Data Privacy Policy

5 Google Analytics 
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). The office responsible for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St., Dublin, Ireland, 1600. Google Analytics uses cookies that make it possible to analyze your usage of the website. The information about your usage of this website that is generated by the cookie is generally transferred to one of Google’s servers in the USA, where it is stored. 

KNF’s website uses Google Analytics with the “anonymize IP” enhancement. That means Google truncates the IP address collected by the Google Analytics cookie within member states of the European Union and in other contracting member states party to the Agreement on the European Economic Area before transferring it to the USA. Only in exceptional cases does Google transfer the complete IP address to one of its servers in the USA and truncate it there.  On behalf of KNF, Google uses this information to evaluate your usage of the website in order to compile reports about the website activities and in order to provide additional services associated with usage of the website and the Internet to the website operator. The IP address your browser transmits in the scope of Google Analytics is not combined with any other data in Google’s possession.  

The legal basis for processing personal data using cookies is Art. 6 Para. 1 Sub-Para. 1 a of the GDPR. You may revoke your consent at any time as described above by adjusting your cookie preferences. 

Additionally, you can delete cookies that have already been saved at any time in your browser’s settings. If you do this, you may not be able to use all of the websites’ functions to their full extent. 

You can find more information about conditions of use and data privacy at www.google.com/analytics/terms/ or www.google.com/intl/de/analytics/privacyoverview.html. 
 
6 Google Tag Manager / Ad Manager 
If you grant your consent, we will use Google Tag Manager from the provider Google Ireland Limited (registry number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager itself does not record any personal data. Google Tag Manager helps us incorporate and manage our tags. Tags are small code elements that, among other things, serve to measure traffic and user behavior, record the effect of online advertising and social channels, set up re-marketing and orient it towards target groups, and test and optimize websites. We use Tag Manager for the service Google Analytics. If you have deactivated it, Google Tag Manager will consider this deactivation. For more information about Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html. 

7 Contact Form / Contact Form Repairs 
When you contact us by e-mail or using a contact form, we will store the data you send us (your e-mail address and, if applicable, your name and phone number, customer number, and order number) in order to answer your questions. Wherever we have requested information that is not required to contact you on our contact form, we have indicated that this information is optional.  This information helps us substantiate your inquiry and improve the processing of your issue. This information is provided expressly on a voluntary basis and with your consent pursuant to Art. 6 Para. 1 a of the GDPR. As far as this constitutes information regarding communication channels (such as e-mail address and phone number), you also consent that we may also contact you via this communication channel in order to address your issue. Of course, you may revoke this consent at any time and with effect for the future. 

We will delete data accrued in this context once it is no longer necessary to save it, or we will restrict processing if legal storage obligations exist.

8 Friendly Captcha
To optimize the security of our forms, we use the "Friendly Captcha" service provided by FriendlyCaptcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. The function of the tool is to distinguish whether the data entered into the contact form has been entered by a natural person or has been abused by a machine and automated processing. By using FriendlyCaptcha, we can block automated software and protect the website from spam and abuse.

No personal information is transmitted or processed when FriendlyCaptcha is used. More information about the terms of use and privacy can be found here: https://friendlycaptcha.com/privacy/gdpr/

9 Forwarding Data 
Your personal data will not be forwarded to third parties for purposes beside those mentioned. 

We will forward your data to third parties only if: 
• you have granted your express consent to this, 
• this forwarding is necessary for the assertion, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-forwarding of your data, 
• there is a legal obligation to forward the data, and 
• this is legally permissible and necessary for processing contractual relationships with you, 
• and in the event of our legitimate interest.  

Your personal data is forwarded in the scope of a contact request initiated by you and using the contact forms. The data entered in the contact form is forwarded within the KNF Group in the process to make it possible to optimally respond to your inquiry. Some of our locations are too small to be able to effectively process inquiries. In this instance, larger locations can take over processing. The KNF Group’s joint access to contact requests thus benefits both you and us. The legal basis for forwarding is Art. 6 Para. 1 S. 1 f of the GDPR, which is to say, our legitimate interest in being able to give our customers the best possible answers and thus improve contact with customers.  

Additionally, our web hoster Corpex Internet GmbH, Schauenburgerstraße 6, 20095 Hamburg, has access to your personal data, which happens inevitably during the hosting process and cannot be avoided. However, in the scope of contractual agreements, we guarantee that our web hoster does not use your data in an unauthorized manner and, instead, stores it securely.  

We also use a virtual server via Amazon Web Services as a cloud solution, as well as its content delivery network CloudFront. Contractual agreements serve to protect your data in this instance as well.

The web server is located in Frankfurt.   

