Privacy Policy

1. Who is responsible

The controller responsible for data processing on this website under the EU General Data Protection Regulation (GDPR) is:

First name Last name · Kraftdom
Street and house number, Postcode City, Germany
Email: hello@kraftdom.eu

We are not legally required to appoint a data protection officer. For any privacy question, write to the email address above.

2. The short version

• This website uses no cookies, no analytics and no advertising trackers.
• Fonts and images are served from our own web space. Your browser does not contact Google or other third parties when you visit.
• We only process personal data when you visit the site (technical server logs), email us, or sign up for our newsletter.
• We never sell your data.

3. Hosting and server log files

This website is hosted by Hostinger, UAB, Švitrigailos g. 34, LT-03230 Vilnius, Lithuania. The website is stored on servers in the EU (e.g. Lithuania / Netherlands / France).

Whenever you open a page, your browser automatically sends information that the server records in log files:

• IP address
• date and time of the request
• the page or file requested
• the website you came from (referrer)
• browser type and version, and operating system

We need this data to deliver the website, keep it stable and secure, and detect misuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log files are deleted automatically after 7–30 days (check your Hostinger plan), unless we need to keep a specific entry longer to investigate a security incident.

We have a data processing agreement with Hostinger under Art. 28 GDPR, so Hostinger only processes this data on our instructions.

4. Contacting us by email

If you email us, we process your email address, your name if you give it, and the content of your message so we can answer you. This includes questions about kits, workshops, institutional bundles or commissioned projects.

The legal basis is Art. 6(1)(b) GDPR where your message relates to a contract or a possible contract (for example booking a workshop), and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We delete your messages once your enquiry is fully dealt with and no longer needed. Where commercial or tax law requires us to keep business correspondence (usually 6 years for business letters and up to 10 years for accounting records under the German Commercial Code and Fiscal Code), we keep it for that period and then delete it.

Our email account is provided by your email provider's name and country (EU), which processes the emails on our behalf under a data processing agreement.

5. Newsletter

What we collect

When you sign up for our newsletter, we collect your email address and, if you choose one, which group you belong to (for example maker, educator or museum). We use this only to send you news about Kraftdom kits, workshops and the project, and to make our emails more relevant to you.

Double opt-in

After you sign up, we send you an email asking you to confirm your address. You only receive newsletters after you confirm. To be able to prove your consent, we store the time of sign-up and confirmation and the IP address used.

Legal basis and unsubscribing

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, without giving a reason, using the unsubscribe link in every newsletter or by emailing us. Withdrawal does not affect the lawfulness of processing before it.

After you unsubscribe, we delete your data from our newsletter list. We may keep your email address on a blocklist so that we don't accidentally email you again. This is in our legitimate interest in complying with the law (Art. 6(1)(f) GDPR).

Newsletter service provider

We send our newsletter with Brevo (operated by Sendinblue SAS, France; German branch: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin). Brevo stores your data on servers in the EU and processes it only on our behalf under a data processing agreement pursuant to Art. 28 GDPR. More information: Brevo privacy policy.

Opens and clicks

Our newsletters contain a small tracking pixel and tracked links. They tell us whether an email was opened and which links were clicked, so we can see which topics interest our readers. This is covered by your newsletter consent. If you don't want this, you can unsubscribe or disable image loading in your email program.

6. Links to other websites

Our website contains plain links to other services, such as Instagram and GitHub. These are simple links, not embedded plugins: no data is sent to these services until you click a link. Once you are on their site, their own privacy policy applies.

7. Your rights

You have the following rights regarding your personal data:

• access to the data we hold about you (Art. 15 GDPR)
• correction of incorrect data (Art. 16 GDPR)
• deletion (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR)

To use any of these rights, just email us. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

8. Further information

You are not required to give us any personal data. Without it, however, we cannot reply to your emails or send you the newsletter. We do not use automated decision-making or profiling.

This website uses HTTPS (TLS encryption) to protect data in transit. You can recognise it by the padlock in your browser's address bar.

We will update this privacy policy when our website or services change, for example when we open our shop or start taking workshop bookings online.