Privacy Policy

This privacy policy explains which data we process when you visit our website kausalytics.com, contact us, or visit our company page on LinkedIn, for what purposes we do so, and which rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Kausalytics GmbH
Daimlerstraße 41
72074 Tübingen
Deutschland
Telefon: +49 641 991 311 0
E-Mail: info@kausalytics.de

2. Hosting and server log files

Our website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The servers are located in a data centre in Germany. Hetzner processes the data generated by your visit on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Each time you access our website, your browser automatically transmits the following data, which is stored in server log files:

• IP address of the requesting device
• Date and time of the request
• Name and URL of the accessed file
• Website from which access was made (referrer)
• Browser used, operating system and name of your access provider

We process this data to deliver the website, ensure its stability and security, defend against attacks and analyse errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website. This data is not merged with other data sources. Log files are deleted automatically after seven days, unless a security incident requires longer retention for investigation.

3. Contact by email

If you contact us by email, we process the data you provide (in particular your name, email address and the content of your message) in order to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your enquiry. Our email mailboxes are operated by goneo Internet GmbH, Dresdener Straße 18, 32423 Minden, Germany, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. We delete your data once your enquiry has been fully dealt with and no further communication is expected, unless statutory retention obligations require otherwise. We retain business correspondence for up to six years and accounting records for up to ten years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

4. Company page on LinkedIn

We operate a company page on LinkedIn (https://www.linkedin.com/company/kausalytics/) to provide information about Kausalytics and to engage with interested parties. LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When you visit our LinkedIn page, LinkedIn processes your personal data under its own responsibility, such as your usage data and, if you are logged in, your profile data. Details are set out in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy . LinkedIn provides us, as the page operator, with anonymised statistics on the use of our page (Page Insights), for example the number of views, followers and interactions, as well as the industries, job functions and regions of visitors. We and LinkedIn are joint controllers for the processing of your data to create these statistics (Art. 26 GDPR). The allocation of responsibilities is governed by LinkedIn's Page Insights Joint Controller Addendum: https://legal.linkedin.com/pages-joint-controller-addendum. Under this addendum, LinkedIn is primarily responsible for providing you with the information required under Art. 13 GDPR and for fulfilling your data subject rights with regard to Insights data. We ourselves receive only aggregated statistics that do not allow conclusions to be drawn about individual persons. If you interact with us via LinkedIn, for example by sending messages, commenting or following our page, we process the resulting data in order to communicate with you. The legal basis for operating the page and for this communication is Art. 6(1)(f) GDPR. Our legitimate interest lies in presenting our company to the public and communicating with interested parties and customers. LinkedIn also transfers personal data to LinkedIn Corporation in the USA. This transfer is safeguarded by LinkedIn's certification under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission pursuant to Art. 45 GDPR) and by the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). You may exercise your data subject rights against both LinkedIn and us. As only LinkedIn has full access to your data, we recommend contacting LinkedIn directly with regard to processing carried out by LinkedIn. You can manage your LinkedIn privacy settings here: https://www.linkedin.com/psettings/ .

5. Recipients and transfers to third countries

Within our company, only those persons who need your data to fulfil the purposes described above have access to it. Beyond that, we disclose data only to the following recipients:

• Processors that support us in operating the website and handling email communication (Hetzner Online GmbH and goneo Internet GmbH, see above), on the basis of agreements pursuant to Art. 28 GDPR
• Public authorities and courts where we are legally obliged to do so
• Advisers bound by professional secrecy, where this is necessary in an individual case

All data processing in connection with our website takes place exclusively in Germany. Transfers to third countries occur only in connection with our LinkedIn page, as described in section 4.

6. Your rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR, see section 8)

Should we base any processing on your consent in the future, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, simply send an email to info@kausalytics.de. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is based on Art. 6(1)(f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where your data is processed for direct marketing purposes, you may object to such processing at any time without giving reasons. Please send your objection to info@kausalytics.de.

8. Obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data. However, the website cannot be delivered without the data that is technically generated when you access it, and we cannot respond to an enquiry without your contact details.

9. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10. Data security

Our website is delivered using TLS encryption (HTTPS). We apply technical and organisational measures to protect your data against loss, manipulation and unauthorised access, and we keep these measures in line with the state of the art.

11. Changes to this privacy policy

We will update this privacy policy whenever our data processing or the legal situation changes. The version published on this page applies.

Last updated: September 2026