Privacy Policy
of KAI Europe GmbH

Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws, which provide comprehensive information about the processing of your personal data by KAI Europe GmbH and your rights.

Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address. Anonymous data is available if no personal reference to the individual/user can be made.



Responsible body and data protection officer

Company address
Kottendorfer Straße 5, 42697 Solingen

Company’s contact information
info@kai-europe.com

Contact info of the data protection officer
+49 (0)212 232 38-0,
datenschutz@kai-europe.com



Your rights as a data subject

We would first like to notify you of your rights as a data subject.
These rights are set out in Articles 15 - 22 GDPR, and include:

• The right of access (Art. 15 GDPR),
• The right to rectification (Art. 16 GDPR),
• The right to data portability (Art. 20 GDPR),
• The right to object to data processing (Art. 21 GDPR),
• The right to erasure / right to be forgotten (Art. 17 GDPR),
• The right to restriction of data processing (Art. 18 GDPR).

To exercise these rights, please contact: datenschutz@kai-europe.com. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.



Right to object

Please note the following with respect to your right to object:

When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.

If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: datenschutz@kai-europe.com

Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.

We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.



Purposes and legal bases of data processing

The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing.

Your consent also constitutes a data protection regulation. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process.

Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data



Data transfers / Disclosure to third parties

We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).



Data recipients / categories of recipients

In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.

In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers.



Transfers of personal data to third countries

A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law or if you have provided your consent for such a transfer.

We transfer your personal data to service providers or group companies outside the European Economic Area as follows: USA. In such cases, compliance with the level of data protection is ensured by: EU standard contractual clauses.



Period of data storage

We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.

We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.



Secure transfer of data

We implement the appropriate technical and organisational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols. In addition, we offer our users content encryption in our contact forms and applications. We alone can decrypt this data. It is also possible to use alternative communication channels (e.g. surface mail).



Obligation to provide data

A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.

We have summarised the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.



Data categories, sources and origin of data

The data we process is defined by the relevant context: it depends on whether, for example, you place an order online, enter a request on our contact form or if you want to send us an application or submit a complaint.

Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

We collect and process the following data when you visit our website:

When you visit our website www.kasho.de/styling/, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

• Web browser and operating system used
• The IP address by your allocated Internet service provider
• Files accessed, volume of data transferred, downloads/file export
• Information on websites accessed on our site, including date and time

For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR. Anonymisation takes place no later than after seven days by abbreviating the IP address so that no reference is made to the user.

Where applicable: we collect and process the following data as part of a contact request:

• Last name, first name
• Contact information (Compulsory: E-Mail, voluntary: Address and phone number)
• Info on wishes and interests

Where applicable: we collect and process the following data for newsletters:

• Email address

Where applicable: we collect and process the following data for lotteries

• Last name, first name
• Address
• Email address (depending on the communication channel)
• Possibly Facebook profile (depending on the communication channel)
• Possibly age



Automated decisions in individual cases

We do not use purely automated processing to make decisions.



Attachment


Cookies (Art. 6 Abs. 1 lit. f EU-DS-GVO / Art. 6 Abs. 1 lit a EU-DS-GVO bei Einwilligung)

Our website uses “cookies” at various locations, which serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard disk).

Cookies enable us to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user's interests.

Most of the cookies we use are "session cookies", which will be automatically deleted after your visit. Persistent cookies are automatically deleted from your computer when their validity period (generally six months) has expired or you delete them yourself prior to expiry.

Most web browsers automatically accept cookies. You can generally change your browser's settings if you prefer not to send the information. You can still use the offers on our website without restrictions (exception: wish list function).

We use cookies to make our offers more user-friendly, effective and secure. We also use cookies to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user's interests.

Cookies are stored on the user’s computer which then transmits them to us. As a user, you therefore exercise full control over the use of cookies. You can change the settings in your Internet browser to disable or restrict the sending of cookies. In addition, cookies that have already been saved on your computer can be deleted at any time via an Internet browser or other software programs. All this is possible in all the current Internet browsers.

