Privacy policy

Controller

The controller for the processing of personal data on this website is H&K Ventures UG (haftungsbeschränkt), Kleiststraße 14, 42553 Velbert, Germany, represented by the managing directors Thore Hahnel and Valentin Kulagin.

Email: info@hk-ventures.de

No data protection officer has been appointed.

Hosting

This website is operated on a server of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, in a data centre in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

When you visit the site, the web server processes the technically necessary data described in the section “Server log files”.

Server log files

With every request, the web server automatically stores the information your browser transmits: the page requested, date and time, amount of data transferred, browser type and version, operating system, the page visited before and the IP address. This data serves the secure and stable operation of the website and is not merged with other data sources.

The legal basis is Art. 6 (1) (f) GDPR – our legitimate interest in trouble-free and secure operation.

The web server’s log files are deleted automatically after seven days. The upstream reverse proxy on the same server keeps its own access logs; they are rotated weekly and deleted after five weeks at the latest.

From the server log files we compile aggregated access statistics on our own server: page views, origin of visits (referring pages), countries, browsers and devices. For this purpose the IP address is truncated beforehand; the statistics contain no information about individual persons, set no cookies and use no third-party services. The legal basis is Art. 6 (1) (f) GDPR – our legitimate interest in knowing how the website is used.

Contact form and email

If you write to us via the contact form or by email, we process the details you provide – name, company, email address, telephone number and message – solely to handle your enquiry and for follow-up questions.

The form hands your details over to your email client; nothing is stored on our server. The email is stored with us for the purpose of handling the enquiry and deleted after twelve months if no contract is concluded.

The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

Cookies and analytics

By itself, this website sets no cookies and loads no content from third parties; fonts and all other files are served from our own server. Access figures are derived from our own server log files (see above).

In addition we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – but only if you agree in the notice at the bottom of the page. Before that, no Google script is loaded and no cookie is set. Once you have agreed, Google Analytics sets cookies (_ga and _ga_ with the ID of our property, lifetime up to two years) and processes pseudonymised details of your visit: pages viewed, time on site, referring page, device and browser, and your approximate location based on the truncated IP address. The IP address is truncated before storage; advertising features and Google Signals are switched off.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw it at any time via “Cookie settings” in the footer of every page. From then on nothing is transmitted to Google and the cookies that were set are deleted. Use may involve a transfer to servers of Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework, and the EU standard contractual clauses apply in addition. A data processing agreement is in place with Google. Data stored in Google Analytics is deleted after 14 months at the latest. Further information: policies.google.com/privacy.

Links to our clients’ websites, to LinkedIn and to Instagram are plain references. Only when you click do you leave this website; from then on the privacy policy of the respective provider applies.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Please contact the email address given above.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, PO Box 20 04 44, 40102 Düsseldorf, telephone +49 211 38424-0, poststelle@ldi.nrw.de, www.ldi.nrw.de.