Privacy policy

Welcome to thekindermann website and thank you for your interest in data protection. The protection of your data is very important to us. We would therefore like to inform you below which data from your visit we use for which purposes. If you have any further questions about the handling of your personal data, please do not hesitate to contact our data protection officer (for contact details, see Right to object and contact persons).

Address and contact details of the controller

Kindermann GmbH
Mainparkring 3
D-97246 Eibelstadt
Phone: +49 (0) 9303 9840 – 0
Fax: +49 (0) 9303 9840 – 101
Email: info@kindermann.de

General

The processing of personal data (e.g. the name, address, e-mail address, or telephone number of a data subject) shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to us. 

The following data protection declaration informs you about the type, scope and purpose of the collection, processing and use of personal data. This data protection declaration only refers to our websites. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.

Inventory data

This data protection declaration is based on the definitions used by the European Directive and Regulation Maker when adopting the DSGVO (Article 4 DSGVO). This privacy statement should be both easy to read and easy to understand for any person. To ensure this, we would first like to explain the terminology used. In this privacy statement, these definitions, among others, are used:

• "personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
• "data subject" means any identified or identifiable natural person whose personal data are processed by the controller.
• "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• "restriction of processing" means the marking of stored personal data with the aim of limiting their future processing; 
• "profiling" means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location;
• "controller' means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law;
• "recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing; 
• "third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data;
• "Consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes, in the form of a statement or other unambiguous affirmative act, by which the data subject signifies his or her agreement to the processing of personal data relating to him or her....

For more information about Matomo's privacy practices, please see the Matomo privacy policy at matomo.org/privacy-policy/.

Information about cookies

We use cookies to optimize our Internet presence. These are small text files that are stored in the RAM of your computer. These cookies are deleted again after closing the browser. Other cookies remain on your computer (long-term cookies) and recognize it the next time you visit. This allows us to provide you with better access to our site.

You can prevent cookies from being saved by selecting "Block cookies" in your browser settings. However, this may limit the functionality of our services.

We use the "Borlabs Cookie" consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we use, as well as the related consents.

Cookies used:

Borlabs Cookie

Our website uses Borlabs Cookie, a cookie consent tool provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg.

The Borlabs cookie stores the privacy settings and consents you have selected. To do this, a technically necessary cookie is set to save your cookie preferences.

The processing is carried out on the basis of Article 6(1)(c) of the GDPR to fulfill our legal obligation to manage consent under data protection law, as well as on the basis of Article 6(1)(f) of the GDPR.

The stored data will not be shared with third parties.

Web analysis by means of Matomo

We use the “Matomo” software on our website to analyze user behavior and statistically evaluate the use of our website.
Matomo uses cookies that enable an analysis of website usage. The information generated by the cookie regarding the use of this website is stored exclusively on our own, self-hosted servers. No data is shared with third parties.
We have configured Matomo so that your IP address is not stored in full; instead, 2 bytes of the IP address are masked (e.g., 192.168.xxx.xxx). This prevents the shortened IP address from being linked to the visiting computer, making direct personal identification impossible.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR via the consent management tool used.
The data is deleted as soon as it is no longer needed for our purposes.
You can revoke your consent at any time via the cookie settings.
Further information on Matomo’s data protection can be found at: https://matomo.org/privacy-policy/

Website Security and Protection Mechanisms

Wordfence

Our website uses the Wordfence security plugin to protect against unauthorized access, cyberattacks, and malware.
The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.
Wordfence processes, in particular, IP addresses and technical access information to detect and block attacks on the website.
Use is based on our legitimate interest in the secure and uninterrupted operation of our website pursuant to Art. 6(1)(f) GDPR.
For more information, please visit: https://www.wordfence.com/privacy-policy/

Web Application Firewall (WAF) / Content Delivery Network (CDN)

To ensure the security, integrity, and availability of our online services, we use security and content delivery services provided by SiteLock LLC, 8701 East Hartford Drive, Suite 200, Scottsdale, AZ 85255, USA.

These services are primarily designed to defend against DDoS attacks, detect and prevent unauthorized or automated access (e.g., bots), protect against malware, and safeguard against other attacks on the website’s availability and security.

To the best of our knowledge, certain security features are provided in part using infrastructure from Imperva, Inc. (formerly “Incapsula”). In this context, technically necessary cookies or similar technologies may be used to detect attacks, ensure system security, and maintain the stability and functionality of the website.

In particular, the following personal data may be processed:

• • IP address
• • Date and time of access
• • Information about the browser and operating system used
• • Pages visited and URLs
• • HTTP status codes
• • Referrer information
• • security-related header and log data
• • Information on detecting automated or abusive access attempts

The processing is based on our legitimate interest, pursuant to Article 6(1)(f) of the GDPR, in the secure, stable, and efficient provision of our online services, as well as in the protection of our IT systems.

To the extent that personal data is transferred to third countries, in particular the United States, this is done exclusively in compliance with the legal requirements set forth in Articles 44 et seq. of the GDPR. According to the providers, such data transfers are based on appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses and, where applicable, additional protective measures.

