DEStart a project

Privacy policy

We process as little data as possible. This page explains which data, why, and what rights you have.

1. Controller

Kerem Sinecek
KSTAQ
Eugen-Richter-Straße 11k
44359 Dortmund
Germany
Email: info@kstaq.de

2. Summary

  • This website sets no cookies and stores nothing in your browser’s local storage.
  • Fonts are served from our own server, not from Google.
  • Analytics with PostHog runs without cookies and without cross-device profiles.
  • Contact form details are only used to handle your enquiry.

3. Hosting and delivery

The website is delivered via the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data such as IP address, time, requested URL, browser and operating system to deliver the site and protect it from attacks. The legal basis is our legitimate interest in secure and fast delivery (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with standard contractual clauses is in place.

4. Contact form and email

When you contact us via the form or by email, we process your details (name, email address and optionally company, phone number, project type, budget range and message) to answer your enquiry and, if applicable, prepare a proposal. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. The details are stored in a database on our own platform Veltic. To notify us of your enquiry and to send you a confirmation, we use Amazon Simple Email Service (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg) with processing in an EU region; a data processing agreement with AWS is in place. The details are deleted once no longer needed, at the latest twelve months after the conversation ends, unless statutory retention periods apply.

5. Analytics with PostHog

To understand which content is helpful we use PostHog (PostHog Inc., 2261 Market St., San Francisco, CA 94114, USA) with data processing in its EU region (Frankfurt). PostHog is configured to set no cookies, store nothing in the browser and not store IP addresses. It records visited pages, referrer, coarse device information and clicks on buttons such as “Start a project”. There is no recognition across visits. The legal basis is our legitimate interest in improving our offer (Art. 6(1)(f) GDPR). Requests are routed to PostHog through our own domain.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future. An email to the address above is enough.

You may also lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

7. Last updated

October 2026

The German version of this policy is authoritative: Datenschutzerklärung.