Privacy policy
This website sets no cookies, uses no analytics tools and loads no files from third-party servers. We only process personal data when you write to us, and only to answer your request.
As of: 10 October 2026
This is a translation for your convenience. Only the German version is legally binding.
1. Controller
KreuzerTec Services UG (haftungsbeschränkt)
Königstraße 5, 70173 Stuttgart, Germany
Register court: Amtsgericht Stuttgart, HRB 805725
Managing director: Lukas Kreuzer
Email: datenschutz@kreuzertec.de
We have not appointed a data protection officer, because the requirements of Art. 37 GDPR in conjunction with § 38 BDSG are not met. Please send any questions about data protection to the address above.
2. What we process and why
| Occasion | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting a page | IP address, time, requested address, browser identifier | Delivery and security of the website | Art. 6(1)(f) GDPR |
| Contact form, configurator | Name, email, company and phone if given, your details and message | Answering your request, preparing a contract | Art. 6(1)(b) GDPR |
| Email or phone call | Your contact details and content | Answering your request | Art. 6(1)(b) GDPR |
3. Hosting and server logs
The website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in data centres in Germany. Hetzner processes the data exclusively on our behalf; a data processing agreement under Art. 28 GDPR is in place.
With every visit, the web server stores the IP address, time, requested address, status code, referrer and browser identifier in a log file. We use this data to detect attacks and fix errors, and delete it after 7 days. It is not combined with other data.
4. Fonts, scripts and external files
All files on this website come from our own server: fonts (Mona Sans, SIL Open Font License), images, stylesheets and scripts. Visiting the site creates no connection to Google Fonts, content delivery networks or other third parties. We only use JavaScript for the contact form and the configurator; both also work without JavaScript.
A Content Security Policy only allows the browser to load scripts and stylesheets from our own server. Inline scripts are blocked.
5. Contact form and configurator
When you submit the contact form or the configurator, your browser sends the details encrypted to our own server in Germany. There, a small service checks the entries and forwards them by email to our mailbox. We do not store the request on the web server itself.
To prevent abuse, the service keeps track in memory, for ten minutes, of how many requests came from an IP address. After that, the entry is discarded. The legal basis is Art. 6(1)(f) GDPR; our interest is protection against spam.
The email ends up in our mailbox at Spaceship, Inc. in the USA (see section 6). We only store requests there.
Providing your details is voluntary. Without the required fields, however, we cannot answer your request. There is no automated decision-making or profiling.
6. Email and transfer to the USA
Our mailbox and the sending of form emails are operated for us by Spaceship, Inc., based in the United States, as our processor. This is where requests from the contact form and the configurator are stored, as well as emails you send us directly: your contact details and the content of the message.
The transfer will be based on the standard contractual clauses of the European Commission (Decision (EU) 2021/914), which we agree on with the data processing agreement under Art. 28 GDPR. We are currently concluding this agreement. There are no other transfers to countries outside the EU.
7. Cookies and browser storage
This website sets no cookies, neither technically necessary ones nor ones for analytics or advertising.
The configurator remembers your previous answers in your browser’s session storage (sessionStorage, key
kt-konfigurator), so that nothing is lost when you reload. The data only leaves your device when you submit
the form, and is deleted as soon as you close the tab.
8. Web analytics and tracking
We use no analytics or tracking tools, no advertising pixels and no embedded content from social networks.
9. Links to other websites
Links to other websites, for example to client projects or to our LinkedIn profile, are plain links. Only when you click such a link does your browser connect to the other server. From then on, the privacy policy of that provider applies.
10. Retention periods
- Contact requests: 6 months after the communication ends, if no contract results from it
- Business letters, including by email: 6 years (§ 147 AO, § 257 HGB)
- Invoices and accounting records: 8 years (§ 147 AO, § 257 HGB, § 14b UStG)
- Books and annual financial statements: 10 years (§ 147 AO, § 257 HGB)
- Server log files: 7 days
- Abuse counter in the form service: 10 minutes
The statutory periods begin at the end of the calendar year.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21, see section 12). A message to datenschutz@kreuzertec.de is enough.
You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.
12. Right to object
We process server logs and the abuse counter on the basis of our legitimate interest (Art. 6(1)(f) GDPR). You can object to this at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data, unless we demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
A message to datenschutz@kreuzertec.de is enough to object.
13. Changes
We update this policy when the website or the legal situation changes. The version published when you visit the page applies.