Privacy Policy

v2.2 – effective 29 September 2026

We take the protection of your personal data very seriously and treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, contact us or visit us on social media, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect, what we use it for and how and for what purpose this happens when you contact us or when you visit/use

  • our www.klang.com website (Website);
  • our various social media pages;
  • any of the services accessible through the Website (the Services); and
  • our products sold, and software downloaded, from the Website or a 3rd party.

This policy also applies when you apply for work with us, as well as regarding professional information obtained from third party sources.

We are the controller of the personal data we process about you.

By visiting the Website, accessing one of our social media pages, using the Services, purchasing products or software and/or applying for work with us, you are accepting to the practices described in this policy.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

1. NAME OF THE PERSON RESPONSIBLE

The person responsible for processing data on this website is:

KLANG:technologies GmbH
Wespienstr. 8–10
52062 Aachen
Germany

phone: +49 (0) 241 89 0301 20
email: privacy@klang.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.). Please contact us if you have any questions or suggestions regarding this information, or if you wish to assert your rights under statutory data protection regulations.

2. CONTACT VIA EMAIL, PHONE OR MAIL

We collect and use information you provide when you send us an email or letter or share during a phone conversation, such as for example your name and phone number, email address, mail address etc. The collection and processing of these data is necessary to provide the requested services, send you an answer or information etc. We may also collect information you provide indirectly, for example by sending us logs of your device that may include real names you used to label your channels. This kind of data is not necessary for the support service and not processed in any direct way, but it may automatically be included in the information that is required for us to be able to adequately respond to your requests and inquiries.

We may also receive personal data when you report a security vulnerability or other security-related issue to us, including via a dedicated vulnerability reporting email address. Such information may include your name, email address, contact details and any personal data contained in your report or supporting materials. We process this information in order to receive, assess, investigate and manage reported vulnerabilities and security incidents, to communicate with the person reporting the issue, to remediate vulnerabilities and to comply with applicable legal and regulatory cybersecurity requirements, including requirements applicable under the EU Cyber Resilience Act.

What is the legal basis for the collection of your data?

Depending on the nature and purpose of your communication, the processing of your personal data is based on one or more of the following legal bases:

  • GDPR Art. 6(1)(b), where the processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract;
  • GDPR Art. 6(1)(c), where the processing is necessary for compliance with a legal obligation to which we are subject; or
  • GDPR Art. 6(1)(f), where the processing is necessary for our legitimate interests, in particular the security of our products, systems and services, the investigation and remediation of security vulnerabilities and incidents, and the protection of our business, users and other stakeholders.

Where required by applicable law, we will rely on GDPR Art. 6(1)(a) and obtain your consent.

What do we use your data for?

This data is mainly necessary to provide services or information requested by you or to carry out obligations from a contract between you and us or to comply with legal obligations.

Security Vulnerability Reporting

If you report a security vulnerability or other security-related issue to us, including via a dedicated vulnerability reporting email address, we process the information you provide in order to receive, assess, investigate and remediate the reported vulnerability or security incident. This may sometimes include personal data such as your name, email address and other contact details, as well as any personal data contained in the report or supporting materials. Reports received by email are processed using Microsoft 365 and may be accessed by members of our Security Team for the purpose of assessing and handling the reported vulnerability. Where required under applicable cybersecurity laws and regulations, including the EU Cyber Resilience Act, information relating to a reported vulnerability or security incident may be shared with the competent authorities, CSIRTs and/or ENISA. Such disclosure will be strictly limited to the information necessary for the respective purpose and legal obligation.

Where do we store personal data and for how long?

We use an external email provider to store all emails sent to us. Our provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland. You will find information on their privacy policy here: https://privacy.microsoft.com/en-gb/privacystatement. Microsoft stores our data on servers located in the UK.

When you contact us by phone, we collect your phone number and any other information you might provide during the call. We do not record phone calls.

When you contact us by letter, we will collect all information you provide in your communication with us.

Where personal data is transferred to us by email, phone, mail or through a vulnerability reporting channel, we process such data in accordance with this Privacy Policy and the applicable data protection laws. Where required, we will obtain your consent for specific processing activities.

We take all reasonably necessary steps to destroy or de-identify personal data when the information is no longer required for any purpose for which it may be used or disclosed by us and we are no longer required by law to retain the information.

How do we protect your personal data?

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect personal data relating to you, we cannot guarantee the security of such data transmitted to the Website; any transmission is at your own risk. Once we have received personal data relating to you, we use strict procedures and security features to try to prevent unauthorised access.

3. WEBSITE VISIT

When you visit our website and navigate its content, we may collect and process a variety of information.

Some data are collected when you provide it to us. This could be, for example, data you enter on a contact form or when ordering something from our web shop, or data you provide in communications sent to us by other means. The collection and processing of these data is necessary to provide the requested services or information, process your order and payment etc.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data and usage details such as the browser and operating system you are using or information on when and from where you accessed the page, or your IP address, for example when you download software. These data are collected automatically as soon as you enter our website, regularly only with your prior consent. An exception applies in cases in which your prior consent can not be obtained for practical reasons and the data processing it permitted by law.

