Information on data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject

(Version: GDPR 2.1 from January 2025)

kasasi GmbH is responsible for this website and, as a provider of a teleservice, must inform you at the beginning of your visit about the type, scope and purpose of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear and simple language. This content must be available to you at all times.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of current European and national laws.

With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:

kasasi GmbH
An der Stiftsbleiche 11
87439 Kempen
Germany
Commercial register number: HRB 10969
CEO: Markus Lechner

Phone: +49 831 5123433-0
E-Mail: info@kasasi.de

Our data protection officer

Sven Lenz
Data protection law firm Lenz GmbH & Co. KG
Bahnhofstraße 50
87435 Kempten
Germany

If you have any questions about data protection or other data protection concerns, you are welcome to send an e-mail to the data protection team: datenschutz@kasasi.de

A. General

For the sake of clarity, we do not differentiate between the genders. In the interests of equal treatment, the corresponding terms apply to all genders. The meaning of the terms used, such as ‘personal data’ or their ‘processing’, can be found in Art. 4 GDPR.

The personal data processed in the context of this website includes

Usage data (e.g. pages visited on our website) and
content data (e.g. entries in online forms).

B. Specific

Data protection information
We guarantee that we only process your data in connection with the processing of your enquiries and for internal purposes as well as to provide the services or content you have requested.

Principles of data processing
We process your personal data only in compliance with the relevant data protection regulations and on the basis of the following legal bases

Processing for the fulfilment of our services and implementation of contractual measures
Art. 6 para. 1 lit. b) GDPR
Processing for the fulfilment of our legal obligations
Art. 6 para. 1 lit. c) GDPR
Consent
Art. 6 para. 1 lit. a) and Art. 7 GDPR
Processing for the protection of our legitimate interests
Art. 6 para. 1 lit. f) GDPR

Data transfer to third parties
No data is transferred to third parties.

As part of website hosting, the service provider used may have access to your data. We have outlined which web host we use in this privacy policy.

Data transfer to a third country or an international organisation
Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.

No data is transferred to a third country or an international organisation.

Storage duration of your personal data
We adhere to the principles of data minimisation and data avoidance. This means that we only store your data for as long as necessary to fulfil the aforementioned purposes or as stipulated by the various storage periods provided for by law. If the respective purpose no longer applies or after the corresponding periods have expired, your data will be routinely blocked or deleted in accordance with the statutory provisions.

Making contact
Personal data is processed when you contact us electronically (e.g. via contact form or e-mail). The information you provide will be stored exclusively for the purpose of processing your enquiry and for possible follow-up questions.

We would like to inform you of the legal basis for this:

Processing for the fulfilment of our services and implementation of contractual measures
Art. 6 para. 1 lit. b) GDPR

We would like to point out that e-mails can be read or changed without authorisation and unnoticed during transmission. We would also like to draw your attention to the fact that we use software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they are falsely identified as spam due to certain characteristics.

What rights do you have?

a) Right to information
You have the right to obtain information about your stored data free of charge. On request, we will inform you in writing which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

b) Right to rectification
You have the right to have your data stored by us corrected if it is incorrect. In this case, you can request a restriction of processing, e.g. if the accuracy of your personal data is disputed.

c) Right to blocking
You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be kept in a lock file for control purposes.

d) Right to erasure
You can request the erasure of your personal data, provided there are no statutory retention obligations. If such an obligation exists, we will block your data on request. If the relevant legal requirements are met, we will delete your personal data even without your request.

e) Right to data portability
You are entitled to request that we provide the personal data transmitted to us in a format that allows it to be transmitted to another organisation.

f) Right to lodge a complaint with a supervisory authority
You have the option of lodging a complaint with one of the data protection supervisory authorities.

The data protection authority responsible for us:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Telephone: +49 981 53-1300
Fax: +49 981 53-981300

You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html

Note: It is also possible to lodge a complaint with any data protection supervisory authority within the EU.

g) Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data in accordance with Art. 6 (1) (e) and (f); this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertising. All you need to do is send us an email to this effect.

h) Right of cancellation
You have the option to revoke your consent to the processing of your data at any time with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the cancellation. All you need to do is send us an e-mail to this effect.

However, such a revocation does not affect the legality of the processing carried out up to the time of revocation on the legal basis of Art. 6 para. 1 letter a) GDPR.

To assert your rights as a data subject, please send us an email to one of the email addresses listed above.

Protection of your personal data
We take contractual, technical and organisational security measures in accordance with the state of the art to ensure that data protection laws are complied with and to protect the processed data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, 256-bit SSL (AES 256) encryption technology is used.

Your personal data is protected within the scope of the following points (extract):

a) Maintaining the confidentiality of your personal data
In order to protect the confidentiality of your data stored by us, we have taken various measures to control access and access control.

b) Safeguarding the integrity of your personal data
In order to protect the integrity of your data stored by us, we have taken various measures to control the transfer and input of data.

c) Safeguarding the availability of your personal data
In order to ensure the availability of your data stored by us, we have taken various measures to control orders and availability.

The security measures in use are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our website due to the insecure nature of the Internet. Therefore, any data transmission by you is at your own risk.

Protection of minors
Persons who have not yet reached the age of 16 may only provide us with personal information if they have the express consent of their legal guardians. This data will be processed in accordance with this data protection notice.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server enquiry
IP address

his data is not merged with other data sources.

The basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.

Cookies
Cookies are small text files that are stored locally in the cache of your Internet browser. Cookies make it possible, for example, to recognise the Internet browser. The files are used to help the browser navigate through the website and to utilise all functions to their full extent.

We do not use cookies or only use technically necessary cookies.

Website hosting
We use the system of the following provider to host our website and display the page content: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

All data collected on our website is processed on the provider's servers.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

Friendly Captcha (bot/spam protection)
Our website uses the ‘Friendly Captcha’ service. This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany.

Friendly Captcha is a data protection-friendly protection solution to make it more difficult for automated programmes and scripts (so-called ‘bots’) to use our website.

For this purpose, we have integrated a programme code from Friendly Captcha into our website for contact forms so that the visitor's end device can establish a connection to the Friendly Captcha servers in order to receive a calculation task from Friendly Captcha. The visitor's end device solves the calculation task, which requires certain system resources, and sends the calculation result to our web server. This contacts the Friendly Captcha server via an interface and receives a response as to whether the puzzle has been solved correctly by the end device. Depending on the result, we can assign security rules to requests via our website and, for example, process or reject them.

The data is used exclusively to protect against spam and bots as described above. Friendly Captcha does not set or read any cookies on the visitor's end device. IP addresses are only stored in hashed, i.e. one-way encrypted form and do not allow us or Friendly Captcha to draw any conclusions about an individual person.

The legal basis for the processing is our legitimate interests in protecting our website from abusive access by bots, i.e. spam protection and protection against attacks such as mass requests), Article 6(1)(f) GDPR.

Further information can be found in the data protection information for end users of ‘Friendly Captcha’: https://friendlycaptcha.com/de/legal/privacy-end-users/

Social networks
In addition to this online offering, we also maintain presences in various social media, which you can access via the corresponding buttons on our website. When you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the specific data you enter in this social medium, further information may also be processed by the provider of the social network.

Further information can be found in our social media privacy policy via the extra menu items in our data protection area

Changes to our privacy policy
We reserve the right to amend our privacy policy at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. This may concern, for example, the introduction of new services. The new data protection information will then apply to your next visit.

Privacy policy