LEGAL INFORMATION
Privacy notice
Last updated:
Controller
TwelveSuite UG (haftungsbeschränkt), Reinshagener Str. 40, 42857 Remscheid, Germany. Represented by Managing Director Darko Yovanoski.
For privacy requests, contact:
Scope
This notice covers the Kauis website, installation enquiries and the optional update list. It does not describe the separate smart-home software, household devices or remote-access service.
In a local preview, forms labelled “Preview form” do not transmit or save entries. On the hosted website, enabled forms send your details only when you submit them.
Hosting and security
The public website uses Cloudflare Workers and static hosting, provided by Cloudflare, Inc., USA. To deliver and protect the website, Cloudflare processes connection and request data, including IP addresses, requested URLs, timestamps and browser information. Our legitimate interests are reliable delivery and protection against abuse (Article 6(1)(f) GDPR).
We do not enable application request logging or log form contents. Short-lived rate-limit counters use a daily changing hash derived from the IP address to limit abusive submissions. These counters are not stored with form records. Cloudflare also processes operational and security data as described in its privacy information.
Installation enquiries
We process your name, email address, project type, goals, selected product interest, language and submission time. Equipment, tablet, apartment count, region, server and phone details are optional. We use these details to assess and respond to your enquiry and prepare a possible offer.
The legal basis is Article 6(1)(b) GDPR for steps requested before a possible contract. For other business enquiries, including contact through a company representative, it is Article 6(1)(f) GDPR and our legitimate interest in handling the correspondence. Without the required contact and project details, we cannot process the form enquiry.
Enquiries are stored in Cloudflare D1 with an EU jurisdiction restriction. Access is limited to authorised people handling your request and the hosting provider as necessary to supply the service. There is no public enquiry directory or automatic newsletter subscription.
Optional feature updates
If you request updates about local voice and future Kauis features, we store your email address, language, optional interest, signup time and the wording, version and time of your consent. The legal basis is your consent under Article 6(1)(a) GDPR. Signing up is optional and is not required for an installation enquiry.
We currently collect signup requests only. No confirmation or update emails are sent by the website, and email ownership has not been verified. Requests are stored separately from enquiries in Cloudflare D1 with EU jurisdiction. Access is limited to authorised people handling the list and the hosting provider as necessary to supply the service.
You can withdraw consent at any time, without charge, by emailing contact@negolio.com. Withdrawal does not affect the lawfulness of processing before withdrawal. We will remove your request from the active list and our working exports.
Retention and deletion
Website database copies of enquiries and update-list requests expire after 180 days and are deleted during the next daily cleanup. We delete update-list requests sooner if you withdraw consent. Other records may be deleted sooner when no longer needed or following a valid erasure request. Recovery backups may retain deleted records for up to 30 additional days.
If an enquiry leads to a contract, necessary business records are retained separately for the applicable statutory periods. Follow-up correspondence is retained only while needed to handle your request, meet legal obligations or establish, exercise or defend legal claims.
Processing outside the EU
The EU restriction applies to the D1 database, not to every part of Cloudflare’s global network. Request handling, security operations and authorised support may involve processing outside the EEA, including in the USA. Cloudflare’s Data Processing Addendum sets out processor obligations, subprocessors and applicable transfer safeguards, including EU standard contractual clauses where required. You can request information about the applicable safeguards from us.
Cookies and local assets
We use no analytics, advertising trackers, externally embedded fonts or marketing cookies. Language selection uses page URLs rather than cookies or browser storage. Images, fonts and animations are served as website assets.
Your rights
Subject to the conditions in the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons arising from your particular situation. Where processing is based on consent, you can withdraw it for the future. We do not use your enquiry for automated decisions with legal or similarly significant effects.
You may lodge a complaint with a data protection authority, including the authority where you live or work. Our local authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).