When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools.

You will find more information below on plugins, tools and cookies we may use, on server log files, or on personal data we might collect when you use our contact form or our web shop, when you follow us on social media or when you subscript to our newsletter.

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “https://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

What is the legal basis for the collection of your data?

The processing of your data is either based on your consent – EU GDPR art. 6(1)(a) – or it is necessary for the performance of a contract to which you are a party or in order to take steps at your request to entering into a contract – EU GDPR art. 6(1)(b) -, or it is based on a legitimate interest – EU GDPR Art. 6(1)(f).

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website, to keep it safe and secure, to present it in the best way possible for you and your computer etc. Some data is necessary to provide services or information requested by you or to carry out obligations from a contract between you and us. Other data can be used to analyse how visitors use the site, to measure and understand the effectiveness of advertising, to administer the website and to carry out internal operations, such as data analysis, testing, research, statistical and survey purposes, etc.

Where do we store personal data and for how long?

Our website is hosted by cloudways, a hosting service provided by DigitalOcean LLC, 105 Edgeview Drive, Ste. 425, Broomfield, CO 80021, USA. Our hosting servers are located in Germany. You can find cloudways/DiGitalOceans’s privacy policy and further information about the hosting service on their website: https://www.digitalocean.com/legal/privacy-policy.

The personal data that we collect from you or that you provide may still be transferred to, and stored at, locations outside of the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or one of our suppliers. These staff may be engaged in, among other things, the fulfilment of services requested by you or the provision of support services etc.

As described in this privacy policy, we may also share personal data relating to you with other companies within our group or with third parties who are located overseas, for business purposes and operation, support and continuity purposes: For example, when we use IT service providers, data storage services or service providers for our web shop. Countries where personal data relating to you may be stored and/or processed, or where recipients of personal data relating to you may be located may have data protections laws which differ to the data protection in the your country of residence.

Some services process personal data relating to you for example in the USA. By consenting to the use of these services, you also consent to the processing of your data in the USA and other countries in accordance with EU GDPR art. 49(1). Since the implementation of the EU-U.S. Data Privacy Framework, the USA is considered to have a sufficient level of data protection according to EU standards. In particular, there is no longer any inacceptable risk that your data will be processed by US authorities for control and monitoring purposes, perhaps without the possibility of legal recourse.

By submitting your personal data, you accept that personal data relating to you may be transferred, stored or processed outside the EU. Where personal data is transferred outside the EU, the UK or the European Economic Area, we ensure that appropriate safeguards are in place to protect the data. These safeguards may include the use of standard contractual clauses or other legally recognised transfer mechanisms. We also take steps to assess whether the level of protection in the destination country is adequate. We will of course take all steps reasonably necessary and possible to ensure that your data is treated securely and in accordance with this policy.

We take all reasonably necessary steps to destroy or de-identify personal data when the information is no longer required for any purpose for which it may be used or disclosed by us and we are no longer required by law to retain the information.

How do we protect your personal data?

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect personal data relating to you, we cannot guarantee the security of such data transmitted to the Website; any transmission is at your own risk. Once we have received personal data relating to you, we use strict procedures and security features to try to prevent unauthorised access.

4. Data from Third-Party Sources

In addition, we may collect and process professional information such as job title, company details, and business contact information obtained by third-party business data providers and sales intelligence platforms that we use to identify and contact relevant business professionals.

This may include (but is not limited to) the collection of personal data relating to you from:

  • our distributors and other partners;
  • our customer support service provider, when you make a customer service inquiry;
  • someone you duly authorise to act on your behalf; and
  • recruiters we have retained and from referees you have provided in support of a job application.

These sources may include publicly available information and specialist data providers that supply business contact details. Where we obtain personal data from these sources, we will ensure that appropriate transparency information is provided to individuals in accordance with applicable data protection laws.

Where we obtain personal data from third-party sources, we may use that information to contact individuals in a business context for sales and business development purposes. In such cases, we will provide individuals with appropriate information about how their personal data is used, including the source of the data, at the point of first contact or within a reasonable period thereafter.

Where we rely on legitimate interests to process personal data for business development or marketing purposes, individuals have the right to object to such processing at any time. Where an objection is received, we will cease processing personal data for that purpose without undue delay.

The processing of your data is based on our a legitimate interest – EU GDPR Art. 6(1)(f) – especially in business and customer relationship development and marketing and sales outreach.

5. Artificial Intelligence (AI) and Automated Processing

Our employees and authorised users may utilise approved generative AI tools to assist with business activities where appropriate. Users are instructed not to enter special category personal data, confidential customer information or other restricted information into such tools unless expressly authorised and subject to appropriate technical and contractual safeguards.