More information:

Imperva Cookie Policy: https://www.imperva.com/legal/privacy-policy/

SiteLock Privacy Policy: https://www.imperva.com/legal/privacy-policy/

Imperva Privacy Policy: https://www.imperva.com/legal/cookie-policy/

Website Core / Technically Necessary Cookies

We use technically necessary cookies to provide the basic functions of our website.
These are used in particular for:
• session management,
• protection against malicious requests (CSRF protection),
• the correct display of content,
• the provision of login, shop, and user functions.
Processing is based on Article 6(1)(f) of the GDPR.

Hosting and Server Log Files

Our website is hosted by Profihost GmbH, Hildesheimer Straße 25, 30880 Laatzen, Germany.
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
These include, in particular:

• Anonymized or truncated IP address of the requesting computer (e.g., 192.168.x.x)
• Date and time of access
• Name and URL of the file accessed
• Website from which the access originated (referrer URL)
• Browser used and, if applicable, your computer’s operating system
• Name of your Internet service provider

This data is processed to ensure that the website connects without disruption, to maintain system security and stability, and for the technical administration of the network infrastructure.
The legal basis for the processing is Article 6(1)(f) of the GDPR.
The server log files are processed exclusively for the aforementioned purposes and are automatically deleted after no later than 14 days, provided that no statutory retention obligations preclude this.

Newsletter

When you subscribe to the newsletter, your email address will be used for our own marketing purposes until you unsubscribe from the newsletter. You can unsubscribe at any time.
Data processing is based solely on your consent in accordance with Article 6(1)(a) of the GDPR.

MailerLite

We use the MailerLite service to send our newsletter.
The provider is MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland.
MailerLite allows us to organize and analyze our newsletter distribution. The data you provide for the purpose of subscribing to the newsletter is stored on MailerLite’s servers.
For more information, please visit: https://www.mailerlite.com/legal/privacy-policy

External media and third-party services

Vimeo

Our website embeds videos from the Vimeo platform.
The provider is Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.
When you visit a page with embedded Vimeo videos, a connection is established to Vimeo’s servers. In the process, personal data—such as, in particular, your IP address—and technical usage information may be processed, and cookies may be set.
The use of Vimeo is based solely on your consent in accordance with Article 6(1)(a) of the GDPR.
For more information, please visit:
•https://vimeo.com/privacy

YouTube

Our website embeds videos from the YouTube platform. When YouTube videos are embedded, YouTube may load technically necessary resources, such as fonts or other content, from Google’s servers.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page with an embedded YouTube video, a connection is established to YouTube’s servers. In doing so, YouTube is informed which pages you visit.
As part of the use of YouTube, additional Google services, in particular advertising and tracking services such as DoubleClick, may be loaded. In this process, personal data such as IP addresses, device information, browser information, and usage data may be processed.
The use of YouTube is based exclusively on your consent in accordance with Art. 6(1)(a) GDPR.
For more information, please visit:
• https://business.safety.google/privacy/?hl=de
• https://policies.google.com/technologies/cookies?hl=de

hCaptcha

To protect forms from unwanted automated messages, we use the hCaptcha service.
The provider is Intuition Machines, Inc., 1065 SW 8th St #704, Miami FL 33130, USA.
As soon as you use a protected form, your IP address is transmitted to hCaptcha.
This is done in the interest of our website’s security and to protect against spam and abuse.
The legal basis is Art. 6(1)(f) GDPR or—where consent is requested—Art. 6(1)(a) GDPR.
For more information, visit: https://www.hcaptcha.com/privacy

Contact possibility

On our website, we offer you the option to contact us using a provided form. You must provide a valid email address so that we know who sent the inquiry and can respond to it. Additional information may be provided voluntarily.
Data processing for the purpose of establishing contact is carried out in accordance with Art. 6(1)(a) of the GDPR based on your voluntary consent.

Links to websites of other providers

The links published on our website are researched and compiled by us with the utmost care. However, we have no influence over the current or future design or content of the linked sites.
We are not responsible for the content of the linked sites and expressly do not endorse the content of these sites.
Please also be sure to review the privacy policies of the respective providers.

Data subject rights

You have the right:
• pursuant to Art. 15 GDPR, to request information about your personal data processed by us;
• pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate personal data or the completion of incomplete personal data stored about you;
• pursuant to Art. 17 GDPR, to request the erasure of your stored personal data;
• to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR;
• to receive your personal data in a structured, commonly used, and machine-readable format pursuant to Art. 20 GDPR;
• to withdraw your consent at any time pursuant to Art. 7(3) GDPR;
• to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

Right to object and contact person

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR. If you wish to exercise your right to withdraw consent or object to the processing, simply send an email to our Data Protection Officer:

Dieter Hocke
Phone: +49 (0) 9303 9840-0 or
E-mail: kindermann

Actuality and change of this privacy policy

This Privacy Policy is currently in effect and is dated May 2026.
As our website and services evolve, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
The most current version of the Privacy Policy can be viewed and printed at any time on our website.