Privacy Policy

Privacy Policy

A. Controller / Inquiries Regarding Data Protection

Below, we inform you about the handling of your personal data and your related rights.

The party responsible for processing your personal data in connection with the use of this online presence (hereinafter also referred to as the “Website”) is:

Yevgeniya Nedilko
Johanna Tesch Platz 10
60386 Frankfurt am Main
Phone: +49 (0) 176 66150040
Email: info@kimiovr.com

This privacy policy applies to the website operated by us. If our website enables access to offers from other providers (“third-party offers”), this privacy policy does not apply to those third-party offers. In such cases, we are also not responsible for the processing of your personal data within the scope of those third-party offers pursuant to Art. 4 No. 7 GDPR.

B. Type and Scope of the Processing of Your Personal Data

I. Processing of Access Data, Hosting

Type and scope of processing

You may visit our website without providing any personal information. We only store access data in so-called server log files. These include your IP address as well as browser type, operating system, referrer URL, pages visited, date, and time of access.

Your IP address may constitute personal data, as it may be possible under certain circumstances to determine the identity of the holder of the internet connection in use by obtaining information from the respective internet provider.

Purpose of processing

We process the server log file data solely for the purposes of ensuring a secure and uninterrupted operation of the website.

Legal basis

Processing of the IP address is carried out based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in providing you with a secure website and enabling communication between our server and your device.

Recipient

We host the content of our website with the provider:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

II. Processing for Responding to Your Inquiries

Type and scope of processing

We process the personal data you voluntarily provide when contacting us, particularly by email, through our contact form, or by telephone. When submitting the contact form, we also process your IP address.

Purpose of processing

These data are processed solely for the purpose of corresponding with you and for the purpose for which you have provided them in the course of this communication, such as handling your inquiry or contacting you upon your request.

Legal basis

Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent to the processing of your personal data at any time with future effect.

If the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures at your request, the legal basis is Art. 6 para. 1 lit. b GDPR.

The legal basis for processing your IP address is our legitimate interest in enabling communication between our server and your device.

Storage period

After your inquiry has been fully processed, your data will be blocked for further use and deleted after the expiry of any applicable retention periods, unless you have expressly consented to further use of your data or we otherwise have a right to store them.

III. General Information on Cookies

We use what are known as cookies on our website. Cookies are data records stored by your internet browser on your device. A cookie may contain a string of characters that allows your browser to be uniquely identified when the website is accessed again. Cookies cannot execute programs or transmit viruses to your computer.

Cookies may be stored on your device either temporarily for the duration of a session (“session cookies”) or permanently (“persistent cookies”).

Session cookies are automatically deleted immediately after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your browser.

Cookies may be set directly by us (“first-party cookies”) or by third-party companies (“third-party cookies”), for example enabling the integration of third-party services into websites.

Cookies serve various purposes. Some are technically necessary to ensure certain website functionalities (e. g., shopping cart functionality). Other cookies are not required in this manner and are used, for example, to analyse user behaviour or for advertising purposes.

Most browsers allow you to configure settings so that you are informed when cookies are set, allow cookies only in certain cases or generally block them, or permit cookies only with your explicit consent. You can also delete stored cookies through your browser settings.

However, without cookies, the functionality of our website may be restricted.

Legal basis

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc. ) and the related consents, we use the consent tool “Real Cookie Banner. ” Details on how “Real Cookie Banner” works can be found at https: //devowl. io/de/rcb/datenverarbeitung/.

Cookies required for carrying out electronic communications or technically necessary for providing certain functions are used based on Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. In this respect, you and we share a mutual interest in providing a secure and fully functional website.

All other cookies not technically required are set exclusively on the basis of your consent pursuant to Section 25 para. 1 TTDSG and – insofar as personal data are processed – Art. 6 para. 1 lit. a GDPR. You may withdraw this consent at any time with future effect.

IV. YouTube

Type and scope of processing

We may integrate videos from the YouTube platform on our website. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

If we embed YouTube videos (alternatively, the embedded videos may also be hosted directly on our server), we use YouTube exclusively in the extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. Thus, YouTube may establish a connection to the Google DoubleClick network regardless of whether you view a video.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account beforehand.

Furthermore, once a video is started, YouTube may store various cookies on your device or use comparable recognition technologies (e. g., device fingerprinting). YouTube may obtain information about you in this way. These data are used, among other purposes, to compile video statistics, improve user-friendliness, and prevent fraud attempts. Additional data processing operations may be triggered after starting a YouTube video, over which we have no control.

Further information about data protection at YouTube can be found in their privacy policy at: https: //policies. google. com/privacy? hl=de.

Purpose of processing

Processing serves the purpose of enabling you to view the corresponding YouTube videos.

Legal basis

The use of YouTube videos is carried out exclusively based on your consent, which you provide when you activate the playback button of a video, pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw this consent at any time with future effect.

Recipient

The recipient of the data is Google Ireland Limited.