10 Newsletter  
With your consent in accordance with Article 6 Paragraph 1 (a) GDPR, you can subscribe to our blog newsletter, which we will use to provide you with information on our recently published blog articles.

Subscription to our newsletter takes the form of a double opt-in process. That means that, after you have subscribed, we will send an email to the email address provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription, access to your information will be blocked and the information will be automatically erased after one month.

In addition, we will store the IP address you use to subscribe and to confirm your subscription, as well as the times at which you do so. The purpose of this process is to generate proof of your subscription and to be able to resolve any incidents of misuse of your personal data.

The only information which you must provide in order to receive the newsletter is your email address. Other specially indicated information can be disclosed voluntarily and will be used to address you personally. Once you have provided confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6 Paragraph 1 (a) GDPR.

You may withdraw your consent to receive our newsletter and unsubscribe from the newsletter at any time. This can be done by clicking on the link provided in every newsletter we send to you, or by contacting us at the email address listed above.

We use the services of our processor MailChimp for the dispatch of newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, among other things, the dispatch of newsletters can be organised and analysed. When you enter data for the purpose of subscription to the newsletter (e.g. e-mail address), it will be stored on the MailChimp servers in the USA. The data transfer to the USA is based on standard contractual clauses approved by the European Union.

We use MailChimp to analyse our newsletter campaigns. When you open an e-mail dispatched using MailChimp, a file contained in the e-mail will connect to the MailChimp servers in the USA. It can then be established whether a newsletter message has been opened and which links have been clicked on. Furthermore, technical information is registered (e.g. time of e-mail check, IP address, browser type and operating system). This information cannot be put into connection with the respective newsletter recipient. It is used exclusively for statistical analyses of newsletter campaigns. The results of these analyses may be used to adapt future newsletters to the interests of the recipients.

If you do not want any analyses by MailChimp, you have to unsubscribe from the newsletter. For this purpose, a respective link is provided in each newsletter message. You can also unsubscribe from the newsletter directly on the website.

Data processing will be based on your consent (Article 6(1) lit. a GDPR). You can withdraw your consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already been carried out remains unaffected by the revocation. The data stored with us for the purpose of subscription to the newsletter will be stored until you unsubscribe from the newsletter, and will be deleted them from our and the MailChimp servers after the unsubscription from the newsletter. You can find more information in the MailChimp data protection regulations at: https://mailchimp.com/legal/terms/.

11 Social Plugins / Tools 
LinkedIn 
This website uses LinkedIn’s social plugin.  
LinkedIn (operator: LinkedIn, 1000 W Maude, Sunnyvale, CA 94085, USA) 
By default, this plugin normally records data from you and transmits it to the provider’s servers. To guarantee your privacy is protected, we have taken technical measures that ensure the plugin provider cannot record your data without your consent. When you call up a page into which the plugin is incorporated, it is deactivated at first. Only after you click on the symbol in question is the plugin activated, and you thereby grant your consent to your data being transferred to the provider. The legal basis for using the plugin is Art. 6 Para. 1 a of the GDPR. 
 
After it is activated, the plugin also records personal data, such as your IP address, and sends it to the provider’s servers, where it is stored . Additionally, the activated social plugin sets a cookie with a unique identifier when the website in question is called up. As a result, the provider can also create profiles about your usage behavior. This happens even if you are not a member of the provider’s social network. If you are a member of the provider’s social network and you are logged into the social network when you visit this website, your data and information about the visit to this website can be linked with your profile on the social network. We have no influence on the scope of data the provider collects from you. For more information about the scope, type, and purpose of data processing and about rights and possible settings for protecting your privacy, please see the data privacy statements issued by the social network provider. You can call it up at the following address: 
https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com%7Cli-other 
 
Vimeo 
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. 

If you visit one of our pages that features a plugin from Vimeo, a connection to Vimeo’s servers is established. When this happens, the Vimeo server is informed about which of our pages you have visited. Vimeo also receives your IP address. This applies even if you are not logged into Vimeo and do not have an account with Vimeo. The information Vimeo records is transmitted to Vimeo’s servers in the USA. 

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. 

You can find additional information about how user data is handled in Vimeo’s privacy policy at: https://vimeo.com/privacy. 
 
12 LiveChat
Within the scope of our LiveChat function, we collect the following personal data from you:
• Name
• Email address
• Static IP address
• Time and date of the chats
• Content data of the chats
• Uploaded files
• Country and geolocation
• Operating system and browser
• Visited subpages on our website

The legal basis for processing this data is our legitimate interest in providing tailored support, marketing and improving our products and services pursuant to Art. 6 Para. 1 f GDPR. The provider of the LiveChat function is our order processor, LiveChat, Inc. Attn: 101 Arch Street, 8th Floor, Boston, MA 02110, United States of America. Your data will be processed exclusively within the European Union.

