Privacy Policy
Below, we provide detailed information about how we handle your data when you visit our website at the URL https://www.myarchitecto.de (hereinafter referred to as the “Website”) and use the functions offered there.
1. Controller
The controller within the meaning of data protection law is architecto by Küchen Aktuell GmbH, a subsidiary of Küchen Aktuell GmbH, Senefelderstraße 2b, 38124 Braunschweig, Germany, telephone number +49 (0)531 26134-5000, email address info@myarchitecto.de (hereinafter referred to as “architecto” or “we”).
2. Contact details of our Data Protection Officer
The contact details of our Data Protection Officer are as follows:
Email: datenschutzbeauftragter@kuechenaktuell.de
3. Access to our Website
We automatically collect and store so-called log file data transmitted to us by your browser. This includes:
- browser type/version
- operating system
- URL of the website previously visited
- URL of the page you access on the Website
- IP address of the accessing device
- name and URL of the requested file
- amount of data transferred
- notification as to whether the request was successful
- as well as the date and time the Website was accessed.
The collection of this data is necessary for technical reasons. This data is not combined with other data sources. For technical reasons, use of the Website is unfortunately not possible without providing your IP address. Otherwise, this data is evaluated in anonymised form for statistical purposes and subsequently deleted. The data is collected for pre-contractual purposes and/or on the basis of architecto’s legitimate interest in displaying the contents of the Website to you (Art. 6(1), sentence 1, lit. b), f) GDPR).
4. Ordering options on our Website
You have the option of placing an order with us online via our Website. The data requested when placing an order is used to carry out pre-contractual measures and to fulfil the contract. A distinction is made between mandatory information (marked with an asterisk) and voluntary information. A contract cannot be concluded without the mandatory information. Providing your landline or mobile telephone number is mandatory so that we can contact you directly in the event of questions or problems relating to your order and/or delivery.
We use the payment service provider Stripe, Inc. (hereinafter referred to as “Stripe”) to process payments for orders placed on our Website. Stripe is a payment service provider within the meaning of the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz – ZAG) and enables us to process payments securely using various payment methods (e.g. credit card, direct debit, Apple Pay, Google Pay). In addition, Stripe’s privacy information applies and can be accessed at https://stripe.com/de/privacy. In particular, master data, payment data and transaction data may be collected. The data is processed independently by Stripe; we do not receive this data.
All data is used to fulfil the contract concluded with you (Art. 6(1), sentence 1, lit. b) GDPR) and is collected, used and disclosed solely for this purpose.
5. Overview of cookies used
| Name | Domain | Description | Storage period |
|---|---|---|---|
| VISITOR_PRIVACY_METADATA | Youtube.com | This cookie is used to store the user’s consent and privacy settings for their interaction with the Website. It records data about the visitor’s consent to various privacy policies and settings and ensures that their preferences are taken into account in future sessions. | 5 months 4 weeks |
| _ga | www.google-analytics.com | Registers a unique ID that is used to generate statistical data on how the visitor uses the Website. | 2 years |
| _ga_# | www.google-analytics.com | Collects data on how often a user has visited a website as well as data relating to the first and most recent visit. Used by Google Analytics. | 2 years |
| _cf_bm | Hubspot.com | This cookie is used to distinguish between humans and bots. | 30 minutes |
| _hssc | .myarchitecto.de | This cookie is associated with websites created on a HubSpot platform and is used by the Website for analytical purposes. | 30 minutes |
| _pk_id.1.6537 | .myarchitecto.de | This cookie name is associated with the open-source web analytics platform Piwik. It is used to help website operators track visitor behaviour and measure website performance. It is a pattern cookie in which the prefix “_pk_id” is followed by a short sequence of numbers and letters, presumably representing a reference code for the domain setting the cookie. | 1 year |
| _pk_ses.1.6537 | .myarchitecto.de | This cookie name is associated with the open-source web analytics platform Piwik. It is used to help website operators track visitor behaviour and measure website performance. It is a pattern cookie in which the prefix “_pk_ses” is followed by a short sequence of numbers and letters, presumably representing a reference code for the domain setting the cookie. | 30 minutes |
| _hstc | .myarchitecto.de | This cookie is associated with websites created on a HubSpot platform and is used by the Website for analytical purposes. | 5 months 4 weeks |
| _hssrc | .myarchitecto.de | This cookie is associated with websites created on a HubSpot platform and is used by the Website for analytical purposes. | During the website visit |
| YSC | .youtube.com | This cookie is set by YouTube to track views of embedded videos. | During the website visit |
| VISITOR_INFO1_LIVE | .youtube.com | This cookie is set by YouTube to track users’ preferences for YouTube videos embedded in websites. It may also determine whether the website visitor is using the new or old version of the YouTube interface. | 5 months 4 weeks |
| _cfuvid | .hsforms.com | This cookie is used to track users across multiple sessions in order to optimise the user experience by maintaining session consistency and providing personalised services. | During the website visit |
| hubspotutk | .myarchitecto.de | This cookie name is associated with websites created on the HubSpot platform. HubSpot states that its purpose is user authentication. As it is a persistent cookie rather than a session cookie, it cannot be classified as strictly necessary. | 5 months 4 weeks |
| _cfuvid | .hubspot.com | This cookie is used to track users across multiple sessions in order to optimise the user experience by maintaining session consistency and providing personalised services. | During the website visit |
| _Secure-ROLLOUT_TOKEN | .youtube.com | The token manages the staged rollout of new features. | 5 months 4 weeks |
architecto stores cookies on the storage medium of your device in order to make your visit to the Website attractive and to enable the use of certain functions. For all cookies that are not technically necessary, this is done on the basis of your consent given via the cookie banner (Art. 6(1), sentence 1, lit. a) GDPR). Technically necessary cookies are set on the basis of our legitimate interest pursuant to Art. 6(1), sentence 1, lit. f) GDPR.