We may use artificial intelligence (“AI”), machine learning and other automated technologies to support our business operations, including customer support, communications, content creation, data analysis, product development, information management, security monitoring and administrative functions.

Where appropriate, we may use AI-enabled functionalities within approved business systems to assist with operational activities. This may involve the processing of personal data contained in business communications and records, including emails, documents, meeting recordings, support requests and collaboration platforms, subject to appropriate safeguards and applicable data protection laws.

Where these technologies process personal data on our behalf, we ensure that appropriate contractual, technical and organisational safeguards are in place and that processing is conducted in accordance with applicable data protection laws.

We may share personal data with carefully selected third-party service providers who provide AI-enabled services to us. These providers act either as our data processors, processing personal data only on our instructions, or as independent data controllers where they determine the purposes and means of processing. 

We do not permit third-party AI providers to use personal data provided by us for the training or improvement of their general AI models unless:

  • we have informed affected individuals;
  • a lawful basis exists for such processing; and
  • appropriate safeguards are in place.

Where AI or automated technologies are used to assist in decision-making, meaningful human oversight will be applied where required by law. We do not carry out solely automated decision-making that produces legal effects or similarly significant effects on individuals unless permitted by applicable law and appropriate safeguards are implemented. 

If personal data is transferred internationally through our use of AI service providers, we will ensure that appropriate safeguards are applied in accordance with applicable data protection laws.

Where required by applicable law, we will provide additional information about specific AI-enabled processing activities at the point the personal data is collected or before such processing takes place.

6. COOKIES

Some of our web pages use cookies. Cookies are small files that are transferred to your computer’s hard drive through your web browser. Cookies do not harm your computer and do not contain any viruses, but help make our website more user-friendly, efficient and secure. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.

We may use the following types of cookies and similar technologies:

  • Required cookies: These are cookies that are necessary for our website to operate and cannot be switched off in our systems. You can set your browser to block these cookies, but some parts of our website might then not work.
  • Functional cookies: We use these to improve our website’s functionality and personalisation for our users. They may be set by us, or by third party providers whose services we use on our website.
  • Performance cookies: These cookies allow us to improve the way in which our website works, for example by ensuring that users can easily fing what they are looking for. The data collected by the cookies is aggregated across all visitors, so it is anonymous.
  • Advertising cookies: We may use these cookies to tailor advertising to your interests both on our website and other websites you visit. If you disable them, you might still see adverts, they just will not be tailored to you.

We use cookies to personalize content and ads, to provide improved services and social media features and to analyse our traffic. We may also use trusted third-party services that track this information on our behalf, and we may also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you have provided to them or that they have collected from your use of their services.

Our website sets required cookies automatically. For all other cookies, you have the option whether to consent to the setting of the cookies or not, and can access them at any time to change the settings. Please refer to our Cookie Declaration for more information.

Some cookies may be stored to your computer’s hard drive by third parties when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking. We do not have access to or control over cookies or other features that advertisers and third party sites may use, and the information practices of these advertisers and third party websites are not covered by our Privacy Policy. Please contact these third parties directly for more information about their privacy practices.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use are stored pursuant to GDPR art. 6(1)(f). The website operator has a legitimate interest in the storage of cookies to ensure an optimised service provided free of technical errors. All other cookies (such as those used to analyse your surfing behavior) require your prior consent pursuant to GDPR art. 6(1)(a). For this, we use a cookie control system operated by cookiebot.com allowing the user of this website to allow or disallow the use of cookies. You can find more information on cookiebot.com and the cookies we use further down in this privacy policy. There, you can also change or withdraw your consent and find more information on your current cookie settings, you consent-ID and the date of you latest consent. You will need this information for inquiries with cookiebot.com.

You can also choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You can do this through your browser settings. Since each browser is a little different, look at your browser’s Help Menu or consult the provider’s website/support to learn the correct way to modify your cookies. If you choose to turn cookies off, please note that this may disable or render unusable some of the features of this Website.

7. SERVER LOG FILES

The website provider may automatically collect and store information that your browser automatically transmits to us in “server log files”. These might be for example:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Date and time of the server request
  • IP address

These data will not be combined with data from other sources.

8. WEB SHOP

You may place orders in our web shop by providing the personal data required for processing your order. 
The data collected and stored by us for processing your order are: your name, postal address and email address, whether or not you are purchasing for a business and your VAT ID (where applicable), as well as your payment information according to your selected payment method (i.e. paypal or credit card details). All other information may be given voluntarily and is marked accordingly (such as your phone number). When you enter our shop, the website may use a geo location service to locate your country in order to state the purchasing price in the correct currency. The shop may also not yet operate in all countries, so the geo locating is necessary to determine whether or not you can purchase our products directly or will be asked to contact us for further information on how to proceed. Geo location information itself is not stored.

We store order data to record the order history. The order data are sent to you by email. When confirming an order by email, we do not reveal payment details, but only the selected payment method. Our general terms and conditions as well as information on payment methods and the cancellation policy are available on our website.
The legal basis for processing order data is Art. 6 (1) b) EU GDPR (performance of a contract).