13 Instruction: Rights of Persons Affected  
Every person affected has the right to information pursuant to Art. 15 of the GDPR, the right to correction pursuant to Art. 16 of the GDPR, the right to deletion pursuant to Art. 17 of the GDPR, the right to restriction of processing pursuant to Art. 18 of the GDPR, the right to objection issuing from Art. 21 of the GDPR, and the right to data transferability issuing from Art. 20 of the GDPR.

Instruction on the option of lodging a complaint 
You also have the right to lodge a complaint concerning our processing of your personal data with the responsible data protection supervisory authority. 

Instruction on revocation of consent 
Once you have granted us your consent to the processing of personal data, you may revoke it at any time. Please note that the revocation shall be effective only for the future. It shall not impact any processing that took place before the revocation. 

Right of objection 
Pursuant to Art. 21 Para. 1 S. 1 of the GDPR, you have the right to file an objection against the processing of your personal data based upon Art. 6 Para. 1 S. 1 e or f of the GDPR at all times. Please note that the objection shall be effective only for the future. It shall not impact any processing that took place before the objection. 

If any necessary reasons that are worthy of protection speak in favor of processing on our part and outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims, no objection shall be possible.  

14 Additional Information for Certain Jurisdictions
We provide additional information about the privacy, collection, and use of personal information of prospective and current customers of KNF located in certain jurisdictions.

California 
The California Consumer Privacy Act (“CCPA”) provides California residents (referred to here as “consumers”) with the following rights as it relates to the personal information collected by KNF about that consumer.
• Right to Know: A consumer has a right to request that KNF disclose to that consumer what personal information KNF collects, uses, discloses and (if KNF were to sell any personal information) sells.
• Right to Delete: A consumer has a right to request the deletion of that consumer’s personal information that KNF has collected from that consumer, although certain exceptions may apply.
• Right to Opt Out of Sales: California law treats disclosures of personal information by KNF in exchange for valuable consideration as “sales.”  KNF does not engage in any such sales.  If KNF were to engage in any such sales, then a consumer would have the right to opt out of those sales.
• Right to Opt Out of Financial Incentive Programs:  If KNF were to offer any financial incentive programs (in other words, a program in which KNF were to offer a consumer a price or service differential in exchange for the consumer providing personal information to KNF), then a consumer would have the right to opt out of those programs.  KNF does not offer any such programs.
• Right of Non-Discrimination: A consumer has the right not to receive discriminatory treatment by KNF for exercising that consumer’s rights under the CCPA.

If you are a California resident, or an authorized agent acting on behalf of a California resident, and would like to exercise any of these rights, you can do so by any of the following methods: (1) send an email to the following address: dataprivacy@knf.com; or (2) call the following telephone number (toll-free in the United States): (844) 876-9908

When KNF receives any such request, KNF will, before providing that information, ask for verification of that request. That verification, which may include copies of documentation, is needed to confirm, with at least a reasonable degree of certainty, the identity of the consumer and that the consumer is a California resident. In addition, if the request is made by an authorized agent acting on behalf of a California resident, then KNF will also request confirmation from the consumer that the agent is authorized by that consumer to act on behalf of that consumer with respect to that request, as well as the identity of the agent. The specific type and scope of information requested by KNF to verify that request will depend on the circumstances and may depend on various factors, including (for example) the type and sensitivity of the personal information, and whether any information to be provided for that verification is sufficiently robust to protect against fraudulent requests or being spoofed or fabricated.

Canada
If a person is located in Canada, then the person will have following rights under Canada’s Personal Information Protection and Electronic Documents Act ("PIPEDA"):
• ask whether we hold personal information about you and request copies of such personal information and information about how it is processed;
• request that inaccurate personal information is corrected;
• request deletion of personal information that is no longer necessary for the purposes underlying the processing, processed based on withdrawn consent, or processed in non-compliance with applicable legal requirements; and
• lodge a complaint with us regarding our practices related to your personal information.

You can exercise your rights of access, rectification, erasure, restriction, or complaint by contacting us. If you wish to do any of these things, please send an email to the following address: dataprivacy@knf.com.

15 Links to other Websites 
Our websites may contain links to other websites. We would like to indicate that this data privacy policy applies only to the websites of KNF DAC GmbH. We exert no influence over other sites and do not monitor whether other providers comply with the applicable data protection legislation. 

16 Changes to the Data Privacy Policy 
We reserve the right to change or modify this data privacy policy at any time, taking the applicable data protection legislation into consideration.