Data Privacy

Statement on data protection

Thank you for your visit to our website and your interest in our products. We take the protection of your personal data very seriously.
The purpose of this statement on data protection is to inform you how your personal data obtained by us is processed when you visit our website. Our statement on data protection is compliant with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following statement on data protection is intended to comply with the information obligations arising pursuant to GDPR. Reference is made, for example, to Articles 13 and 14 et seq. GDPR.

Data Controller

The data controller within the meaning of Article 4 (7) GDPR is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to our website, the data controller is:
Kyto GmbH
Bundesallee 23
10717 Berlin
Deutschland

E-Mail: info@kyto.com
Tel: +49 (0)30 994040-110

Purposes and legal bases of data processing

For technical reasons, it is necessary that we process certain information that was automatically transmitted by the browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time our website is opened and automatically stored in so-called server log files. These are:

• Information about the browser type and the version used,
• Operating system of the accessing device,
• Host name of the accessing computer,
• IP address of the accessing device,
• Date and time of access,
• Websites and resources (images, files, other page content) accessed from our website,
• Websites from which the user’s system accessed our website (referrer tracking),
• Notification as to whether the access was successful,
• Amount of data transferred.

The processing of personal data collected by us due to your use of this website is based on Article 6 (1) f of the General Data Protection Regulation, the so-called balancing of interests clause. Legitimate interests of Kyto are to initiation or maintenance a business relationships with you, the analysis, optimization and economic operation of this website, as well as, in the event of a violation of legal provisions or the terms of use for this website, to clarify such violations and, if necessary, to enforce claims against offenders.

The temporary (automated) storage of the data is necessary for visiting the website in order to enable the website presentation. Personal data is also stored and processed for the purpose of maintaining website compatibility for as many visitors as possible and for preventing fraud and enabling troubleshooting. To this end, it is necessary to log the accessing computer’s technical data, so that we can respond to display errors, attacks on our IT systems and/or functionality errors on our website as early as possible. Additionally, we also use the data to optimise the website and to ensure the general security of our IT systems.

The data collected while using our website will only be stored for the period of time for which this data is required to achieve the aforementioned purposes. The IP address is stored for IT security purposes on our web server for a maximum of 7 days.

Contact Form

When you fill out our contact form, personal and company-related information is collected. This includes your first name, your last name, the company you work for, your telephone number and e-mail address, and possibly the message you send to us. If you use the contact form to get in touch with us, you agree to the transmission and storage of the data you have entered in the input mask. In addition, you enable and agree to a contact from our side. In this context, the data will not be passed on to third parties.

The data will be deleted as soon as the purpose of storage no longer applies. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

If necessary, you have the option at any time to change or delete the data provided in the contact form. Of course, we will also provide you with information about the personal data we have stored about you at any time.

Use of cookies and related technologies

We use cookies at various points on our website. Cookies are small identifiers that a server stores on the device with which you access our website or our services. They contain information that can be retrieved when you access our services and thus enable a more efficient and better use of our offers.

Our website uses so-called session cookies, which store data for technical session control in the memory of your browser. This data is not personal and is deleted at the latest when you close your browser. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

In the cookies, both the language settings and the log-in information are stored and transmitted. We also use cookies on our website that enable an analysis of the user’s surfing behavior.  In this way, the frequency of page views as well as the use of website functions can be transmitted.

The data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to you as a person is no longer possible. The data is not stored together with your other personal data.

When you open our website, you will be informed by an info banner about the use of cookies for analysis purposes and referred to this data protection declaration.

Cookies are stored in the memory of your browser and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website.

Social Media Plugins

We link to the websites of other providers not associated with us (third parties), e.g. to our profiles on social networks such as LinkedIn, Xing, Twitter, YouTube, Instagram and Facebook. We would like to inform you that we have no influence on the data processed by these providers, when you click these links. As data processing by third parties is not controlled by us, we cannot assume any liability for it. For further information on data processing by these third parties, please refer to the data privacy information published by the respective provider.

