PRIVACY POLICY

1. Introduction

We treat your personal data confidentially and in accordance with statutory data protection regulations. Personal data means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).

This privacy policy explains which data we collect, how we use it, the legal basis for processing and what rights you have as a data subject.

2. Controller

KUNESA GmbH
Trierer Straße 44
D‑66709 Weiskirchen
Phone: +49 6876 706 0
Fax: +49 6876 706 19
E‑mail: email@kunesa.com

Data Protection Officer: Daniel Hübner

3. Rights of Data Subjects

Under the GDPR you have, among others, the following rights:

  • Right of access and confirmation (Art. 15 GDPR) – You can request confirmation as to whether we process personal data relating to you. If so, you will receive information about these data and about the processing.

  • Right to rectification (Art. 16 GDPR) – You may request the correction of inaccurate data or the completion of incomplete data.

  • Right to erasure and restriction (Art. 17 and 18 GDPR) – You have the right to immediate deletion of your data or to restrict processing, unless statutory retention obligations or other legitimate reasons prevent deletion.

  • Right to data portability (Art. 20 GDPR) – You may receive your data in a structured, commonly used and machine‑readable format or request that we transfer it to another controller.

  • Right to object (Art. 21 GDPR) – If processing is based on Art. 6(1)(f) GDPR, you may object to processing for reasons arising from your particular situation. In particular, your data may not be used for direct marketing.

  • Withdrawal of consent (Art. 7(3) GDPR) – You can withdraw your consent to data processing at any time with effect for the future.

  • Right to lodge a complaint (Art. 77 GDPR) – You have the right to complain to the competent supervisory authority if you believe that the processing of your data violates data protection provisions.

We are obliged to notify all recipients to whom your data have been disclosed of any rectification, erasure or restriction of processing (Art. 16, 17(1), 18 GDPR), unless this proves impossible or involves disproportionate effort.

4. Data Processing When You Visit Our Website

We store your personal data only as long as necessary for the respective purpose or as long as we are legally obliged to. As soon as the storage purpose ceases to apply and no statutory retention obligations exist, your data will be deleted or blocked.

4.1 Server log files

When you access our website, your browser automatically transmits data to our server or to our webspace provider. These so‑called server log files include:

  • Browser type and version

  • Operating system

  • Referrer URL (the previously visited page)

  • Pages accessed on our website

  • Date and time of access

  • IP address

These data are temporarily stored on the basis of Art. 6(1)(f) GDPR to ensure the functionality, stability and security of our website and are deleted after seven days at the latest (unless they are needed longer for evidence purposes).

4.2 Cookies

Cookies are small text files stored on your device by your browser.

a) Session cookies

We use session cookies to make our website more user‑friendly, effective and secure, for example for language settings or shopping cart functions. These cookies are deleted when you close your browser. The legal basis is Art. 6(1)(b) GDPR insofar as the cookies are necessary for initiating or fulfilling a contract; otherwise Art. 6(1)(f) GDPR applies.

b) Third‑party cookies

Depending on their function, we also use cookies from partner companies (e.g. for advertising, analysis or functionality). Details of the purpose and legal basis are set out in the sections below.

c) Managing cookies

You can disable or delete cookies via your browser settings; instructions can be found in your browser’s help. Flash cookies must be managed via your Flash player settings. Please note that disabling cookies may limit the functionality of our website.

4.3 Newsletter

If you subscribe to our newsletter, we collect the data you enter (e‑mail address and, optionally, name and address) as well as the IP address, date and time of registration. We inform you about the newsletter content as part of the double‑opt‑in process and refer to this privacy policy.

The data are used exclusively to send the newsletter and are not passed on to third parties. The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time, for example via the unsubscribe link in each newsletter.

4.4 Contact enquiries

When you contact us via contact form or e‑mail, we process the data you provide to handle your request. The legal basis is Art. 6(1)(b) GDPR. Once your enquiry has been fully processed and no statutory retention obligations exist, your data will be deleted.

4.5 Online applications

You can apply for a job via our website. We process your application data to conduct the application procedure in accordance with Section 26(1) sentence 1 BDSG in conjunction with Art. 88(1) GDPR.