Please note: If you deactivate the placing of cookies on your device, you may not be able to access all our website functions in certain circumstances.



Web tracking

Include privacy notice for the relevant web tracking tools, e.g. Google Analytics and legal basis (generally Art. 6 (1) lit f GDPR and expand if necessary.



Tools and plugins

Analysis Tools

The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the used tracking measures, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a. Google Analytics

For the purpose of customizing and continually optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter "Google"). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

• browser type / version,
• used operating system,
• Referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of server request,

are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and tailor-made website design. This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information about privacy related to Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).



Webfonts

a. MyFonts

This site uses the uniform appearance of fonts so-called Web fonts from Monotype Imaging Holdings Inc., a font service provided by Monotype GmbH (MyFonts.com), W 600 Unicorn Park Drive, Woburn, MA 01801, USA. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

The web fonts are stored locally on own servers. No connection to MyFonts.com servers is established in the embedding mode, so no data (IP address) is transmitted to MyFonts.com servers and stored or processed as part of the usual server log.

For further information about MyFonts, please refer to the privacy policy (www.monotype.com/legal/privacy-policy) of MyFonts.

If your browser does not support web fonts, a default font will be used by your computer.

The use of MyFonts.com is in the interest of a consistent and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.



Maps

a) Google Maps

This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

The "Embed" function integrates a Google Maps map into the website to locate the business location.

Using Google Maps, data is typically transmitted to and processed by Google Inc. servers in the United States. We point out that we as the provider of the pages have no influence on the content of the transmitted data and their use by Google Maps.

The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information on how to handle user data, please refer to Google's Privacy Policy: https://www.google.com/intl/en/policies/privacy/.



Contact form / Contact via email (Article 6 (1) lit a, b GDPR)

A contact form is available on our website which can be used to contact us electronically. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.

In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to contact you, which is your email address and the message field itself. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).

If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request. If you do not contact us using the forms provided, no additional data will be collected.





Newsletter (Article 6 (1) lit a GDPR)

You can subscribe to a free newsletter on our website. The email address you provided when you subscribed to the newsletter will be used to send the newsletter.

The principle of data minimisation and data avoidance is observed here, as only the email address (where appropriate the name in the case of a personalised newsletter) is mandatory. Your IP address will also be processed when you subscribe to the newsletter for technical reasons and legal protection.

You can of course terminate the subscription at any time via the opt-out option provided in the newsletter and therefore withdraw your consent. You can also unsubscribe from the newsletter via our website.



Marketing purposes (Article 6 (1) lit f GDPR)

The KAI Europe GmbH is keen to nurture the customer relationship with you and to send you information and offers about our product / services (state the marketing purposes). We therefore process your data to send you the relevant information and offers via email or by mail.

You may object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will cease processing your personal information for this purpose.

You can withdraw your consent at any time free of charge and informally without stating the reasons for such and should be addressed to +49 (0)212 232 38-0, sent via email to datenschutz@kai-europe.com or via surface mail to KAI Europe GmbH, Kottendorfer Str. 5, 42697 Solingen.



Links to other providers

Our website also contains clearly identifiable links to the Internet sites of other companies. Although we provide links to websites of other providers, we have no influence on their content, and no guarantee or liability can therefore be assumed for such. The content of these pages is always the responsibility of the respective provider or operator of the pages.

The linked pages were checked at the time of linking for potential legal violations and identifiable infringements. No illegal content was identified at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement and, upon notification of a violation of rights, such links will be promptly removed.



Information on data protection in social media/social networks

KAI Europe GmbH is active in the "social media”, in specific: Facebook. This is done in order to communicate with the customers, interested parties and users who are registered there and to be able to inform them about our offers.

We have a shared responsibility with Facebook towards all customers, prospects and users. We are aware of this responsibility and the protection of your data is very important to us. Unfortunately, we cannot fully meet our responsibilities, because Facebook does not provide the necessary transparency to deliver us the information needed to fulfill the aforementioned information obligations. Nevertheless, we strive to take all necessary measures to protect your data.

