Privacy Policy

The controller responsible for the processing of personal data on this website is:

KINOVA GmbH Schwartzkopffstraße 1 15745 Wildau Germany

Represented by the managing directors Elisa Hoeppner and Levin Gust

Email: info@kinova.de

Our data protection officer is:

Benjamin Kühn, LL.M. Kurfürstendamm 48/49 10707 Berlin Germany

Email: info@kanzleikuehn.de

For domain management, hosting and the technical provision of our website we use services of the following providers:

IONOS SE Elgendorfer Straße 57 56410 Montabaur Germany

Lovable Labs Incorporated 1 Lincoln Street Boston, MA 02111 USA

IONOS provides services in connection with our domain and the technical infrastructure. Lovable is used to build, publish, host and technically deliver the website worldwide.

When you access our website, technically necessary connection and log data is processed. This may include in particular:

• IP address,
• date and time of access,
• page or file accessed,
• referrer URL,
• browser type and version,
• operating system and device type,
• technical error, security and log data.

The processing serves to provide the website and to ensure its stability, security and functionality. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

According to its own information, IONOS processes visitors' IP addresses in anonymised form and stores visit data for eight weeks. According to its own information, Lovable may store technical log data for up to 90 days. Longer storage may occur where required to investigate a specific security incident or due to legal obligations.

Where required, data processing agreements are in place with these service providers.

As Lovable is based in the USA and the website is delivered via globally distributed infrastructure, personal data may be processed outside the European Economic Area. Such transfers are based on an adequacy decision or appropriate safeguards, in particular the European Commission's Standard Contractual Clauses.

Further information can be found in Lovable's privacy policy, the list of Lovable's subprocessors and IONOS information on data processing in web hosting.

We use the “Visitor Analytics” feature integrated in Lovable to evaluate the use of our website in aggregated form.

The following information in particular may be processed:

• number of visitors and page views,
• pages accessed,
• visit duration,
• number of page views per visit,
• bounce rate,
• the source of a visit, for example a search engine or a referring website,
• device type used,
• country, which according to Lovable is determined from the browser time zone,
• number of currently active visitors.

The evaluation serves to understand the reach and use of our website, to identify technical and content-related issues and to improve our information offering.

Lovable states that Visitor Analytics evaluates overall website traffic, does not create individual visitor profiles and does not track visitors across separate visits.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests lie in reach measurement, needs-based design and the technical and content-related improvement of our website. We take into account that, according to Lovable, the evaluation is carried out in aggregated form and does not serve to create individual usage or advertising profiles.

You may object to this processing on grounds relating to your particular situation pursuant to Art. 21 GDPR.

Insofar as information is stored on or read from your device as part of Visitor Analytics, this only takes place in accordance with Section 25 TDDDG. Where consent is required for this, the analysis is only activated after your consent. You can withdraw consent at any time via the “cookie settings” with effect for the future.

Lovable may process analytics and log data in the USA or other countries outside the European Economic Area. Such transfers are based on an adequacy decision or appropriate safeguards, in particular the European Commission's Standard Contractual Clauses.

If you contact us by email or via a form, we process the information you provide.

Depending on the respective form, the following data may be collected:

• name,
• email address,
• phone number,
• company,
• message,
• for certain customer forms, the company's annual call volume.

Form data is processed via Lovable's technical infrastructure and stored in the Lovable Cloud database belonging to our project. It is made available to the persons within KINOVA GmbH responsible for the respective enquiry.

Depending on the content of the enquiry, it is handled in particular by the persons responsible for info@kinova.de, people@kinova.de, sales@kinova.de or elisa.hoeppner@kinova.de.

We use the data to process your enquiry, to communicate with you and to initiate and carry out business relationships.

If your enquiry relates to a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. For general enquiries, processing is based on our legitimate interest in handling and answering enquiries pursuant to Art. 6(1)(f) GDPR. Where a legal obligation exists, the legal basis is Art. 6(1)(c) GDPR.

Providing the information marked as mandatory is necessary for us to process your enquiry. Any further information is voluntary.

We store your enquiry only for as long as necessary to process it. After final processing, the data is generally deleted within six months. Longer storage takes place where statutory retention obligations exist or where the data is required to assert, exercise or defend legal claims. In these cases we delete the data after the applicable period has expired.

We use Lovable Cloud to store and process the data submitted via our forms. Lovable Cloud provides a managed database and backend infrastructure and is, according to Lovable, based on the open-source technology of Supabase.

As part of the processing, Lovable and its subprocessors in particular may gain access to the stored data insofar as this is necessary for the operation, maintenance, security or support of the infrastructure.

The processing serves to handle the submitted enquiries. Depending on the content of the enquiry, the legal bases are Art. 6(1)(b) or Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, structured and efficient handling of incoming enquiries.

