Privacy

We keep what we learn about visitors to a minimum. This site sets no cookies and stores nothing on your device. Below is everything that happens to personal data when you visit it, write to us or book a conversation.

Who is responsible

Kickler & Kickler GbR (Virtual Insight) Pavel Kickler & Prof. Dr. Jens Kickler John-Schehr-Straße 32, 10407 Berlin, Germany pavel.kickler@virtualinsight.de

We have not appointed a data protection officer, as the law does not require one for a company of our size.

Hosting and server logs

The site runs on our own servers, rented from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in its data centre in Falkenstein, Germany. We have a data processing agreement with Hetzner.

To deliver a page, the server has to process your IP address, the page asked for and your browser's request (Art. 6 (1) (f) GDPR). We keep no log of page requests. Error messages from the site go to a technical log that is limited in size (30 MB) and overwrites its oldest entries as new ones come in; we read it only to find and fix faults.

Anonymous usage statistics

To learn which parts of the site people read and use, we count page views and clicks with PostHog, run by PostHog Inc. on servers in Frankfurt, Germany (EU cloud). The counts go through our own domain.

We use PostHog without cookies and without storing anything on your device. Your IP address is not stored, and no profile of you is built: to tell visits apart, PostHog forms a code from the site, the IP address and the browser that changes every day and cannot be traced back to you. We do not record sessions or screens. The legal basis is our legitimate interest in improving the site (Art. 6 (1) (f) GDPR). We have a data processing agreement with PostHog that includes the EU Standard Contractual Clauses.

Writing to us

When you send us a note through the site, we receive your name, your email address and your message by email, so that we can answer. The note is delivered by Resend (Plus Five Five, Inc., USA), and our mailboxes are hosted by Google (Google Ireland Ltd.). The same applies when you email us directly.

We use the data only to answer you and keep it as long as the conversation needs, then delete it, unless we must keep it under commercial or tax law (Art. 6 (1) (b) and (f) GDPR). Data reaches the USA on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

Booking a conversation

The Conversation page shows a booking calendar from Cal.com, Inc., USA. When the page opens, your browser loads the calendar from Cal.com's servers, which then see your IP address and browser details. When you book, Cal.com receives your name, your email address, the time you chose and anything you add, sends the confirmation emails and creates the video call in Google Meet (Google Ireland Ltd.).

We use these data to hold the conversation and prepare for it (Art. 6 (1) (b) GDPR); showing the calendar rests on our interest in letting you book directly (Art. 6 (1) (f) GDPR). Data reaches the USA on the basis of the EU Standard Contractual Clauses. Cal.com's own privacy policy is at cal.com/privacy.

Fonts and pictures

The fonts are served from our own server; your browser does not contact Google or any other font service. The paintings come from the Museum Barberini: our server fetches and resizes them, so your browser never contacts the museum.

Your rights

You may ask us at any time what data we hold about you, and have it corrected, deleted or restricted, or handed to you in a common format (Art. 15 to 18 and 20 GDPR). Where we rely on our legitimate interest, you may object to the processing (Art. 21 GDPR). An email to the address above is enough.

You may also complain to a data protection authority. Ours is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.