Privacy policy

The following notes give an overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally.

This website only provides information about the KiwiTut product. There are no user accounts, no sign-in, no contact form, no payment processing and no analytics or tracking. Personal data is processed only to the technically unavoidable extent needed to deliver the website (see “Hosting”).

The controller responsible for data processing on this website is:

Maikel Hajiabadi
KiwiCanopy
Moselstraße 43
60329 Frankfurt am Main
Email: hello.kiwicanopy+kiwitut@gmail.com

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

This website is hosted by an external provider: Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA.

When you visit the website, Netlify automatically records access data in server log files, in particular your IP address, the date and time of access, the page requested, and your browser and operating system. This data is technically necessary to deliver the website securely and reliably and to fend off attacks. It is kept only as long as these purposes require and then deleted.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing the website securely and efficiently). Netlify runs a worldwide content delivery network, so data may be transferred to the USA. Such transfers rely on the EU-US Data Privacy Framework, under which Netlify is certified, and otherwise on the EU Commission’s standard contractual clauses. A data processing agreement is in place with Netlify.

Name resolution for the kiwicanopy.com domain is provided by the DNS service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare does not relay page requests; it only answers DNS queries, which usually come from your internet provider’s DNS resolver rather than directly from your device. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the website being reliably reachable). Any transfer to the USA relies on the EU-US Data Privacy Framework, under which Cloudflare is certified.

This website sets no cookies and uses no analytics, tracking or advertising services. It loads no external fonts or other third-party content; every resource is served by this website itself.

If you choose the light or dark design in the footer, that choice is stored as the single value kiwitut-theme in your browser’s local storage. It stays on your device and is never sent to a server; it is not a cookie. Storing it is technically necessary for the function you chose (§ 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR). You can delete it at any time by clearing this site’s data in your browser.

If you email us, your details including your contact data are stored to handle your request and any follow-up questions. The mailbox is hosted by Google (Gmail); the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR where your request aims at a contract, otherwise our legitimate interest in answering it (Art. 6(1)(f) GDPR). The data is deleted once it is no longer needed for this purpose and no statutory retention obligation applies.

The “Try the demo” button leads to the KiwiTut demo, a separate application at a different address. No data is transferred there until you actively click the link. Processing inside the demo will be added to this privacy policy before the demo opens.

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

Within the applicable law you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable the right to rectification, restriction, erasure, data portability and objection. You can contact the controller named above at any time.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular the one competent for us: the Hessian Commissioner for Data Protection and Freedom of Information, Wiesbaden.

Where processing of your personal data is based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

No automated decision-making, including profiling, takes place.