Privacy Policy
This is a translation for convenience. The German version is the legally binding text: Datenschutzerklärung.
1. Data protection at a glance
The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
- When you visit this website, technically necessary data is processed (server log files, a cookie storing your cookie choice), and – for reach measurement and advertising – services from Meta and Google are loaded that transmit data as soon as the page is opened (see section 7).
- External content (e.g. YouTube videos) is only loaded once you have given your consent, either through our cookie banner or through the relevant activation button.
- Data you send us (e.g. through contact forms) is used solely to deal with your enquiry.
2. Controller
The controller for the processing of data on this website is:
NK IT Service – Nikolaj Kinas
Rauentaler Str. 22/1, 76437 Rastatt
Phone: 07222 / 59 49 890
Email: support@nk-it.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Hosting and server log files
External hosting
This website is hosted by an external service provider: Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany (part of the GoDaddy group of companies). The servers are located in the European Union. The personal data collected on this website is processed on the servers of the host. This mainly concerns IP addresses, contact enquiries, meta and communication data, website access data and other data generated through a website.
Hosting takes place in order to fulfil our contract with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with our host in accordance with Art. 28 GDPR.
Server log files
The host automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR; our legitimate interest is the technically error-free presentation and the optimisation of the website as well as the investigation of misuse. The log files are deleted automatically after a short time.
4. Cookies and consent management (cookie banner)
This website uses as few cookies as possible. Cookies are small text files stored by your browser; they cause no damage and contain no viruses.
Technically necessary cookies: We store the choice you make in the cookie banner in our own cookie named nk_consent (storage period: 12 months). This cookie is required for the operation of the website and contains no data by which you can be personally identified. The legal basis is section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR (documenting and implementing your consent decision).
Services that require consent: Non-essential services – currently only external media such as YouTube videos (category "Marketing & external media") – are loaded only after you have given your consent through the cookie banner (Art. 6(1)(a) GDPR, section 25(1) TDDDG). No services are currently integrated for the "Statistics" category; should that change, such services will only become active after your consent and will be named at this point.
Withdrawal: You can change or withdraw your choice at any time using the "Cookie settings" link in the footer of the website. The lawfulness of the processing carried out up to the withdrawal remains unaffected. The cookie banner is a solution developed for this website; no third-party providers are involved.
5. Contacting us
Contact forms
If you send us an enquiry through one of the contact forms on this website (including the quick contact window), we process the data you provide: first and last name, e-mail address, telephone number, your message and – depending on the form – details of your request. The data is transmitted to us solely by e-mail and stored in our e-mail system; it is not stored in the database of the website.
The processing serves to deal with your enquiry and any follow-up questions and is based on Art. 6(1)(b) GDPR (contract or pre-contractual measures) and on your consent (Art. 6(1)(a) GDPR), which you give by submitting the form. Your data remains with us until you ask us to delete it, withdraw your consent or the purpose of storage no longer applies. Mandatory statutory provisions – in particular commercial and tax retention periods of up to ten years for contract-related correspondence – remain unaffected.
Free demo website (industry pages) and double opt-in
On our industry pages and on our AI page you can request a free demo website with no obligation. Unlike the other contact forms, we store these enquiries as a record ("lead") in the database of this website in order to produce the demo draft and to contact you. We process the data you provide (first and last name, e-mail address, telephone number, project type, existing domain where applicable, your message) as well as the industry or source page the enquiry came from. The legal basis is Art. 6(1)(a) and (b) GDPR.
Confirming your e-mail address (double opt-in): After submitting the form you receive an e-mail containing a single-use confirmation link. We only create the demo website once you have confirmed. As evidence of your consent we store a record that the consent box was ticked, the time of the enquiry, the time of the confirmation and the IP address used at the time of the enquiry (Art. 6(1)(f) GDPR, evidence of valid consent).
Storage period: If you do not confirm your e-mail address, we delete the enquiry automatically after 30 days at the latest. Confirmed enquiries are stored until they have been dealt with and beyond that until you request deletion or the purpose no longer applies; mandatory statutory retention periods remain unaffected.
Repair and mail-in enquiries
For enquiries sent through the repair form we additionally process the details you give about the device, manufacturer, model and fault as well as how you wish to hand the device over. The points set out for contact forms apply accordingly.
SEO and website check
For the free SEO check we process the domain you enter, your e-mail address and telephone number as well as details of your service and region in order to produce the analysis and send you the result (Art. 6(1)(b) GDPR). We carry out the analysis ourselves; the data is not passed on to third parties.
Contact by e-mail or telephone
If you contact us by e-mail or telephone, your enquiry including all personal data arising from it is stored and processed by us for the purpose of dealing with it (Art. 6(1)(b) and (f) GDPR).
