Privacy Policy

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

keeru GmbH
Johannes Keller
Bahnhofstrasse 56
63834 Sulzbach am Main
Germany
E-Mail: [email protected]
Website: www.keeru.ai

1. Scope of Processing Personal Data

Below we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, such as name, address, email address or user behaviour.

We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. Collection generally only takes place with the user's consent. An exception applies where prior consent cannot be obtained for practical reasons and processing is permitted by law.

2. Legal Basis for Processing Personal Data

Where we obtain consent for processing personal data, Art. 6(1)(a) GDPR serves as the legal basis.

For processing necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to pre-contractual measures.

Where processing is necessary to fulfil a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.

Where vital interests require processing, Art. 6(1)(d) GDPR serves as the legal basis.

Where processing is necessary to protect a legitimate interest and the data subject's rights do not override it, Art. 6(1)(f) GDPR serves as the legal basis.

3. Data Deletion and Storage Duration

Personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Further storage may occur if required by European or national legislation. Data will also be blocked or deleted when a prescribed retention period expires, unless further storage is necessary for a contract.

4. Data Disclosure

Data is only passed on to third parties within the framework of legal requirements. We only pass on your data where necessary for the performance of a contract under Art. 6(1)(b) GDPR. External processors are carefully selected, bound by our instructions and regularly monitored in accordance with Art. 28 GDPR.

Where we use external service providers, these have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

Data is only transferred to third countries where the GDPR does not directly apply if an adequate level of data protection is guaranteed, the data subject has consented or another legal basis exists.

1. Description and Scope of Data Processing

When using the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, our system automatically collects data and information from the accessing device.

• Information about the browser type and version used
• The operating system of the user
• The internet service provider of the user
• The IP address of the user
• Date and time of access
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Amount of data transferred in each case
• Websites from which the user's system reaches our website
• Websites accessed by the user's system via our website

This data is also stored in log files of our system. This data is not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

3. Purpose of Data Processing

Temporary storage of the IP address is necessary to deliver the website to the user's computer. For this purpose, the IP address must remain stored for the duration of the session.

Log files are stored to ensure the functionality of the website and to optimise it and secure our IT systems. No evaluation for marketing purposes takes place. In diesen Zwecken liegt auch unser berechtigtes Interesse an der Datenverarbeitung nach Art. 6 Abs. 1 lit. f DSGVO.

4. Storage Duration

Data is deleted as soon as it is no longer required. For website data, this is when the session ends.

For log files, this is after seven days at the latest. Further storage is possible, in which case IP addresses are deleted or anonymised so that the accessing client can no longer be identified.

5. Right to Object and Erasure

The collection of data to provide the website and storage in log files is strictly necessary for operation of the website. The user therefore has no right to object.

1. Description and Scope of Data Processing

Our website provides an email address for contact. In this case, the personal data transmitted with the email will be stored.

2. Legal Basis for Data Processing

The legal basis for processing data transmitted by email is Art. 6(1)(f) GDPR. If the contact aims at a contract, the additional legal basis is Art. 6(1)(b) GDPR.

3. Purpose of Data Processing

In the case of email contact, processing the data constitutes the necessary legitimate interest in handling the conversation.

4. Storage Duration

Data is deleted as soon as it is no longer required. This is the case when the respective conversation with the user has ended — i.e. when the circumstances indicate that the matter has been conclusively resolved.

5. Right to Object and Erasure

The user may object to storage of their personal data at any time. In such a case, the conversation cannot be continued and all personal data stored during the contact will be deleted.

If personal data is processed about you, you are a data subject within the meaning of the GDPR and have the following rights against the controller:

1. Right of Access

You may request confirmation from the controller as to whether personal data concerning you is being processed.

1. the purposes for which the personal data is processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data has been or will be disclosed;
4. the planned storage duration or, if not possible, the criteria for determining the storage duration;
5. the existence of a right to rectification or erasure, a right to restriction of processing or a right to object;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information about the origin of the data where it is not collected from the data subject;
8. the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and meaningful information about the logic involved and the scope and intended effects.

You have the right to request information about whether your personal data is transferred to a third country or international organisation and to be informed about the appropriate safeguards pursuant to Art. 46 GDPR.

2. Right to Rectification

You have a right to rectification and/or completion if personal data concerning you is inaccurate or incomplete. The controller must carry out rectification without delay.

3. Right to Restriction of Processing

Under the following conditions you may request restriction of processing of personal data concerning you:

1. if you contest the accuracy of the personal data for a period enabling the controller to verify it;
2. the processing is unlawful and you request restriction of use instead of erasure;
3. the controller no longer needs the data but you need it for the assertion, exercise or defence of legal claims, or
4. if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been established whether the controller's legitimate grounds override yours.

If processing has been restricted, the data may only be processed — apart from storage — with your consent, for legal claims, for protection of another person's rights, or for important public interest reasons.

You will be informed by the controller before the restriction is lifted.

4. Right to Erasure

a) Obligation to Erase

You may request that the controller erase your personal data without undue delay where one of the following grounds applies:

1. The personal data is no longer necessary for the purposes for which it was collected or processed.
2. You withdraw consent on which processing was based and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds, or you object pursuant to Art. 21(2) GDPR.
4. The personal data has been processed unlawfully.
5. Erasure is necessary to comply with a legal obligation under Union or member state law.
6. The personal data was collected in relation to information society services pursuant to Art. 8(1) GDPR.

b) Information an Dritte

If the controller has made the personal data public and is obliged to erase it, the controller shall take reasonable steps, including technical measures, to inform other controllers that you have requested erasure of all links to, or copies or replications of, that data.

c) Ausnahmen

The right to erasure does not apply where processing is necessary

1. to exercise the right to freedom of expression and information;
2. to comply with a legal obligation under Union or member state law, or to carry out a task in the public interest or in the exercise of official authority;
3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
4. for archiving, scientific, historical research or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right is likely to render impossible or seriously impair the achievement of such purposes, or
5. for the assertion, exercise or defence of legal claims.

5. Right to Information

If you have asserted a right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom the personal data has been disclosed, unless this is impossible or involves disproportionate effort. You have the right to be informed about those recipients.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller without hindrance, provided that the processing is based on consent or a contract and is carried out by automated means.

1. the processing is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the data transmitted directly from one controller to another where technically feasible. The rights and freedoms of other persons must not be adversely affected.

The right to data portability does not apply to processing necessary for a task carried out in the public interest or in the exercise of official authority.

7. Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to processing based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time, including to profiling related to such marketing.

If you object to processing for direct marketing, the personal data will no longer be processed for those purposes.

In connection with information society services, you may exercise your right to object by automated means using technical specifications, notwithstanding Directive 2002/58/EC.

8. Right to Withdraw Consent

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9. Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects or similarly significantly affects you. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the controller,
2. is authorised by Union or member state law which provides suitable safeguards for your rights, freedoms and legitimate interests, or
3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and appropriate safeguards are in place.

In the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard the data subject's rights and legitimate interests, including the right to human intervention, to express their point of view and to contest the decision.

10. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that processing of your personal data infringes the GDPR.

The supervisory authority shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.