Privacy Policy

Controller

The controller within the meaning of the GDPR and other data-protection provisions is: Kristmann Engineering UG (haftungsbeschränkt) i. Gr. Ufgaustraße 3 76532 Baden-Baden Deutschland E-Mail: info@kristmannengineering.de

General information

We treat your personal data confidentially and in accordance with the statutory data-protection rules, in particular the EU General Data Protection Regulation (GDPR), and this privacy policy. Personal data is any data that can be used to identify you personally. You can generally use this website without actively providing personal data. Where data is processed – technically when you visit the site, or when you write to us via the contact form – this policy explains what data is involved, what we use it for and on which legal basis the processing takes place.

Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). When you visit the website, Vercel automatically processes information in server log files transmitted by your browser: IP address, date and time of the request, requested page or file, transferred data volume, browser type and version, operating system and the referring page (referrer URL). This data is required to technically deliver the website, ensure its stability and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website). Log data is stored for a limited period only and is not merged with other data sources. A data-processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Where data is transferred to the USA, the transfer is based on the EU Standard Contractual Clauses and on Vercel’s certification under the EU-U.S. Data Privacy Framework.

Fonts

The fonts used on this website are self-hosted and served by our hosting provider. No connection to Google or other font providers is established when you visit our pages.

TLS encryption

For security reasons and to protect the transmission of confidential content – for example inquiries you send via the contact form – this website uses TLS encryption throughout. You can recognise an encrypted connection by “https://” and the lock icon in your browser’s address bar.

Contact form and contact by email

If you send us an inquiry via the contact form, we process the data you provide: name, email address, the selected topic (if any) and your message. This information is used exclusively to handle and answer your inquiry. Your inquiry is delivered to our mailbox as an email and is not stored in a database of this website. We use the service Resend (Resend, Inc., USA) to send this email. A data-processing agreement is in place with Resend; transfers to the USA are based on the EU Standard Contractual Clauses. The legal basis for the processing is Art. 6(1)(b) GDPR where your inquiry relates to the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). We delete inquiries once they have been dealt with and no statutory retention obligations apply; business correspondence is subject to retention periods under German commercial and tax law of generally six years. The same applies if you contact us directly by email.

Protection against spam and abuse

The contact form uses an additional field that is invisible to humans (“honeypot”) to detect automated spam submissions; no additional data about you is collected in the process. In addition, we limit the number of form submissions per IP address within a short time window (rate limiting). For this purpose your IP address is stored with our service provider Upstash, Inc. (USA) for the duration of the respective window – at most one hour – and then deleted automatically. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the website against abuse); transfers are based on the EU Standard Contractual Clauses.

Cookies and local storage

This website does not set tracking cookies or third-party cookies. We use your browser’s local storage (localStorage) for two functional entries only: “kr-theme” stores your light/dark-mode choice when you use the theme toggle, and “kr-consent” stores your decision in the consent banner. Both entries are required for the function you requested (Section 25(2) no. 2 of the German TDDDG), remain exclusively in your browser and are not transmitted to us. You can remove them at any time via your browser settings (delete site data).

Web analytics (Vercel Analytics)

Only if you consent via the consent banner do we load Vercel Analytics, a privacy-friendly analytics service by Vercel Inc. Vercel Analytics works without cookies and without cross-device recognition. It collects aggregated usage statistics such as page views, country of origin, browser and device type; a daily-rotating, non-traceable hash is used to distinguish visits, and your IP address is not stored permanently. The legal basis is your consent (Art. 6(1)(a) GDPR). Without your consent the service is not loaded. You can revoke your consent at any time with effect for the future by deleting this site’s data in your browser – the “kr-consent” entry is removed and the banner is shown again on your next visit.

External links

This website contains links to external websites, for example to our application Service Partner (service-partner.app). We have no influence on their content and data processing; the privacy policies of the respective providers apply.

Your rights

With regard to your personal data you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You may revoke any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. To exercise your rights, an informal email to the address given above is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg), Königstraße 10a, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de. You may also contact the supervisory authority of your habitual residence.

Storage period and obligation to provide data

Unless a more specific storage period is stated in this policy, personal data remains with us until the purpose of the processing no longer applies, you request erasure or you revoke your consent – unless statutory retention obligations prevent erasure. You are neither legally nor contractually obliged to provide personal data. However, without the details marked as required in the contact form we cannot process your inquiry. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Changes to this privacy policy

We will update this privacy policy whenever the functionality of the website or the legal situation changes – for example when the planned online shop launches. The version published here applies. Last updated: July 2026

Authoritative version

This English translation is provided for convenience. The German version of this privacy policy is legally authoritative.

Service providers (data processors)

We use the following service providers to operate this website. A data-processing agreement pursuant to Art. 28 GDPR is in place with each of them; transfers to third countries are based on the EU Standard Contractual Clauses and, in the case of Vercel, additionally on the EU-U.S. Data Privacy Framework.

• VercelVercel, Inc. (USA)Hosting and delivery of the website
• ResendResend, Inc. (USA)Sending contact-form emails
• UpstashUpstash, Inc. (USA)Rate limiting to protect against abuse