries submitted to us, this website utilizes SSL or TLS encryption.
You can recognize an encrypted connection by the change in the browser address line from http to https and by the appearance of the lock icon in the browser line.
2. Web hosting
External hosting via Google Sites
This website is hosted by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Personal data collected on this website is stored on the servers of the hosting provider. This encompasses IP addresses, incoming contact enquiries, metadata, communication records, access logs, and other data generated through website visits.
A transmission of information to Google LLC in the United States cannot be ruled out. Google relies on the Standard Contractual Clauses of the European Commission as well as its certification under the EU US Data Privacy Framework for transatlantic data transfers.
External hosting operates pursuant to Article 6 Paragraph 1 letter f GDPR. The legitimate interest consists in the secure, rapid, and efficient delivery of the online presence through a professional infrastructure provider.
Data processing agreement
A data processing agreement has been concluded for the utilization of the aforementioned hosting service. This contract ensures that personal data of website visitors is processed exclusively in accordance with documented instructions and in full compliance with European data protection regulations.
3. Controller details and statutory information
Controller
The controller responsible for data processing on this website is:
KáBé3D GbR
Lameystr. 3.
76185 Karlsruhe
Represented by: Áron Fekete, Luca Komma, András Pásztor, Áron Szőke-Brandt
Email address: info@kabe3d.de
The controller is the natural or legal entity that alone or jointly with others determines the purposes and means of processing personal data.
Storage duration
Unless a specific retention timeframe is stated in this policy, personal data remains stored only until the underlying purpose for processing ceases to apply. Once the purpose no longer exists, data will be erased unless statutory retention obligations or other legally permissible justifications require continued storage.
Right to lodge a complaint with a supervisory authority
In the event of an alleged violation or infringement of the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the European Union member state of your habitual residence, your place of work, or the place of the alleged infringement.
4. Contact form, cookies and external links
Contact form via Google Forms
An embedded contact form powered by Google Forms is integrated into this website. When you submit an enquiry through this form, the provided information, including first name, last name, and email address, is processed to handle your request and answer potential follow up questions. Processing is managed through our Google Workspace account. The provider of the embedded service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This data processing is based on Article 6 Paragraph 1 letter b GDPR where your enquiry is intended to take steps prior to entering into a contract with us or relates to the performance of an existing agreement. In all other instances, processing is grounded in our legitimate interest in the effective handling and resolution of incoming requests pursuant to Article 6 Paragraph 1 letter f GDPR.
A data processing agreement exists with Google regarding the use of Google Workspace. In addition, data transmission to servers of Google LLC located in the United States cannot be excluded during the use and embedding of Google Forms. Google LLC is certified under the EU US Data Privacy Framework.
Technically necessary cookies and local storage
When you access this website, the Google Sites platform and the embedded Google Forms service store small technical text files, commonly known as cookies, as well as local session data directly within your web browser.
These technical records are strictly necessary to deliver page stability, prevent security exploits, and ensure the form submission process operates without disruption. This essential storage is carried out pursuant to Section 25 Paragraph 2 of the German Telecommunications Digital Services Data Protection Act TDDDG.
External link to Instagram
This website provides a link directed to the Instagram profile of the GbR. This constitutes a standard external hyperlink rather than an embedded social media plugin.
A connection to Instagram services is established only after you click the link. From that point onward, the privacy policy of Meta Platforms Ireland Limited applies to all subsequent data processing.
Because our Instagram appearance represents a commercial business fanpage, joint controllership pursuant to Article 26 GDPR exists with Meta Platforms Ireland Limited concerning aggregated page insights and demographic visit statistics. The corresponding joint controllership arrangement can be reviewed directly within the data policy documentation of Meta.
5. Integrated Google services
Technical resources on Google Sites
Because this entire website is hosted on the Google Sites platform, your browser automatically retrieves several technical resources directly from Google servers upon page retrieval. This affects the entire domain and not merely the embedded contact form.
These loaded technical resources include Google Fonts for type display, Google Static and Google User Content for media and asset delivery, as well as Google APIs for interface execution.
Through this connection, Google receives information that this website was accessed from your IP address. Local hosting of these assets is technically impossible within the proprietary architecture of Google Sites.
Processing is grounded in Article 6 Paragraph 1 letter f GDPR. The legitimate interest exists in the reliable, secure, and visually consistent provision of the complete website and the embedded contact form. Whenever data is transferred to the United States, Google references its active certification under the EU US Data Privacy Framework.