Privacy Policy

1. Scope and controller

This Privacy Policy applies to kontackt.org, the Kontackt support portal, and Kontackt websites, software, digital products, and professional services that link to this policy. A product-specific notice may supplement this policy where a product handles data differently.

Kontackt.org GmbH ("Kontackt", "we", "us", or "our") is the controller of personal data covered by this policy. Our contact details are:

2. Data we collect

The information we handle depends on how you interact with Kontackt:

• Account data: name, email address, password hash, account preferences, authentication settings, and account status.
• Support data: ticket category, subject, messages, replies, product or license details, troubleshooting information, and files you choose to attach.
• Order and service data: product or service purchased, order identifier, transaction status, invoice details, project communications, and contract records.
• Technical and usage data: IP address, browser and device information, operating system, referring page, requested pages, timestamps, diagnostic logs, and security events.
• Cookie and preference data: session identifiers, sign-in choices, language or interface preferences, consent choices, and analytics identifiers where you consent.
• Communications: emails, feedback, and other correspondence you send to us.

We collect data directly from you, automatically from your browser or device, and from payment processors, marketplaces, or business clients when needed to verify a purchase or provide support. Please do not include passwords, payment-card details, government identifiers, health data, or other sensitive information in a support ticket unless we specifically request it through an appropriate channel.

Payment-card details are entered with the applicable payment processor and are not stored by Kontackt in full.

3. How and why we use data

Where we rely on legitimate interests, we consider the necessity of the processing and its impact on your rights. You may object as described in section 9. We do not use support data for unrelated advertising, and we do not make decisions with legal or similarly significant effects based solely on automated processing.

4. Cookies and analytics

Cookies and local storage help the site function and remember choices. You can block or delete cookies in your browser, but necessary cookies are required for features such as signing in, maintaining a secure session, remembering consent, and managing support tickets.

We use Google Analytics only after you allow tracking cookies through our consent banner. Google Analytics may set _ga and related first-party cookies and receive usage and device information. You can refuse or withdraw consent through the cookie preferences control and can also clear cookies in your browser. Learn more about how Google uses information from sites that use its services.

5. When we share data

We disclose personal data only when needed for the purposes described above:

• to hosting, infrastructure, security, email, support, analytics, and other technology providers acting for us;
• to payment processors and marketplaces, such as Stripe or the marketplace through which you purchased a product, to process or verify transactions;
• to professional advisers, auditors, insurers, or parties involved in a business transaction, subject to appropriate confidentiality duties;
• to authorities or other parties where disclosure is required by law or reasonably necessary to protect rights, users, systems, or the public; and
• to another party when you ask us to share information or give valid consent.

Service providers may use data only under their agreement with us and applicable law. We do not sell personal data or share it for cross-context behavioural advertising.

6. International transfers

Some service providers may process data outside the European Economic Area. Where required, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with appropriate supplementary safeguards. You may contact us for more information about the safeguards relevant to your data.

7. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose collected, including:

• account data while the account is active and for a limited period afterward to complete closure, prevent abuse, or handle a request;
• support tickets and project communications while needed to provide support, maintain service history, resolve disputes, and meet contractual obligations;
• security and technical logs for the limited period needed to investigate incidents, maintain reliability, and prevent abuse;
• consent records for as long as needed to demonstrate and honour your choices; and
• invoices and core transaction records for at least seven years where Dutch tax law requires that retention.

When retention is no longer justified, we delete or anonymise the data. A deletion request may not apply to records we must retain by law or need to establish, exercise, or defend legal claims.

8. Security

We use technical and organisational measures designed to protect personal data, including encrypted transport, access controls, authentication safeguards, system maintenance, and backups where appropriate. No internet service is completely secure, so please use a strong, unique password and avoid submitting information that is not needed for your request.

If you believe your account or data may have been compromised, contact us promptly at service@kontackt.net.

9. Your privacy rights

Depending on applicable law, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• receive certain data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier lawful processing; and
• complain to a data protection authority.

To exercise a right, email service@kontackt.net. We may ask for information needed to verify your identity and will respond within the period required by law. If you are in the Netherlands, you may also lodge a complaint with the Autoriteit Persoonsgegevens.

10. Children

Kontackt's support portal and commercial services are not directed to children under 16, and we do not knowingly collect their personal data without appropriate authorisation. If you believe a child has provided personal data to us improperly, contact us so we can review and delete it where required.

11. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. We will publish the revised policy here, update the effective date, and provide additional notice where a change materially affects your rights or where law requires it.

12. Contact us

Questions, requests, or concerns about this policy can be sent to: