Privacy Policy

1. General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. Their contact details can be found in the “Notice on the Responsible Party” section of this privacy policy.

1.2 How Do We Collect Your Data?
Your data is collected in two ways:
Data You Provide: This includes data you actively submit, such as through contact forms.
Data Collected Automatically: This includes technical data (e.g., browser type, operating system, time of access) collected when you access the website. This data is automatically collected by our IT systems upon your visit.

1.3 Why Do We Use Your Data?
Some data is collected to ensure the error-free provision of the website.
Other data is used to analyze user behavior.
What Are Your Rights Regarding Your Data?
You have the following rights regarding your data:
The right to obtain information about the origin, recipient, and purpose of your stored personal data free of charge at any time.
The right to request correction or deletion of your data.
The right to withdraw your consent to data processing at any time with future effect.
The right to request restriction of data processing under certain conditions.
The right to lodge a complaint with the competent supervisory authority.
For any questions on data protection, you can contact us at any time.

2. Hosting
We host the content of our website with:
IONOS
IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
When you visit our website, IONOS collects log files, including your IP address. Details are available in the IONOS privacy policy:
IONOS Privacy Policy.
Data processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in reliable website presentation. If consent has been requested, data is processed based on Article 6(1)(a) GDPR and § 25(1) TTDSG, which includes cookies and device information. Consent can be revoked at any time.

2.1 Order Processing Agreement
We have entered into a legally required order processing agreement (OPA) with IONOS to ensure data protection and compliance with the GDPR.

3. General Information and Mandatory Details on Data Protection
We take the protection of your personal data seriously and treat it confidentially in accordance with statutory data protection regulations and this privacy policy.
What Data Do We Collect?
Personal data, such as names or email addresses, that can identify you.
Data collected via your use of the website.
Note: Data transmission over the internet (e.g., email communication) may have security gaps. Complete protection against third-party access is not possible.

3.1 Notice on the Responsible Party
Responsible for data processing on this website:
Obere Hommeswiese 53-57
57258 Freudenberg
Phone: +49 2734 501301
Email: Info@klein-group.eu

The responsible entity is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).


3.2 Retention Period
Unless a more specific retention period is mentioned in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for retaining your data (e.g., tax or commercial law retention periods). In the latter case, the data will be deleted once these reasons no longer apply.

3.3 General Information on the Legal Basis for Data Processing
If you have given your consent to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, provided special categories of data are processed. In the case of explicit consent for the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If cookies or device-related information is stored, processing is additionally based on § 25(1) TTDSG. Consent can be withdrawn at any time.
If your data is required for the performance of a contract or for pre-contractual measures, we process it based on Article 6(1)(b) GDPR. If processing is necessary for compliance with a legal obligation, we process your data under Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. Specific legal bases are detailed in the respective sections of this privacy policy.

3.4 Recipients of Personal Data
In the course of our business operations, we collaborate with external parties. Sharing personal data with such parties occurs only under the following conditions:
When necessary for contract performance.
If we are legally obliged to share data (e.g., with tax authorities).
If we have a legitimate interest in sharing data under Article 6(1)(f) GDPR.
Based on other permissible legal grounds.
When engaging data processors, data is shared only under a valid processing agreement that ensures GDPR compliance.

3.5 Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can withdraw consent at any time, with future effect. The legality of any data processing carried out before the withdrawal remains unaffected.

Right to Object to Data Collection in Specific Cases and to Direct Marketing (Article 21 GDPR)
If data processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. For the legal basis of processing, see this privacy policy.
If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims (objection under Article 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).

3.6 Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

3.7 Right to Data Portability
You have the right to receive data we process automatically based on your consent or in performance of a contract, in a commonly used, machine-readable format. If technically feasible, you may request that this data be transferred directly to another controller.

3.8 Right to Access, Rectification, and Deletion
You have the right, within the scope of applicable law, to access your personal data stored with us, its origin, recipients, and the purpose of its processing free of charge. You also have the right to request the correction or deletion of this data. For further questions about personal data, you can contact us at any time.

3.9 Right to Restriction of Processing
You have the right to request the restriction of processing your personal data under certain circumstances. This applies in the following cases:
If you dispute the accuracy of your data, we need time to verify it.
If processing your data is unlawful, but you oppose its deletion.
If we no longer need your data, but you require it for legal claims.
If you object to processing under Article 21(1) GDPR, pending verification of overriding interests.
If processing is restricted, your data will only be stored and processed with your consent or for specific legal claims.

3.10 SSL or TLS Encryption
For security and to protect the transmission of confidential content (e.g., inquiries), this website uses SSL or TLS encryption. You can recognize encrypted connections by the browser’s address line changing from “http://” to “https://” and the lock symbol. Encrypted data cannot be accessed by third parties.


