1. Privacy Notice

With this Privacy Notice, we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”).

2. Responsible for data processing

In accordance with the provisions of the General Data Protection Regulation (GDPR), the data controller responsible for processing personal data in connection with this website is:
Kalfany Süße Werbung GmbH & Co. KG
Industriegebiet West
Holzmattenstraße 22
D-79336 Herbolzheim
Tel. +49 (0) 7643 / 801-0
Fax +49 (0) 7643 / 801-20

3. Our data protection officer:

Michael Gruber
External data protection officer

Thundorferstr. 10
D-93047 Regensburg
Tel. +49 (0) 941 462 909 29
Mobil +49 (0) 152 32 01 04 95

4. General information about data processing

We process data for the purpose of operating our business and our website.
This also includes disclosure by means of transmission to third parties and, if applicable, to so-called third countries outside of the European Union (“EU”) and the European Economic Area (“EEA”). We have provided appropriate notices below in cases where we transfer data outside of the EU or EEA.

5. Data processing

The data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed below:

a) Log file

We log your visit to our website. We process the following data in this context:

  • Name(s) of the web page(s) you have accessed;
  • Date and time of access;
  • The quantity of data transmitted;
  • Browser type and version;
  • Your operating system;
  • Referrer URL (the previously visited website);
  • Your IP address;
  • Requesting provider.

According to Art. 6(1)(f) GDPR, the legal basis for processing this data is our compelling legitimate interest in the continuous operation and security of our website.
Log files are deleted after seven days unless they are needed in order to verify or investigate specific legal infringements occurring during the retention period.

b) Hosting

In order to operate our website, we use the services of web hosting providers who process the data referred to above (log file when you visit our website) and all other data to be processed in connection with the operation of our website on our behalf.
According to Art. 6(1)(f) GDPR, the legal basis for processing this data is our overriding legitimate interest, thus permitting us to operate the website in the first place.

c) Contacting us

If you contact us, we will process the following data exclusively for the purpose of processing and responding to your inquiry: your name, your contact details (if you have provided them) and your message.
The legal basis for processing this data is our obligation to satisfy a contract and/or to satisfy pre-contractual obligations according to Art. 6(1)(b) GDPR and/or our compelling legitimate interest in processing your inquiry according to Art. 6(1)(f) GDPR.


We use “cookies” on our website. Cookies are small text files that are placed on your device (PC, smartphone, tablet, etc.) and stored by your browser.


We use technical cookies on our website to ensure the proper functioning of the site. For example, these cookies make it possible to navigate our website or to provide other basic functions on the website.
In addition, we use optional cookies that provide us with additional information, for example to analyze data traffic or for advertising and marketing purposes.


The cookies we use remain on your device for different periods of time.
Session cookies: These cookies are deleted from your device immediately after you close your web browser.
Permanent cookies: These cookies remain on your device even after you close your web browser and enable us, for example, to recognize you when you next visit our website.

Cookie providers

Cookies that we set directly are called “first-party cookies”. By contrast, “third-party cookies” are set by third-party websites, for example in order to display content (advertisements, images, tracking pixels, etc.).

Legal basis for data processing

The following applies as a general rule: the legal basis for data processing is our overriding legitimate interests in optimizing and ensuring the functionality of our website in accordance with Art. 6(1)(f) GDPR.


Information about objecting to data processing may be found in Section 6.b of this Privacy Notice.

Cookie browser settings

In addition, you can prevent or limit data processing by cookies in future by selecting the appropriate browser settings and, for example, disabling cookies. Any cookies that are already stored may be deleted using your browser settings. Please refer to the following links for more information on the respective browser settings:

Mozilla Firefox: https://support.mozilla.org/de/kb/
Internet Explorer:  https://support.microsoft.com/de-de/help/17442/ 
Google Chrome:  https://support.google.com/accounts/ 
Opera:  http://www.opera.com/de/help 
Safari:  https://support.apple.com/kb/PH17191? 

d) Integration of third-party content

We use third-party dynamic content to optimize the presentation of and offerings on our website. When visiting the website, an API is automatically used to make a request to the server of the respective content provider as part of which certain log data (e.g. the IP address of the user) is transmitted. The dynamic content is then transferred to our website and displayed there.

We use external content in connection with the following features:

(1) Integration of YouTube videos

We have integrated videos from YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”) on our website. When you play the videos, log data will be transferred to YouTube’s servers in the USA. Processing in this manner is performed on the basis of our overriding legitimate interest in the optimum marketing of our website in accordance with Art. 6(1)(f) GDPR. Additional information is available here

(2) Google Maps

We use Google’s Google Maps service on our website in order to provide you interactive maps. When the map is displayed, data, including your IP address and your location, is transferred to Google’s servers in the USA and stored there. We process the data we obtain on the basis of our overriding legitimate interest, which is to optimize the marketing of our online offer in accordance with Article 6(1)(f) GDPR. Additional information on data protection can be found at: https://policies.google.com/privacy?hl=en&gl=de

6. Data retention period

We only retain personal data for as long as it is necessary for the purposes for which it is processed or until you withdraw your consent. The retention period for certain data can be up to 10 years irrespective of the processing purposes in the event we must comply with statutory retention obligations.

7. Your rights as a data subject

a) Information

You may request information free of charge at any time about all of the personal data that we have stored about you.

b) Rectification, erasure, restriction of processing (blocking), objection

If you no longer consent to the storage of your data or if the data is incorrect, we will arrange for your data to be erased or blocked, or for the necessary rectifications to be made, once we receive instructions to do so (provided this is permissible under the law as it currently stands). The same applies if you only want us to process data in a restricted manner in future.

c) Data portability

You have the right to data portability in cases where data is processed on the basis of a contract, pre-contractual negotiations, consent or by means of an automated process. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can, if you wish, transmit the data to another controller.

d) Right to lodge a complaint

You also have the option to lodge a complaint with a supervisory authority concerning your rights as a data subject:

e) Right to withdraw consent with prospective effect

You may withdraw your consent at any time with prospective effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

f) Limitations

The rights described above do not apply to data for which we are not able to identify the data subject, e.g. if anonymized for analysis purposes. The right to information, erasure, blocking, rectification, or transfer to another company with respect to this data will only be possible if you make additional information available to us which allows us to identify you.

g) Exercising your rights as a data subject

For questions regarding the processing of your personal data, information, correction, blocking, objection or deletion of data, or the request to transfer the data to another company, please contact newsletter@ksw24.com