Privacy Policy

1. Controller

The controller responsible for personal data processing through this online presence is Kyntrivo Technologies at the identification and contact details set out below. Privacy-related enquiries can be sent to the email address shown in this section.

No separate data protection officer is currently published on this website. If an obligation to appoint one applies or later becomes applicable, the relevant contact details will be added here.

2. Scope of this policy

This policy applies to kyntrivo.com and functions offered directly through it. This includes technical delivery of pages, contact forms, communications initiated through the website, the newsletter, language and display preferences and the preference centre.

If you open an external service through a link, further processing by that provider is governed by its own information. This policy does not extend to third-party services that we do not control.

3. Principles and legal bases

We process personal data only for a defined purpose and on an appropriate legal basis. Depending on the context, this may include consent under Article 6(1)(a) GDPR, performance of a contract or pre-contractual steps under point (b), compliance with legal obligations under point (c), or legitimate interests under point (f).

Where information is stored on or accessed from a user’s device, we also take Section 25 TDDDG into account. Statutory exceptions may apply to functions strictly necessary to provide a digital service expressly requested by the user.

4. Hosting and technical delivery

The website is hosted through ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The hosting provider supplies the technical infrastructure required to deliver the website and may process technical data as a service provider or processor depending on the specific contractual relationship.

When the website is accessed, the server may process information such as IP address, date and time, requested resource, response status, amount of data transferred, browser, operating system, referrer and other technical information required for delivery, security and troubleshooting. Exact retention periods for server logs depend on the hosting configuration and relevant technical and security needs.

5. Encrypted connection and transport security

The website should be used via HTTPS. TLS encryption protects transport between browser and server against simple interception in transit. No technical measure eliminates every risk, but we use safeguards proportionate to the service and update the implementation when appropriate.

6. Contact form and business enquiries

When you use the contact form, we process the information you enter, which may include your name, company, email address, telephone number, country, project type, expected quantity, timing and message. We may also process technical metadata needed to protect the form against misuse and to create an internal reference for the enquiry.

The purposes are to evaluate and answer your enquiry, prepare a potential business relationship and document communications. Where the enquiry concerns a quotation or possible contract, Article 6(1)(b) GDPR may be relevant. For general communication and protection of our processes, legitimate interests under point (f) may also apply.

Please provide only information that is needed for the project. Do not submit special categories of personal data or confidential secrets through the standard form unless they are genuinely necessary and an appropriate channel has been agreed.

7. Confirmation emails and correspondence

After a form is submitted, the system may send an automated confirmation to the address provided and an internal notification to Kyntrivo. Messages are sent through the email infrastructure configured for kyntrivo.com, including services associated with ALL-INKL where those services are used.

Subsequent replies, quotations and technical correspondence may be kept for as long as needed to manage the business relationship, defend legal rights or comply with legal retention duties. Ordinary email is not guaranteed to be end-to-end encrypted.

8. Newsletter and double opt-in

If you subscribe to the newsletter, we process your email address and, if provided, your first name. We also store information relating to the subscription request and confirmation, such as language, request date, confirmation date and subscription status. These details help us administer the subscription and demonstrate consent.

The subscription is activated only after you use the confirmation link sent to the address entered. The confirmation link currently has a technical validity period of 48 hours. If you do not confirm, the address is not activated for the newsletter. You can withdraw consent for the future at any time through the unsubscribe link in newsletter messages or by contacting us.

9. Cookies, localStorage and similar technologies

The website uses a combination of session cookies and local browser storage for functions such as the PHP session, language preference, visual theme, consent preferences and newsletter invitation behaviour. Current details are listed in the Privacy Preferences page.

In the current site configuration, Analytics and Marketing are prepared categories for services that may be introduced later. Non-essential tools in those categories should not be loaded before the required choice has been made. If such services are introduced, this policy will be updated with provider, purpose, data and duration details.

10. Language and display theme

The selected language may be stored in a cookie called kyntrivo_lang for up to approximately one year so that the preferred language version can be displayed on future visits. The light/dark theme is stored locally in the browser under kyntrivo-theme until you change it or remove site data. These settings support the functionality and user experience you requested.

11. Consent management

Your choice for optional categories is currently stored locally in the browser under kyntrivo-consent-v1. You can reopen the preference centre at any time using the dedicated corner icon or the Privacy Preferences page. Deleting site data in your browser may reset the choice and cause the dialogue to appear again.

12. Recipients and service providers

Access to personal data is limited to people and providers who need it for the relevant purpose. Depending on the function, this may include hosting and email providers, IT service providers or advisers who help us operate the service appropriately.

Where a provider processes data on our behalf and the situation requires it, the relationship is structured in accordance with Article 28 GDPR. Data may also be disclosed to authorities, courts or other recipients where required by law or where necessary to establish, exercise or defend legal claims.

13. Transfers outside the EU/EEA

In the configuration described here, we do not intend to base essential website functionality on third-country transfers. If external services involving international transfers are introduced in the future, we will assess the transfer mechanism and applicable safeguards and update this policy before or when the service is integrated.

14. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless legal retention duties or the need to defend legal rights justify a longer period. The exact period therefore depends on the data type and context.

Enquiries that do not develop into a business relationship may be deleted once they are no longer required for response and documentation. Communications connected with quotations, orders and contracts may be subject to commercial and tax retention requirements. Newsletter data is kept while the subscription remains active and, where necessary, afterwards to document consent and manage potential claims.

15. Your GDPR rights

Subject to the conditions of the GDPR, you may have rights to information and access, rectification, erasure, restriction of processing, data portability and objection. Not every right applies in every situation because applicability depends on the legal basis and specific processing context.

To exercise a right, contact us using the privacy contact details on this page and describe the request sufficiently for us to identify it. Where needed to protect data against unauthorised disclosure, we may request reasonable information to verify identity.

16. Withdrawal of consent

Where processing is based on consent, you can withdraw that consent for the future at any time. For cookies and similar technologies, use the preference centre; for the newsletter, use the unsubscribe link or contact us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

18. Right to complain

You have the right to lodge a complaint with a competent data protection authority if you believe that processing of your personal data infringes the GDPR. For a private company established in Bavaria, the competent authority is generally the Bavarian State Office for Data Protection Supervision (BayLDA).

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. The authority provides online services for complaints and enquiries on its website. Your right to contact a supervisory authority is not affected by the option of contacting us first.

19. Technical and organisational security

We use proportionate technical and organisational measures to protect data against loss, unauthorised access, alteration or disclosure. Measures may include HTTPS, access control for hosting and email, internal access restrictions, form abuse protection and maintenance of website components. Safeguards are reviewed and developed on a risk-based basis.

20. Automated decisions and profiling

The website currently does not use automated decisions that produce legal effects concerning visitors or similarly significantly affect them within the meaning of Article 22 GDPR. In the configuration described here, we do not build individual advertising profiles from website browsing.

21. Data relating to minors

Kyntrivo services are primarily aimed at B2B contacts and people acting in a professional context. We do not intentionally seek to collect children’s data through this website. If we become aware that data relating to a minor has been submitted without a legitimate need, we will review the situation and take appropriate action.

22. External links and services

A link to an external website does not automatically mean that the provider already receives data from us. However, once you leave kyntrivo.com and open an external service, that provider may process information under its own rules. Review the provider’s privacy information before submitting data.

23. Changes to this Privacy Policy

We may update this policy when website features, providers, legal requirements or internal processes change. The version published on this page is the current version. Where a substantial change affects consent, we will request a new choice when required.

24. Privacy contact

For questions about this policy, exercising your rights or clarifying how your data is processed, contact us using the privacy address shown below.