After you have purchased your license key, the serial number of the key is stored together with your email address in order to provide support and respond to inquiries in the future.
The legal basis for processing data for product activation is Art. 6 (1) b) EU GDPR (performance of a contract).

Woocommerce

Our webshop uses the platform Woocommerce, a software provided by Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland.

When purchasing goods from our webshop, we will ask you to provide personal data including your name, email address, mail address and place and country of residence. If you purchase for a business, we will also ask for your business’ VAT ID where applicable. This data will be processed for the purpose of fulfilling the contract and providing you with the services or goods you ordered. The personal data will be stored on the provider’s servers and forwarded to us/to you when confirming your order. You can find more detailed information about Aut O’Mattic’s privacy policy here: https://automattic.com/privacy/

Your personal data provided when using or webshop is processed under EU GDPR art. 6(1)(b) – in order to perform a contract, i.e. to offer proper support for our customers or provide information for future customers.

We do not share your information without your permission.

After the contract has been fulfilled, we will store your name and email address as well as the software key code you purchased in order to be able to provide support and respond to inquiries in the future. All other necessary contract data will be stored for the mandatory retention period and will be deleted afterwards.

Stripe Payment Services

Our webshop uses a payment service offered by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. 

When purchasing goods from our web shop, we will ask you to provide your payment details, such as your name, your paypal address, credit card details etc. (depending on the payment method you selected). If you purchase for a business, we will also ask for your business’ VAT ID where applicable. This data will be processed for the purpose of fulfilling the contract and providing you with the services or goods you ordered. The personal data will be stored on the provider’s servers and forwarded to us/to you when confirming your order.

Your personal data provided when using or webshop is processed under EU GDPR art. 6(1)(b) – in order to perform a contract and to process your payment.

You can find detailed information about Stripe’s privacy policy on their website: https://stripe.com/de/legal/privacy-center

If you choose to save your payment information for secure 1-click checkout with Link (a payment service provider), you are asked to give additional information for this purpose (email address, phone number and full name). This is optional, however. You can find detailed information about Link’s privacy policy on their website: https://link.com/en-de/terms

When using your paypal account or your credit card, you may also want to check the privacy policy of PayPal (Europe) S.à r.l. et Cie, S.C.A. (here) or check your credit card company’s website for their privacy policy.

9. CONTACT FORM

Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. For our contact form, we use a service provided by WordPress.org. The contact details you choose to provide in the form are stored on their server and forwarded to us via email so as we can respond to your inquiry or request adequately. We do not share your information without your permission. You can find more information about wordpress.org and their privacy policy here: https://wordpress.org/about/privacy/

Your personal data provided via our contact form is processed under EU GDPR art. 6(1)(a) – based on your consent; under EU GDPR art. 6(1)(b) – in order to perform a contract, i.e. to offer proper support for our customers or provide information for future customers; or under EU GDPR art. 6(1)(f) – as we have a legitimate interest in providing support to our customers, respond to inquiries and keeping a record of our correspondence. You may revoke your consent at any time. An informal email making this request is sufficient (address see above).

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

10. NEWSLETTER

Newsletter data

If you wish to receive the newsletter offered on our website, we will need your email address as well as such information that allows us to make sure you are the owner of the provided email address and consent to receive the newsletter. Additional data are only collected on a voluntary basis. We will use these data exclusively to send out the requested information and will not disclose them to third parties.

All data you provide in the newsletter registration form will only be processed in accordance with GDPR art. 6(1)(a) – processing based on your consent. You can withdraw your consent to the storage of your data, email address as well as to the distribution of the newsletter at any time, for example by using the “unsubscribe” link included in every newsletter. A withdrawal will not affect the lawfulness of all earlier data processing.

We will store all data you have provided for the purpose of receiving the newsletter until you unsubscribe from the newsletter and will delete all data after you unsubscribed. This does not affect data we store for other purposes (for example email address for member website).

Mailchimp

This website uses MailChimp services to distribute newsletters. This service is operated by Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service to organize and analyze the distribution of newsletters. If you provide your data with the purpose of receiving the newsletter (such as your email address), these data will be stored by MailChimp in the USA.

Using MailChimp helps us to analyze our newsletter campaigns. When you open an email sent out via MailChimp, a file contained within the email (a so-called web beacon) will connect to the MailChimp servers located in the USA. This enables us to learn whether the newsletter mail was opened and which links were clicked. In addition, MailChimp will store technical information such as the time of receipt, IP address, type of browser and operation system. This information cannot be connected to the newsletter recipient. They are used exclusively for statistical analysis of the newsletter campaigns. The results of these analyses can be used to better adapt future newsletter to the recipients’ interests.

If you do not wish to be part of such an analysis by MailChimp, please unsubscribe from the newsletter. You can do so by following the “unsubscribe” link we provide in every newsletter. You can also unsubscribe from the newsletter directly on our website.