Google-APIs

A web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIS) is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIS. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on the handling of the transmitted data, please refer to the Google APIS privacy policy: https://policies.google.com/privacy.

You can prevent the collection as well as the processing of your data by Google APIS by disabling the execution of script code in your browser or by installing a script blocker in your browser.

Google-Analytics

This website uses “Google Analytics”, the Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA, to analyse your use of this website. Google Analytics uses cookies. The information collected by the Cookies are usually sent to a Google server in the USA and stored there.

IP anonymization is used on this website. The IP address of users is shortened within the member states of the EU and the European Economic Area. Due to this shortening, the personal reference of your IP address is no longer necessary. As part of the agreement on commissioned data, which we concluded with Google Inc., the latter uses the information collected to evaluate website use and website activity and provides services associated with Internet use.

By means of a browser plugin, you can prevent the information collected by Cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. even if you have given your consent to use the statistics cookies. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

By clicking on the link above, you will be able to download a so-called “opt-out cookie” on your browser. Your browser must generally allow the storage of cookies for this purpose. If you delete your cookies regularly, you will need to click on the link again each time you visit this website.

Under the following link you will find further information on the data use by Google Inc:
https://support.google.com/analytics/answer/6004245?hl=en

Google-Fonts

We use Google Fonts on our website. This allows us to integrate certain fonts into our website. These fonts are provided by Google through servers in the USA. When accessing our website, your web browser establishes a direct connection to these servers. During this process, the visitor’s IP address, among other things, is transmitted to Google and stored there. Google participates in the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

Further information about Google: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. Further information on data privacy at Google: https://www.google.com/policies/privacy/

Google-reCAPTCHA

For our own protection in connection with the use of Internet forms, we use the service reCAPTCHA of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”) This query distinguishes whether the input is made by a human or abusively by automated, machine processing.

For this purpose, reCAPTCHA collects the following data: IP address, time zone, installed browser plugins, click behavior, identifier of your browser, screen resolution of the visitor, language setting of the browser, as well as all cookies that Google has set in the last 6 months. For this purpose, your input is transmitted to Google servers in the USA and further used there.

However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of reCAPTCHA is not merged with other data from Google. For the service of reCAPTCHA, deviating data protection provisions of Google apply. https://www.google.com/intl/de/policies/privacy/

Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes
visits of companies to our website based on IP-addresses and shows us related publicly available information,
such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing
transparency on how our visitors use our website and the tool processes domains from provided form inputs
(e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional
information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out
option. In the event of an opt-out, your data will no longer be used by Leadinfo.

Mailchimp

This website uses MailChimp‘s services for sending newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service which, amongst other features, allows the distribution of newsletters to be organised and analysed. If you provide data (such as your email address) so that you can be sent a newsletter, it will be stored on MailChimp’s servers in the USA.

MailChimp is certified according to the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the USA, which is supposed to guarantee compliance with the European data protection standard in the USA.

With the help of MailChimp we will be able to analyse our newsletter campaigns. When you open an email sent with MailChimp, a file included in the email (a so-called web beacon) will connect to MailChimp‘s servers in the USA. This will establish whether a newsletter email has been opened and which links have been clicked on. Technical information will also be collected (such as time of visit, IP address, browser type and operating system). It will not be possible to match this information to specific recipients of the newsletter. It will be used solely for statistical analysis of newsletter campaigns. The results of these analyses can then be used to better tailor future newsletters to the interests of the recipients.

If you do not want your data analysed by MailChimp, you will need to unsubscribe from the newsletter. To allow you to do this, we provide a link in each newsletter email. You can also unsubscribe from the newsletter directly on the website itself.

The data collected in this way will be processed with your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The lawfulness of any data processing operations already carried out will not be affected by withdrawal.

We will store the data you provide us in order to receive the newsletter until you cancel your subscription and erase it from both our servers and MailChimp’s servers when you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the members area) will not be affected.

Further details can be found in MailChimp’s data protection provisions at: https://mailchimp.com/legal/terms/.