4. Data Collection on This Website
4.1 Cookies
Our websites use “cookies.” Cookies are small data packets that do no harm to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain on your device until you delete them yourself or your web browser performs an automatic deletion.
Cookies can be first-party cookies (set by us) or third-party cookies (set by third-party services). Third-party cookies enable the integration of specific services from external providers into websites (e.g., cookies for payment processing).
Cookies serve various functions. Many cookies are technically necessary, as certain website features would not function without them (e.g., shopping cart functionality or video display). Other cookies are used to analyze user behavior or for advertising purposes.
Cookies that are essential for electronic communication processes, the provision of specific features you requested (e.g., shopping cart functionality), or website optimization (e.g., audience measurement cookies) are stored based on Art. 6 Para. 1 lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing essential cookies to ensure the error-free and optimized delivery of its services. If consent for the storage of cookies and comparable recognition technologies was requested, the processing occurs exclusively based on this consent (Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG); the consent can be revoked at any time.
You can configure your browser to inform you about the setting of cookies, only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Details about which cookies and services are used on this website can be found in this privacy policy.

4.2 Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
These data will not be merged with other data sources.
The collection of this data is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this, the server log files must be recorded.


4.3 Contact Form
If you submit inquiries to us via the contact form, the information you provide, including your contact details, will be stored by us for the purpose of processing your inquiry and for any follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is required to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR), provided this was requested; consent can be revoked at any time.
The data you provide in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions — particularly retention periods — remain unaffected.

Inquiries via Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all personal data resulting from it (e.g., name, inquiry details), will be stored and processed by us for the purpose of addressing your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or required to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR), provided this was requested; consent can be revoked at any time.
The data you send to us via contact inquiries will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions — particularly statutory retention periods — remain unaffected.

5. Social Media
5.1 Facebook
This website integrates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the collected data may also be transferred to the USA and other third countries.
An overview of Facebook’s social media elements can be found here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.
If the social media element is active, a direct connection is established between your device and Facebook’s servers. Facebook then receives information that you have visited this website with your IP address. If you click the Facebook “Like-Button” while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account.
Please note that, as the website operator, we have no knowledge of the content of the transmitted data or how it is used by Facebook. For more information, please refer to Facebook’s privacy policy:
https://de-de.facebook.com/privacy/explanation.
The use of this service is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG. Consent can be withdrawn at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The subsequent processing by Facebook is not part of our joint responsibility.
Our joint obligations have been set forth in an agreement on joint processing. The wording of the agreement can be found here:
https://www.facebook.com/legal/controller_addendum.
According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. Data subject rights (e.g., access requests) regarding the data processed by Facebook can be asserted directly with Facebook. If you assert rights with us, we are obliged to forward them to Facebook.
Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381, and
https://www.facebook.com/policy.php.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards for data processing in the USA. Each company certified under the DPF is committed to adhering to these data protection standards. Further information is available from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000GnywAAC&status=Active





5.2 Instagram
This website integrates functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If the social media element is active, a direct connection is established between your device and Instagram’s servers. Instagram thereby receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account.
Please note that, as the operator of this website, we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please refer to Instagram’s privacy policy:
https://privacycenter.instagram.com/policy/.
The use of this service is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG. Consent can be withdrawn at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The subsequent processing by Facebook or Instagram is not part of our joint responsibility.
Our joint obligations have been set forth in an agreement on joint processing. The wording of the agreement can be found here:
https://www.facebook.com/legal/controller_addendum.
According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool and for ensuring privacy-compliant implementation of the tools on our website. Facebook is responsible for the data security of Facebook or Instagram products. Data subject rights (e.g., access requests) regarding the data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert rights with us, we are obliged to forward them to Facebook.
Data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://privacycenter.instagram.com/policy/, and
https://de-de.facebook.com/help/566994660333381.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards for data processing in the USA. Each company certified under the DPF is committed to adhering to these data protection standards. Further information is available from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000GnywAAC&status=Active

6. Analytics Tools and Advertising
6.1 IONOS WebAnalytics
This website uses the analytics services of IONOS WebAnalytics (hereinafter referred to as “IONOS”). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur, Germany. Through the analysis conducted by IONOS, data such as the number of visitors and their behavior (e.g., number of page views, duration of website visits, bounce rates), sources of visitors (e.g., which page visitors came from), visitor locations, and technical information (browser and operating system versions) can be analyzed.
For this purpose, IONOS particularly collects the following data:
Referrer (previously visited webpage)
Requested webpage or file
Browser type and version
Operating system used
Device type used
Time of access
IP address in anonymized form (used only to determine the location of access)
According to IONOS, data collection is completely anonymized, ensuring it cannot be traced back to specific individuals. Cookies are not stored by IONOS WebAnalytics.
The storage and analysis of data are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior statistically to optimize both its website offerings and advertising. If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, as far as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. Consent can be withdrawn at any time.
For more information on data collection and processing by IONOS WebAnalytics, please refer to IONOS’s privacy policy at the following link:
https://www.ionos.de/terms-gtc/datenschutzerklaerung.

7. Plugins and Tools
7.1 Google Fonts (Local Hosting)
This site uses Google Fonts, which are provided by Google, for consistent font representation. The Google Fonts are installed locally, and no connection to Google servers is established.
For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq.
You can find Google’s privacy policy here:
https://policies.google.com/privacy?hl=de.
Source:
https://www.e-recht24.de