Last updated: April 2026

1. Controller

K-Werbetechnik
Owner: Ralph Kowalski
Banatstraße 31
66424 Homburg
Germany
Phone: 06821 – 6797414
Email: [email protected]

2. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data of our users is generally only processed after the user has given consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and where the processing of data is permitted by law.

3. Legal Basis for Data Processing

Where we obtain consent from the data subject for processing personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For processing personal data required to perform a contract, Art. 6(1)(b) GDPR applies. To fulfil legal obligations, Art. 6(1)(c) GDPR applies. To protect legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis, unless overriding interests or fundamental rights of the data subject prevail.

4. Data Deletion and Storage Duration

Personal data of the data subject will be deleted or blocked as soon as the purpose for storage ceases to apply. Storage may continue if required by European or national legislators through Union law regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned norms expires, unless there is a necessity for continued storage for the purpose of entering into or performing a contract.

5. Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the accessing computer system. The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's internet service provider
  • The user's IP address
  • Date and time of access
  • Websites from which the user's system accessed our website
  • Websites accessed by the user's system via our website

The data is stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

6. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner Online GmbH acts as our processor pursuant to Art. 28 GDPR, and a Data Processing Agreement (DPA) has been concluded. For more information on data protection at Hetzner, please visit: https://www.hetzner.com/legal/privacy-policy.

7. Cookies

Our website uses cookies in some instances. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited. The legal basis is Art. 6(1)(f) GDPR.

8. Waitlist and Registration

Our website provides the option to register for our waitlist. The following data is collected and processed in this context:

  • First and last name
  • Email address
  • Company (optional)
  • Country

The processing of this data is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (pre-contractual measures). The collected data is used exclusively to inform you about the availability of PlotonIQ and to enable you to use the platform. Data is not passed on to third parties unless necessary for the performance of the contract or unless you have expressly consented. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.

9. Transactional Emails (Brevo)

For sending transactional emails (e.g. confirmation emails, notifications), we use the service Brevo (formerly Sendinblue), offered by Brevo SAS, 55 rue d'Amsterdam, 75008 Paris, France. Your email address and data required for delivery are transmitted to Brevo for this purpose. The legal basis is Art. 6(1)(b) GDPR. For more information on data protection at Brevo, please visit: https://www.brevo.com/legal/privacypolicy/.

10. Payment Processing (Stripe)

For payment processing, we use the service Stripe, offered by Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. When making a payment, the payment details you enter (e.g. credit card number, billing address) are transmitted directly to Stripe. We do not store complete payment data ourselves. Transmission is based on Art. 6(1)(b) GDPR for contract performance and on the basis of EU standard contractual clauses for third countries. For more information on data protection at Stripe, please visit: https://stripe.com/privacy.

11. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the padlock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

12. AI-Assisted Data Processing

PlotonIQ uses artificial intelligence for calculations, measurement recognition and text generation. The following systems are used:

  • Anthropic Claude API (Anthropic, PBC, San Francisco, USA) — for AI-assisted calculations, text generation and business data analysis. Data transmitted: job descriptions, measurements, material specifications. Anthropic does not process this data for training purposes (Zero Data Retention Policy for API usage). Third-country transfer: USA, safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).
  • Computer Vision (SAM/DINO) — for AI-based measurement recognition from photos. These models run on our own servers at Hetzner in Germany. No data transmission to third parties.

In accordance with the EU Artificial Intelligence Act (AI Act), the systems used are AI applications with limited risk. PlotonIQ calculations are suggestions — the final decision always rests with the user. No automated profiling or solely automated decision-making within the meaning of Art. 22 GDPR takes place.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in providing AI-assisted functions).

13. Content Delivery Network (Cloudflare)

Our website uses the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare optimises loading speeds and protects against DDoS attacks. Your IP address is transmitted to Cloudflare in this process.

Cloudflare is certified under the EU-US Data Privacy Framework. For more information, please visit: cloudflare.com/privacypolicy

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and fast provision of the website).

14. Browser Fingerprinting (Sample Calculator)

For the free sample calculator on our website, we use a browser fingerprint (FingerprintJS, open source). This is used solely to limit free usage to 3 calculations per browser. The fingerprint is stored as a hash and cannot be used for personal identification. No cross-website tracking takes place.

The fingerprint is only generated when you actively use the sample calculator — not during a mere visit to the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in limiting free usage).

15. Data Processors

We engage the following data processors, with each of whom a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded:

  • Hetzner Online GmbH (Gunzenhausen, Germany) — server hosting
  • Cloudflare, Inc. (San Francisco, USA) — CDN and DDoS protection
  • Sendinblue GmbH / Brevo (Berlin, Germany) — transactional emails
  • Stripe, Inc. (San Francisco, USA) — payment processing
  • Anthropic, PBC (San Francisco, USA) — AI API for calculations

For US-based providers, data transfers are safeguarded by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

16. Rights of Data Subjects

You have the following rights with regard to your personal data:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR

To exercise your rights, please contact: [email protected]

17. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent supervisory authority is:

Unabhängiges Datenschutzzentrum Saarland
(Independent Data Protection Centre Saarland)
Fritz-Dobisch-Straße 12
66111 Saarbrücken
Germany
Email: [email protected]
Website: www.datenschutz.saarland.de