Privacy Policy
This is a translation for convenience. The German version is the legally binding text: Datenschutzerklärung.
1. Data protection at a glance
The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
- When you visit this website, technically necessary data is processed (server log files, a cookie storing your cookie choice), and – for reach measurement and advertising – services from Meta and Google are loaded that transmit data as soon as the page is opened (see section 7).
- External content (e.g. YouTube videos) is only loaded once you have given your consent, either through our cookie banner or through the relevant activation button.
- Data you send us (e.g. through contact forms) is used solely to deal with your enquiry.
2. Controller
The controller for the processing of data on this website is:
NK IT Service – Nikolaj Kinas
Rauentaler Str. 22/1, 76437 Rastatt
Phone: 07222 / 59 49 890
Email: support@nk-it.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Hosting and server log files
External hosting
This website is hosted by an external service provider: Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany (part of the GoDaddy group of companies). The servers are located in the European Union. The personal data collected on this website is processed on the servers of the host. This mainly concerns IP addresses, contact enquiries, meta and communication data, website access data and other data generated through a website.
Hosting takes place in order to fulfil our contract with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with our host in accordance with Art. 28 GDPR.
Server log files
The host automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR; our legitimate interest is the technically error-free presentation and the optimisation of the website as well as the investigation of misuse. The log files are deleted automatically after a short time.
4. Cookies and consent management (cookie banner)
This website uses as few cookies as possible. Cookies are small text files stored by your browser; they cause no damage and contain no viruses.
Technically necessary cookies: We store the choice you make in the cookie banner in our own cookie named nk_consent (storage period: 12 months). This cookie is required for the operation of the website and contains no data by which you can be personally identified. The legal basis is section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR (documenting and implementing your consent decision).
Services that require consent: Non-essential services – currently external media such as YouTube videos (category "Marketing & external media") – are loaded only after you have given your consent through the cookie banner (Art. 6(1)(a) GDPR, section 25(1) TDDDG). For the "Statistics" category we use Google Analytics 4; details are given in section 7. If further services are added, they will be named at this point. Not every connection to a third party is controlled by the cookie banner: the reach measurement and advertising described in section 7 are loaded as soon as the website is opened; the domain availability check (section 8) sends a query to Cloudflare as soon as you enter a name and start the check.
Withdrawal: You can change or withdraw your choice at any time using the "Cookie settings" link in the footer of the website. The lawfulness of the processing carried out up to the withdrawal remains unaffected. The cookie banner is a solution developed for this website; no third-party providers are involved.
5. Contacting us
Contact forms
If you send us an enquiry through one of the contact forms on this website (including the quick contact window), we process the data you provide: first and last name, e-mail address, telephone number, your message and – depending on the form – details of your request. The data is transmitted to us by e-mail and stored in our e-mail system; the only part kept in the database of the website is the form-protection record described in the following paragraph.
Protection against misuse (form protection): To ward off automated and mass enquiries we limit the number of enquiries per hour and, for every enquiry sent through the forms of this website (including the appointment booking and the repair form), we log the time, the IP address, the e-mail address given, the form used and the outcome (passed or blocked). The legal basis is our legitimate interest in preventing misuse and keeping our forms available (Art. 6(1)(f) GDPR). The log entries are deleted automatically after 30 days.
The processing serves to deal with your enquiry and any follow-up questions and is based on Art. 6(1)(b) GDPR (contract or pre-contractual measures) and on your consent (Art. 6(1)(a) GDPR), which you give by submitting the form. Your data remains with us until you ask us to delete it, withdraw your consent or the purpose of storage no longer applies. Mandatory statutory provisions – in particular commercial and tax retention periods of up to ten years for contract-related correspondence – remain unaffected.
