Privacy Policy

We take the protection of your personal data very seriously. We treat your personal data confidentially and following the legal rules of the relevant data protection laws, particularly the European General Data Protection Regulation (GDPR) and this privacy policy.

This privacy policy covers the use of our digital content, including our social media profiles, via PC, smartphones, tablets, and all other internet-enabled mobile devices.

The digital content may contain links to other websites of third-party service providers to which this data protection declaration does not apply.

1. Controller / Responsible party

The controller / responsible party for processing your personal data is

Katulu GmbH An der Alster 6 20099 Hamburg hello@katulu.io.

If you have any questions regarding data protection at our company, please write to us at the postal address above, with the subject of “Data Protection” or at the provided e-mail address.

2. Purpose of Personal Data Processing

2.1 Data Processing for the Provision of Contractual Services

You can send us inquiries about commissioning contractual services via our website and the contact details stored there. Provided that personal data is transmitted to us by you in this way or by other means when inquiring about commissions, we process your data to answer your inquiries, for the execution of the order/contract as well as for invoicing. For this, we require your (company) name, your address data, as well as your e-mail address. Without this data, we cannot execute the contract with you. Additionally, we collect further data within the scope of the contract initiation or contract execution, which is not absolutely necessary for the contract execution, but which serves the purpose and is beneficial for it.

In the case of suppliers/service providers, we process the personal data provided by them this way or in another manner for the purpose of ordering and commissioning services on our part, as well as to pay for the services provided. For this, we require the name, address data, and account data. Depending on the service/contract, we may also require additional data, which we will then inform you about on a case-by-case basis. If you provide further data, we will also use this for the aforementioned purposes, but such data is not required for the conclusion of the contract.

The legal basis for data processing is Art. 6 (1) p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

2.2 Data Processing for Communication with You

In addition to the contractual data, we process the communication data provided by you (names of contact persons, telephone number, fax number, e-mail address) to contact and communicate with you. Personal data that you provide to us by e-mail, post, or telephone will only be processed for correspondence with you or only for the purpose for which you provided us with the data.

The basis for data processing is Art. 6 (1) p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

2.3 Cookies

We may use cookies on some of our web pages to offer you website-specific services, to recognize you if you visit our website again, and/or to adapt our services to your personal preferences among other things.

Cookies are small text files that are stored on a visitor’s computer and contain data about the respective user to provide access to various functions. Session cookies are used on our website. A session cookie is temporarily stored on the computer you are using while you navigate through the website. A session cookie is deleted as soon as you close your Internet browser or as soon as your session has expired after a certain period. Storing a cookie ensures that you do not have to repeatedly enter your personal settings and preferences each time you visit. This saves you time and makes the use of our website more comfortable for you. The cookie is only used to improve usability.

Most browsers accept cookies automatically – so if you wish to suppress the use of cookies, you may need to actively delete or block cookies, or prevent the storage of cookies through a setting in your browser software. Please note, however, that if you refuse the use of cookies, you may continue to visit our website, but some features may be impaired in their operation.

We may work with third parties on some of our websites, which means that when you visit such a website, cookies from partner companies may also be stored on your hard drive (third-party cookies). We provide the information below about the use of such cookies and the scope of the data collected in each case.

We use cookies that are required to enable the provision of the services owed by us or to ensure the functionality of our services. The data processing in this regard is then carried out based on Art. 6 (1) p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures, or according to Art. 6 (1) p. 1 lit. f GDPR, which permits data processing to protect the legitimate interests of the controller, unless the interests or the fundamental rights and freedoms of the data subject outweigh the interest of the controller in the data processing. Our interest then lies in ensuring the functionality of our website.

For the use of other, non-essential cookies, we may obtain your consent. The data processing is then based on your consent according to Art. 6 (1) p. 1 lit. a GDPR. You can revoke or change your consent at any time. The legality of the data processing already performed remains unaffected by the revocation. Change your consent Revoke your consent

2.4 Google Analytics

On some of our websites, Google Analytics may be used, integrated via the Google Tag Manager, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”), provided that you have consented to this data processing. Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

Since a specially programmed tool is activated on our website, your IP address is transmitted to Google. On behalf of the operator of this website, Google will use all transmitted information to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

In connection with Google Analytics, we may also use the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown below.