If an employment contract is concluded, the data will be transferred to your personnel file. If your application is rejected, we delete the data two months after notification of the decision, unless statutory retention obligations exist. Longer storage takes place only with your express consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

4.6 Links to social networks

We link to various social networks on our website to improve user experience (legitimate interest under Art. 6(1)(f) GDPR). Only when you click the respective button is a connection to the service established and data (e.g. IP address, access time, pages visited) may be processed by the network operator. If you are logged into the network, the data can be associated with your profile. If you do not wish this, log out before clicking or adjust your account settings.

The linked services:

We maintain company profiles on these platforms to promote our products and services and communicate with interested parties. Shared responsibility with the platform operator may apply (see, for example, the Facebook Page Controller Addendum).

4.7 Google Analytics

To analyse and optimise our website (legitimate interest under Art. 6(1)(f) GDPR), we use Google Analytics (Google Ireland Limited). Google Analytics stores usage data such as IP address, location, time and frequency of website visits. We use the anonymisation function, so your IP address is truncated within the EU/EEA before being transmitted to Google servers in the USA.

Google uses the data to provide us with reports and other services. According to Google, your IP address is not merged with other data. You can object to data collection by installing the browser add‑on at https://tools.google.com/dlpage/gaoptout?hl=en. Further information is available at https://www.google.com/intl/en/policies/privacy/partners.

4.8 Google Maps

We use Google Maps (Google Ireland Limited) to display our location and create directions. When you call up this function, a cookie is stored on your device to process user settings and data. The legal basis is your consent (Art. 6(1)(a) GDPR) or our legitimate interest in optimising functionality (Art. 6(1)(f) GDPR).

Details can be found in Google’s terms of use (https://policies.google.com/terms?hl=en) and the terms of service for Google Maps (https://www.google.com/intl/en/help/terms_maps.html).

4.9 FontAwesome

Our website uses fonts and icons from FontAwesome (Fonticons Inc., USA). When a page is loaded, a connection is made to a US server of FontAwesome to provide fonts and icons. The legal basis is our legitimate interest in an optimised presentation of our website (Art. 6(1)(f) GDPR). More information: https://fontawesome.com/privacy.

4.10 YouTube videos

We embed videos from YouTube (Google Ireland Limited) using the extended privacy mode. The legal basis is your consent (Art. 6(1)(a) GDPR) or our legitimate interest in an attractive website (Art. 6(1)(f) GDPR).

In extended privacy mode, data are only transmitted when you start the video. Without this mode, a connection to YouTube is established when you load a page containing an embedded video. YouTube sets cookies to analyse user behaviour and can associate data with your Google account if you are logged in. Further information: https://policies.google.com/privacy.

4.11 Egger furniture planner

We integrate the furniture planner of EGGER Holzwerkstoffe Brilon GmbH & Co. KG into our website. When you use the planner, your IP address and usage data are transmitted to EGGER. For quote requests, your contact and planning data are forwarded to EGGER for processing. The legal basis is our legitimate interest in a user‑friendly website (Art. 6(1)(f) GDPR) or the performance of pre‑contractual measures (Art. 6(1)(b) GDPR). We have concluded a data processing agreement with EGGER. Data are stored only for as long as necessary for the planning and processing of your enquiry. For more information, see the privacy information at EGGER (“Privacy – Contact | EGGER inside”).

4.12 HubSpot

We use HubSpot (HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA) as a CRM system for online marketing and processing contact enquiries. When you fill out forms, your data (usually e‑mail address, first and last name) are transmitted to HubSpot and stored there. HubSpot processes this data on our behalf to handle your requests and for marketing measures.

Processing is based on your consent (Art. 6(1)(a) GDPR) and can be terminated at any time by revocation. HubSpot is certified under the EU‑US Data Privacy Framework and uses standard contractual clauses to ensure an adequate level of data protection. Your data are stored for as long as required for the respective purpose or until you object.

Further details about data processing by HubSpot: https://legal.hubspot.com/privacy-policy.

5. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect changes in the law or new services on our website. The current version applies to your next visit.

Status: March 2026

➤