Legal notice & privacy
Impressum
Website operator
Kea Company GmbH
Weikamps Land 14
46395 Bocholt, Germany
Contact
security@keaar.com
+49 2871 4761196
Commercial register
Amtsgericht Coesfeld, HRB 14075
VAT identification number: DE285601983
Represented by
Sven Litke, Geschäftsführer
Responsible for editorial content (§ 18(2) MStV)
Sven Litke, at the company address above.
Website & enquiries
The controller is Kea Company GmbH, at the address above. For privacy questions or requests, email security@keaar.com.
Hosting and security
Our hosting provider, STRATO GmbH in Germany, processes IP addresses, request times, requested pages and browser information to deliver and protect this website. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in reliable operation and preventing misuse. STRATO retains visitor IP addresses for attack prevention for a maximum of seven days.
Contact forms use Cloudflare Turnstile to detect automated submissions. Cloudflare, Inc. processes IP addresses and device/browser signals for this security check (Article 6(1)(f) GDPR; legitimate interest in preventing spam and abuse). See the Turnstile Privacy Addendum.
Contact
We process the contact details and message you provide to answer your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) GDPR for other business correspondence, based on our legitimate interest in responding. The details marked as required in a form are needed to respond; without them, the form cannot be submitted.
Form submissions are backed up by WPForms Lite Connect for up to one year. Correspondence is retained until the enquiry and any resulting business relationship are concluded, and longer where statutory retention periods or the establishment, exercise or defence of legal claims require it.
Ask Kea
When an answer requires AI processing, your question and relevant conversation context are sent to OpenAI. We process this information to answer your request and prevent misuse (Article 6(1)(f) GDPR; legitimate interests in providing the requested answer service and protecting it).
Generated answers may be cached for up to one year. Pseudonymous identifiers used to limit misuse expire after two hours. OpenAI's standard API abuse-monitoring logs may retain inputs and outputs for up to 30 days, with longer retention for legal or safety reasons. Details are available in OpenAI's API data controls.
Recipients & international transfers
Data is available to the Kea personnel handling your request and the providers needed for hosting, security, enquiry delivery and backups, AI answers and newsletter delivery. Business email is processed by an email provider in Switzerland. Authorities or professional advisers may receive data where a legal obligation or legal claim requires this.
OpenAI, Cloudflare, WPForms and Google may process data in the United States. Transfers outside the EEA require a valid mechanism: an applicable European Commission adequacy decision, including the EU–US Data Privacy Framework for covered recipients, or Standard Contractual Clauses under Article 46 GDPR. You can request details and a copy of the applicable safeguards at security@keaar.com.
Your privacy rights
Subject to the GDPR's conditions, you can request access to your personal data, correction, deletion, restriction of processing and data portability. You can withdraw consent at any time for future processing.
Right to object: You can object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You can object to direct marketing at any time.
To exercise your rights or ask a question, email security@keaar.com. You may also complain to a data-protection supervisory authority, including LDI Nordrhein-Westfalen.