Privacy Policy

Status: October 2026

2.1 Hosting

Our website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Nürnberg, Germany. Hetzner processes the data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR. We deliver fonts, stylesheets, scripts, and images from this dedicated server; we do not integrate external content delivery networks or third-party font services.

2.2 Technically Necessary Processing

For the site to be delivered, your browser technically transmits your IP address, the requested address, date and time, browser type and version, and the previously visited page (referrer) to our server. We only use the IP address briefly in a temporary cache on our server to slow down the misuse of forms and chat (limiting requests per address); these counters expire after a few minutes. Our server logs access without an IP address; the log files are overwritten on a rolling basis.

Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and stable operation of the website.

Without your consent, we only store what is technically necessary for the site (§ 165 para. 3 TKG 2021):

• kx_cookie_consent (Cookie, 365 days): stores your selection in the cookie banner, so we don't ask again on every visit.
• Session cookie: only if you put something in the shopping cart in the shop; it stores the content of the shopping cart.

Only if you agree in the cookie banner, the following are added:

• kx_gclid, kx_utm_source, kx_utm_campaign (browser session storage, deleted when closing the tab): remember which ad or campaign you came to the site through, so we can assign a later request to this channel.
• _gcl_au, _gcl_aw and other Google cookies (see section 6).
• YouTube cookies and storage, as soon as you start a video (see section 8).

You can change or revoke your selection at any time via „Cookie-Einstellungen“ in the footer of each page.

We count page views on our own server, without cookies and without transmitting data to third parties. The visited page and its title, the previously visited page, campaign parameters in the address (utm), device type, browser, operating system, the country (from your browser's language setting or the origin indication of our upstream network service), and a truncated browser ID are stored. To detect multiple visits from the same visitor on a single day, we create a checksum from the IP address with a daily changing key; we do not store the IP address itself (pseudonymization). We also record dwell time and scroll depth, as well as events such as your decision in the cookie banner, the use of forms, and clicks on phone numbers, email addresses, or data sheets.

We automatically delete this data after 90 days. Legal basis: Art. 6 para. 1 lit. f GDPR; our legitimate interest is to improve our offering.

5.1 Contact Form

If you write to us via the contact form, we process your first name, last name, company, email address, phone number, the type of inquiry, and your message, as well as the language of the page and the channel through which you reached us (e.g., Google ad, if you have consented to this). We create your inquiry in our own customer management system, which runs on our server, and process it there. We discard a repeated inquiry with the same email address within ten minutes as a duplicate. The form contains invisible protection against automated submissions; no data is transmitted to third parties for this purpose.

Depending on the region and device, we forward your inquiry to our responsible sales partner (dealer) so that they can advise you and make you an offer. The dealer receives your contact details and your inquiry via a protected partner area for this purpose.

If you have agreed in the cookie banner, we will also transmit your email address and phone number as a non-reversible checksum to Google when submitting (see section 6.3).

Legal basis: Art. 6 para. 1 lit. b GDPR (processing of your inquiry and pre-contractual measures) as well as Art. 6 para. 1 lit. f GDPR (forwarding to the responsible dealer, channel assignment).

5.2 Inquiries via Facebook and Instagram

We place ads with inquiry forms on Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). If you fill out such a form, Meta transmits the data provided there to us, and we adopt it as an inquiry into our customer management system; section 5.1 applies accordingly. Meta is responsible for the processing on Facebook and Instagram itself: www.facebook.com/privacy/policy.

5.3 Inquiries via the Online Shop

In our shop, you submit an order inquiry; no payment takes place on the website. For this purpose, we process your name, email address, phone number, company, the desired products, and your message, create the inquiry with an order number in our system, and send you a confirmation by email; you will receive the offer from us separately. Legal basis: Art. 6 para. 1 lit. b GDPR.

5.4 Storage Duration

Inquiries that do not lead to a business relationship are deleted three years after the last contact; entries in the internal change log that mention the name expire 14 days later. If an inquiry becomes an order, we retain the data for as long as required by statutory retention obligations (generally seven years, § 132 BAO).

