This translation is provided for your information. Only the German version is legally binding.
1. Controller
KK Hosting- und IT-Service, owner Rainer Kappus
Rohrgraben 6, 79114 Freiburg
Phone: +49 761 458912-0 · E-mail: mail@kk-hosting.de
2. General
We only process personal data to the extent necessary to provide this website, answer your enquiries or perform contracts. The legal bases are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) (contract and pre-contractual measures), Art. 6(1)(c) (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest).
3. Hosting and server log files
This website is operated on KK Hosting’s own servers in Germany. When you access it, technically necessary data is processed (IP address, date and time, page accessed, amount of data transferred, referrer, browser and operating system). This data serves the security and stability of operation (Art. 6(1)(f) GDPR) and is deleted after 14 days at the latest, unless it is needed to investigate a security incident.
4. No cookies, no cookie notices, no tracking
Our website does not use cookies – which is why you won’t see a cookie notice here. We use neither analytics nor marketing tools and do not create usage profiles. The spam protection of our forms works without cookies. Fonts are loaded locally from our server; no connection is made to Google Fonts.
The only exception is the password-protected customer area “Guides”: only when you log in there is a technically necessary session cookie set, which stores your login and is deleted when you log out or close the browser (§ 25(2) no. 2 TDDDG). To protect the forms against misuse, we briefly store a non-reversible hash of your IP address (sending lock of max. 30 seconds, Art. 6(1)(f) GDPR).
5. Contact form, domain order and e-mail
If you contact us via a form or by e-mail, we process your details (e.g. name, contact details, message; for a domain order, additionally the holder data required for registration) in order to handle your enquiry or carry out the order (Art. 6(1)(b) GDPR). The data is sent to us by e-mail and deleted as soon as it is no longer required and no statutory retention obligations apply. For the registration of domains, we pass the holder data on to the responsible registry (e.g. DENIC eG).
6. Applications
If you apply to us (e.g. via the application form on the “Careers” page or by e-mail), we process your details and the documents you upload (e.g. name, contact details, CV, references, information on languages and preferred working arrangement) solely for the purpose of conducting the application process (Art. 6(1)(b) and Art. 88 GDPR in conjunction with Section 26 BDSG, the German Federal Data Protection Act). The documents are transferred via an encrypted connection, sent to us by e-mail and not stored on the web server. Only the persons involved in the decision have access to them. If no employment relationship results, we delete your application data no later than six months after the end of the process, unless you have consented to longer storage. If we do start working together, the data is transferred to your personnel file.
7. Contact via WhatsApp
We offer you the option of contacting us via WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If you write to us via WhatsApp, we receive your phone number, your profile name and your messages. WhatsApp also processes metadata; a transfer to the USA cannot be ruled out (basis: EU-US Data Privacy Framework). Use is voluntary; the legal basis is your consent or the initiation of a contract (Art. 6(1)(a) and (b) GDPR). Alternatively, you can reach us at any time by phone, e-mail or contact form. The link on this website only connects to WhatsApp after you click it.
8. Security check (threat blocker test and speed test)
Threat blocker test: The test only starts after you click. Your browser then tries to call up known addresses of advertising, tracking and analytics providers (including Google, Meta, Microsoft, TikTok, Yahoo, Yandex and device manufacturers). If these requests are not blocked, the respective providers will, for technical reasons, receive your IP address and browser data. We ourselves do not store any test results. The legal basis is your consent given by starting the test (Art. 6(1)(a) GDPR).
Speed test: For the measurement, test data is exchanged with the test server of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; in the process, your IP address is transmitted to Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework. If Cloudflare cannot be reached, the measurement is carried out against our own server. The measurement only starts after you click (Art. 6(1)(a) GDPR).
Display of your IP address: On the security check page, we show you the public IP address with which your device reaches our server. If our server cannot detect the address itself, it is only requested from Cloudflare’s test server (see speed test) after you click “Show” or when you start a test; Cloudflare receives your IP address in the process. We do not store the address or pass it on; the page is also not cached (Art. 6(1)(a) GDPR).
9. External links and services
Links to Google Maps, TeamViewer (remote support) and our partners’ websites lead to external providers. Data is only transferred once you click the respective link; the privacy policy of the respective provider then applies.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
11. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.