Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Christian Wenterodt
Kasoria – Webdesign
Birkenweg 9
21629 Neu Wulmstorf, Germany
Phone: +49 151 6815 2133
Email: blueprint@kasoria.com

2. General information on data processing

We process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Where we obtain consent for processing operations, Art. 6 (1)(a) GDPR serves as the legal basis. For processing necessary to perform a contract, Art. 6 (1)(b) GDPR applies. For processing necessary to safeguard our legitimate interests, Art. 6 (1)(f) GDPR applies.

3. Hosting and server log files

When you access our website, your browser automatically transmits information to our server, which is temporarily stored in a log file. The following information is collected without any action on your part and stored until automated deletion: IP address of the requesting device, date and time of access, name and URL of the file retrieved, the website from which access was made (referrer URL), and the browser used and, where applicable, your operating system. Processing is carried out pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in ensuring the trouble-free operation and security of our website.

4. Contact

If you contact us by email, the details you provide will be processed for the purpose of handling your request and in case of follow-up questions. The data is used exclusively to respond to your enquiry and is deleted once processing is complete, unless statutory retention obligations apply. The legal basis is your consent (Art. 6 (1)(a) GDPR) and/or Art. 6 (1)(b) GDPR where the request relates to a contract.

5. Cookies and consent management

Our website uses cookies and comparable technologies. We distinguish between technically necessary cookies and technologies for analysis purposes. Technically necessary cookies are required to provide basic functions (e.g. storing your cookie consent). The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1)(f) GDPR; no consent is required for these. Any analysis or reach-measurement technologies are only used on the basis of your consent (Art. 6 (1)(a) GDPR, § 25 (1) TDDDG), which you can give or withdraw at any time via the cookie settings.

6. Meta Pixel and Conversions API (Facebook / Instagram)

This website uses the “Meta Pixel” and the associated server-side “Conversions API” provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). These tools allow us to measure the effectiveness of our advertising on Facebook and Instagram, to understand the actions visitors take on our site (such as viewing pages and content, submitting their email, starting checkout, and completing a purchase), and to show relevant ads to comparable audiences.

For this purpose, your browser establishes a direct connection to Meta's servers, and we additionally transmit certain event data to Meta from our own server (Conversions API). The data processed may include: your IP address, information about your browser and device, the pages and content you view, the events listed above, and the Meta-specific cookies _fbp and _fbc. Where you provide them to us (e.g. your email address or name during checkout), these identifiers are hashed (SHA-256) before transmission and are used by Meta solely to match events to existing accounts. Browser-side and server-side events are deduplicated using a shared event identifier so an action is not counted twice.

With regard to the collection and transfer of data through these tools, we and Meta act as joint controllers pursuant to Art. 26 GDPR. The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Data may be transferred to and processed in the USA; Meta relies on the EU Standard Contractual Clauses and its certification under the EU–U.S. Data Privacy Framework as a transfer mechanism. You can object to the use of your data for ad-targeting purposes and adjust your preferences in your Meta account settings at facebook.com/settings?tab=ads. Further information on Meta's processing is available in Meta's Privacy Policy at facebook.com/privacy/policy.

7. Web analytics (PostHog)

To understand how our website is used and to improve it, we use “PostHog”, a product-analytics service operated by PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (“PostHog”). PostHog acts as our processor pursuant to Art. 28 GDPR and processes data exclusively on our behalf and according to our instructions. The data is processed on PostHog's European infrastructure (data centre in the EU).

We operate PostHog in a cookieless configuration: it does not store any information on your device and does not read any information from it, and it sets no persistent identifier that would recognise you across visits. The data processed may include: your IP address (used only to derive an approximate location and not stored in full), information about your browser and device, the pages you view, your clicks and other interactions, scroll and mouse movement (heatmaps), and a recording of your session. In these session recordings, all text content and form inputs are masked, so the content you read or type (including any email address, name or payment details) is not captured.

Because no information is stored on or read from your device, the storage-and-access consent requirement of § 25 (1) TDDDG does not apply. The legal basis for this processing is our legitimate interest in the needs-based design and statistical analysis of our website pursuant to Art. 6 (1)(f) GDPR. You have the right to object to this processing at any time (see “Your rights” below). Insofar as any data is transferred to the USA, PostHog relies on the EU Standard Contractual Clauses as a transfer mechanism. Further information is available in PostHog's Privacy Policy at posthog.com/privacy.

8. Your rights

You have the following rights regarding your personal data: the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to object (Art. 21 GDPR), and the right to data portability (Art. 20 GDPR). To exercise your rights, you can contact us at any time at blueprint@kasoria.com.

9. Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover, Germany
Phone: +49 511 120 4500
Email: poststelle@lfd.niedersachsen.de