1. Controller
Till Heidrich – Content Creation | Heidrich Digital, Till Heidrich, Rotdornweg 17, 21255 Tostedt, Germany. Email mail@heidrich-digital.de, phone +49 157 73953819. A data protection officer is neither appointed nor required.
2. At a glance
This website loads nothing from other servers, sets no cookies and uses no analytics or tracking tools. We process personal data only when you order something, write to us, send an inquiry, or withdraw from a contract.
3. Hosting and server logs
The website and shop run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in the EU, under a data processing agreement. When you visit, the server logs IP address, time, requested address, status code and browser identifier to keep the service running and secure (Art. 6(1)(f) GDPR). Logs are deleted after 14 days.
4. Orders
For an order we process name, email, address, country, company and VAT ID if given, the products chosen and the order status (Art. 6(1)(b) GDPR). The data is stored on our server at Hetzner for the term of the contract and afterwards as long as statutory retention periods apply.
5. Payment through Mollie
Payments are handled by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. Mollie receives the data needed for the payment (amount, order number, name, email, payment details) and is partly a controller in its own right for payment processing, fraud prevention and anti-money-laundering checks (Art. 6(1)(b) and (c) GDPR). From Mollie we receive the payment status and the country of the card or account, which we keep as tax evidence of your location. See Mollie’s privacy policy.
6. Sending email
Order confirmations, invoices, licence keys, confirmations of withdrawal and your emails to us run through the servers of ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, under a data processing agreement (Art. 6(1)(b) and (c) GDPR). Our emails contain no tracking pixels and no redirected links.
7. Licence server and connector
For licences we store licence ID, product, validity, a hash of your email address and the names of registered projects. When your agent fetches a design through the connector, we process licence key, time and IP address to check the licence (Art. 6(1)(b) and (f) GDPR). Content from your projects never reaches our server. Registered projects stay licensed for good, so we keep the minimum data about them for as long as the licence exists.
8. Withdrawal
Through the page “Withdraw from contract” we process name, contract details, email and the time of receipt to carry out and confirm your statement (Art. 6(1)(c) GDPR). Retention: 3 years, 8 years where it is part of the accounts.
9. Inquiry about setup and operation
Through the form on the page “Setup and operation” we process name, email, phone number if you give one, the design you name and your message, to answer your inquiry and prepare a quote (pre-contractual steps, Art. 6(1)(b) GDPR). The server does not store the inquiry in a database; it emails it to us (sent as described in section 6) and sends you a short confirmation. If no contract follows, we delete the email at the latest 6 months after the last contact. If it leads to a contract, the periods in section 10 apply.
10. Accounting and tax evidence
Invoices and accounting records are kept for 8 years (Section 147 AO, Section 14b UStG; Art. 6(1)(c) GDPR). To determine the place of supply for VAT we store the country you chose, the country of the card or account and the country of your IP address (Implementing Regulation (EU) 282/2011).
11. VAT ID check
If you enter a VAT ID, we check it with the European Commission’s VIES system and store result and time (Art. 6(1)(c) and (f) GDPR).
12. News emails
We send emails about new designs or updates only with your consent (Art. 6(1)(a) GDPR) or to customers about similar products of our own, with an opt-out in every email (Section 7(3) UWG). You can object at any time. If you email us asking to be told when designs launch, we write to you once and then delete your address.
13. Fonts, cookies, browser storage
The fonts are served from our own server. This website sets no cookies. If you switch the currency on the pricing page, your browser remembers that choice in local storage (key “kk-cur”). It stays on your device and is not sent to us. You can clear it in your browser settings.
14. Recipients and third countries
Recipients are the providers named above, Hetzner, Mollie and ALL-INKL, all based in the EU. No data is transferred to third countries. There is no automated decision-making under Art. 22 GDPR.
15. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time. You can complain to a supervisory authority, for example the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.
16. Open source part
The skill and the tool run on your side. They send no usage data to Kiekkist. Section 7 applies only when you use the gallery through the connector.