1. General information
The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data is processed when you visit our website, for what purposes this is done, and what rights you have.
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, email address, telephone number and IP address.
This privacy policy applies to all language versions offered on this website.
2. Responsible
The person responsible for data processing on this website is:
KATHREIN Digital Systems GmbH
Salinstraße 34
83022 Rosenheim
Germany
Phone: +49 (0) 8031 6193300
Email: info@kathrein-ds.com
3. Data Protection Officer
If you have any questions about the processing of your personal data or about exercising your data protection rights, you can contact our data protection officer:
Data Protection Officer of KATHREIN Digital Systems GmbH
Email: datenschutz@kathrein-ds.com
4. Hosting and server log files
Our website is hosted by the following hosting and IT service provider:
[k:i] GmbH
Neubergstraße 30 a
97072 Würzburg
Germany
[k:i] GmbH uses the following data center and infrastructure provider for the provision of its server infrastructure:
Hetzner Online Ltd
Industriestraße 25
91710 Gunzenhausen, Germany
Germany
The website is hosted in a data center in Falkenstein/Vogtland, Germany.
Each time our website is accessed, the web server processes technically necessary connection data. This may include, in particular:
- IP address of the accessing device
- Date and time of access
- accessed page or file
- Previously visited page or referrer URL
- transferred amount of data
- browser and browser version used
- The used operating system
- HTTP status code
- Hostname of the accessing device
The processing of this data is necessary to technically provide the website, ensure its stability and security, detect errors and prevent abusive or harmful access.
Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and technically flawless provision of our website.
[k:i] GmbH processes the data generated during the operation of the website on our behalf. Hetzner Online GmbH provides the technical server and data center infrastructure as a subcontractor.
Storage period: Server log files are generally stored for 30 days. Longer storage may occur if there are concrete indications of a security incident or if required by law.
To ensure the security and recovery of our website, backups are created regularly. Depending on the backup level, these backups are stored for periods ranging from seven days to a maximum of one year. After the respective retention period expires, the backups are automatically overwritten or deleted.
5. Encrypted data transmission
Our website uses SSL or TLS encryption. This protects data transmitted between your browser and our server from unauthorized access by third parties.
You can recognize an encrypted connection in particular by the fact that the website address begins with "https://" and your browser displays a lock symbol.
6. Cookies and similar technologies
Our website uses cookies and similar storage technologies. Cookies are small data files that are stored on your device.
Some cookies and functions are technically necessary to provide the website and the services you have specifically requested. Other services will only be activated after you have given your prior consent.
Insofar as information is stored on or read from your device, this occurs as follows:
- for technically required functions based on Section 25 Paragraph 2 No. 2 TDDDG,
- For services requiring consent, based on your consent in accordance with Section 25 Paragraph 1 TDDDG.
The subsequent processing of personal data is carried out, depending on the purpose, in particular on the basis of Art. 6 para. 1 lit. a, lit. b or lit. f GDPR.
6.1 Consent management with Borlabs Cookie
We use Borlabs Cookie to collect and store your choices regarding cookies, statistics and external services.
Borlabs Cookie sets the technically necessary cookie "borlabs-cookie". This cookie stores, in particular, your selection, the duration of the selection, the version of the consent settings, and the domain and path of the website.
The relevant information is stored on our own web server. According to the provider, the collected consent data is not transmitted to Borlabs Cookie.
Purpose of processing: To take your selection into account and to provide proof of granted or rejected consents.
Legal basis: Art. 6 para. 1 lit. c and lit. f GDPR as well as § 25 para. 2 no. 2 TDDDG.
Revocation and modification: You can change your selection at any time via the cookie settings provided on our website. The lawfulness of the processing carried out until the revocation remains unaffected.
6.2 Technically required functions
The technically required functions may include, in particular:
- Saving your cookie preferences
- basic WordPress functions
- Security and session functions
- technical functions of the product catalog
- Provision of a language version of your choice
These functions are not used to create advertising profiles.
7. Reach measurement with WP Statistics
We use the WordPress plugin WP Statistics to obtain statistical information about the use of our website.
The following data, in particular, may be processed:
- Pages visited and page titles
- Date and time of the call
- Previously visited page
- Browser, operating system and device type
- approximate country or region of origin
- recurring or unique page views
Our configuration does not store the full IP address. IP addresses are anonymized before storage and additionally converted into a hash value that cannot be directly reverse-engineered.
The statistical data is stored exclusively in our own website's database. It is not transmitted to Google Analytics.
Legal basis: WP Statistics is only activated once you have consented to the processing of your data for statistical purposes. The legal bases are Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
Storage period: Detailed statistical data is stored for a maximum of 180 days. After that, older detailed data is deleted or aggregated into overall statistical values.
Revocation: You can revoke your consent at any time via the cookie settings.
8. contact
You can reach us via contact form, email, telephone or via the contact options listed on the website.
