Legal · Privacy

Privacy Policy

1. Controller

The controller responsible for data processing on this website is: KT-Digital GmbH i. Gr. (in formation) Holter Strasse 245, 33758 Schloss Holte-Stukenbrock, Germany Managing directors: Thomas Schurzfeld, Klaus Huber Phone: +49 176 19199914 E-mail: info@kt-digital.com

2. General information

We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR, German BDSG) and this privacy policy. Personal data is any data that can be used to identify you personally.

3. Hosting and server log files

This website is hosted in Germany with Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). When the pages are accessed, the server automatically collects information in so-called server log files: IP address, date and time of access, the page accessed, the amount of data transferred, the browser and operating system used, and the previously visited page (referrer). This data serves the secure, stable operation of the website and is not merged with other data sources. The legal basis is our legitimate interest in a technically flawless presentation (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider.

4. Contact (form and e-mail)

If you contact us via the contact or initial-check form or by e-mail, we process the data you provide (e.g. name, company, e-mail address, phone number and your message) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR (initiation or performance of a contract) and our legitimate interest in responding to your request (lit. f). Enquiries are recorded by email and in our internal customer management system (CRM) for processing. If CRM transmission is temporarily unavailable, the enquiry is buffered in a non-public area on the server and transmitted again. The buffered copy is deleted after successful transmission. The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.

5. Digital guide “Printi”

The chat assistant “Printi” runs directly in your browser and offers guidance using prepared answers. Free-text questions are matched to topics locally; no questions are sent to an AI service. Only when you actively request and submit a free initial check via the chat are your contact details (name, email address, optional company), selected topic, displayed summary of your enquiry and an optional additional message transmitted to us — just like a form request — and processed to handle your enquiry (Art. 6(1)(b) and (f) GDPR). The originating page is included to provide context. Chat history and contact details remain in memory only during the current page visit; only the position of the draggable Printi icon may be stored locally. No further analysis of your input or transfer to third parties takes place.

6. Cookies and local storage

This website does not use any tracking or marketing cookies. For convenience functions we only use your browser's local storage, to remember the position of the draggable Printi icon. This information remains in your browser and is not transmitted to us. You can delete local storage at any time via your browser settings.

7. Fonts

All fonts are embedded locally from our own server. As a result, no data is transferred to third parties (such as Google Fonts) when the page loads.

8. External links

Our site contains links to external services (e.g. WhatsApp, Google). If you follow them, the privacy policy of the respective provider applies. We have no influence over their data processing.

9. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption, recognisable by “https” and the lock symbol in your browser's address bar. This means the data you transmit to us cannot be read by third parties.

10. Your rights

You have the right at any time to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. For data protection matters you can reach us at info@kt-digital.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

PHP Security Check

When you explicitly start the PHP Security Check, we store the normalised domain, check time, reported version signals, HTTP status and result in a separate database on our server. Paths, URL parameters, fragments and credentials are neither stored nor checked. Invalid input is recorded without retaining the freely entered text. The checked website receives ordinary HTTP requests from our server. Not every version or vendor patch level is externally visible. Checks without a contact enquiry are deleted after 90 days. To limit abuse, we use daily rotating IP identifiers pseudonymised with a secret key; these are deleted within two days. Before a check is started, complete, normalised domain entries and their time are stored for 90 days after a short typing pause or when the address field loses focus. This is explained directly beside the field. These entries help us assess interest in our PHP check and are kept separate from completed checks. Incomplete input, individual keystrokes and unsubmitted contact-form fields are not stored. Saving an entry does not trigger an HTTP check. The legal basis for recording domain entries is our legitimate interest in assessing and improving this service (Art. 6(1)(f) GDPR). You may object on grounds relating to your particular situation. Domain entries are not used to identify people or build advertising profiles. Domain entries and findings are forwarded internally by email to the responsible KT-Digital team. The legal bases are the service you requested (Art. 6(1)(b) GDPR) and our legitimate interest in secure operation (Art. 6(1)(f) GDPR). If you subsequently request help voluntarily, we store your name, email and optional company, phone and message with the finding. This enquiry is also processed through our existing email and CRM route. The storage principles described under Contact apply to enquiries. We do not contact you without such an enquiry unless you voluntarily subscribe to the newsletter. For the newsletter, we store your email address, language, request and confirmation times and the consent-text version. The checkbox is not preselected; only email confirmation activates the subscription. The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time using the unsubscribe link or by contacting us. Unconfirmed requests are deleted after seven days; confirmed subscriptions are retained until withdrawal. Unsubscribe records are retained for up to 90 days for traceability and then deleted. Newsletter data is managed separately from contact enquiries.

11. Changes to this policy

We update this privacy policy whenever the data processing or the legal framework changes. The version published on this page applies in each case.