Privacy Policy
Last updated: June 2026
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below.
Data Collection on this Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
Your data is collected, on the one hand, by you providing it to us. This may, for example, be data you enter in a contact form. Other data is collected automatically or after your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or the time of the page request). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. If you submit an inquiry via the contact form, the data collected there will be used exclusively to process your inquiry.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw that consent at any time for the future. You also have the right to request restriction of processing under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
For this and other questions regarding data protection, you can contact us at any time.
2. Hosting
This website is operated on a virtual private server (VPS) hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, and managed via the Coolify platform. The provider processes technical connection data (in particular IP addresses) as part of providing the service. Processing is based on our legitimate interests in a secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR).
We have concluded a data processing agreement (DPA) with the provider pursuant to Art. 28 GDPR.
3. General Information and Mandatory Details
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
Controller
The controller responsible for data processing on this website is:
KHL Interior GmbH
Patric Fournes (Managing Director)
Kastanienallee 3-5
26524 Hage, Germany
Operating location: Hatzfelder Str. 161 (Halle 12), 42281 Wuppertal
Phone: +49 202 261 559-0
Email: info@khl-interior.de
Storage Duration
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or withdraw consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will take place after those reasons cease to apply.
Your Rights
You have the following rights with regard to personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR)
To exercise your rights, please contact the controller listed above. You also have the right to lodge a complaint with the competent data protection supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
PO Box 20 04 44 · 40102 Düsseldorf, Germany
Tel.: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Web: www.ldi.nrw.de
4. Data Collection on this Website
Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address (truncated/anonymized by the provider)
This data is not merged with other data sources. The legal basis for data processing is Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation).
Contact Form
If you submit inquiries to us via the contact form, your details from the form, including the contact details you provided, will be stored for the purpose of processing the inquiry and for any follow-up questions. We will not share this data without your consent.
The processing of this data is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) where your inquiry relates to contract fulfillment or is required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective processing of inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where collected; consent may be withdrawn at any time.
The data you enter in the contact form remains with us until you request deletion, withdraw consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions — in particular retention periods — remain unaffected.
Email Dispatch via Third-Party Provider (Resend)
For the technical transmission of contact inquiries, we use the email dispatch service Resend (Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). When you submit the contact form, your entered data (name, email address, message, and optionally phone and company) is transmitted to Resend and forwarded to our email address. In addition, we send you a confirmation email via Resend to the address you provided.
Resend processes data on servers in the EU and/or USA. For transfers to the USA, Resend relies on EU Standard Contractual Clauses (SCC). More information is available in Resend's privacy policy atresend.com/legal/privacy-policy.
The legal basis for processing is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient email delivery).
Spam Protection (Cloudflare Turnstile)
To protect the contact form against abuse and automated submissions, we useCloudflare Turnstile by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The widget is loaded only on the contact page. During verification, your IP address as well as browser and device characteristics may be transmitted to Cloudflare.
We run Turnstile in Invisible mode without Pre-Clearance; the widget runs invisibly in the background and does not set cookies in this configuration. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing spam and abuse). For any transfers to the USA, Cloudflare relies on the EU Standard Contractual Clauses (SCC). More information is available in Cloudflare's privacy policy atcloudflare.com/privacypolicy.
Web Analytics (Umami)
This website uses Umami, a privacy-friendly analytics tool without tracking cookies. The Umami instance is self-hosted on our Hetzner VPS at analytics.khl-interior.de. No data is shared with an external analytics provider. The analytics script and the related processing are loaded and carried out only after your consent.
Umami is loaded only after your explicit consent. Without consent and after declining, no analytics data is collected. You can withdraw your consent at any time via “Cookie settings”. Umami processes anonymized usage data such as pages viewed, time on site and browser type; full IP addresses are not stored and individual persons are not re-identified.
The legal basis is Art. 6(1)(a) GDPR (consent) and, where information is stored on or read from your device, Section 25(1) TDDDG. You can grant consent in the cookie banner via “Accept all”, the “Analytics” category, or “Save selection”, or refuse it via “Reject all”.
Google Maps (load after consent)
This website may embed the interactive map Google Maps on the contact and about pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps is loaded only after consent — either via cookie settings (category “Google Maps”) or by clicking “Load map”. Until then, no iframe/Google requests are made and no data is transferred to Google. Only after your consent is the map loaded and your IP address transmitted to Google.
The legal basis is Art. 6(1)(a) GDPR (consent) and, where applicable, Section 25(1) TDDDG. More information on how user data is handled can be found in Google's privacy policy: https://policies.google.com/privacy.
5. Cookies and Local Storage
This website uses the following storage mechanisms:
- Cookie
lang-preference: Stores your language preference (DE/EN) for 12 months. Contains no personal data. Legal basis: Art. 6(1)(f) GDPR. - localStorage
lang-preference: Additionally stores the language preference in local browser storage (no expiration date, client-side only). Legal basis: Art. 6(1)(f) GDPR. - localStorage
cookie-notice-dismissed: Stores whether you have dismissed the cookie notice to avoid showing it again. Contains no personal data. Legal basis: Art. 6(1)(f) GDPR. - localStorage
lang-suggestion-dismissed: Stores whether you have dismissed the language suggestion banner to avoid showing it again. Contains no personal data. Legal basis: Art. 6(1)(f) GDPR. - localStorage
analytics-consent: Stores your Umami analytics decision (1= allowed,0= declined or revoked). Legal basis: Art. 6(1)(a) GDPR. - localStorage
maps-consent: Stores your Google Maps decision (1= allowed,0= declined). Can be set via the cookie banner or the “Load map” click. Legal basis: Art. 6(1)(a) GDPR.
You can delete your browser's local storage at any time through browser settings.