This translation is provided for convenience only. Only the German version is legally binding.
German original: Datenschutzerklärung
Privacy Policy
1. Controller
Oleksandr Schemediuk
Sole proprietor
Frundsbergstraße 30
80634 München
Germany
Phone: +49 1575 4041494
Email: info@kuechenfokus.de
2. Overview of processing
The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects: inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in forms), usage data (e.g. web pages visited, access times), meta/communication data (e.g. device information, IP addresses) and contract data (e.g. subject matter of the contract, order data).
3. Relevant legal bases
Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data:
Consent (Art. 6(1)(a) GDPR): The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract.
Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
4. Rights of data subjects
As a data subject, you have various rights under the GDPR:
Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR. Where personal data concerning you are processed for direct marketing purposes, you have the right to object to the processing at any time.
Right to withdraw consent: You have the right to withdraw any consent you have given at any time.
Right of access: You have the right to obtain confirmation as to whether data concerning you are being processed and to access these data as well as further information and a copy of the data in accordance with the statutory provisions.
Right to rectification: You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
Right to erasure and restriction of processing: You have the right to request that data concerning you be erased without undue delay or, alternatively, that the processing of the data be restricted.
Right to data portability: You have the right to receive data concerning you which you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
Complaint to a supervisory authority: You have the right to lodge a complaint with a supervisory authority. The competent authority is the Bavarian data protection authority, Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.
5. Hosting
Our website is hosted by Hostinger International Ltd., Švitrigailos g. 34, LT-03230 Vilnius, Lithuania. The server uses LiteSpeed web server technology. When you visit our website, the hosting provider automatically collects information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.
These data are not combined with other data sources. They are collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website.
Processing on behalf: We have concluded a data processing agreement (DPA) with Hostinger. Hostinger processes data within the EU.
6. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar.
7. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are technically necessary (essential), while others help us to improve this website and your experience.
We use the plugin “Pressidium Cookie Consent” to manage cookie consent. On your first visit to our website, you are informed about the use of cookies and can give or refuse your consent for the various cookie categories. Your consent is stored for 182 days.
Essential / technically necessary: These cookies are required for the operation of the website (e.g. session cookies, cookie consent cookie). Legal basis: Art. 6(1)(f) GDPR.
Analytics cookies: These cookies are only set with your consent and are used to analyse user behaviour. Legal basis: Art. 6(1)(a) GDPR.
Functional/preference cookies: These cookies enable extended functionality (e.g. chat assistant). Legal basis: Art. 6(1)(a) GDPR.
You can change your cookie settings at any time via the cookie banner or your browser settings.
8. Web analytics
8.1 Rybbit Analytics
We use Rybbit Analytics, a self-hosted, privacy-friendly web analytics solution (hosted at rybbit.webspirio.com on its own infrastructure). Rybbit collects anonymised usage data to evaluate the use of the website. No cookies are set and no personal data are transmitted to third parties. The IP address is processed in anonymised form.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis of user behaviour in order to optimise our website).
8.2 Google Analytics
Google Analytics is currently not integrated. If we use it, this will be done exclusively after your consent via the cookie banner. It is then Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies (_ga, _ga_*, _gid) that enable an analysis of your use of the website. Google Analytics is only activated if you have consented to the category “Analytics cookies” in the cookie banner.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated IP anonymisation. Google is certified under the EU-US Data Privacy Framework.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the cookie banner.
Further information: Google’s privacy policy.
8.3 Plausible Analytics
We analyse the use of this website with Plausible Analytics (Community Edition). The software does not run with a third-party provider but on servers in the EU that are operated on our behalf. No cookies are set and no information is stored on your device. The script only checks whether you have switched off the measurement in your browser yourself (entry “plausible_ignore” in local storage); this entry only exists if you have set it yourself. The page visited, the referring page, browser, operating system, device type and country are recorded. A pseudonymous identifier is formed from the IP address and browser identifier, the key of which changes daily; the IP address itself is not stored. This makes recognition across several days or websites impossible. Evaluation takes place only in aggregated form; data are not passed on to third parties.
The legal basis is our legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR).
9. Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there (name, email address, subject, message), are stored by us and transmitted to us by email for the purpose of processing the enquiry and in case of follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data are deleted as soon as they are no longer required for the purpose for which they were collected, usually after the conversation has ended, unless statutory retention obligations apply.
10. Email contact
If you contact us by email (e.g. at info@kuechenfokus.de or info@kuechenfokus.de), the data you provide (e.g. name, email address, content of the enquiry) are stored by us in order to answer your questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.
11. AI chatbot (Korvo AI Sales Assistant)
Our website uses an AI-supported chatbot (“Korvo AI Sales Assistant”) that supports you with product advice and general enquiries. When you use the chatbot, the following data are processed:
Chat messages: The messages you enter and the chatbot’s replies.
Session data: A session token is stored as a cookie (korvo_session_token, lifetime: 7 days) to maintain your chat session across page navigation.
Preference data: Widget position, widget size and wish list are stored as cookies.
If you use the contact form via the chatbot, the data entered there (name, email, telephone number, message) are transmitted to us.
To process chat requests, we use the APIs of OpenAI (OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA) and Anthropic (Anthropic, PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA). Depending on the configuration, the chat content is transmitted to OpenAI or Anthropic for processing. Both providers process the data in accordance with their respective terms of use and do not permanently store any data from API requests. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner, category “Functional cookies”) for session cookies, Art. 6(1)(b) GDPR (pre-contractual measures) for processing product enquiries.
Further information: OpenAI’s privacy policy, Anthropic’s privacy policy.
12. Online shop (WooCommerce)
We operate an online shop based on WooCommerce. When you place an order, we process the following data: name, address, email address, telephone number, payment data and order details.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). The data are deleted after the retention periods under tax and commercial law have expired (usually 6 or 10 years).
13. Customer account
To use our online shop, you need to create a customer account. The data you provide (name, email address, address, password) are stored. The data of the customer account are stored until the account is deleted and then deleted after any statutory retention obligations have expired.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
14. Content delivery and fonts
Our website uses locally hosted fonts. No external font services (e.g. Google Fonts) are integrated, so no data are transmitted to third parties when fonts are loaded.
15. Caching
We use LiteSpeed Cache to optimise the loading speed of our website. LiteSpeed Cache creates static versions of the web pages, which are delivered directly by the server. No additional personal data are collected in the process.
16. Search engine optimisation
We use the plugin Rank Math SEO to optimise our website for search engines. The plugin does not process any personal data of website visitors.
17. Multilingual content
Our website uses Polylang to provide multilingual content (German, English, Russian, Ukrainian). Polylang stores your language preference in a cookie in order to display the website in the language you have selected. This cookie is technically necessary.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in correct language display).
18. Transfer of data to third countries
Data are transferred to third countries (outside the EU/EEA) in connection with the use of Google Analytics (USA) and OpenAI (USA) for the AI chatbot. Both companies are certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection (adequacy decision of the EU Commission pursuant to Art. 45 GDPR).
19. Retention and deletion
We only store personal data for as long as is necessary for the respective processing purposes or as long as statutory retention periods apply. Once the purpose no longer applies or the periods have expired, the data are routinely deleted or blocked. Retention periods under tax law are generally 10 years (§ 147 AO), under commercial law 6 years (§ 257 HGB).
20. Changes to this privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.
As of: July 2026