Thank you for your interest in our website kettufy.com/de. We take the protection of your personal data very seriously. These data protection notices provide you with information about the type, scope, and purpose of the collection and use of your personal data by us. Furthermore, you will receive information about your rights.

Technical and organizational measures have been taken to ensure that the data protection regulations are observed both by us and by our service providers.

If you have any further questions about data protection in connection with our website, you can contact our data protection officer at any time.

1. Who is responsible for data processing and whom can you contact?

The responsible party is:

individee GmbH, Schlesische Str. 32, 10997 Berlin, 030 / 609 85 32 - 0, [email protected]

2. What are personal data?

Personal data includes all information related to an identified or identifiable natural person. This includes, for example, your name and contact details.

3. What data do we collect in so-called log files?

Each time this offer is accessed, information is automatically collected. This information, also known as server log files, is general in nature and does not allow any conclusions about your identity.

Among other things, the following information is collected per access:

  • IP address of the requesting computer
  • Referrer URL (the page from which you accessed our offer)
  • Date and time of access
  • Information about the browser and operating system used

These data are automatically stored in log files with each access to our website.

The processing of these personal data is justified according to Art. 6 para. 1 sentence 1 letter f) GDPR. We have a legitimate interest in data processing for the purpose of:

  • Quickly establishing a connection to our website,
  • Enabling a user-friendly application of the website,
  • Identifying and ensuring the security and stability of the systems, and
  • Facilitating and improving the administration of the website.

The processing is explicitly not carried out for the purpose of gaining insights into the identity of the visitor to the website.

4. We want to know who is disturbing or attacking our offer

To protect against attacks and ensure proper operation, access to the internet offer is temporarily analyzed and stored for a maximum of seven days on a security system (firewall) protected against access using the full IP address. Excluded from this are data about accesses that are necessary for the further pursuit of attacks and disruptions.

We will only attempt to determine the identity of a person behind an IP address in the event of unlawful attacks on our platform. Otherwise, this information remains hidden from us, and we do not attempt to obtain the data of the IP address owner.

5. Use of cookies

We use cookies on our websites. Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies can contain data that allow recognition of the device used. However, some cookies also only contain information about certain settings that are not personal.

When you first visit our site, we show you a notice that we use cookies. If you click the "Understood" button in the notice, a cookie is set that shows us that you have seen the notice. This cookie remains stored for your further visits. If you call up our offer again afterwards, the aforementioned notice will not be displayed again. If you delete the cookies in your browser separately or access our website via another end device, the notice will be displayed again.

Most browsers are set to accept cookies automatically. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. You can delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed optimally and some functions may no longer be technically available.

Session Cookies

While you are on a website, a so-called session cookie is temporarily stored in the memory of your computer, in which a session identifier is stored, for example, to avoid having to log in again every time you change pages. Session cookies are automatically deleted after the session ends with the browser being closed.

The processing is carried out based on Art. 6 para. 1 sentence 1 letter f GDPR and in the interest of optimizing or enabling user guidance and adapting the presentation of our website.

Load Balancer & CDN

We use a so-called "Content Delivery Network" (CDN) and a load balancer, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).

A CDN is a service that helps deliver the content of our online offering, especially large media files, such as graphics or scripts, faster using regionally distributed and internet-connected servers. The processing of user data is carried out solely for the purposes mentioned above and to maintain the security and functionality of the CDN. In this context, your browser may transmit personal data to Cloudflare. The use is based on our legitimate interests, i.e., interest in a secure and efficient provision, analysis, and optimization of our online offer according to Art. 6 para. 1 letter f GDPR. For more information, see Cloudflare's privacy policy: https://www.cloudflare.com/security-policy.

6. Newsletter

If you sign up for our newsletter, we use the data you provide solely for this purpose or to inform you about circumstances relevant to this service or registration. A valid email address is required to receive the newsletter. The IP address through which you sign up for the newsletter and the date on which you order the newsletter are also stored. These data serve as proof in case of misuse if a foreign email address is registered for the newsletter. To ensure that an email address is not misused by third parties in our distribution list, we work in accordance with the law using the so-called "Double-Opt-In" procedure. In the course of this process, the order of the newsletter, the sending of the confirmation email, and the receipt of the registration confirmation are logged.

The only mandatory information for sending the newsletter is your email address. After your confirmation, we save your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 letter a GDPR.

You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time for the future. We provide a link for revocation in every newsletter and on the website. You also have the option to inform us of your revocation via the contact options mentioned in this declaration.

When opening the first automatically generated confirmation email for the newsletter subscription and when opening each newsletter email, further data are collected and transmitted to us to manage the newsletter dispatch. This includes, for example:

  • Which subscriber opened the newsletter or clicked on links (including the number of clicks),
  • Time of registration and, if applicable, whether subscribers have unsubscribed from the newsletter,
  • Any bounces (e.g., if the email account is full or does not exist).