If personal data are also transferred to the USA, the company has certification under the “EU-US Data Privacy Framework. ”

V. Google Analytics

Type and scope of processing

We use Google Analytics on our website, a web analytics service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics may use cookies as well as so-called web beacons (invisible graphics). Web beacons can be used to evaluate visitor traffic on websites. The information generated by cookies and web beacons regarding your use of our website (including your IP address) is transmitted to a Google server, potentially in the USA or other third countries, and stored there.

Google provides detailed information on the processed data at

https: //www. google. com/intl/de/policies/privacy/#infocollect and https: //privacy. google. com/businesses/adsservices/.

You can prevent Google’s processing of your data by downloading and installing the browser plugin available at:

https: //tools. google. com/dlpage/gaoptout? hl=de.

Further information can be found in Google’s privacy policy:

https: //support. google. com/analytics/answer/6004245? hl=de.

Purpose of processing

By integrating Google Analytics, we pursue the purpose of analysing user behaviour on our website and being able to respond accordingly. This enables us to continuously improve our offering and tailor it to the interests of users.

Legal basis

The processing is carried out exclusively based on your consent (§ 25 TTDSG and Art. 6 para. 1 lit. a GDPR). You may withdraw this consent at any time with future effect.

You can also deactivate personalised advertising via:

https: //support. google. com/ads/answer/2662922? hl=de.

VI. Social Media (Plugins)

Type and scope of processing

We may use social media plugins on our website.

As a general rule, we merely link to our social media channels.

Facebook

Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

Website: https: //www. facebook. com

Privacy policy: https: //www. facebook. com/about/privacy

LinkedIn

Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Website: https: //www. linkedin. com

Privacy policy: https: //www. linkedin. com/legal/privacy-policy

YouTube

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Website: https: //www. youtube. com

Privacy policy: https: //policies. google. com/privacy? hl=de

Purpose of processing

This serves the purpose of presenting our social media activities and increasing their reach.

Legal basis

If social media plugins are used, they are integrated into the website using the so-called “2-click solution” or the “Shariff solution. ” This ensures that no connection to the providers’ servers is created when visiting a page that contains such plugins. Only when you activate the plugin and thereby give consent to the transfer of data does your browser establish a direct connection to the provider’s servers. The content of the plugin is then transmitted directly to your browser by the provider and integrated into the page.

By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. These data (including your IP address) are transmitted by your browser directly to a server of the respective provider, potentially outside the EU, and stored there.

If you are logged into one of the providers’ services, the provider can directly associate your visit to our website with your profile/account. If you interact with the plugins, for example by clicking the “Like” button, this information is also transmitted directly to a server of the provider and stored there. The information is additionally published in the social network or on your social media account and displayed to your contacts.

To prevent the providers from directly associating the collected data with your profile/account, you must log out of the respective service before activating the plugins.

The legal basis for this type of processing is therefore your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Recipient

Recipients may include the respective service providers of the social networks.

C. Your Rights

In connection with our processing of your personal data, you have the rights listed below.

Exercising these rights is generally free of charge for you.

However, in the case of manifestly unfounded or – particularly in the event of frequent repetition – excessive requests relating to the rights under II to VI, we may, in accordance with Art. 12 para. 5 GDPR:

a. charge a reasonable fee considering the administrative costs for providing information, communication, or implementing the requested measure, or

b. refuse to act on the request.

Please contact one of the addresses listed above to exercise your rights.

I. Withdrawal of Granted Consent

You may withdraw any consent you have granted to us at any time with future effect.

II. Access

You have the right to obtain access to the personal data stored about you. Furthermore, you are entitled to the information outlined in Art. 15 GDPR.

III. Rectification and Erasure

You also have the right to rectification of inaccurate personal data and to completion of incomplete personal data in accordance with Art. 16 GDPR, as well as the right to erasure of your personal data if the requirements of Art. 17 GDPR are met.

IV. Restriction of Processing

Under the conditions of Art. 18 GDPR, you may request the restriction of the processing of your personal data.

V. Data Portability

You also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You have the right, insofar as technically feasible, to have us transfer these data to another controller at your instruction.

The right to data portability applies only to personal data processed based on consent pursuant to Art. 6 para. 1 lit. a GDPR or based on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and which are processed by automated means.

The right to transfer personal data to another controller does not apply if the rights and freedoms of other persons (e. g., third-party personal data, our business and trade secrets, or copyrights) would be affected.

VI. RIGHT TO OBJECT

Under Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6 para. 1 lit. e or f GDPR. In the event of such an objection, we will no longer process these data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If we process your personal data for direct marketing purposes, you also have the right to object at any time to the processing of personal data concerning you for such marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for this purpose. You may exercise your right to object, for example, by clicking “unsubscribe” in a related marketing email.

VII. Right to Lodge a Complaint

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

D. Obligation to Provide Data

There is no statutory or contractual obligation to provide us with personal data. However, for those data strictly necessary to provide the respective service, the provision is required if you wish to make use of these services.

Status: November 2025