Privacy Policy

Privacy Policy

Section 1 – General Information

This Privacy Policy provides detailed information about what happens to your personal data when you visit our website at www.kit-chronicles.com.

Any data that can be used to identify you personally constitutes personal data. When processing your data, we strictly comply with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR). Protecting your personal data and ensuring that your visit to our website is completely secure is of utmost importance to us.

Section 2 – Data Controller

The data controller responsible for the collection and processing of personal data on this website is:

  • Name: Falk Smilowski
  • Address: Wabestraße 24a, 38106 Braunschweig, Germany
  • Country: Germany
  • Email: info@kit-chronicles.com
  • Phone: +49 170 2267093

Section 3 – Contact Form

If you contact us by email or via the contact form, the information you provide, including your contact details, will be stored for the purpose of processing your inquiry and responding to any follow-up questions. Your data will not be shared with third parties without your explicit consent.

The processing of the data submitted through the contact form is based exclusively on your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time without providing reasons. An informal email notification is sufficient to withdraw your consent. The withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

The data submitted through the contact form will be stored until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Section 4 – Use and Disclosure of Data

We assure you that any personal data you provide to us—for example by email, such as your name, address, or email address—will neither be sold to third parties nor otherwise used for commercial purposes.

Your personal data is processed exclusively for the purpose of corresponding with you and fulfilling the purpose for which you have provided the data. Where necessary for payment processing, your payment data will be transmitted to the financial institution responsible for handling the payment.

The data automatically collected when you visit our website is used solely for the purposes described above. Your data will not be used for any other purpose.

Protecting your personal data is important to us. Therefore, we generally do not disclose your data to third parties unless we are legally required to do so or you have expressly consented to such disclosure.

Section 5 – SSL/TLS Encryption

Our website uses SSL/TLS encryption to ensure the security and protection of the transmission of confidential information. This applies in particular to inquiries that you send to us as the operator of this website.

You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar and the padlock icon displayed by your browser.

SSL/TLS encryption ensures that the data you transmit to us cannot be intercepted or read by unauthorized third parties.

Section 6 – Data Retention

Personal data that you provide to us through our website will only be stored for as long as necessary to fulfill the respective purpose of the data processing.

However, in accordance with applicable commercial and tax law retention obligations, certain data may be retained for up to ten (10) years.

Section 7 – Your Data Protection Rights

As a data subject, you are entitled to the following rights regarding the processing of your personal data in accordance with the applicable legal provisions.

  1. Right to Withdraw Consent

Many data processing operations are only possible with your explicit consent. If the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time with future effect in accordance with Article 7(3) GDPR.

The withdrawal of your consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

The storage of data required for accounting or bookkeeping purposes remains unaffected by the withdrawal of consent.

  1. Right of Access

Pursuant to Article 15 GDPR, you have the right to obtain confirmation as to whether we process your personal data.

If this is the case, you have the right to obtain information about:

  • the personal data being processed;
  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the data have been or will be disclosed;
  • the planned storage period or, where this is not possible, the criteria used to determine that period;
  • your rights to rectification, erasure, restriction of processing, and objection to processing;
  • your right to lodge a complaint with a supervisory authority;
  • the source of the data, where the personal data were not collected directly from you;
  • the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you; and
  • the appropriate safeguards pursuant to Article 46 GDPR where your personal data is transferred to a third country.
  1. Right to Rectification

In accordance with Article 16 GDPR, you have the right to request the correction of inaccurate personal data concerning you at any time.

You also have the right to request that incomplete personal data be completed.

  1. Right to Erasure (“Right to be Forgotten”)

Under Article 17 GDPR, you have the right to request the erasure of your personal data if one of the following grounds applies:

  1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) GDPR.
  4. Your personal data has been processed unlawfully.
  5. Erasure is required to comply with a legal obligation under European Union law or the law of a Member State to which we are subject.
  6. The personal data was collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.

Exceptions to the Right to Erasure

The right to erasure does not apply where processing is necessary:

  1. to comply with a legal obligation requiring processing under European Union law or the law of a Member State to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority;
  2. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
  3. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR, where exercising the right would likely render impossible or seriously impair the achievement of the objectives of that processing; or
  4. for the establishment, exercise, or defence of legal claims.

Where we have made your personal data public and are required to erase it under Article 17 GDPR, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other data controllers processing the personal data that you have requested the erasure of any links to, copies of, or replications of that personal data.

  1. Right to Restriction of Processing

Pursuant to Article 18 GDPR, you have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. Our contact details can be found in the legal notice (Imprint).

You may request the restriction of processing in the following cases:

  1. If you contest the accuracy of your personal data stored by us, we generally require time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
  2. If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of its erasure.
  3. If we no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request the restriction of processing instead of erasure.
  4. If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of interests must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

Where processing has been restricted, such personal data may, apart from being stored, only be processed with your consent or for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

  1. Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged under Article 19 GDPR to notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

Upon request, we will inform you about those recipients.

  1. Right Not to Be Subject to Automated Decision-Making (Including Profiling)

Under Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

  1. is necessary for entering into or performing a contract between you and us;
  2. is authorised by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests; or
  3. is based on your explicit consent.

However, decisions referred to under points (a) to (c) may not be based on special categories of personal data within the meaning of Article 9(1) GDPR, unless Article 9(2)(a) or Article 9(2)(g) GDPR applies and appropriate safeguards have been implemented.

In the cases referred to under points (a) and (c), we implement suitable measures to safeguard your rights and freedoms as well as your legitimate interests. These measures include, at a minimum, the right to obtain human intervention, to express your point of view, and to contest the decision.

  1. Right to Data Portability

Where the processing of your personal data is based on your consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, you have the right, pursuant to Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.

You also have the right to transmit those data to another data controller or, where technically feasible, to request that we transmit the data directly to another controller.

  1. Right to Object

Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing, including profiling based on those provisions.

The applicable legal basis for the processing can be found in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defence of legal claims (Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling insofar as it is related to direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).

In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

  1. Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.

You may lodge such a complaint, in particular, with the supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

This right exists without prejudice to any other administrative or judicial remedies.

Our competent supervisory authority is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
Germany

Phone: +49 511 120-4500

Email: poststelle@lfd.niedersachsen.de

Website: https://lfd.niedersachsen.de/

Section 8 – Validity and Amendments to this Privacy Policy

This Privacy Policy enters into force on 5 July 2026.

We reserve the right to amend this Privacy Policy where necessary and in compliance with applicable data protection laws. This may be required, for example, to reflect new legal requirements or changes to our website or to services offered through it.

The version of this Privacy Policy available on our website at the time of your visit shall apply.

If we make changes to this Privacy Policy, we will publish the updated version on this page so that you remain fully informed about what personal data we collect, how we process it, and under what circumstances we may disclose it.

 

 

 

Scroll to Top