We would like to mention that you are using this platform and its functions on your own responsibility. This is especially true for the use of interactive features (e.g., commenting, sharing, rating).

We further point out that your data can be processed outside the territory of the European Union. Regarding US providers certified under the “Privacy Shield”, we mention that these providers are committed to adhering to EU privacy standards.

In addition, your data can be processed for market research and advertising purposes. Thus, e.g. user profiles are created based on your usage behavior and the resulting interests. Thereby, e.g. advertisements appear inside and outside the platform that are allegedly in your interest. As a rule, cookies are stored on your computer for this purpose. Regardless of this, data that is not directly collected from your devices can be stored in the usage profiles (especially if you are a member of the platform Facebook and are logged in to its service).

Beyond that, we as providers of this information service collect and process the following data, which are collected exclusively in connection with competitions placed on Facebook:

• personal data of the winner/winners (such as the Facebook profile, first name and last name, age, address and, if applicable, any further information relevant to the prize such as clothing size or gender)

This data will be used exclusively for the implementation of the competition, this means they are indespensable for the determination of the winners and the delivery of the prizes and will be deleted after the given us and a reasonable period of time. The specification of an e-mail address is not necessary. Responsible in terms of data protection is the organizer named in the conditions of participation.

In order to enter the competition, entrants must provide us with personal information. The entrant states that the information they provide about themselves, in particular their first and last names and their address, are true and correct.

The confidentiality and integrity of your personal details are of particular importance to us. We will therefore use your details carefully and in accordance with the data privacy laws, and in particular will not pass them on to any third parties without your consent. We collect, process and utilise the details you provide for the purpose of presentation of the prize only for processing the competition and to respond to your enquiries (e.g, telephone contact or mailing of documents by email or standard mail).

The recipient of the personal data is KAI Europe GmbH and contractors in the EU, who are charged with the implementation of the competition. The legal basis is Article 6 (1) lit a of the EU GDPR.

The processing of the personal data of the users takes place on the basis of our legitimate interests in an effective information of the users and communication with them according to Article 6 paragraph 1 (f) of the EU GDPR. If you are asked by the respective providers for consent to the processing of data (that is, you agree, for example, by ticking a check box or confirming a button), the legal basis of the processing is Article 6 paragraph 1 (a) and Article 7 of the EU GDPR.

Possibility of opposition

If you are a member of the “social media” Facebook and you do not want the network to collect information about you through our website and link it to your stored membership data on the respective network, you must

• log out of Facebook before visiting our site
• delete the cookies on the device and
• exit your browser and restart.

After logging in again, however, you will be recognizable to the network again as a specific user.

For a detailed presentation of the respective processing and the possibilities of opposition (opt-out), we refer to the following linked information of the provider.

Also in the case of requests for information and the assertion of user rights, we point out that these can be claimed most effectively from the provider. Only the provider has access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) – Privacy policy: https://www.facebook.com/about/privacy/, The configuration of advertisinbg and cookie settings can be made via the opt-out at https://www.facebook.com/settings?tab=ads or the European Digital Advertising Alliance at http://www.youronlinechoices.com, Facebook has submitted to the EU-US-Privacy-Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Further information
Notes on Copyright and Art Copyright Law

If you publish images, texts, plans, videos, music, etc. on our website, you should know that you may be able to assign all rights of use to the network, which could ultimately have legal consequences for you, if you are not the author or right holders.



Up-to-dateness and change of this data protection explanation

This privacy statement is currently valid and is dated October 2018. As our website evolves and offers become available, or as a result of changes in legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed at any time on the website at https://www.kasho.de/styling/disclaimer.php?lang=en



Further information

Your trust is important to us! For this reason, the KAI Europe GmbH would like to provide you with answers and answers concerning the processing of your personal data at any time. If you have any questions that the privacy statement could not answer, or if you would like more in-depth information, please feel free to contact us at any time.