The data transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when visiting this website: Deactivate Google Analytics tracking and all other tracking on this website.

For more information on terms of use and data protection, please visit https://policies.google.com/terms?hl=en or https://policies.google.com/?hl=en&gl=en.

Important in connection with data processing in the U.S.: The data protection standard in the U.S. is insufficient according to the European Court of Justice and there is a risk that your data will be processed by U.S. authorities, for control and monitoring purposes and possibly without any legal remedy.

The storage of Google cookies and the evaluation for statistical purposes is based on your consent according to Art. 6 (1) p. 1 lit. a GDPR in conjunction with. Art. 49 (1) p. 1 lit. a GDPR. You can revoke your consent at any time. You can declare the revocation by clicking on the aforementioned opt-out link, or by sending a message to the contact details mentioned in section 1 (e.g. e-mail, letter). The legality of the data processing operations already performed remains unaffected by the revocation.

2.5 Google Remarketing Tags

On some of our websites, we may use Google Remarketing Tags if you have consented to their being processed. They are Google services that use cookies, which are stored on your computer and allow an analysis of your use of the website. The information collected by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States, as explained in the previous paragraph. Google will use this information to evaluate your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where legally required or where such third parties process the information on Google’s behalf. Third-party providers, including Google, place advertisements on websites on the Internet. Third-party vendors, including Google, use stored cookies to serve ads based on a user’s previous visits to this website. Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the Google advertising deactivation page. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can object to the collection and storage of data at any time with effect for the future. Further information on Google’s terms and conditions can be found here.

Alternatively to the browser plugin or while using browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection of data by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you will have to click this link again): Deactivate Google Analytics tracking and all other tracking on this website.

For more information on terms of use and data protection, please visit https://policies.google.com/terms?hl=en or https://policies.google.com/?hl=en&gl=en.

Important in connection with data processing in the USA: the data protection standard in the USA is inadequate according to the European Court of Justice and there is a risk that your data will be processed by US authorities, for control and monitoring purposes and possibly without any legal remedy.

The storage of Google cookies and the evaluation for statistical purposes is based on your consent according to Art. 6 (1) S. 1 lit. a GDPR in conjunction with. Art. 49 (1) p. 1 lit. a GDPR. You can revoke your consent at any time. You can declare the revocation by clicking on the aforementioned opt-out link, or by sending a message to the contact details mentioned in section 1 (e.g. e-mail, fax, letter). The legality of the data processing operations already performed remains unaffected by the revocation.

2.6 Tracking using Hubspot

Some of our websites use the web analytics service HubSpot of the software company of the same name from the USA with a branch in Ireland, HubSpot, 2nd Floor 30 North Wall. Hubspot uses "cookies" to analyze your use of the website, which allow us to optimize our online offering and evaluate usage. For this purpose, the information generated by the cookie about the use of this website is stored on Hubspot's server.

According to Hubspot, the IP address is only recorded and stored in anonymized form. Visitors to the website are not personally identified. Hubspot cookies remain on your terminal device until you delete them.

Hubspot stores this information in a pseudonymized user profile. The information is neither used by Hubspot nor by us to identify individual users nor is it merged with other data about individual users.

For more information, please refer to the Terms of Use and Privacy Policy of HubSpot Inc. accordingly at http://www.hubspot.com/terms-of-service and at http://www.hubspot.com/privacy-policy.

The processing of personal data on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO in conjunction with. Art. 49 para. 1. p. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. You can declare the revocation by a corresponding setting in our Consent Management Tool or by sending a message to the contact data mentioned under point 1 (e.g. e-mail, fax, letter). The legality of the data processing operations already carried out remains unaffected by the revocation.

2.7 LinkedIn Page Analytics, Ads and Insight Tags

We operate a company page on the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”) and are provided with so-called page analytics by LinkedIn regarding our services. We are jointly responsible with LinkedIn for this operation of the LinkedIn company page within the meaning of Art. 26 GDPR.