Your data will be processed only in accordance with your consent (GDPR art. 6(1)(a)). You may withdraw this consent at any time by unsubscribing from the newsletter. A withdrawal will not affect the lawfulness of all earlier data processing. We will store the data you disclosed in order to receive the newsletter until you unsubscribe from the newsletter and we will delete the data from our servers as well as from MailChimp servers after you unsubscribed. This does not affect data we store for other purposes (for example email address for member website). You will find more information on MailChimp’s privacy policy here: https://mailchimp.com/legal/terms/.

We have entered a Data Processing Agreement with MailChimp stipulating Mail Chimp’s obligation to protect our customers’ data and to not disclose them to third parties. You can find the full text of this agreement here: https://mailchimp.com/legal/data-processing-addendum/.

11. Email Tracking Technologies

Our email communications may contain tracking technologies, including tracking pixels and tagged links. We use these technologies for the following purposes:

  • Measure email deliverability and maintain mailing-list hygiene: to determine whether our emails are opened and to use the date of the most recent opening to identify inactive recipients, adapt sending frequency or stop sending emails where appropriate;
  • Measure and improve campaign performance: to determine whether and when our emails are opened, which links are clicked and how recipients interact with our communications, in order to assess and improve the performance of our campaigns;
  • Optimise our communications: to adapt the content, frequency or communication channel used based on recipients’ interactions with our emails; and
  • Personalise our communications based on your interactions where permitted by law: to use recipients’ interactions with our emails, including the emails they open and the links they click, to infer their preferences and interests and provide them with more relevant content and offers.

We will only use tracking technologies where you have given your prior consent except to the extent that we make any use of tracking technologies which, in accordance with applicable law, is exempt from the requirement for consent.

You may withdraw your consent to our use of email tracking technologies at any time by contacting us using the details provided at the bottom of this Privacy Policy, or by following the unsubscribe instructions included in our marketing communications.

At this time, due to the constraints of our third party email systems, it is not reasonably possible for us to send marketing communications without tracking technologies. This means that your withdrawal of consent to email tracking technologies will result in you being unsubscribed from future marketing communications.

12. ANALYTICS & ADVERTISING, PLUGINS & TOOLS

Google Analytics 4

This website uses Google Analytics 4 (“GA4”), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Ireland Limited is the provider for users in the European Economic Area, Switzerland and the United Kingdom. Data may also be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (see “Transfer to the USA” below).

Legal basis and consent

We use GA4 only with your consent, GDPR Art. 6(1)(a). You give or refuse consent in the cookie banner (Cookiebot) on your first visit. The “Statistics” category covers the analytics cookies and measurement described in this section; the “Marketing” category covers the advertising functions described under “Google Signals”, “Google Ads” and “User-provided data”. You can change or withdraw your consent at any time with effect for the future in the Cookie Declaration (section 17 below) via “Change your consent” or “Withdraw your consent”. Withdrawal does not affect the lawfulness of processing carried out before it.

Before you decide, and if you decline (Consent Mode)

We use Google’s Consent Mode. Until you have made a choice in the banner, and if you decline, GA4 sets no cookies and stores no identifier on your device. Your browser then sends Google only limited, cookieless signals: that a page was loaded, the time, the consent status, the page address without any user identifier, and basic browser information. Google uses these signals to estimate (“model”) aggregated figures such as the number of visitors. This modelled data is not linked to you and is not used for advertising.

After consent: what is collected

With your consent, GA4 stores cookies on your device (names and lifetimes are listed in the Cookie Declaration; the main cookies are _ga and _ga_*, lifetime up to two years). They contain a random identifier that lets Google recognise your browser on later visits. GA4 then records: the pages you view and how you reached them (referring website, campaign parameters); how far you scroll; clicks on links that lead away from our site; searches on our site and the terms entered; playback of embedded videos; downloads of files such as software, firmware and manuals, including the file name; whether you start and send one of our forms (contact form, newsletter sign-up, enquiry forms on our shop pages), but not what you typed into them; on our dealer pages, when you reveal a dealer’s contact details and whether you click that dealer’s phone number or e-mail address, together with the dealer’s company name; and technical information such as your approximate location (country, region, city, derived from your IP address), language, device type, operating system, browser and screen resolution. We do not send names, e-mail addresses, form content or other directly identifying data to GA4; a filter in your browser removes e-mail addresses and personal form fields from page addresses before anything is sent. The only exception is the hashed e-mail address described under “User-provided data” below.

IP addresses

GA4 does not log or store your IP address. It uses the address only at the moment of collection to derive your approximate location and then discards it. Requests from users in the European Union are received on Google servers located in the EU before any further processing.

Processing on our behalf

Google processes this data for us as a processor under the Google Ads Data Processing Terms (accepted on 8 September 2026). Google compiles reports for us about the use of our website and provides related services. We use these reports to see which content and products interest our visitors, to find and fix problems on the site and to measure our marketing. We have allowed Google to use the data in aggregated form to improve its modelling and to provide benchmarks (“modelling contributions and business insights”). No other data sharing with Google’s products, sales or support teams is enabled.

