Send an inquiry

Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Bilal Kanaan
Von-Droste-Hülshoff-Str. 21
38446 Wolfsburg
Germany
Phone: +49 156 7951 3766
E-mail: office@kantra.de

2. Overview

This website does not set any cookies. We do not use analytics, tracking or advertising tools, and we do not embed content from other providers. Fonts and images, including the map image, are stored on our own web space, so your browser does not connect to other providers when you visit our pages.

We process personal data only to the extent described below.

3. Hosting and server log files

Our website is hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. The servers we use are located in the European Union. We have concluded a data processing agreement with Hostinger in accordance with Art. 28 GDPR.

When you visit our website, your browser automatically transmits the following data to our server, which records them in log files:

  • IP address of the requesting device
  • date and time of the request
  • page or file requested
  • website from which you reached the page (referrer)
  • browser type, browser version and operating system
  • amount of data transferred and status of the request

We need these data to deliver the website to you and to ensure its stability and security, for example to detect and fend off attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of our website. We do not combine these data with other data. The log files are deleted as soon as they are no longer required for these purposes. We keep individual entries longer only if we need them to investigate a specific security incident.

4. Encryption

This website uses SSL/TLS encryption to protect the transmission of data, such as inquiries you send us. You can recognise an encrypted connection by “https://” in the address bar of your browser.

5. Contact form

If you send us an inquiry using the contact form, we process the data you enter: your name, your e-mail address, your message and, if provided, the name of your company. We also record the date and time of submission.

We use these data exclusively to handle your inquiry and any follow-up questions. If your inquiry relates to the conclusion or performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. In all other cases, the legal basis is the consent you give by ticking the checkbox, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for example by e-mail to office@kantra.de. The withdrawal does not affect the lawfulness of the processing carried out before it.

The contact form sends your inquiry by e-mail via the mail server of our hosting provider to our mailbox (see sections 3 and 8). The website does not store the form data.

6. Contact by e-mail or telephone

If you contact us by e-mail or telephone, we process the data you provide, such as your name, your contact details and the content of your message, to handle your request. If your request relates to the conclusion or performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. Otherwise, the legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in answering the requests addressed to us.

7. Customers and business partners

If we conclude or perform a contract with you or with the company you work for, we process the data required for this purpose, such as company details, names and business contact details of contact persons, the VAT identification number, and order, delivery and invoice data. The legal basis is Art. 6 (1) (b) GDPR. For contact persons of our business partners, the legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in performing the contract with their company. Where statutory obligations apply, in particular retention obligations under commercial and tax law, the legal basis is Art. 6 (1) (c) GDPR.

Before accepting an order, we may have a VAT identification number confirmed by the German Federal Central Tax Office (Bundeszentralamt für Steuern) in accordance with § 18e of the German VAT Act (UStG). To deliver goods, we pass on the delivery address and the name and telephone number of a contact person to the transport company or forwarder we engage. Payments are processed by our bank. Where our statutory obligations require it, we pass on data to tax advisers and tax authorities.

8. E-mail provider

Our mailbox office@kantra.de is provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS stores and processes e-mails on our behalf, including inquiries sent via the contact form. We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR.

9. Recipients and transfers to third countries

We share personal data only with the recipients named in this privacy policy. Our hosting provider and our e-mail provider process them on our behalf and in accordance with our instructions. If a customer is based outside the European Union or the European Economic Area, we transfer the data required for the contract, such as contact and delivery data, to that country. The legal basis is Art. 49 (1) (b) and (c) GDPR.

10. Link to OpenStreetMap

Our pages show the location of our office on a map image stored on our own web space. Your browser opens openstreetmap.org, a website operated by the OpenStreetMap Foundation, only when you click “View on map”. From that point on, the privacy policy of the OpenStreetMap Foundation applies.

11. Storage period

We delete personal data as soon as we no longer need them for the purposes described. We delete inquiries once we have dealt with them in full. We keep contract and invoice data and business correspondence for as long as the statutory retention periods under commercial and tax law require, in particular § 257 HGB and § 147 AO, and delete them when these periods end.

12. Your rights

Under the GDPR, you have the following rights with regard to your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, contact us at office@kantra.de.

13. Right to object

If we process your personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process these data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

15. Provision of data

You are neither legally nor contractually obliged to provide personal data. Without the information marked as required in the contact form, however, we cannot answer your inquiry, and without the data required for a contract we cannot conclude it. We do not use automated decision-making or profiling.

Last updated: October 2026