Privacy Policy (Datenschutzerklärung)

1. Data Controller (Verantwortlicher)

The controller responsible for data processing on this website within the meaning of Art. 4 No. 7 GDPR is:

2. Overview: Cookie-Less & Privacy-First Architecture

This website is built with a Zero-Tracking / Cookie-Less architecture. We believe in strict data minimization and user privacy:

• Zero Marketing / Tracking Cookies: We do not set any tracking cookies, third-party analytics cookies, or advertising pixels (e.g., Google Analytics, Meta Pixel, Hotjar).
• No User Profiling: We do not track user sessions across different websites or build behavioral profiles.
• No Cookie Banner Required: Because no non-essential cookies or trackers are stored on or accessed from your end device, no invasive cookie banner (Cookiebot) is required pursuant to § 165 Abs 3 TKG 2021 and the EU ePrivacy Directive.

3. Hosting & Server Delivery (Cloudflare Pages)

This website is hosted and deployed as a static site via Cloudflare Pages, a service provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA).

When you visit this website, Cloudflare processes technical request metadata (such as your IP address, browser type, operating system, referrer URL, date and time of request, and HTTP status code) to securely deliver the website, optimize performance via global edge caching, and protect against distributed denial-of-service (DDoS) attacks.

Legal Basis: The processing of this data is based on our legitimate interest in providing a reliable, performant, and secure website pursuant to Art. 6(1)(f) GDPR.

International Data Transfers: Data transmission to Cloudflare is secured through Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-U.S. Data Privacy Framework.

4. Bot & Spam Protection (Cloudflare Turnstile)

To protect our contact endpoints from automated web crawlers, spam bots, and malicious requests, we utilize Cloudflare Turnstile on the contact section of our website.

Turnstile evaluates non-intrusive browser telemetry (such as device characteristics and non-interactive challenge data) to verify whether the visitor is human. Unlike legacy CAPTCHA solutions, Turnstile operates without tracking cookies, does not collect personal profiling data, and does not monitor user activity across the web.

Legal Basis: This processing is conducted pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in safeguarding our infrastructure from automated attacks, abusive bot traffic, and spam.

5. Contact Inquiries & Electronic Correspondence

When you contact us directly via email (contact@kelvindynamics.com) or professional networks (e.g., LinkedIn), the personal data you transmit (such as your name, email address, company affiliation, and inquiry content) is processed solely for the purpose of answering your request and conducting any subsequent business communication.

Legal Basis: If the contact aims to initiate or fulfill a contract, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in responsive client communication pursuant to Art. 6(1)(f) GDPR. Your data is deleted once your inquiry has been conclusively resolved, provided no statutory retention obligations apply.

6. External Links & Third-Party Services

Our website may contain hyperlinks to third-party services (such as LinkedIn and GitHub). When you click on an external link, you leave our website and connect directly to the third-party server. We have no influence over data processing on external sites and refer you to their respective privacy notices.

7. Your Rights as a Data Subject (Betroffenenrechte)

Under the EU General Data Protection Regulation, you are entitled to the following statutory rights regarding your personal data:

• Right of Access (Art. 15 GDPR): The right to obtain confirmation and information regarding whether and how your personal data is processed.
• Right to Rectification (Art. 16 GDPR): The right to demand correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17 GDPR): The right to request the deletion of your personal data ("right to be forgotten").
• Right to Restriction of Processing (Art. 18 GDPR): The right to restrict data processing under statutory preconditions.
• Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object at any time to data processing based on legitimate interests (Art. 6(1)(f) GDPR).

To exercise any of these rights, please contact us at contact@kelvindynamics.com.

8. Right to Lodge a Complaint with the Supervisory Authority

If you consider that the processing of your personal data infringes data protection legislation, you have the statutory right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.