We evaluate these data only for statistical purposes to optimize our offerings. The personal data collected for the newsletter will be used exclusively internally to optimize and deliver the expressly desired newsletter. Your data will not be sold or passed on to third parties for advertising, market, or opinion research purposes. Your data will not be used for any other purpose.

7. Contact/Email

If you contact us via email or contact form, we save your email address and other provided information.

To use our contact form, we need your name and email address. You can provide additional information, but you are not required to.

We use the information you provide in the context of contacting us based on Art. 6 para. 1 sentence 1 letter b GDPR or Art. 6 para. 1 sentence 1 letter f GDPR to answer your inquiry as uncomplicated, quickly, and customer-friendly as possible. Your data will only be processed to respond to your inquiry and will be deleted immediately thereafter, provided there are no statutory retention obligations on our part. Data will not be passed on to third parties.

If you wish to object to the processing of your data submitted via the contact form, please contact [email protected].

8. Intercom

The live chat on our website is provided using INTERCOM, Intercom R&D Unlimited Company, Stephen Court, 18-21 Saint Stephen's Green, Dublin, Ireland, allowing us to contact and answer visitors' questions. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 letter f GDPR. When a chat connection is initiated, location, IP address, browser, and visited website are displayed and stored by us. We may also collect names, email addresses, and phone numbers. For more information on Intercom Live-Chat, see Intercom's privacy policy (https://www.intercom.com/legal/privacy).

Intercom automatically deletes the IPs and geographic data of visitors who have not visited our website for 9 months.

9. Calendly

We offer you the possibility to make an appointment with us through our website. For this purpose, we use the online calendar "Calendly" of Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363 USA.

If you want to make an appointment with us and go to the corresponding website, you will automatically be connected to our account at Calendly. After selecting your appointment, confirming it, and entering your main data (name), communication data (email address), and any further information you provide, you will receive an email from Calendly confirming your appointment.

Your entered data will be transmitted to Calendly. In the process, data can also be transmitted to the USA. Calendly's data protection provisions can be found here: https://calendly.com/pages/privacy.

The legal basis for data processing is Art. 6 para. 1 sentence 1 letter b GDPR. The purpose of the data collection is to find appointments and to book and organize our schedules. When using the online calendar, we store the data collected to make an appointment and use it only to organize and conduct the appointments.

10. Job Application

We process the data of job applicants only for the purpose of and within the framework of the application process in accordance with the legal requirements. The processing of the applicant data takes place to fulfill our (pre)contractual obligations in the context of the application process in the sense of Art. 6 para. 1 sentence 1 letter b GDPR, Art. 6 para. 1 letter f GDPR if data processing becomes necessary for us, e.g., in the context of legal procedures (in Germany, § 26 BDSG also applies).

The application process requires that applicants provide us with their applicant data. The necessary applicant data result from the job descriptions. Generally, these include personal information, postal and contact addresses, and the application documents such as cover letter, CV, and certificates. In addition, applicants can voluntarily provide us with additional information.

By submitting the application to us, the applicants agree to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this data protection declaration.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily provided as part of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 letter b GDPR (e.g., health data such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants in the context of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 letter a GDPR (e.g., health data if this is necessary for the exercise of the profession).

Applicants can send us their applications via email. However, please note that emails are generally not sent in encrypted form and applicants themselves must ensure encryption. Therefore, we cannot take responsibility for the transmission path of the application between the sender and receipt on our server and, therefore, recommend using the postal route. Because instead of applying via email, applicants still have the opportunity to send us their application by post.

The data provided by applicants can be further processed by us in the case of a successful application for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. The applicant's data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

The deletion is subject to a legitimate revocation by the applicant, after a period of six months, so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax regulations.

11. What rights do you have?

Right of access: You have the right to obtain confirmation from us as to whether personal data concerning you are being processed and, if so, what these data are and the specific circumstances of the data processing.

Right to rectification: You have the right to demand that we rectify any inaccurate personal data concerning you without undue delay.

Right to erasure: You have the right to demand that we erase your personal data without undue delay, provided that the processing of such data is no longer necessary and all other legal requirements are met. In practice, this applies above all if the storage period to which we are legally bound has expired.

Right to restriction of processing: You have the right to demand that we restrict the processing of your personal data. This applies in particular if the accuracy of the data is disputed by you, for a period enabling us to verify the accuracy of the personal data.

Right to data portability: You have the right to obtain the personal data concerning you which you have provided to us in a structured, commonly used, and machine-readable format.

Right to object: You have the right to object to the processing of your personal data. However, we may no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes data protection regulations.

12. Changes to the data protection declaration

We reserve the right to change our data protection practices and this policy to reflect changes in relevant laws and regulations, as well as to adapt to changes in our services, such as the introduction of new services. The new data protection declaration will then apply to your next visit.

bhp