Privacy policy

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Further provider information is available in the legal notice.

2. Overview

This website is built to collect as little data as possible. We do not use analytics or marketing services, tracking, social media plugins, embedded third-party content or an external CAPTCHA. Fonts are loaded from our own server. We only process personal data where this is necessary to provide and secure the website and to respond to requests.

3. Hosting and server logs (Vercel)

This website is operated by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and delivered through its globally distributed network. Vercel acts for us as a hosting service provider.

When you visit the website, technically necessary data is processed, in particular your IP address, date and time of access, the requested address (URL), the referrer URL, information about your browser and operating system (user agent), the amount of data transferred and the status code. This data is needed to deliver the website, to keep it stable and secure and to fend off attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient provision of this website. Log data is only kept for as long as necessary for these purposes; the specific retention periods are set by Vercel. In the logs of our server function we ourselves do not store the content of requests, only technical status codes.

Vercel Inc. is based in the USA; data may therefore be processed in the USA or other third countries. According to its own information, Vercel Inc. is certified under the EU-U.S. Data Privacy Framework. For transfers to certified companies in the USA, an adequacy decision of the European Commission applies (Art. 45 GDPR).

4. Contact form

If you contact us via the contact form, we process the information you enter: name, company (optional), email address, whether you already have a website, the service you need, the selected support package if any, your message and the language of the page.

This information is transmitted to our server function at Vercel and from there sent as an email to info@kingzy.de via an encrypted connection (TLS) using the mail server of IONOS SE. The request is not stored in a database. Your email address is set as the reply-to address so that we can answer you directly.

To prevent abuse, Vercel's firewall limits the number of requests that can be sent from the same IP address within a short period of time (rate limiting). In addition, the form contains a field that is invisible to humans and detects automated submissions.

The legal basis is Art. 6(1)(b) GDPR where your request aims at concluding a contract, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering requests). Abuse prevention is based on Art. 6(1)(f) GDPR. We need the fields marked as required to process your request; alternatively, you can always email us directly.

5. Email communication and email hosting (IONOS)

Our domain kingzy.de and our mailbox are provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Emails to info@kingzy.de – sent directly or via the contact form – are processed and stored on IONOS servers. IONOS acts for us as a service provider.

The sender and recipient addresses, the content of the message, the time and technical metadata are processed. The legal basis is Art. 6(1)(b) GDPR for requests aimed at entering into a contract and Art. 6(1)(f) GDPR otherwise. How well an email you send directly is encrypted in transit also depends on your email provider.

We keep requests and related correspondence for as long as necessary to handle them. Afterwards they are deleted unless statutory retention obligations, for example under commercial or tax law, prevent this.

6. Fonts

The fonts Inter and Space Grotesk are served locally from our own server. No connection to Google or any other font provider is established.

7. Cookies and storage in your browser

We do not set cookies and do not permanently store any information in your browser, for example in local storage. If you switch the language before sending the form, your draft is only kept in the memory of the open tab and is discarded when you reload or close it.

8. Your rights

Subject to the statutory requirements, you have the right to:

• access to the data processed about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).

To exercise your rights, simply send a message to info@kingzy.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wilhelmstraße 7, 65185 Wiesbaden, Germany, datenschutz.hessen.de.

9. Automated decisions

No automated decision-making, including profiling, takes place.

10. Changes

We update this privacy policy when the technology used or the legal requirements change. The version published here applies.