You can reach us via WhatsApp. The button on our website is a plain link; only when you click it and use WhatsApp does WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (part of the Meta group of companies) process your data under its own privacy terms; this may involve a transfer to the USA. We process the communication conducted via WhatsApp in order to deal with your enquiry (Art. 6(1)(b) GDPR). Details: WhatsApp privacy policy.
Online appointment booking (Microsoft Bookings)
For online appointment booking we link to Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The processing of your data (name, contact details, preferred appointment) only begins once you open the booking page and enter your details there; it serves to arrange the appointment (Art. 6(1)(b) GDPR). Microsoft may also transfer data to the USA; Microsoft is certified under the EU-US Data Privacy Framework. Details: Microsoft privacy statement.
Remote support (TeamViewer)
For remote support sessions we use TeamViewer from TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen, Germany. The button on our website is a link to download the module; a session is only established once you start the module and give us the connection details. The processing serves to provide the support service you have commissioned (Art. 6(1)(b) GDPR). Details: TeamViewer privacy policy.
6. YouTube videos (two-click solution)
On individual pages (currently on the "Drone photography" page) we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the enhanced privacy mode (youtube-nocookie.com) and load the videos only after you have given your consent – either through the "Marketing & external media" category in the cookie banner or through the "Activate video" button on the video itself. Until then only a locally stored preview image is displayed and no data is transmitted to YouTube.
On activation your browser establishes a connection to the servers of YouTube; this transmits your IP address and device information among other data, and YouTube may set its own cookies or comparable technologies. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG); you can withdraw it at any time through the "Cookie settings" in the footer. Details: Google privacy policy.
7. Reach measurement and advertising (Meta Pixel, Google Ads, Google Analytics)
Meta Pixel: This website uses the "Meta Pixel" from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. We use it to measure the success of our advertising on Facebook and Instagram and to analyse which actions visitors carry out on our website (e.g. submitting a form). The pixel is loaded as soon as the website is opened; this transmits data to Meta, including to the USA.
Google Ads and Google Analytics 4: We use conversion tracking from Google Ads as well as Google Analytics 4, both services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use them to measure the success of our adverts and to analyse how the website is used (e.g. pages viewed, forms submitted). These services are also loaded as soon as the website is opened; this transmits data to Google, including a transfer to the USA. Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is our legitimate interest in marketing our services effectively and economically (Art. 6(1)(f) GDPR). You can object to this processing at any time on grounds relating to your particular situation (see section 11) and limit the tracking through the advertising settings of Meta (facebook.com/adpreferences) and Google (adssettings.google.com) as well as through the settings of your browser. Further information: Meta privacy policy and Google privacy policy.
8. Fonts, maps and external links
Local fonts: This website uses web fonts that are stored locally on our own server. No connection to servers operated by Google (Google Fonts) or other third-party providers takes place.
Directions: The address in the header links to Google Maps. This is a plain link without an embedded map; data is only processed once you click the link and open the Google Maps page.
Social media and portal links: Links to our profiles (e.g. Facebook, X, Xing) and to our customer portal are plain links without embedded content. Once you click them, the privacy terms of the respective provider apply.
9. Job applications
If you apply to us for a job (by e-mail or by post), we process your application data in order to carry out the application procedure (Art. 6(1)(b) GDPR, section 26 BDSG, the German Federal Data Protection Act). If no appointment is made, we delete your documents no later than six months after the procedure has ended, unless statutory retention obligations apply or you have expressly consented to longer storage (talent pool).
10. SSL and TLS encryption
For security reasons and to protect the transmission of confidential content (e.g. enquiries sent through forms), this website uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in the address bar of your browser. When encryption is active, data you send to us cannot be read by third parties.
11. Your rights
You have the following rights in respect of your personal data:
- Access to the data stored about you, its origin, its recipients and the purpose of the processing (Art. 15 GDPR),
- Rectification of inaccurate data (Art. 16 GDPR),
- Erasure of your data, provided that no statutory retention obligations prevent it (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability: receipt of the data we process by automated means on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format (Art. 20 GDPR),
- Withdrawal of a consent you have given, with effect for the future (Art. 7(3) GDPR) – an informal message by e-mail is sufficient; for cookies and external media through the "Cookie settings" link in the footer.
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint: In the event of breaches of data protection law you can lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.
12. Storage period, obligation to provide data, automated decisions
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the processing no longer applies, you request deletion or you withdraw a consent. Statutory retention obligations (in particular six or ten years under German commercial and tax law) remain unaffected.
Providing your data is required neither by law nor by contract; without the necessary details (e.g. contact data in a form), however, we cannot deal with your enquiry.
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.
13. Validity and amendment of this privacy policy
We amend this privacy policy as soon as the legal situation or the services used on this website change. The version published here is the one that applies.
Last updated: July 2026