Datenschutz / Privacy policy

This notice explains how KLUGSYS handles personal data when you visit www.klugspice.com, send an enquiry or book a meeting.

Updated: 11 September 2026 · Applies to the KlugSpice public website.

1. Controller and contact

KLUGSYS UG (haftungsbeschränkt)
Oppenhoffallee 143, 52066 Aachen, Germany
Managing Director: Senbaha Karthikeyan Chandrabalan
Email: info@klugspice.com
Phone: +49 174 1641940

2. Website delivery through AWS

The public website is hosted on Amazon Web Services (AWS), using Amazon S3 for website files in the Europe (Frankfurt) region and Amazon CloudFront for delivery through its global network. Requests can involve your IP address, requested URL, request time, browser and device information, referrer and response status. We use this information to deliver pages, maintain availability, diagnose faults and protect the service against abuse. The legal basis is our legitimate interest in secure and reliable operation under Art. 6(1)(f) GDPR.

CloudFront standard access logging is disabled for this website. Other service operations may involve technical and security logs. Their retention depends on the service and the purpose of the record, including fault investigation, security incidents and legal obligations. Contact us for information about the settings applicable to your request. AWS explains its processing of customer content in its data privacy information; its privacy notice covers AWS's own processing.

3. Contact enquiries and email

When you select Submit request in our contact form, or Request a trial license in the form on our trial request page, the website sends the information you entered over HTTPS to our AWS contact service. Amazon API Gateway receives the request, an AWS Lambda function validates it, and Amazon Simple Email Service (SES) delivers the enquiry to our team. This submits your enquiry directly; it does not prepare a draft in your email application. Technical connection data may be processed to operate and protect this service.

Full name, email address, message and acknowledgement that you have read this notice are required to submit the form. Company, job title, phone number and industry are optional. We use the information to understand and answer your enquiry. The acknowledgement is not marketing consent. You can contact us by email instead and provide the information needed for your question.

Email alternatives open your email application. Your email provider and the sender's and recipient's mail services process messages as part of delivery. The legal basis for handling contractual or pre-contractual enquiries is Art. 6(1)(b) GDPR; for other requested business communication it is our legitimate interest under Art. 6(1)(f) GDPR. Sending an enquiry does not subscribe you to marketing.

Ordinary enquiries are retained while they are handled and, where necessary, for up to three years after the end of the relevant calendar year to establish, exercise or defend legal claims. Records subject to statutory retention duties are kept for the applicable period on the basis of Art. 6(1)(c) GDPR.

4. Booking a meeting with Cal.com

The Request a trial license includes a Cal.com calendar that loads when you open that page, alongside the enquiry form. It does not wait for a separate calendar button or for optional analytics consent. On other pages, the calendar stays unloaded until you select the booking action, which opens it in a dialog. Loading either calendar sends connection information, such as your IP address and browser information, to Cal.com; the booking service may use its own cookies or storage. An external-calendar link and email alternative are also available.

On pages with a separate booking action, choosing that action is your request to display the third-party service and your consent to the associated processing under Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG. The calendar on the trial request page loads automatically; visiting that page is not an analytics-consent choice. To avoid loading Cal.com, use the contact form on our contact page or email us without opening the trial request page or its calendar. Close a calendar dialog or leave the trial request page to stop further interaction. Reloading the trial request page loads Cal.com again; requests already sent cannot be undone.

If you make a booking, Cal.com processes the details you enter and makes the meeting information available to KLUGSYS. We use it to arrange and conduct the meeting under Art. 6(1)(b) GDPR for contractual or pre-contractual meetings, or Art. 6(1)(f) GDPR for other requested business meetings. The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States. Its privacy notice describes US processing, service providers, retention and transfer arrangements.

5. Cookies, analytics and local interactions

Google Analytics stays disabled until you explicitly allow optional analytics. You can reject analytics and still use the website. Open Cookie settings in the footer to change or withdraw your choice at any time. Withdrawal disables further analytics collection and removes accessible analytics cookies; it does not change the lawfulness of earlier processing.

Your preference is stored in your browser's local storage under klugspice-cookie-consent. The record contains the necessary/analytics choice, policy version, creation or update time, and expiry time. A choice is valid for 180 days; an expired or outdated record is discarded when the site reads it and you are asked to choose again. This storage remembers and applies your requested privacy choice. Its legal basis is § 25(2) no. 2 TDDDG and, for any personal data involved, Art. 6(1)(f) GDPR.

With your consent, Google Analytics helps us understand website visits and interactions. It can process a pseudonymous browser identifier, pages visited, referrers, approximate location, browser and device information, interactions and visit times. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics storage and personal-data processing are based on § 25(1) TDDDG and Art. 6(1)(a) GDPR. Advertising storage, advertising user-data consent and advertising-personalisation consent remain denied.

Analytics may set _ga and property-specific _ga_* cookies. We configure a maximum lifetime of 365 days (approximately 12 months), without extending expiry on each visit; browsers may impose a shorter limit. Analytics account data has its own property-level retention settings, separate from browser cookie expiry. Contact us for the setting currently applied. See Google's privacy notice and Google Analytics data retention information.

The walkthrough video, fonts and integration logos are served with the website. Interactive examples and the value calculator run in your browser; these features do not submit their inputs to KLUGSYS or save them to browser storage.

6. Recipients and international processing

Providers involved in website delivery, contact processing, email, the booking calendar and analytics you consent to may receive the data needed for those services. Data can also be disclosed where required by law. We do not sell personal data or use this website for automated decisions with legal or similarly significant effects.

AWS, Cal.com, Google and email providers may involve processing outside the European Economic Area, including in the United States. Where required, a transfer must have an applicable arrangement under Chapter V GDPR. The relevant recipient, service and account configuration determine that arrangement. Contact info@klugspice.com for information about the processing applicable to your data and a copy or description of the relevant safeguards.

7. Your rights

Subject to the applicable requirements, you may request access, rectification, erasure, restriction of processing or data portability; object to processing based on legitimate interests; and withdraw consent with effect for the future. These rights are described in Articles 15–21 and Article 7(3) GDPR.

Contact info@klugspice.com to exercise your rights or ask a privacy question. You may also lodge a complaint with a supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

8. Customer platform deployments

This public website is separate from customer deployments of the KlugSpice engineering platform. Deployment, access, retention and processing obligations for customer projects are defined in the applicable customer agreement and technical configuration. See our DPA information.