Privacy policy

The controller for this website is Kromicom UG (haftungsbeschränkt). Our address and contact details are in the imprint. Write to us there with any question about your data.

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes the technical data needed to deliver it and to protect the site against attacks: your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system.

Legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Cloudflare processes this data on our behalf under a data processing agreement. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR).

This website sets no cookies and uses no analytics or tracking tools. Fonts and scripts are served from our own domain, so your browser does not contact third parties while you read these pages. The only exception is signing up for the mailing list, described below.

If you sign up, your email address is sent to our newsletter provider Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France, which stores it on servers in the EU. You then receive an email asking you to confirm your address; only after you confirm are you added to the list (double opt-in). Brevo records the time of sign-up and confirmation and your IP address so we can prove your consent.

We use your address only to tell you about Kromi One, for example when the developer edition is public and when the crowdfunding campaign opens. Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email or by writing to us; this does not affect processing that happened before. We keep your address until you unsubscribe. Brevo processes it on our behalf under a data processing agreement.

You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on our legitimate interests (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77).