Privacy Policy

1. Controller

Kastrati Tech GmbH
Wehneltstraße 9
91052 Erlangen
Germany

Email: info@kastratitech.com
CEO: Liridon Kastrati
Commercial Register: HRB 20297, Amtsgericht Fürth
VAT ID: DE360460691

2. General Data Processing

2.1 Scope of Processing

We generally only process personal data of our users to the extent necessary to provide a functional website and our content and services. Processing only takes place on one of the legal bases listed in section 2.2. We currently do not ask for consent for any processing, because this website uses no service that would require it (e.g. analytics, advertising, third-party content).

2.2 Legal Basis

If we obtain consent from the data subject for processing personal data, Art. 6(1)(a) EU General Data Protection Regulation (GDPR) serves as the legal basis.

For processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis.

Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis for processing.

2.3 Data Deletion and Retention

Personal data is deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data is also blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for contract conclusion or performance.

2.4 Recipients, Transfers to Third Countries and Automated Decisions

The only recipient of personal data is our hosting and email provider, STRATO AG (see sections 3.4 and 5.4), which acts as our processor under Art. 28 GDPR. Personal data is not transferred to third countries outside the EU/EEA. There is no automated decision-making, including profiling (Art. 22 GDPR).

Providing your data is not required by law or contract. Without the connection data listed in 3.1 the website cannot be delivered, however, and without your email address we cannot answer your enquiry.

3. Website Provision and Log Files

3.1 Description and Scope

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• User's IP address
• Date and time of access
• Pages accessed
• Data transferred
• Browser type and version
• Operating system
• Referrer URL (previously visited page)

The data is stored in log files of our system. This data is not stored together with other personal data of the user.

3.2 Legal Basis

The legal basis for temporary storage of data and log files is Art. 6(1)(f) GDPR (legitimate interest in ensuring the functionality and security of our website).

3.3 Purpose

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. Storage in log files is done to ensure the functionality of the website, optimize it, and ensure the security of our information technology systems.

3.4 Hosting

We host this website with STRATO AG, Pascalstrasse 10, 10587 Berlin, Germany. The servers are located in data centres in Germany; hosting involves no transfer of personal data to third countries.

When you visit the website, the data listed under 3.1 is processed in the web server's log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing our service securely and reliably). A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO AG.

The site consists of pre-generated static pages. No server-side personalisation takes place and no usage profiles are created.

More information: STRATO AG privacy policy

3.5 Retention Period

Data is deleted as soon as it is no longer required for the purpose for which it was collected. For data collected to provide the website, this is when the session ends. For data stored in log files, this is after a maximum of 7 days.

4. Cookies and Local Storage

4.1 No Cookies, No Tracking

This website sets no cookies. We use no analytics, audience measurement, tracking or marketing services, build no user profiles and load no content from external servers – no fonts, maps, videos or CAPTCHA. Opening a page connects to our own web server only; your IP address is not passed to anyone else.

4.2 Local Storage in Your Browser

Only the following two entries are stored in your browser's local storage. They are set by us only, stay in your browser and are transmitted neither to our server nor to third parties:

4.3 Legal Basis

Storing and reading these entries is permitted without consent under § 25(2) no. 2 TDDDG, because it is strictly necessary to provide the function you expressly requested (keeping your theme choice, or not showing the notice again after you closed it). We receive no personal data from them; to the extent the entries are nevertheless considered personal data, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in a user-friendly presentation of the website).

4.4 Deleting the Entries

You can remove the entries at any time in your browser settings (clear site data). The website remains fully usable; it simply returns to the default appearance and shows the notice again. You can also reopen the notice at any time via the Cookie notice link in the site footer.

5. Contacting us by email

5.1 Description and scope

This website has no contact form. You can reach us only at the email address shown. Clicking one of the email links opens your own mail program with the recipient prefilled – no data is transmitted to us or to anyone else unless you send the message yourself.

If you write to us, we process what your message contains: your email address, the sender name you chose, the subject and the body including any attachments. What that comprises is entirely up to you.

5.2 Legal basis

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Where your message aims at concluding or preparing a contract, Art. 6(1)(b) GDPR applies in addition.

5.3 Purpose

Processing serves solely to handle your enquiry. Your details are not passed to third parties and are not used for advertising or profiling.

5.4 Recipients and storage location

Our mailboxes are operated by STRATO AG, Pascalstrasse 10, 10587 Berlin, Germany; your message is stored on their servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO AG. Please note that the route an email takes between your provider and ours is outside our control and may, depending on the servers involved, be unencrypted.

5.5 Retention

We delete your message once it is no longer needed for the purpose it was collected for – that is, when the conversation has ended and the matter is conclusively resolved, typically after six months. If a business relationship results, statutory retention requirements (e.g. § 147 German Tax Code, § 257 German Commercial Code) may require storage for up to ten years.

6. Your Rights as Data Subject

If your personal data is processed, you are a data subject within the meaning of GDPR and you have the following rights:

6.1 Right to Access (Art. 15 GDPR)

You can request confirmation from us as to whether personal data concerning you is being processed by us. If such processing exists, you can request information about this personal data and further details.

6.2 Right to Rectification (Art. 16 GDPR)

You have the right to rectification and/or completion from the controller if the processed personal data concerning you is inaccurate or incomplete.

6.3 Right to Erasure (Art. 17 GDPR)

You have the right to request that we delete your personal data without undue delay if one of the legal grounds applies and the processing is not necessary.

6.4 Right to Restriction (Art. 18 GDPR)

You have the right to request restriction of processing if one of the legal conditions is met.

6.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller.

6.6 Right to Object (Art. 21 GDPR)

YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON ART. 6(1)(F) GDPR (DATA PROCESSING BASED ON A BALANCING OF INTERESTS).

IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

6.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the place of the alleged infringement, if you believe that the processing of your personal data violates GDPR.

Competent supervisory authority for our company:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

7. Exercising Your Rights

To exercise your rights, please contact us at:
Email: info@kastratitech.com
Address: Kastrati Tech GmbH, Wehneltstraße 9, 91052 Erlangen, Germany

We will generally respond to your request within one month. In complex cases, this period may be extended by a further two months, of which we will inform you.

8. Data Security

This website is delivered exclusively over an encrypted connection (HTTPS with TLS); unencrypted requests are redirected to HTTPS automatically. You can recognise an encrypted connection by “https://” in your browser's address bar.

We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments.

9. Updates to This Privacy Policy

This privacy policy is currently valid as of October 2026. Due to the development of our website and offerings or changes in legal or regulatory requirements, it may become necessary to modify this privacy policy. The current privacy policy can be accessed and printed from the website at any time.