Legal
Privacy notice
Information on the processing of personal data when visiting this website, pursuant to Article 13 GDPR.
This English text is a courtesy translation. The German version is the legally binding one.
1. Controller
kaIro digiTal Evolution GmbH
Gartenweg 2, 21521 Dassendorf, Germany
Represented by managing director Kai Plückhahn
Email: info@kairo.digital
2. Accessing the website and server logs
Each time this website is accessed, the web server automatically stores data in log files: the page requested, date and time, the volume of data transferred, a message confirming successful retrieval, browser type and version, operating system, referrer URL and the IP address.
Purpose: providing the website, operational security and error analysis.
Legal basis: Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically sound and secure operation of the site.
Retention: log data is deleted or truncated after a short period unless required to investigate a specific security incident.
3. Hosting
This website runs on our own hosting platform, operated under the HostingUndDomains.de brand. There is therefore no external web host acting as a processor – we are the controller here ourselves. The servers are located in Germany, so processing takes place within the European Union.
Processors engaged
To operate the platform we rely on the following service providers, each covered by a data processing agreement under Article 28 GDPR:
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany – data centre, servers, network, storage and backup infrastructure. Processing in Germany.
- InterNetX GmbH, Johanna-Dachs-Str. 55, 93055 Regensburg, Germany – domain registration and connection to the registries. Processing in Germany; depending on the domain ending, registries in other countries may be involved.
- WebPros International GmbH (Plesk), Vordergasse 59, 8200 Schaffhausen, Switzerland – vendor support for the administration interface, access only in support or fault cases. An EU adequacy decision is in place for Switzerland.
- WHMCS Limited, 13th Floor, One Angel Court, London EC2R 7HJ, United Kingdom – vendor support for the customer management system, access only in support or fault cases. An EU adequacy decision is in place for the United Kingdom.
Where processing takes place in a third country in an individual case, this only occurs under the conditions of Articles 44 et seq. GDPR – by way of an adequacy decision, standard contractual clauses or other appropriate safeguards.
4. Contact form
If you use our contact form, we process your name and email address as well as – where provided – company, telephone number, subject and the content of your message. The details are sent to us by email; they are not stored in a database.
Purpose: handling and answering your enquiry.
Legal basis: Article 6 (1) (b) GDPR where the enquiry relates to a contract or its initiation; otherwise Article 6 (1) (f) GDPR based on our legitimate interest in answering enquiries. Where you have additionally given consent, Article 6 (1) (a) GDPR.
Retention: until your enquiry has been dealt with conclusively. We then delete the message unless commercial or tax retention obligations apply.
The form contains a hidden field used solely to block automated submissions. No personal data is collected through it.
You may withdraw consent at any time with effect for the future, for example by email to info@kairo.digital.
5. Contact by email
If you write to us directly by email, we process your details solely to handle your request and any follow-up questions. Legal basis and retention correspond to section 4.
6. Applications
If you send us an application, we process the data submitted for the purpose of the application procedure. The legal basis is section 26 (1) of the German Federal Data Protection Act in conjunction with Article 6 (1) (b) GDPR. Once the procedure has concluded we delete the documents after six months at the latest, unless you have agreed to longer storage.
7. No cookies, no analytics, no external services
This website sets no cookies and uses no analytics or tracking tools. Typefaces are taken from your operating system; external providers such as Google Fonts are not embedded. Maps, videos and social media elements are not loaded from third parties. All design assets are served from our own server.
8. Encryption
Transmission takes place via HTTPS, so form entries are encrypted in transit. Complete protection of data sent by email cannot be guaranteed technically.
9. Your rights
Subject to the statutory requirements, you have the following rights:
- Access to the data processed (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Withdrawal of consent given (Article 7 (3) GDPR)
Please use the contact details in section 1.
10. Right to object
Where we process your data on the basis of Article 6 (1) (f) GDPR, you have the right under Article 21 GDPR to object at any time, on grounds relating to your particular situation.
11. Right to lodge a complaint
Without prejudice to other remedies, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority. The competent authority for our registered office is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98, 24103 Kiel, Germany
Postal address: Postfach 71 16, 24171 Kiel
Phone: +49 431 988-1200
Email: mail@datenschutzzentrum.de
12. Obligation to provide data
Providing personal data is voluntary. Without the fields marked as mandatory, however, we cannot process your enquiry.
13. Status
This notice applies from August 2026. We update it when the website changes.