Modelled data in our reports

Our reports may combine data from cookies, data from Google Signals (below) and modelled estimates for visitors who declined consent, so that we obtain complete aggregated statistics. Modelled data does not identify you.

Google Signals (cross-device and demographic data)

We have enabled Google Signals. If you have consented to the Marketing category, are signed in to a Google account and have “Ads Personalization” switched on in that account, Google links the usage data from our website with your Google account. This enables cross-device reporting and remarketing and gives us aggregated demographic and interest information about our visitors (age group, gender, interests). We receive these statistics only in aggregated, pseudonymised form and cannot identify you. You can prevent this at any time by switching off Ads Personalization in your Google account (https://myadcenter.google.com) or by refusing the Marketing category in our cookie banner.

Google Ads: conversion measurement and remarketing

Our GA4 property is linked to our Google Ads account. With your consent to the Marketing category, GA4 passes conversion events (for example a sent contact form or a click on a dealer’s contact details) to Google Ads so that we can measure the effectiveness of our advertisements, and it adds your browser to remarketing audiences (for example “all visitors” or “purchasers”, kept for up to 540 days) that we can use to show you advertisements for our products on Google and partner websites. Without Marketing consent, no advertising cookies are set, no advertising identifiers are stored, and no personalised advertising takes place.

User-provided data

If you have consented to the Marketing category and enter your e-mail address in one of our forms, GA4 may detect it, hash it in your browser (a one-way pseudonymisation, so Google does not receive the address in plain text) and send the hashed value to Google, where it is used to improve conversion measurement and remarketing audiences. Google processes this data in accordance with its user-provided data policy.

Storage period

Event- and user-level data in GA4 is retained for 14 months; the period restarts with each new visit from the same browser. Aggregated reports are not subject to this limit and contain no personal data. The GA4 cookies remain on your device for up to two years unless you delete them earlier.

Transfer to the USA

Google may process the data on servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (listing checked on 24 September 2026), and Google’s data processing terms include the EU Standard Contractual Clauses as an additional safeguard for transfers to third countries.

Your options

You can refuse or withdraw consent at any time in the Cookie Declaration (section 13). You can stop GA4 from running in your browser with Google’s browser add-on (https://tools.google.com/dlpage/gaoptout).
You can manage advertising personalisation in your Google account (https://adssettings.google.com).
How Google uses data from websites that use its services: https://policies.google.com/technologies/partner-sites.
Google’s privacy policy: https://policies.google.com/privacy.

Facebook Pixel

For conversion tracking purposes, our website uses a visitor activity pixel provided by Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This allows us to track our website visitors’ behavior after they have clicked on a Facebook ad and been transferred to the providers website. This helps analyzing the ad’s efficiency for statistics and marketing purposes as well as optimizing future ad campaigns.

The collected data are anonymous for us as provider of this website, we cannot deduct any conclusions on the user’s identity. However, Facebook will store and process the data which possibly enables a connection to the user’s Facebook profile. Facebook may also use the data for its own marketing purposes in accordance with its privacy policy. This allows Facebook to place ads on its own website as well as outside of Facebook. We as the provider of this website are not able to influence the usage of such data. You can find more information on the protection of your privacy in Facebook’s privacy policy here: https://www.facebook.com/about/privacy/. You can also log into your Facebook account, go to “Ad settings” and deactivate the re-marketing application „custom audiences“: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

If you do not have a Facebook account, you can deactivate usage-based ads by Facebook on the website of the European Interactive Digital Advertising Alliance. Just visit https://www.youronlinechoices.com/, choose your country and select “Your ad choices”.

Google Tag Manager

Our website uses the Google Tag Manager (GTM) operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool enables us to manage various tracking codes (marketing tags, analytical tags) and other code snippets on our website in order to track interactions and send captured data to third parties like Google Analytics etc. In order to monitor and provide us with diagnostics about system stability, performance, and installation quality, GTM may collect some aggregated data about tag firing. This data does not include IP addresses or any measurement identifiers association with a particular individual. Other than data in standard HTTP request logs, all of which is deleted within 14 days of being received, and diagnostics data noted above, GTM does not collect, retain, or share any information about visitors to our website. Please click here to learn more about GTM Terms of Services and their Privacy Policy.

Akismet

Our website uses Akismet, a spam protection for WordPress provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Its core function is to protect comment and contact forms against spam by using algorithms. Automattic Inc. may collect personal data relating to you that are necessary to carry out this task, based on our legitimate interest to protect our website from spam – GDPR art. 6(1)(f). You can find detailed information on the kind of data collected and how it is processed in Automattic Inc.’s Privacy Notice here: https://automattic.com/privacy-notice/. More information on Akismet’s and Automattic Inc.’s privacy policy in general can be found here: https://automattic.com/privacy/

Some personal data relating to you collected by Automattic Inc. may be transmitted to and processed in the USA. Our web host has entered a so-called Data Processing Agreement with Automattic Inc. stipulating the company’s obligation to protect our customers’ data and to not disclose them to third parties. For any data that is transferred outside the EU, the parties have agreed to be bound by the Standard Contractual Clauses (in accordance with Decision (EU) 2021/914 of the EU Commission of 4 June 2021. You can find more information on Akismet and its GDPR compliance here: https://akismet.com/gdpr/.