Free demo website (industry pages) and double opt-in
On our industry pages and on our AI page you can request a free demo website with no obligation. Unlike the other contact forms, we store these enquiries as a record ("lead") in the database of this website in order to produce the demo draft and to contact you. We process the data you provide (first and last name, e-mail address, telephone number, project type, existing domain where applicable, your message) as well as the industry or source page the enquiry came from. The legal basis is Art. 6(1)(a) and (b) GDPR.
Confirming your e-mail address (double opt-in): After submitting the form you receive an e-mail containing a single-use confirmation link. We only create the demo website once you have confirmed. As evidence of your consent we store a record that the consent box was ticked, the time of the enquiry, the time of the confirmation and the IP address used at the time of the enquiry (Art. 6(1)(f) GDPR, evidence of valid consent). We retain the IP address as part of this evidence for as long as the enquiry itself is stored.
Storage period: If you do not confirm your e-mail address, we delete the enquiry automatically after 30 days at the latest. Confirmed enquiries are stored until they have been dealt with and beyond that until you request deletion or the purpose no longer applies; mandatory statutory retention periods remain unaffected.
Repair and mail-in enquiries
For enquiries sent through the repair form we additionally process the details you give about the device, manufacturer, model and fault as well as how you wish to hand the device over. The points set out for contact forms apply accordingly.
SEO and website check
For the free SEO check we process the domain you enter, your e-mail address and telephone number as well as details of your service and region in order to produce the analysis and send you the result (Art. 6(1)(b) GDPR). We carry out the analysis ourselves; the data is not passed on to third parties.
Contact by e-mail or telephone
If you contact us by e-mail or telephone, your enquiry including all personal data arising from it is stored and processed by us for the purpose of dealing with it (Art. 6(1)(b) and (f) GDPR).
You can reach us via WhatsApp. The button on our website is a plain link; only when you click it and use WhatsApp does WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (part of the Meta group of companies) process your data under its own privacy terms; this may involve a transfer to the USA. We process the communication conducted via WhatsApp in order to deal with your enquiry (Art. 6(1)(b) GDPR). Details: WhatsApp privacy policy.
Online appointment booking
You book appointments directly through the booking system of this website – no third-party provider involved. We process the data you provide (name, e-mail address, telephone number, subject, chosen appointment) and, as evidence of the booking, the time of your consent and your IP address. The data is stored in the database of the website and processed solely to arrange and manage the appointment (Art. 6(1)(b) GDPR); you receive confirmation, reminder and change links by e-mail. You can reschedule or cancel the appointment yourself via the link in your confirmation e-mail. Your data remains with us until you request deletion or the purpose of storage no longer applies; you can exercise your data subject rights via the WordPress privacy tools or informally by e-mail.
Remote support (TeamViewer)
For remote support sessions we use TeamViewer from TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen, Germany. The button on our website is a link to download the module; a session is only established once you start the module and give us the connection details. The processing serves to provide the support service you have commissioned (Art. 6(1)(b) GDPR). Details: TeamViewer privacy policy.
6. YouTube videos (two-click solution)
On individual pages (currently on the "Drone photography" page) we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the enhanced privacy mode (youtube-nocookie.com) and load the videos only after you have given your consent – either through the "Marketing & external media" category in the cookie banner or through the "Activate video" button on the video itself. Until then only a locally stored preview image is displayed and no data is transmitted to YouTube.
On activation your browser establishes a connection to the servers of YouTube; this transmits your IP address and device information among other data, and YouTube may set its own cookies or comparable technologies. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG); you can withdraw it at any time through the "Cookie settings" in the footer. Details: Google privacy policy.
7. Reach measurement and advertising (Meta Pixel, Google Ads, Google Analytics)
Meta Pixel: This website uses the "Meta Pixel" from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. We use it to measure the success of our advertising on Facebook and Instagram and to analyse which actions visitors carry out on our website (e.g. submitting a form). The pixel is loaded as soon as the website is opened; this transmits data to Meta, including to the USA.
