We use cookies for website functionality and to analyse our advertising campaigns. Privacy Policy
Protecting your personal data is important to us. In accordance with Articles 13 and 14 GDPR, this policy provides comprehensive information about the nature, scope, purpose and legal bases of the processing of personal data in connection with this website, and about your rights.
The controller within the meaning of the GDPR is:
keep GmbH, Neuhofen 72, 4864 Attersee, Austria
Represented by the managing director Horst Eckstein
Email: [email protected] · Phone: +43 670 406 81 84
There is no statutory obligation to appoint a data protection officer and none has been appointed. For any data protection enquiries please contact the email address above.
We process personal data only insofar as this is necessary to provide a functioning website and our content and services, or where you have given consent. Processing takes place solely on the basis of Art. 6 GDPR: consent (lit. a), contract or pre-contractual measures (lit. b), legal obligation (lit. c) or legitimate interest (lit. f).
This website is provided on server infrastructure operated or commissioned by us. On every access, technically necessary access data (IP address, date/time, resource requested, referrer, user agent) are processed to ensure delivery, stability and security. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Images, videos and media are delivered via the Cloudflare content delivery network (Cloudflare, Inc., USA, or Cloudflare data centres) at media.kitchentokeep.com. Connection data including the IP address are processed for technical reasons. Transfer to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses.
We operate our own self-hosted analytics solution ("Zentrale", zentrale.kitchentokeep.com). When a page is accessed we process, server-side, the IP address, user agent, referrer, the page requested, device, browser and operating-system type and, where present, advertising parameters from the calling URL (in particular gclid, gbraid, wbraid, fbclid, msclkid, UTM parameters and Google Ads ValueTrack parameters).
With your consent (Art. 6(1)(a) GDPR) we set identity cookies (_k2k_vid, _k2k_sid, _k2k_track) to attribute sessions and returning visits and to evaluate marketing measures.
Without consent we set no cookie. Instead, an irreversible cryptographic hash (SHA-256) is formed from the IP address and user agent and serves as a pseudonymous, hourly-rotating identifier purely for reach measurement. Identification of individual persons is not possible; the legal basis is our legitimate interest in data-minimising reach measurement (Art. 6(1)(f) GDPR).
We use technically necessary cookies and — only after your consent via the cookie banner — cookies and comparable technologies for statistics and marketing. You can withdraw your consent at any time with effect for the future via the banner, or delete cookies in your browser.
Cookies used:
_k2k_consent — stores your consent status — duration 1 year — technically required.
_k2k_admin — suppresses internal test/QA tracking — duration 8 hours — technically required.
_k2k_vid / _k2k_sid / _k2k_track — visitor, session and campaign attribution — duration 2 years / 30 minutes / 90 days — only with consent.
NEXT_LOCALE — stores the selected language — session or 1 year — technically required.
Google and Meta cookies (e.g. _ga, _gcl_au, _fbp) — statistics/marketing — duration per provider — only with consent.
Via our forms (incl. contact, callback, appointment, colour-sample delivery, price information, enquiry, showroom visit, partner forwarding, configurator link) we process the data you enter (in particular name, email address, phone number, address and your message) in order to handle your request. The legal basis is contract initiation or performance (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (lit. f).
For processing we use the following processors: Resend (delivery of confirmation and internal notification emails; Resend, Inc., USA) and Pipedrive (CRM and lead management; Pipedrive OÜ, Estonia/EU). Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.
If you subscribe to the newsletter we process your email address to send the newsletter on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, e.g. via the unsubscribe link in every newsletter email or by emailing us.
For online appointment scheduling we embed the appointment scheduler of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When used, the data you provide and technical connection data are transmitted to Google. The legal basis is contract initiation (Art. 6(1)(b) GDPR). Any transfer to the USA is based on the EU-US Data Privacy Framework or standard contractual clauses.
Our online configurator is based on technology from Roomle GmbH (Austria) and is embedded on sub-pages. When actively used, technical connection data may be transmitted to Roomle. The legal basis is our legitimate interest in an interactive planning function and contract initiation (Art. 6(1)(f) and (b) GDPR).
Only with your consent (Consent Mode v2; Google services load only after approval) do we process usage data for statistics and marketing. This includes uploading conversions and offline conversions to Google Ads, including a hashed email address/phone number for attribution. Provider: Google Ireland Limited, Dublin, Ireland. Legal basis: Art. 6(1)(a) GDPR. Third-country transfer to the USA based on the EU-US Data Privacy Framework or standard contractual clauses.
Only with your consent do we transmit conversion events server-side — including hashed identifiers and, where present, fbclid — to Meta (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) to measure advertising effectiveness. Legal basis: Art. 6(1)(a) GDPR. Third-country transfer to the USA based on the EU-US Data Privacy Framework or standard contractual clauses.
Recipients of your data are exclusively the named processors and services, to the extent necessary. Any transfer to recipients in third countries (in particular the USA: Google, Meta, Resend, Cloudflare) takes place only as described and on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR (EU-US Data Privacy Framework, standard contractual clauses). No disclosure for purposes other than those stated takes place.
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Lead and contract-related data are retained in particular in accordance with tax and company-law retention periods (in particular §132 of the Austrian Federal Fiscal Code). Pseudonymous analytics data are stored only for as long as required for reach measurement. Cookies as per the durations stated above.
The website is delivered exclusively over an encrypted TLS connection (HTTPS). We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
No automated decision-making, including profiling, with legal effect within the meaning of Art. 22 GDPR takes place.
You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21 GDPR). You can withdraw consent given at any time with effect for the future.
To exercise your rights, a message to [email protected] is sufficient.
Without prejudice to other remedies, you have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
Where necessary for a contract or an enquiry, the provision of certain data is required in order to process the request or contract. Without this data we cannot answer your enquiry.
This privacy policy reflects the current status. Further development of the website or changed legal requirements may make an amendment necessary; the version published on this page at the time applies.