About us Our standards Team & Partners Service area Services Contact

Privacy policy

This English translation is provided for convenience. The German version is legally binding.

How we handle your data: on this website, for enquiries and when we approach businesses.

1. Controller

Johannes Kim
IT Consulting Kim (ITCK)
Annemarie-Ackermann-Straße 8
76669 Bad Schönborn, Germany
Email: johannes.kim@itck.eu
Phone: 0162 9227708

2. Your rights

With regard to your personal data, you generally have the following rights towards us:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You can contact us about this at any time using the contact details above.

3. Hosting and server log files

This website is hosted by an external hosting provider (host). When you visit this website, the host automatically collects information in so-called server log files that your browser transmits (including IP address, date and time of the request, browser type, operating system used and referrer URL). This data is not combined with other data sources and is automatically deleted after 14 days at the latest. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Contact form

If you send us inquiries via the contact form, your details from the form, including the contact details you provide there, are stored by us for the purpose of processing the inquiry and in case of follow-up questions. The form is technically sent via the service Web3Forms (Web3Creative, web3forms.com), which processes the data entered as a technical service provider and forwards it to us by email. We do not pass on this data without your consent. Further information on processing by Web3Forms can be found in the Web3Forms privacy policy. The legal basis for processing is Art. 6 (1) (b) GDPR (pre-contractual inquiry) or Art. 6 (1) (f) GDPR (legitimate interest in processing your inquiry). The data is deleted as soon as it is no longer required for the purpose for which it was collected.

5. Contact via WhatsApp

On this website we offer the option of contacting us directly via the messenger service WhatsApp (WhatsApp Ireland Limited, a Meta group company). The corresponding button merely links to WhatsApp. Simply visiting our website does not transmit any data to WhatsApp/Meta. Only when you actively click the WhatsApp button and start a chat does WhatsApp/Meta process the resulting data (e.g. phone number, chat content) in accordance with its own privacy notices. We have no influence on this processing outside our website. The legal basis is Art. 6 (1) (a) GDPR (consent through active use).

6. Use of Google Maps

On the contact page we offer a map preview of our location. The Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is deliberately not loaded automatically when the page is opened. Only when you actively click "Load map preview" is the map embedded and a connection to Google servers established. Your IP address may be transmitted to Google in the process. The legal basis is Art. 6 (1) (a) GDPR (consent through an active click). Further information can be found in the Google privacy policy.

7. Audience measurement with Vercel Web Analytics

We use the service Vercel Web Analytics (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA) for the anonymized, statistical evaluation of page views (e.g. number of visits, pages viewed, approximate origin, device used). The service works without cookies and without recognizing individual visitors across sessions; no personal user profiles are created. The data is evaluated exclusively in aggregated form. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in statistical evaluation and improvement of our website). Further information can be found in the Vercel privacy policy.

8. Cookies and local storage

This website does not use cookies for tracking or analytics purposes. Your setting for light or dark mode is stored, as technically necessary, only in your browser’s local storage so that your choice is kept on your next visit. This information does not leave your device and is not transmitted to us or third parties.

9. Fonts

We use the font "Montserrat" for body text and "Bodoni Moda" for headings. Both are served locally from our own server. No connection to external font servers (e.g. Google Fonts) is established, so no IP address is transmitted to third parties for this purpose.

10. Direct marketing by post and in person

We introduce our services, in particular website design, to businesses by letter or in person. This section informs the businesses we approach in this way about the processing of their data in accordance with Art. 14 GDPR.

  • Data processed: company name, where applicable the name of the owner or a contact person, business address, business phone number and email address, industry, publicly visible information about the online presence (for example a social media profile), and our notes on the course of the contact.
  • Source of the data: publicly accessible sources, namely OpenStreetMap (ODbL licence), business directories, public company profiles and search engine results.
  • Purpose and legal basis: presenting our services (direct marketing) on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is to make businesses aware of suitable offers (Recital 47 GDPR).
  • Channels: we do not send unsolicited advertising by email, messenger or phone. We only use these channels once you have contacted us or given your consent.
  • Recipients: the data is not sold and not passed on to third parties for advertising purposes. For research and for managing our contact list, we use software services as processors. Where data is transferred to countries outside the EU, this is based on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or on EU standard contractual clauses.
  • Storage period: if no business relationship arises, we delete the data no later than 24 months after the last contact. If you object, we only keep the company name and address on a suppression list so that we do not contact you again.

Right to object: you can object to the processing of your data for direct marketing at any time without giving reasons (Art. 21(2) GDPR). A short message to the email address above, by phone or by post is sufficient. After that, we will no longer use your data for advertising (Art. 21(3) GDPR).

11. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption for the transmission of confidential content, such as inquiries via the contact form. You can recognize an encrypted connection by the lock icon in your browser’s address bar.

12. Changes to this privacy policy

We update this privacy policy as soon as data processing on this website changes. Last updated: October 2026.