When you contact us, we process the information you provide. This may include, in particular:
- First and Last Name
- Company
- Address
- Email address
- Phone number
- Subject
- Content of your message
- further information voluntarily submitted
We use this data to process your request, answer follow-up questions, and communicate with you.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in processing incoming inquiries. If your message relates to the initiation or performance of a contract, the additional legal basis is Article 6(1)(b) GDPR.
Storage period: The data will be deleted once your request has been fully processed and there are no legal retention obligations or legitimate interests in proof to the contrary.
8.1 Contact form with WPForms
We use the WordPress plugin WPForms to provide our contact forms.
Submitted form entries are stored in the database of our website and additionally transmitted by email to the responsible authority.
With WPForms' privacy settings enabled, no additional user cookies are set and no additional user details such as IP address or user agent are stored along with the form entry.
Storage period: Form entries stored in our website's database are automatically deleted after a maximum of 180 days.
The copy of a request transmitted by email will be deleted as soon as the request has been fully processed and there are no legal retention obligations or legitimate interests in proof to the contrary.
9. Sending emails via Microsoft 365
Messages sent from our contact forms and our other email communication are handled via Microsoft 365 or Outlook.
The provider for users within the European Economic Area is:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland
The contact details and messages you submit may be processed on Microsoft systems. Processing by affiliated companies or technical service providers outside the European Economic Area cannot be completely ruled out.
Legal basis: Depending on the content of the communication, Art. 6 para. 1 lit. b or lit. f GDPR.
Storage period: The data will be deleted as soon as the communication is completed and there are no legal retention obligations or legitimate interests in further storage.
For more information, see Microsoft's privacy policy.
10. Spam and abuse protection with hCaptcha
To protect our contact forms from automated entries, spam and abuse, we use hCaptcha.
The provider is:
Intuition Machines, Inc.
USA
hCaptcha checks whether a form entry comes from a human or an automated system. The following data, in particular, may be processed:
- IP address and similar technical identifiers
- Date and time of the interaction
- browser and device information
- Mouse movements, scrolling movements and keyboard input
- Answers to displayed test questions
- technical safety and risk information
hCaptcha will only load after you have enabled the service via the displayed notification.
Legal basis: Your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
Important note: The online form cannot be submitted without hCaptcha authorization. Alternatively, you can contact us directly by email or phone.
When using hCaptcha, data processing may take place in the USA.
Revocation: You can revoke your consent at any time via the cookie settings.
Further information can be found in hCaptcha's privacy policy.
11. Website security with Wordfence
We use Wordfence to protect our website from malware, unauthorized access, brute-force attacks and other security threats.
The provider is:
Defiant, Inc.
USA
Wordfence can process the following data in particular:
- The IP address
- URL accessed
- Date and time of access
- browser and device information
- Successful and failed login attempts
- Requests blocked by the security system or classified as suspicious
- technical information about possible attacks
Live traffic logging is limited to security-relevant events. External determination of precise visitor locations via Wordfence servers is disabled.
We participate in Wordfence's real-time security network. This allows information about blocked attacks, malicious access attempts, and failed login attempts to be transmitted to Defiant. This helps identify current attack vectors and warn other protected websites about these threats.
An external audit log via Wordfence Central is not enabled.
Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the protection of our website, the data stored on it and our technical infrastructure.
Storage period: The live traffic data stored locally by Wordfence is deleted after a maximum of 30 days.
When using the real-time security network, data processing may take place in the USA.
For more information, please see the Wordfence privacy policy.
12. Google Maps and service point search
On our website we offer a service point search based on Google Maps.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
The map is initially blocked by our consent management system. A connection to Google is only established when you explicitly unlock the content or accept the Google Maps service.
After approval, the following data in particular can be transmitted to Google:
- The IP address
- browser and device information
- Date and time of the call
- page accessed
- Interactions with the map
- entered search terms or location information
- Location data (if applicable)
Access to your device's precise location only occurs if you explicitly allow your browser to access your location. Declining location sharing does not prevent you from manually using the map and location search.
Legal basis: Your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
Google may also process data through affiliated companies and technical service providers. Processing outside the European Economic Area, particularly in the USA, cannot be ruled out.
Revocation: You can revoke your consent at any time via the cookie settings.
For more information, please see Google's privacy policy.
13. Automatic translation and additional language versions with GTranslate
To provide our website in different languages, we use the paid translation service GTranslate.
The provider is:
GTranslate Inc.
4394 NW 120th Ave
Coral Springs, FL 33065
USA
GTranslate allows us to automatically translate the content of our website into different languages and provide it under separate language addresses. The languages offered may change over time.
If you select a translated language version or directly access a translated language version, the relevant content will be provided via GTranslate's technical infrastructure.