Google Ads and Google Analytics 4: We use conversion tracking from Google Ads as well as Google Analytics 4, both services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use them to measure the success of our adverts and to analyse how the website is used (e.g. pages viewed, forms submitted). These services are also loaded as soon as the website is opened; this transmits data to Google, including a transfer to the USA. Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is our legitimate interest in marketing our services effectively and economically (Art. 6(1)(f) GDPR). You can object to this processing at any time on grounds relating to your particular situation (see section 12) and limit the tracking through the advertising settings of Meta (facebook.com/adpreferences) and Google (adssettings.google.com) as well as through the settings of your browser. Further information: Meta privacy policy and Google privacy policy.
8. Domain availability check (Cloudflare DNS)
On our pages about domains and web hosting you can check whether a domain name is still available. The query only starts once you enter a name and trigger the check; merely opening the page does not establish any connection to Cloudflare. For the check your browser queries the public DNS service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, at cloudflare-dns.com (DNS over HTTPS). No cookies are set for this, and no information is stored on or read from your device.
What is transmitted is the domain name you enter – readable by Cloudflare in plain text – together with the connection data your browser has to send for technical reasons, in particular your IP address. If you do not enter an extension, we check eight common extensions in one go and send eight separate queries for that purpose; if you enter an extension that is not among those eight, there are nine. The result is displayed in your browser only; we store neither the query nor the result.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) and our legitimate interest in providing quick and reliable information (Art. 6(1)(f) GDPR). Cloudflare, Inc. is based in the USA; the query therefore transfers the data named above to the USA. The transfer is necessary in order to carry out the check you have requested (Art. 49(1)(b) GDPR). If you wish to avoid this, do not use the check and tell us the name you want through the contact form or by telephone – we will then check it for you. Details of the processing by Cloudflare: Cloudflare privacy policy and privacy notice for the public DNS resolver.
9. Fonts, maps and external links
Local fonts: This website uses web fonts that are stored locally on our own server. No connection to servers operated by Google (Google Fonts) or other third-party providers takes place.
Directions: The address in the header links to Google Maps. This is a plain link without an embedded map; data is only processed once you click the link and open the Google Maps page.
Social media and portal links: Links to our profiles (e.g. Facebook, X, Xing) and to our customer portal are plain links without embedded content. Once you click them, the privacy terms of the respective provider apply.
10. Job applications
If you apply to us for a job (by e-mail or by post), we process your application data in order to carry out the application procedure (Art. 6(1)(b) GDPR, section 26 BDSG, the German Federal Data Protection Act). If no appointment is made, we delete your documents no later than six months after the procedure has ended, unless statutory retention obligations apply or you have expressly consented to longer storage (talent pool).
11. SSL and TLS encryption
For security reasons and to protect the transmission of confidential content (e.g. enquiries sent through forms), this website uses SSL or TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in the address bar of your browser. When encryption is active, data you send to us cannot be read by third parties.
12. Your rights
You have the following rights in respect of your personal data:
- Access to the data stored about you, its origin, its recipients and the purpose of the processing (Art. 15 GDPR),
- Rectification of inaccurate data (Art. 16 GDPR),
- Erasure of your data, provided that no statutory retention obligations prevent it (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability: receipt of the data we process by automated means on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format (Art. 20 GDPR),
- Withdrawal of a consent you have given, with effect for the future (Art. 7(3) GDPR) – an informal message by e-mail is sufficient; for cookies and external media through the "Cookie settings" link in the footer.
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint: In the event of breaches of data protection law you can lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.
13. Storage period, obligation to provide data, automated decisions
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the processing no longer applies, you request deletion or you withdraw a consent. Statutory retention obligations (in particular six or ten years under German commercial and tax law) remain unaffected.
Providing your data is required neither by law nor by contract; without the necessary details (e.g. contact data in a form), however, we cannot deal with your enquiry.
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.
14. Validity and amendment of this privacy policy
We amend this privacy policy as soon as the legal situation or the services used on this website change. The version published here is the one that applies.
Last updated: September 2026