Lovable is used on the basis of a data processing agreement. To provide Lovable Cloud, Lovable may engage further infrastructure providers and subprocessors, in particular Supabase.

Depending on the configuration of the infrastructure, data may be processed inside or outside the European Economic Area. For transfers to third countries, the requirements of Art. 44 et seq. GDPR are observed, in particular by relying on adequacy decisions or the European Commission's Standard Contractual Clauses.

We use Google Workspace for our business email communication. The provider for users in the European Economic Area is:

Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland

If you contact us by email or we process your enquiry by email, we process in particular your email address, the content of your message, communication and metadata as well as any further information you provide.

The processing serves to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for contract-related communication and Art. 6(1)(f) GDPR for general enquiries.

Google is used on the basis of a data processing agreement. Data may be processed by other Google group companies or service providers outside the European Economic Area. According to its own information, Google relies on recognised transfer mechanisms, in particular adequacy decisions and Standard Contractual Clauses.

Further information can be found in Google's privacy policy.

We embed videos from the YouTube service on our website. The provider is:

Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland

YouTube videos are only loaded after you have consented to the “external media” category in our consent settings. Before your consent, no connection to YouTube is established.

After your consent, YouTube may in particular process your IP address, device and browser information as well as information about your use of the video, and may set cookies or similar technologies. If you are logged in to YouTube or Google, the access may be attributed to your account.

Where possible we use YouTube's extended privacy mode via the domain youtube-nocookie.com. However, this mode does not fully exclude the processing of personal data by Google.

The legal bases are your consent pursuant to Art. 6(1)(a) GDPR and, insofar as information is stored on or read from your device, Section 25(1) TDDDG.

You can withdraw your consent at any time via the “cookie settings” link with effect for the future. The withdrawal does not affect the lawfulness of processing carried out until the withdrawal.

Data may also be transferred to Google companies and service providers outside the European Economic Area. Further information can be found in Google's privacy policy.

For a consistent presentation of our website we use fonts originally provided by Google Fonts. The required font files are delivered locally via our website and our hosting infrastructure.

Therefore, when you access our website, no connection to Google servers is established because of the fonts used and no personal data is transmitted to Google.

We use technically necessary storage technologies to save your selection in the consent settings. This is necessary so that decisions already made are respected and a later withdrawal is possible.

The legal basis is Section 25(2)(2) TDDDG as well as Art. 6(1)(c) and (f) GDPR. Our legitimate interest lies in the legally compliant management and documentation of your consent decision.

Services requiring consent, in particular YouTube, are only loaded after your consent. You can change your selection at any time via the “cookie settings” link available on the website.

Insofar as consent is required for Lovable Visitor Analytics due to the specific technical implementation, this processing is also controlled via the consent settings.

Our website contains links to Google Maps, partner companies and other external websites. Merely viewing our website does not transmit any data to these providers because of such links.

Only when you click a link do you leave our website and establish a direct connection to the respective provider. The operator of the website accessed is generally responsible for any subsequent data processing.

Within KINOVA GmbH, only those persons who need it to process the respective enquiry or to fulfil their tasks have access to personal data.

In addition, the hosting, database, cloud and IT service providers we use may receive data as processors. These include in particular IONOS, Lovable, infrastructure providers and subprocessors engaged by Lovable, as well as Google Workspace for email communication.

Disclosure to other recipients only takes place where necessary for the performance of a contract, where a legal obligation exists, where you have consented or where another legal basis applies.

For transfers to countries outside the European Economic Area we ensure that the requirements of Art. 44 et seq. GDPR are met, in particular by relying on European Commission adequacy decisions or appropriate safeguards such as the Standard Contractual Clauses.

Unless a more specific storage period is stated in this privacy policy, we store personal data only for as long as necessary for the respective processing purpose.

Once the purpose no longer applies, the data is deleted unless statutory retention obligations exist or further storage is required to assert, exercise or defend legal claims. In these cases processing is restricted to the respective purpose and deletion takes place after the applicable period has expired.

Subject to the statutory requirements, you have the right:

• to obtain information about the personal data we process about you,
• to have inaccurate data corrected,
• to request the erasure of your data,
• to request the restriction of processing,
• to receive your data in a portable format,
• to object to processing based on Art. 6(1)(e) or (f) GDPR, and
• to withdraw consent at any time with effect for the future.

To exercise your rights you can contact info@kinova.de or our data protection officer directly.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority generally responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg data protection authority).

You may also contact the supervisory authority of your habitual residence, place of work or the place of the alleged infringement.

Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing on grounds relating to your particular situation.

We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

We adapt this privacy policy when our website, the services used or the legal requirements change. The version published on this website at the given time applies.