In particular, the following data may be processed:
- The IP address
- browser and device information
- Date and time of the call
- pages and files accessed
- Previously visited page
- selected language
- Page content required for translation
- technical log and usage data
GTranslate can also process statistical information about the use of the translated language versions, such as the number of requests, languages used, pages visited, or approximate countries of origin.
Purpose of processing: Providing a multilingual website and making our content accessible to international visitors.
Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing our information in several languages and making it accessible to an international user base.
Insofar as technically necessary information is stored on or read from your device for the provision of the language version you have selected, this is done on the basis of Section 25 Paragraph 2 No. 2 TDDDG.
Since GTranslate is based in the USA, personal data may be processed outside the European Economic Area.
Avoiding processing: You can avoid processing by GTranslate by using the original German version of our website and not accessing an automatically translated language version.
For more information, please see GTranslate's privacy policy.
14. Product catalog with WooCommerce
We use WooCommerce exclusively for the technical management and display of our product catalog.
No orders, payments, or customer accounts are currently processed through our website. Functions for linking orders to advertising campaigns and for the voluntary submission of diagnostic logs have been deactivated.
Insofar as WooCommerce processes technically necessary session information for the correct display of the product catalog, this is done on the basis of Section 25 Paragraph 2 No. 2 TDDDG and Article 6 Paragraph 1 lit. f GDPR.
Our legitimate interest lies in the clear and technically reliable presentation of our product range.
15. Recipients of personal data
Within our company, personal data is only received by those persons and departments who need it to fulfill their tasks.
Furthermore, data may be transferred to service providers commissioned by us, in particular to:
- Hosting and IT service providers
- Providers of email and communication services
- Providers of security and spam protection services
- Providers of translation services
- Map and location services
- technical maintenance and support service providers
The involvement of such service providers only occurs to the extent that this is necessary for the respective purposes and the data protection requirements are met.
Disclosure to authorities or other bodies may occur if we are legally obligated to do so or if it is necessary for the establishment, exercise or defense of legal claims.
16. Data transfers to third countries
Some of the providers used are based outside the European Economic Area or may use affiliated companies and subcontractors in so-called third countries.
Insofar as personal data is transferred to a country outside the European Economic Area, we comply with the requirements of Articles 44 et seq. GDPR.
A transfer may be based in particular on:
- an adequacy decision by the European Commission,
- the participation of a US company in the EU-US Data Privacy Framework,
- Standard Contractual Clauses of the European Commission,
- additional contractual or technical safeguards,
- Your explicit consent is required in the cases provided for by law.
Important note: Despite existing safeguards, there may be a residual risk that government authorities may access personal data in accordance with the applicable legal regulations when processing data in third countries.
17. General storage duration
We only store personal data for as long as is necessary for the respective processing purpose.
The specific storage duration depends in particular on:
- the purpose of the processing,
- the respective legal basis
- statutory retention obligations,
- legitimate interests in verification and security,
- a given or revoked consent.
The following settings apply to certain processing activities:
- WPForms entries: maximum 180 days
- Detailed WP Statistics data: maximum 180 days, after which it is deleted or summarized into overall statistical values.
- Wordfence live traffic data: maximum 30 days
- Contact emails: until final processing, unless there are retention obligations or evidentiary interests.
- Consent settings: until the Borlabs cookie expires or is deleted, or until a new selection is made.
Data will also be stored if this is necessary to fulfill legal obligations or to establish, exercise or defend legal claims.
18. Your privacy rights
Within the framework of the legal requirements, you have in particular the following rights:
Right to information pursuant to Article 15 GDPR
You can request information about whether and which personal data we process about you.
Right to rectification according to Art. 16 GDPR
You can request the correction of inaccurate and the completion of incomplete personal data.
Right to erasure according to Art. 17 GDPR
You can request the deletion of your personal data, provided there are no legal grounds for further processing.
Right to restriction of processing according to Art. 18 GDPR
Under the legal conditions, you can request a restriction of the processing of your personal data.
Right to data portability according to Art. 20 GDPR
Insofar as the processing is based on consent or a contract and is carried out automatically, you can request to receive the data you have provided in a structured, commonly used and machine-readable format or to have it transferred to another controller.
Right to withdraw consent pursuant to Article 7(3) GDPR
You can withdraw your consent at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Right to lodge a complaint pursuant to Article 77 GDPR
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for non-public companies based in Bavaria is:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
19. Right of objection
If we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
After an objection, we will no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
An objection can be addressed to:
KATHREIN Digital Systems GmbH
Salinstraße 34
83022 Rosenheim
Germany
Email: datenschutz@kathrein-ds.com
20. Automated Decisions
No purely automated decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR takes place on our website.
Automated security assessments using hCaptcha and Wordfence serve solely to protect against spam, abuse, and technical attacks.
21. Change to this privacy policy
We reserve the right to amend this privacy policy if our website, the services used, or legal requirements change.
The version published on this website is the applicable one.
As of: August 2026