Hubspot

We use HubSpot for marketing activities on our website. HubSpot is a software company from the USA with a branch HubSpot Ireland Limited in 2nd Floor 30 North Wall Quay, Dublin 1, Ireland.

We use this integrated software solution for our own marketing, lead generation and customer service purposes. This includes email marketing which governs the sending of newsletters as well as automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms. HubSpot uses cookies, which are small text files that are stored locally in the cache of your web browser on your end device and allow us to analyse your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, duration of the visit and pages viewed) on our behalf so that we can generate reports on the visit and the pages visited.

Information collected by HubSpot and the content of our website is stored on servers of HubSpot’s service providers. Insofar as you have given your consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, the processing on this website is carried out for the purpose of website analysis.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies accordingly through your browser settings. You can object to the processing of your personal data at any time with future effect. 

WordPress

This website uses WordPress tools to optimize the website and statistically analyze visitor traffic. The provider is Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.

To optimize and improve our information service on our website, we collect and store data such as the date and time of the page view, the page from which you accessed our site, and the like. This is done anonymously without personally identifying the user of the site. If necessary, user profiles are created by means of a pseudonym. No connection is made between the natural persons behind the pseudonym and the usage data collected. As a web analytics tool, we use the WordPress plugins for this purpose:

WPML

This page uses WPML for multilingual support. For this purpose, the module stores data in so-called cookies. Here is a list of the cookies used, their purpose and their duration.

Cookie name: _icl_current_languageUsage: stores the current language

Runtime: 1 day

Cookie Name:_icl_current_admin_language_{hash}

Usage: stores the current WordPress administration language

Runtime: 1 day

Cookie Name:_icl_visitor_lang_js

Usage: stores the redirected language

Runtime: 1 day

Cookie Name:wpml_browser_redirect_test

Usage: checks if cookies are enabled

Runtime: session session (will be deleted after closing the browser)

Cookie Name:wpml_referer_url

Usage: stores the last requested URL in the front-end

Runtime: session session (will be deleted after closing the browser)

Cookie Name:wpml_admin_referer_url

Usage: stores the last requested URL in the back-end

Runtime: session session (will be deleted after closing the browser)

For more information about WPML, see the website https://wpml.org/ and the privacy policy https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/

Yoast SEO

On our website we use plugins from Yoast SEO. This is an offer from Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, The Netherlands, Tel: +31 (0)24 82 00 337 (Chamber of Commerce / KvK: 55404367, VAT Number: NL851692540B01).

This plugin takes care of the complete technical optimization of our websites for search engines. It also assists with content development. For more information, please refer to Yoast BV’s privacy policy, which you can view at https://yoast.com/privacy-policy/.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Data security

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Your rights

You have the following rights with regard to personal data related to your person:

• Right of access (Art. 15 GDPR),
• Right to rectification or erasure (Art. 16 and Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to notification (Art. 19 GDPR),
• Right to data portability (Art. 20 GDPR),

Moreover, you have the right to object to processing of personal data related to your person at any time for reasons based on your specific situation, if this processing is based on Art. 6 section 1 (e) GDPR (data processing for public interest) or Art. 6 section 1 (f) GDPR (data processing based on weighing of interests); this also applies to profiling based on these provisions (Art. 21 GDPR). If you object, your personal data will only be processed further, if we can prove that there are compelling, legitimate reasons overriding your interests, rights and freedoms or if processing is for the purpose of asserting, exercising or defending legal claims.

If you have given us permission to process your personal data, you can revoke it at any time. The legitimacy of processing of your personal data up to the point at which you revoked your consent remains unaffected. Further processing of this data based on a different legal foundation, for instance to meet legal obligations, also remains unaffected.

You have the right to file a complaint with a data privacy supervisory authority about our processing of your personal data.

Data Protection Officer

If you have any questions about our use of personal data, about this Data Privacy Policy or if you wish to exercise your rights, please send your request or any question you have to:

Datenschutzbeauftragter der Kyto GmbH

Bundesallee 23
10717 Berlin
Deutschland E-Mail: datenschutz@kyto.de