6.1 Only with Your Consent

We use Google Ads and Google Tag Manager, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Both are only loaded when you consent in the cookie banner. Before that, the page does not load anything from Google.

6.2 Conversion Measurement

After your consent, we measure whether a visit originated from one of our ads and whether it resulted in an inquiry. For this purpose, Google sets the cookies _gcl_au and _gcl_aw (storage duration according to Google up to 90 days). We also report to Google if you click on a phone number, an email address, or a WhatsApp link, start writing in the contact form, download a data sheet, or follow a link to another website. Only the occurrence of the event is transmitted, not what you entered or which file you downloaded.

6.3 Enhanced Conversions

If you submit an inquiry after your consent, we additionally transmit your email address and phone number as an SHA-256 checksum (not in plain text) to Google. Google matches this value with logged-in Google accounts to attribute the inquiry to an ad.

6.4 Data Transfer to the USA

Google may transfer data (e.g., IP address, user behavior) to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (Adequacy Decision of the EU Commission, Art. 45 GDPR).

6.5 Legal Basis and Revocation

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 165 para. 3 TKG 2021). You can revoke it at any time via “Cookie Settings” in the footer; after that, the page will no longer report anything to Google, and the Google cookies will be deleted. The revocation does not affect the legality of the processing carried out until then.

On our website, you can ask questions to an AI-powered chat assistant. We send your question along with the public content of our website to the Gemini service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which generates the answer. Google processes the request on our behalf according to the terms for the paid Gemini interface and does not use it to train its models. A transfer to the USA is possible (see section 6.4).

We do not store the conversation history on our server. The assistant has no access to customer or inquiry data. We only use your IP address briefly to limit the number of questions per address. Please do not enter any personal data in the chat. For personal consultation, please use the contact form.

Legal basis: Art. 6 para. 1 lit. f GDPR; our legitimate interest is to quickly answer your questions about our products.

On some pages, we display videos from YouTube (Google Ireland Limited). Initially, you will only see a preview image from our own server; no connection to YouTube is established. Only when you start the video and agree to it, or if you have already consented in the cookie banner, do we load it in the enhanced privacy mode from youtube-nocookie.com. From then on, your browser transmits data to YouTube (e.g., IP address, the visited page), and YouTube may set cookies or browser storage; a transfer to the USA is possible (see section 6.4). The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). Further information: policies.google.com/privacy.

If you subscribe to our newsletter, either via the newsletter form or by checking the box in the contact form, we will use your email address and, if applicable, your first and last name, to inform you about products, news, offers, and events from KECKEX GmbH. Your registration only becomes effective when you click the link in our confirmation email (double opt-in). We save the time of registration and confirmation as proof.

The newsletter is sent via Brevo SAS (formerly Sendinblue), 106 boulevard Haussmann, 75008 Paris, France, on our behalf, based on a data processing agreement in accordance with Art. 28 GDPR. Brevo enables the analysis of whether a newsletter has been opened and which links have been clicked; we use this analysis to improve the newsletter. Data protection at Brevo: www.brevo.com/de/legal/privacypolicy.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 174 TKG 2021). To existing customers, we also send information about our own similar products based on Art. 6 para. 1 lit. f GDPR in conjunction with § 174 para. 4 TKG 2021; you can object to this at any time.

You can unsubscribe at any time via the link at the end of each newsletter or by email to office@keckex.com. After unsubscribing, we store your email address in a suppression list so that you no longer receive newsletters.

In the footer, we link to our presences on Facebook, Instagram, LinkedIn, YouTube, and WhatsApp. These are simple links without integrated plugins: Only when you click a link do you leave our website, and the data protection policy of the respective provider applies.

Under the GDPR, you have the right to

• information about your stored data (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21), in the case of direct marketing at any time and without giving reasons,
• withdrawal of consent given with effect for the future (Art. 7 para. 3).

To do so, please contact the address mentioned above. You can also lodge a complaint with the Österreichische Datenschutzbehörde: Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

Our website is exclusively transmitted encrypted (TLS). We protect the data on our server through technical and organizational measures, including access restrictions and backups on a separate storage in Germany, which are transmitted encrypted.

We adapt this privacy policy if our website or the legal requirements change. The version published here applies.