Privacy policy
Effective: 24 August 2026
1. Controller
Redas Klerauskas
Am Beckers Busch 2
42799 Leichlingen
Deutschland
Email: info@kaumaster.de
2. Public website hosting
The public website is hosted by Hostinger International Limited, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When the website is opened, the host processes necessary server log data, which can include IP address, date and time, requested resource, referrer, browser and operating system. Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.
3. Local fonts
Montserrat is served locally from our server. Loading the font does not connect your browser to Google Fonts or another external font provider.
4. Contact
When you use the contact form or email us, we process the information you provide to answer the enquiry. The contact form is handled by our platform hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Technical request data can be retained for a limited time to enforce anti-spam limits.
The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or steps before a contract. Otherwise, processing is based on Article 6(1)(f) GDPR and our legitimate interest in answering business enquiries and preventing misuse.
5. Email communication
We use Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Sender, recipient and delivery details and message content are processed for business communication. Data transfers outside the EEA are handled under the applicable legal mechanisms, including adequacy decisions or EU standard contractual clauses.
6. Google Analytics and Google Ads conversion tracking
If you consent, we use Google Analytics 4 and Google Ads conversion tracking, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The services help us understand which public pages are useful to business customers and which ads lead to a click on the B2B registration link. Without consent, the Google tags are not loaded and no measurement data is sent to Google.
Processing can include page views, session data, referrer, approximate location, browser and device information and a Google Click ID contained in the destination URL. The only conversion event sent is that a visitor clicked the public B2B registration link. We do not send protected shop data, form entries, email addresses or order data through this measurement. Enhanced conversions, Google signals and personalised advertising are disabled.
After consent, Google can set _ga cookies for analytics and _gclcookies for ad-click attribution. Our analytics cookies are limited to six months. Ad-click attribution cookies can remain for up to 90 days. The legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw consent through “Cookie settings” in the footer.
7. Registration and B2B customer account
When you apply for B2B access, we process company name, legal form, contact person, business contact details, delivery and billing address, country, VAT identification number, website, business information and documents or details used to verify business status. The email address is verified, and access is granted only after personal approval.
Authentication, session and security data are processed to protect the account. This can include time, IP address, user identifier, failed login attempts and security logs. Passwords are stored only as secure hashes. Processing is based on Article 6(1)(b) GDPR and, for security logs, Article 6(1)(f) GDPR.
8. Orders, invoices and customer service
For an order, we process company, contact, delivery and billing data, products, quantities, prices, discounts, tax details, payment method, shipping data, order status and related documents. The accepted terms version and acceptance time are stored with the order. Support, complaints and returns can also involve messages, images and product, batch, delivery and invoice details.
Processing is based on Article 6(1)(b) GDPR. Commercial and tax records are retained under Article 6(1)(c) GDPR for the applicable statutory period.
9. B2B shop hosting
The protected B2B shop and operational platform are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes necessary server, connection and backup data as a processor. The legal basis is Article 6(1)(b) and (f) GDPR.
10. Shipping and payment
We provide the appointed carrier with recipient, address and shipment data required for delivery. A business email address or telephone number can be shared where needed for a delivery notification. Payments are made by bank transfer. We process invoice amount, payment status, booking date, reference and sender data supplied by the bank. Processing is necessary for the contract and statutory accounting obligations.
11. Newsletter
If you request the B2B newsletter, we process your business email address, subscription and confirmation time and technical evidence required to document consent. Delivery starts only after double opt-in confirmation. The legal basis is Article 6(1)(a) GDPR. You can withdraw consent through the unsubscribe link or customer account.
12. Microsoft Clarity in the protected B2B shop
The protected B2B shop may use Microsoft Clarity, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The service can process page views, interactions, technical browser and device data, approximate location and pseudonymous identifiers. Sensitive account, contact or payment fields must not be recorded in plain text.
Where consent is required to store or access information on a device, the legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. Clarity functions requiring consent must not be activated without valid consent. International transfers are handled under applicable legal mechanisms, including adequacy decisions or EU standard contractual clauses.
13. Your rights
Subject to the statutory conditions, you have rights of access, correction, deletion, restriction, data portability and objection under Articles 15 to 21 GDPR.
14. Complaints
You can complain to a data protection supervisory authority, in particular the authority for your habitual residence, place of work or the place of the alleged infringement.