Privacy Policy

Person in charge

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

KVT Kurlbaum GmbH
Sachsenring 4-6
27711 Osterholz-Scharmbeck
Germany

Phone: +49 (0) 4795 93160
E-Mail: info@kvt-group.de

General information on data processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as this privacy policy.

This privacy policy applies to the website kvt-kurlbaum.de and all associated subdomains.

a) General

Our website uses cookies and comparable technologies exclusively on the basis of your consent pursuant to Section 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Technically necessary cookies that are strictly required to operate the website (e.g. to store your cookie preferences) are set without consent on the basis of Section 25 para. 2 no. 2 TTDSG.

You can withdraw your consent at any time with effect for the future by clicking "Cookie Settings" in the footer of the website.

b) Google Ads Conversion Tracking

We use Google Ads Conversion Tracking on this website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Purpose: Google Ads Conversion Tracking enables us to measure and optimize the effectiveness of our advertising campaigns. As the advertising customer, we only see aggregated, non-personal statistics.

Data processed: IP address, cookie ID, referrer URL, time of visit, information about browser, operating system and device, and the conversion action performed.

Legal basis: Your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG. The scripts and cookies from Google are only loaded after you have clicked "Accept" in the cookie banner.

Storage period: The conversion cookies set by Google expire after 90 days. Aggregated conversion data is stored by Google in accordance with its own policies (see Google's privacy policy).

Transfer to third countries: Personal data is transferred to Google LLC in the USA as part of conversion tracking. Google LLC is certified under the EU-U.S. Data Privacy Framework and therefore provides an adequate level of data protection within the meaning of Art. 45 GDPR (European Commission adequacy decision of 10 July 2023). In addition, we have concluded the Standard Contractual Clauses approved by the European Commission pursuant to Art. 46 para. 2 lit. c GDPR with Google.

Data processing agreement: A data processing agreement pursuant to Art. 28 GDPR (Google Ads Data Processing Terms) has been concluded with Google.

Withdrawal and objection: You can withdraw your consent at any time by clicking "Cookie Settings" in the footer of the website and changing your decision. You can also deactivate personalized advertising directly with Google at adssettings.google.com.

Further information:

• Google's privacy policy: policies.google.com/privacy
• Google Ads terms: policies.google.com/technologies/ads

c) No other tracking services

Beyond this, we do not use any other analytics or tracking tools such as Google Analytics, Matomo, Facebook Pixel or comparable services. External fonts are hosted exclusively on our own server (no Google Fonts CDN); no external CDN services that would transmit data to third parties are integrated.

Our website uses cookies and comparable technologies exclusively on the basis of your consent pursuant to Section 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future by clicking "Cookie Settings" in the footer of the website.

Google Tag Manager

We use Google Tag Manager (Container ID: GTM-5R8K5TLC), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is a tag management system that we use to embed the tracking services described below on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It serves exclusively to manage and deliver the services embedded through it.

When the website is loaded, the IP address of your device may be transmitted to Google as well as to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is loaded only after your explicit consent.

Legal basis: Art. 6(1)(a) GDPR in conjunction with §25(1) TTDSG (consent).

Third-country transfer: Google LLC (USA) – safeguarded by the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) as well as, additionally, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with Google.

Withdrawal: At any time via "Cookie Settings" in the footer of this website.

Further information: policies.google.com/privacy

Google Ads Conversion Tracking: Via the aforementioned Google Tag Manager, we embed Google Ads Conversion Tracking (Conversion ID: AW-18104234496) on this website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The purpose is to measure and optimize the effectiveness of our advertising campaigns. The data processed includes IP address, cookie ID, referrer URL, time of visit, information about browser, operating system and device, and the conversion action performed.

Transfer to the USA: As part of conversion tracking, personal data is transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, thereby providing an adequate level of data protection within the meaning of Art. 45 GDPR (European Commission adequacy decision of 10 July 2023). In addition, we apply the Standard Contractual Clauses of the European Commission pursuant to Art. 46 para. 2 lit. c GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Google.

Storage period and withdrawal: The conversion cookies set by Google expire after 90 days. You can withdraw your consent at any time (footer → "Cookie Settings") and deactivate personalized advertising directly with Google at adssettings.google.com. Further information can be found in Google's privacy policy.

Beyond this, we do not use any other analytics or tracking tools such as Google Analytics, Matomo, Facebook Pixel, or comparable services. External fonts are hosted exclusively on our own server (no Google Fonts CDN); no external CDN services that would transmit data to third parties are integrated.

<h3>localStorage entries used</h3>

Independent of Google Tag Manager, we store the following entry in your browser's localStorage:

• kvt-consent-v2 – Storage of your consent decision (marketing / statistics). Provider: KVT Kurlbaum GmbH. Storage duration: indefinite until manually deleted by the user.
  Legal basis: §25(2) no. 2 TTDSG – strictly necessary for the "consent management" service expressly requested by the user.

When you visit our website, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser.

You have the following rights with regard to your personal data:

Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this data and to further information in accordance with Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate correction of any inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data if one of the reasons specified in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR applies.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR.

Right to withdraw consent (Art. 7(3) GDPR)

If the processing is based on your consent, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the processing carried out on the basis of your consent until withdrawal.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Telefon: +49 (0) 511 120-4500
E-Mail: poststelle@lfd.niedersachsen.de

If you have any questions about the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or revoke your consent or object to a specific use of data, please contact:

KVT Kurlbaum GmbH
Sachsenring 4-6
27711 Osterholz-Scharmbeck
E-Mail: info@kvt-group.de
Telefon: +49 (0) 4795 93160

6. Changes to this privacy policy

We reserve the right to amend this privacy policy in order to adapt it to changes in the legal situation or to changes in our services. The current version can always be found on this website.

As of: January 2026