Youtube

Our website uses plugins provided by the Google run website YouTube, operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Every time you visit one of our web pages including a YouTube plugin, the site will establish a link with YouTube servers, informing the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you will allow You Tube to match you surfing behavior to your personal account. You may suppress this by logging out from your YouTube account while surfing our website. We use YouTube in order to offer attractive online services, which is a legitimate interest under GDPR art. 6(1)(f). You will find more information on the processing of user data under the YouTube privacy policy here: https://www.google.de/intl/de/policies/privacy.

Google Forms

Our Support team uses Google Forms, a survey software tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary to Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA. Google Forms is not integrated in our website, but we might send you a link via email which will lead you directly to Google’s website and Google Forms Service. When entering information into one of the forms, you may provide personal data such as your IP address and your email address. We will process this information with your consent based on GDPR art. 6(1)(a). Such data collected via a Google Form will be used by us only for the purpose it was intended for (for example to send you an email if you requested us to contact you) and deleted after this purpose has been fulfilled.
Google might store the data provided in the form outside the EU, mainly in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. Go to https://www.dataprivacyframework.gov to get more information about this program. You can find more information about Google’s processing of personal data on their privacy webpage here: https://policies.google.com/privacy?hl=en-US

Vimeo

Our website uses plugins provided by the video portal Vimeo, operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Every time you visit one of our web pages including a Vimeo plugin, the site will establish a link with the Vimeo servers, informing the Vimeo server which of our pages you have visited. Vimeo will also receive your IP address. This applies even if you have no Vimeo account. The data collected by Vimeo will be transmitted to the Vimeo servers located in the USA.

If you are logged into your Vimeo account, you will allow Vimeo to match your surfing behavior to your personal account. You may suppress this by logging out from your Vimeo account while surfing our website. You will find more information on the processing of user data under the Vimeo privacy policy here: https://vimeo.com/privacy.

Wordfence

Our website uses services offered by the WordPress plugin Wordfence, operated by Defiant, Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA. We use this service to ensure our website’s security against attacks. Wordfence is a plugin for the WordPress content management system. It allows us to protect our websites from unauthorized access and attacks. Wordfence features include an endpoint firewall and a malware scanner. In case our website is attacked, Wordfence might collect the following data: visitor IP address, visitor proxy IP address, IP address of the device that triggered the audit log entry, URL accessed, complete HTTP header, HTTP request body, and filename if malware detected. Data is stored for a maximum of 90 days, unless data continues to be involved in malicious activity. Repeated attacks will lead to the IP address being added to a blacklist. Once attacks seize, the address is deleted from the list. We will use this service and process your data because to protect our website’s security as a legitimate interest based on GDPR art. 6(1)(f). Please visit Wordfence’s website for more information on their privacy policy, the Data Processing Addendum, their Terms of Services and the Standard Contractual Clauses provided to make sure data privacy and protection obligations that are part of the General Data Protection Regulation (GDPR) are met.

Cookiebot

Our website uses services operated by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (cookiebot.com). We use this service to ensure full functionality of our website and compliance with legal regulations regarding the use of cookies. In this context, your browser might transmit personal data to cookiebot.com. This is in the interest of providing a website service free of technical or legal errors which constitutes a legitimate interest pursuant to GDPR art. 6(1)(f). The data will be deleted as soon as the purpose of its collection has been fulfilled.

You can prevent cookiebot.com from collecting and processing your data by deactivation the execution of script code in your browser or by installing a script blocker in your browser. For more information about the cookies we might use, see our Cookie Declaration.

13. SOCIAL MEDIA

We maintain company profiles on the following social media platforms to allow us to offer further opportunities for you to learn about our company, our products and services and to engage with us and each other:

  • Facebook, operated by Meta Platforms Ireland Limited (Ireland, EU) (Meta)
  • Instagram, operated by Meta Platforms Ireland Limited (Ireland, EU) (Meta)
  • LinkedIn, operated by LinkedIn Ireland Unlimited Company (Ireland, EU) (LinkedIn)
  • TikTok, operated by TikTok Technology Limited (Ireland, EU) (TikTok)
  • X, operated by X Internet Unlimited Company (Ireland, EU) (X)

When you visit or interact with a profile on a social media platform, your personal data may be processed. Information associated with a social media profile also regularly constitutes personal data. This includes messages and statements made using the profile. Furthermore, certain information about your visit to a social media profile is often automatically collected, which may also constitute personal data.