For the nature and scope of the information provided to LinkedIn, the related purposes of data processing by LinkedIn, its lawfulness, as well as information on how to exercise your rights, please refer to LinkedIn’s privacy policy at the URL https://www.linkedin.com/legal/privacy-policy and the joint responsibility agreement, which can be found at the URL https://legal.linkedin.com/pages-joint-controller-addendum.

LinkedIn Ads (https://business.linkedin.com/de-de/marketing-solutions/ads) offers the option of placing target group-specific ads on LinkedIn. The data processing is carried out for the purpose of conversion tracking, advertising, remarketing, as well as optimizing our advertisements and page activities. For this purpose, a cookie is set and pixels and ad tags are used. The following data is processed for this purpose: IP address, User-Agent data, Device ID, Search terms, Articles viewed, Pages visited, Ads viewed, Followers, Connections, Videos viewed, Profile information, Advertising identifier, Operating system information, Device information.

Page Analytics (https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview) is aggregated data that allows us to gain insight into how users interact with our site. The generation and provision of these page analytics are the responsibility of LinkedIn, we have no control over it. LinkedIn assumes all obligations under the GDPR regarding the processing of insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of our data processing of the data provided by LinkedIn is the statistical evaluation of the use of our company page. This enables us, for instance, to determine preferred visiting and posting times of our users and to use them for the optimization of our posts and our company page. Additionally, we process personal data made publicly available by you on LinkedIn (e.g., clear names in the user profile) as well as data directly related to activities on our company page (e.g., contributions, posts, likes, marks), including for communicating with you.

On some of our Services, we may use the conversion tracking and retargeting tool LinkedIn Insight Tags. This involves placing a cookie in your browser that allows us to track the behavior of visitors to our online activities when they have been directed to our offers by clicking on a LinkedIn ad. This allows us to evaluate the effectiveness of our LinkedIn ads for statistical and market research purposes and to optimize future advertising measures. The data collected in this process is anonymous to us and we cannot draw any conclusions about the identity of the users who may have been recorded in this way. However, the data is stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes. Through the option of retargeting, LinkedIn enables the placement of advertisements outside of our services. This use of the data cannot be influenced by us as site operator. If you are a member of LinkedIn, you can control the remarketing function in your account settings or deactivate it by setting an opt-out cookie (see below). We have an interest in the analysis of user behavior to optimize both our offer and, if applicable, advertising for our offer.

If you do not agree to the storage and use of your data in the context of the LinkedIn Insight Tag, you can deactivate the storage and use here. By doing so, an opt-out cookie will be stored in your browser, which prevents LinkedIn from storing usage data. If you delete your cookies, the opt-out cookie will also be deleted. The opt-out must then be reactivated when you visit our site again. Deactivate LinkedIn Insight Tag and all other tracking on this website.

The basis for the aforementioned data processing is Art. 6 (1) p. 1 lit. a GDPR. If you have given your consent to LinkedIn, you can revoke this consent at any time with effect for the future. If you have given us consent in this regard, you can revoke this consent at any time with effect for the future.

Otherwise, the basis for our data processing is Art. 6 (1) p. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest lies in providing content and communication with LinkedIn users and in improving the reach and effectiveness of our posts.

Please assert your rights to information, correction, deletion, restriction of processing, and data portability of your stored Insights data against LinkedIn, as LinkedIn has assumed the corresponding obligations:

LinkedIn Ireland Unlimited Company Wilton Place Dublin 2 Ireland Privacy policy https://www.linkedin.com/legal/privacy-policy Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

2.8 Use of SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

2.9 Data Processing to Protect Legitimate Interests

We also process your data if it is necessary to protect legitimate interests of ours or of third parties. This may be the case, in particular, to ensure IT security and IT operations, especially in the case of support requests, to be able to trace and prove facts in the event of legal disputes, for market and opinion surveys, to statistically evaluate the use of our website, for advertising other products from us or our cooperation partners.

The basis for the data processing is Art. 6 (1) p. 1 lit. f GDPR. We have a legitimate interest in the data processing listed above. Our interest is optionally in IT security, in ensuring support for better usability of our website or in our legal interest or in our evaluation and advertising interest.

2.10 Data Processing for Advertising Purposes

We use the data you provide to send you recommendations and information about our products and services by mail.

Additionally, we use your e-mail address to send you information about our company’s products and services by e-mail if you have already purchased products or services from us. You will receive these recommendations from us regardless of whether you have subscribed to a newsletter. We want to send you information in this way about similar products and services from our range that might interest you based on your most recent purchases/orders from us. We strictly comply with the legal requirements in this regard.

If you no longer wish to receive recommendations on products or services or to receive advertising from us in general, you can revoke your consent at any time. A notification in text form to the contact data mentioned under point 1 (e.g. e-mail, fax, letter) is sufficient for this purpose.

The basis for data processing is Art. 6 (1) p. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. Our interest is commercial and lies in the promotion and sale of our products and services.

2.11 Log Files

Each time our websites are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following data: Date and time of access, name of the page accessed, IP address, referrer URL (origin URL from which you came to the web pages), the amount of data transferred, as well as product and version information of the browser used and the operating system of your PC. The IP addresses of the users are deleted or anonymized after the termination of use. Any other evaluation of the data, except for statistical purposes and then basically in anonymized form, does not take place. Neither any personal “surfing profiles” nor the like are created or processed.

The basis for data processing is Art. 6 (1) p. 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject are not overridden. We have an interest in the prosecution, prevention, and punishment of unlawful use of our offer.

2.12 Data Processing for the Fulfillment of Legal Obligations

Furthermore, we process your data for the fulfillment of legal obligations (e.g. regulatory requirements, commercial and tax law retention, and verification obligations).

The basis for the data processing is Art. 6 (1) p. 1 lit. c GDPR, which permits the processing for the fulfillment of a legal obligation.

3. Categories of Recipients of Personal Data

Your personal data will only be disclosed or otherwise transferred to third parties if this is necessary for the purpose of contract processing or billing, or if you have previously consented, or if there is a legal basis for the disclosure.

Your contractual and communication data will be forwarded to the responsible office and the responsible employees within our company in each case to answer your inquiries, for communication or for the execution of the order, or for the fulfillment of contractual obligations. The basis for this is again Art. 6 (1) p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

If it is necessary for the purpose of contract processing or for the provision of our services, data is forwarded to partner companies that have been commissioned to support contract processing. Our partners are obliged to comply with and observe the provisions of data protection law. Our partners are not permitted to use the data for any other purpose than the processing of the contract. The basis for this is Art. 6 (1) p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Your personal data will otherwise only be disclosed or transferred to third parties outside our company if this is necessary for the purpose of contract processing or billing, or if you have given your prior consent, or if there is a legal basis for the disclosure.

Whenever we use the services of third parties for the execution and handling of processing operations, we will comply with the provisions of the General Data Protection Regulation. Service providers that support us in providing our service to you are hosting providers, email service providers, IT service providers, software (SaaS) providers.

4. Period of Data Storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes unless temporary storage is still necessary. For example, we store your data based on legal obligations to provide proof and to retain data, which result, among other things, from the German Commercial Code and the German Fiscal Code. The storage periods are then up to ten full years. Additionally, we retain your data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

5. Data Security

Your personal data is transmitted securely on our website using encryption. We use the encryption protocol TLS (Transport Layer Security) for secure data transmission on the Internet. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. Furthermore, we secure our websites and other systems by technical and organizational measures against loss, destruction, access, modification, or distribution of your data by unauthorized persons. Our security measures are continuously improved in line with technological developments. However, we would like to point out that data transmission on the Internet may have security gaps and cannot be completely protected against access by third parties, which applies in particular and especially when communicating by e-mail. We are therefore happy to offer you the option of using PGP encryption for e-mail communication; please feel free to contact us in this regard.

6. Data Subject Rights

Within the framework of the applicable legal provisions, you have the right at any time to receive information free of charge about your personal data stored by us, its origin and recipients, and the purpose of data processing and, if applicable, the right to have this data corrected or deleted. To this end, as well as for further questions on the subject of personal data, you can contact us at any time using the contact details listed in section 1. You may also be entitled to a right to restrict the processing of your data and a right to receive the data you have provided in a structured, common, and machine-readable format. If you have given us consent to process personal data for specific purposes, you may revoke your consent at any time with effect for the future. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. Additionally, you have the option of contacting a data protection supervisory authority (Right of Complaint).