Privacy policy
Last updated 13 September 2026. This policy applies to the website kontrib.io. Use of the platform itself is additionally governed by the data processing agreement. The German version is authoritative.
1. Controller
KAIH UG (haftungsbeschränkt), Jagenberg 13, 42659 Solingen, Germany. Email: mario@kaih.io.
2. Hosting and server logs
The website is delivered via Amazon Web Services (AWS) in the eu-central-1 region (Frankfurt am Main), using Amazon S3 and Amazon CloudFront. Technically necessary data is processed when you visit: IP address, date and time, page requested, referrer, browser and operating system. The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). Log files are deleted after 30 days at the latest. CloudFront uses edge locations worldwide; log files are stored in the EU. A data processing agreement including EU standard contractual clauses is in place with AWS.
3. Contact form and email
If you use the contact form or send us an email, we process your name, company, email address and message to handle your request and arrange an appointment. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR given in the form. The data is transmitted to our mailbox via Amazon Simple Email Service (Frankfurt region) and deleted once the request is closed, at the latest after twelve months, unless statutory retention obligations apply. The form contains an invisible spam protection field; no third-party captcha services are used.
4. Cookies and analytics
This website sets no cookies and uses no third-party tracking services. Should we use our own platform for audience measurement in future, this will only happen after your consent via a consent banner, and this policy will be updated accordingly.
5. Fonts
The typefaces IBM Plex Sans and IBM Plex Mono are loaded from Google Fonts. Your IP address is transmitted to Google Ireland Limited in the process. The legal basis is Art. 6(1)(f) GDPR (consistent presentation). If you do not want this, block fonts.googleapis.com in your browser; the site remains usable with system fonts. We plan to serve the fonts locally.
6. Recipients and transfers to third countries
Recipients are the processors named in sections 2 and 3. Transfers to third countries only take place under the EU standard contractual clauses and the EU-US Data Privacy Framework (Amazon Web Services EMEA SARL, Google Ireland Limited).
7. Your rights
- Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20)
- Objection to processing based on Art. 6(1)(f) GDPR (Art. 21)
- Withdrawal of consent with effect for the future (Art. 7(3))
- Complaint to a supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Please contact mario@kaih.io.
8. Privacy within the platform
For customers who deploy KONTRIB on their websites, we process data as a processor. The principles: without consent no persistent identifier is set and only aggregated counts are stored. Email addresses are hashed with SHA-256 before storage. All data resides in AWS eu-central-1, separated per account via row level security. AI functions run on Amazon Bedrock in the EU; Anthropic as model provider receives no customer data. Details are in the DPA.