1. An Overview of Data Protection

General Information

The following information provides a straightforward overview of what happens with your personal data when you visit this website. “Personal data” refers to all data that can be used to personally identify you. For detailed information, please consult the full Privacy Policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You will find the controller’s contact details in section 3 of this Privacy Policy and in the Imprint (Impressum) of this website.

How do we collect your data?

Your data is collected in two ways: data you actively provide (e.g. via our contact form), and data our systems collect automatically when you visit the website (e.g. browser type, operating system, time of access).

What do we use your data for?

Part of the data is collected to ensure the error-free operation of the website. Other data may be used to understand general usage patterns in aggregated, anonymised form.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request rectification or erasure of this data. You may contact us at any time with questions about data protection and have the right to lodge a complaint with the competent supervisory authority. Under certain circumstances, you also have the right to request restriction of the processing of your personal data.

Analytics

This website uses Umami, a privacy-focused, cookie-free analytics tool. Umami does not collect personal data and does not place any tracking cookies. No individual browsing behaviour is recorded or analysed. For details, see section 5.

2. Hosting

ALL-INKL.COM

The use of ALL-INKL.COM is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the reliable, secure, and efficient provision of its online services by a professional provider.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with ALL-INKL.COM in accordance with Art. 28 GDPR, requiring them to protect our visitors’ data and not to disclose it to third parties.

3. General Information and Mandatory Information

Data Protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with statutory data protection regulations and this Privacy Policy.

Please be aware that data transmission over the internet (e.g. by email) may be subject to security vulnerabilities. Complete protection of data from access by third parties is not possible.

Controller

The data processing controller for this website is:

KALEIDOS Agency Nikolaus Bergner Email: info@kaleidos-agency.com

For the postal address, please refer to the Imprint (Impressum) of this website.

Revocation of Consent

Many data processing operations are only possible with your express consent. You may revoke any consent already given at any time by sending us an informal email notification. The lawfulness of data processing carried out prior to revocation remains unaffected.

Right to Object (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 SECT. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING, INCLUDING PROFILING TO THE EXTENT RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 SECT. 2 GDPR).

Right to Lodge a Complaint

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority — in particular in the member state of their habitual residence, place of work, or place of the alleged violation — regardless of any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transmitted directly to another controller where technically feasible.

SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as contact form enquiries. An encrypted connection is indicated by “https://” in the browser address bar and the padlock icon.

Right to Information, Rectification and Erasure

Within the scope of applicable statutory provisions, you have the right to obtain information about your stored personal data, its origin, recipients and purposes, and to request its rectification or erasure. Please contact us at the address above with any questions.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data in the following circumstances:

• If you contest the accuracy of your personal data, we may need time to verify this — during which you may request restriction.
• If the processing is unlawful, you may request restriction instead of erasure.
• If we no longer need the data but you require it for legal claims, you may request restriction instead of erasure.
• If you have lodged an objection under Art. 21 Sect. 1 GDPR and it has not yet been determined whose interests prevail.

Where processing has been restricted, that data — other than for storage — may only be processed with your consent, for legal claims, for the protection of another person’s rights, or for reasons of important public interest.

Rejection of Unsolicited Emails

We hereby object to the use of contact details published in fulfilment of our legal disclosure obligations for the purpose of sending unsolicited promotional or informational material. The operator reserves the right to take legal action in the event of unsolicited communications, such as spam.

4. Data Collection on This Website

Cookies

This website does not use tracking or advertising cookies. Our analytics tool (Umami) operates entirely without cookies. Technically necessary cookies may be used solely to ensure basic website functionality, on the basis of Art. 6 Sect. 1 lit. f GDPR (legitimate interest in the error-free provision of the website).

Server Log Files

The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Date and time of the request
• IP address

This data is not merged with other data sources and is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the technically sound presentation and optimisation of the website.

Contact Form

If you submit an enquiry via our contact form, the information you provide — including your contact details — will be stored by us to handle your enquiry and any follow-up questions. We will not share this information without your consent.

Processing is based on Art. 6 Sect. 1 lit. b GDPR where your request relates to a contract or pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling enquiries directed to us (Art. 6 Sect. 1 lit. f GDPR), or your consent (Art. 6 Sect. 1 lit. a GDPR) where requested.

The data you submit will remain with us until you request deletion, revoke your consent, or the purpose for storage no longer exists (e.g. after your enquiry is resolved). Mandatory statutory retention periods remain unaffected.

Enquiries by Email

If you contact us by email, your message — including all personal data provided (name, content of enquiry) — will be stored and processed for the purpose of handling your request. We will not pass this data on without your consent.

Processing is based on Art. 6 Sect. 1 lit. b GDPR where your message relates to a contract or pre-contractual steps, and otherwise on our legitimate interest (Art. 6 Sect. 1 lit. f GDPR) and/or your consent (Art. 6 Sect. 1 lit. a GDPR). Data will be retained until you request deletion, revoke consent, or the purpose for retention lapses. Statutory retention obligations remain unaffected.

5. Analytics

Umami

This website uses Umami, a privacy-focused web analytics service provided by Umami Software, Inc. Umami is designed to collect only aggregated, anonymous statistical data about website usage and does not collect personal data.

Umami operates without cookies and does not track individual users across sessions or devices. No personal identifiers — including IP addresses — are stored in identifiable form. Data collected (such as page views, referrer, browser type, device type, and approximate country of origin) is aggregated and cannot be attributed to any individual visitor.

As no personal data is processed, no cookie consent or opt-out mechanism is required for this tool.

Umami Cloud — Data Location

We use the Umami Cloud service with data hosting configured to the European Union. All analytics data is processed and stored on servers located within the EU.

The use of Umami is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in obtaining anonymised statistical insights into website usage for the purpose of improving the website.

For further information, please refer to Umami’s Privacy Policy at: https://umami.is/privacy