When you visit our website, social media plugins may create a direct connection between your browser and their server. It will then be informed that you visited our site with your IP address. If you, for example, click Facebook’s “like” button while being logged into your Facebook account, Meta can link our website’s content to your Facebook profile. This will allow Meta to match your visit to our website to your user account. Please notice that we as provider of this website do not have any knowledge of the content of the transferred data nor of the way Meta or other social media platforms will make use of them.

When you visit our social media pages, certain information about you is collected and processed by the operators of these social media platforms who are solely responsible for the processing of this information. You can find more information about the processing of personal data and how to assert your rights on the operators’ websites here:

The operators of these social media platforms collect and process event and profile data and provide us with anonymised statistics and insights for our pages. These insights help us understand the types of actions people take on our page (so-called “Page Insights”). These Page Insights are generated based on certain information about people who have visited our page. This processing of personal data is carried out jointly by the social media operators and us. The processing serves our legitimate interest in evaluating the types of actions taken on our page and improving our page based on these insights. The legal basis for this processing is Article 6(1)(f) GDPR.

We cannot attribute the information obtained via Page Insights to individual user profiles that interact with our pages. We have entered into joint controllership agreements with the operators of the social media platforms, which define the distribution of data protection responsibilities between us and the operators. Details about the processing of personal data for the creation of page insights and the agreement concluded between us and the operators can be found at the following links:

We may also process information that you provided to us through our social media accounts, for example your username, contact details, or a message you sent to us. We carry out this processing as the sole controller and process this data based on our legitimate interest in contacting individuals who have made inquiries. The legal basis for this data processing is Article 6(1)(f) GDPR. Further data processing may occur if you have given your consent (Article 6(1)(a) GDPR) or if it is necessary for compliance with a legal obligation (Article 6(1)(c) GDPR).

We use a social-media management service provided by Ionosquare, 12 rue Armand Barbès, 87000 Limoges, France, that offers analytics and performance tools for our social media presence. This service might collect and process information you provide via one of our social media accounts, such as questions, comments etc., including your user name. You can find details about Ionsquare’s privacy policy here: https://www.iconosquare.com/privacy-policy and here: https://www.iconosquare.com/gdpr-and-iconosquare.

14. Use of KLANG software and hardware

KLANG:app and our KLANG-devices’ firmware do not collect and transmit any personal data. KLANG:app does not send any telemetry or analytical data; we do not measure any use or activity. When KLANG:app does an update check it might load updates from our website klang.com. During this process, our webserver will generate general server logs including IP address and a user agent with information on your device model, operating system and display language.

When you send us a support request, we might ask to provide logs which can contain personal information such as the clear names you use to label your channels etc. See section 1. above for more information.

15. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Retention periods may vary depending on the type of personal data and the purpose for which it is processed. Personal data used for marketing or business development purposes will be periodically reviewed, and where individuals do not engage or object to processing, their data will be deleted or retained only for suppression purposes.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We will keep your data for the mandatory retention period and will deplete it afterwards. We keep some information for longer such as information about product registrations so you can contact us about your product and information you post on our community forums. We may also retain your information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

16. YOUR RIGHTS AS A DATA SUBJECT

You can contact us at any time using the address given above and in the legal notice if you have any questions about issues of privacy and data protection.

Right to information

You have the right to access personal data held relating to you. To protect your privacy, we may take steps to verify your identity before taking any action in response to any request. You will not have to pay a fee to access personal information relating to you (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

Right to rectification and deletion

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection. To protect your privacy, we may take steps to verify your identity before taking any action in response to your request. You will not have to pay a fee to access personal information relating to you (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

You also have the right to request that your data be corrected, blocked, or deleted, if you think the data is inaccurate.

Right to withdraw your consent to the processing of your data

You may also have the right to object to our processing of your personal data or to restrict the processing of your personal data. Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email to us making this request is sufficient. The data processed before we receive your request may still be legally processed.

Right to file a complaint with regulatory authorities

If your are concerned about the way we are collecting or using your personal information and/or you detect or suspect a breach of data protection legislation, we ask you to raise your concern with us in the first instance (see contact details at the beginning of this page).

Alternatively, you can always contact/file a complaint with a regulatory authorities in accordance with GDPR Art. 77 (1); for example in the country of your residence, place of work or place of the alleged infringement (EU Member State, Iceland, Norway, Liechtenstein or UK). The competent regulatory authority for matters related to data protection legislation for our place of business is the data protection officer of the German state of North-Rhine Westphalia – Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westphalen (please see here for more information and contact details). You find information on all the EFTA EEA states’ regulatory authorities here; as well as on the UK Information Commissioner’s Office here.

Right to data portability

You have the right to have data which we process by automated means based on your consent or in fulfilment of a contract delivered to yourself or to a third party in a structured, commonly used, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

version history

  • v1.0 effective until 07 September 2026
  • v2.0 effective 08 September 2026
  • v2.1 effective 23 September 2026