Data Privacy

Data Processing

We only process personal data (personenbezogene Daten) when you actively submit them to us through our contact form. We do not collect any personal data through cookies or tracking technologies on this website.

Data Retention

All personal data submitted through our contact form is automatically deleted after 30 days.This ensures that we only retain your information for as long as necessary to respond to your inquiry.

Legal Basis for Data Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you submit the contact form, you consent to the processing of your data
• Contract (Art. 6(1)(b) GDPR): Processing is necessary for pre-contractual measures when you inquire about our services
• Legitimate Interest (Art. 6(1)(f) GDPR): We have a legitimate interest in responding to business inquiries

Categories of Personal Data

When you submit our contact form, we process the following categories of personal data:

• Name
• Email address
• Company name (if provided)
• Message content
• Date and time of submission

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Art. 15 GDPR): You can request information about your stored personal data
• Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate personal data
• Right to Erasure (Art. 17 GDPR): You can request deletion of your personal data
• Right to Restriction (Art. 18 GDPR): You can request restriction of processing
• Right to Data Portability (Art. 20 GDPR): You can receive your data in a structured format
• Right to Object (Art. 21 GDPR): You can object to the processing of your personal data
• Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw your consent at any time

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit (SSL/TLS)
• Regular security assessments
• Access controls and authentication
• Automatic deletion after 30 days

Data Recipients

Your personal data is only accessible to authorized personnel at Kaan AI Engineering. We do not share, sell, or transfer your personal data to third parties unless:

• You have given explicit consent
• It is legally required
• It is necessary for the protection of our legitimate interests

International Data Transfers

We do not transfer your personal data outside the European Economic Area (EEA).

Data Protection Officer

Due to the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer. However, you can contact us directly with any data protection concerns.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for us is:

Contact Information

For any questions regarding data privacy or to exercise your rights, please contact:

Changes to This Policy

We reserve the right to update this data privacy policy. The current version is always available on this page. Last updated: August 3, 2025