1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the websites kayten.net and kayten.de is:

Kayten GmbH
Otto-Lilienthal-Str. 5
71034 Böblingen, Germany
Phone: +49 (0) 7031 4968989
Email: [email protected]

2. Your rights

You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). An informal message to [email protected] is sufficient to exercise these rights. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Germany.

3. Hosting and server log files

Our website is hosted by domainFACTORY GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany (df.eu), with whom a data processing agreement (Art. 28 GDPR) is in place. When you visit the website, the server automatically processes technical information (IP address, date and time, requested page, browser type, referrer URL) in log files. This processing is based on Art. 6(1)(f) GDPR for the purpose of secure and stable operation of the website. Log files are deleted automatically after a short period.

4. Contact form and email

If you contact us via the contact form or by email, we process the data you provide (name, email address, phone number, message) to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). The data is deleted once it is no longer required, unless statutory retention obligations apply.

5. Cloudflare Turnstile (spam protection)

To protect our forms and login against automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks in the background whether an access is made by a human and processes technical information for this purpose (e.g. IP address, browser characteristics); form entries themselves are not transmitted to Cloudflare. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protecting the website against spam and abuse). Transfers to the USA are based on the EU-US Data Privacy Framework, to which Cloudflare is certified, and on EU Standard Contractual Clauses. Further information: Cloudflare Privacy Policy.

6. Cookies and caching

This website only uses technically necessary cookies (e.g. for language settings and security functions). These are required for the operation of the website (legal basis: Section 25(2) TDDDG, Art. 6(1)(f) GDPR) and do not require consent. We do not use marketing or tracking cookies.

7. Links to social networks

Our website contains plain links to our profiles on LinkedIn, X (Twitter), Instagram and Facebook. Data is only transferred to the respective provider when you follow such a link; their privacy policies then apply. We do not use embedded content from these networks.

8. SSL encryption

This website uses SSL/TLS encryption for security reasons, so that data you transmit to us cannot be read by third parties.

9. Changes to this privacy policy

This privacy policy is dated July 2026. It may need to be updated as our website evolves or legal requirements change; the current version can always be found on this page.