Cookies are small text files that are sent by our web server to the browser of your device and stored there. They contain data relating to user-defined settings on the Website. architecto does not store any personal data in cookies.
The cookies contain the following data sets:
In most cases, the browser on your device is configured to accept the creation and storage of cookies. You have the option of configuring your browser so that it generally rejects the storage and use of cookies or rejects them in individual cases. In this case, however, the functionality of our Website may be restricted. You can revoke or adjust your consent at any time via the cookie settings of your browser.
5.1 Google Analytics
Our Website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”). Google uses cookies for this purpose, which enable an analysis of your use of the Website. Google Analytics records data that can be divided into various categories.
These include:
- Type of visitor: The tool collects data on the regional origin of visitors as well as the operating systems and devices used to access the Website.
- Traffic sources: In this segment, Google Analytics stores referring websites and provides information about the social networks from which visitors originate. If an AdWords account is linked to the Analytics account, data from the advertising programme can also be imported.
- Visitor behaviour on the Website: In this category, Google Analytics records landing pages and click paths as well as bounce rates and the amount of time spent on individual subpages.
Google generally processes the data on servers located within the EU; however, transmission to the USA cannot be ruled out. The USA is currently considered a country with an adequate level of data protection (see the European Commission adequacy decision of 10 July 2023, C (2023) 4745 final), and Google’s parent company, Google LLC, USA, has been certified accordingly: https://www.dataprivacyframework.gov/list.
Google uses the information generated to evaluate your use of the Website, to compile reports on Website activity for us and to provide us with other services relating to Website and internet usage. We have entered into an agreement with Google regarding joint controllership and, via our Google account, have concluded a Joint Controller Agreement specified by Google (https://support.google.com/analytics/answer/9012600).
Summary of the Joint Controller Agreement with Google:
- Each party is independently responsible for ensuring that a legal basis exists for the respective data processing.
- Data subject rights are handled by Google unless the data processing is carried out exclusively by us. To exercise your data subject rights, however, you may contact us and/or Google.
- Google is responsible for reporting personal data breaches pursuant to Art. 33 GDPR. We are obliged to report immediately if there is any suspicion of a personal data breach.
IP addresses are processed in shortened form in order to prevent identification of individuals. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
Google Analytics enables us to request advertising reports relating to visitors to our Website. These reports contain anonymised statistical information on the age, gender and interests of visitors to our Website. Further information about this service is available at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.
Independently of this, Google collects data in particular from users of Gmail accounts, as Google is also the operator in this case. You can change your advertising settings at https://adssettings.google.com/authenticated so that activities and information are no longer collected for personalised advertising.
You can prevent the storage of cookies by configuring your browser accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the Website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, you can prevent Google from collecting and using your data by clicking the following link:
Disable Google Analytics
Clicking this link sets an opt-out cookie that prevents your data from being collected by Google. Further information on terms of use and data protection can be found at the following links:
https://www.google.com/analytics/terms/de.html
https://www.google.com/intl/de/analytics/learn/privacy.html
https://www.google.de/intl/de/policies/privacy
5.2 YouTube using IFrames
On our Website, we provide links to our YouTube channel and corresponding videos. The provider of the associated website at https://www.youtube.com is Google. The videos are embedded using so-called inline frames (“IFrames”) in enhanced privacy mode. An IFrame is an element that allows content from other websites to be embedded directly into our Website using HTML. Information is only collected by Google if you give your consent and watch the video. Once consent has been given, the cookies listed above are set. If you have already consented to playback on another website, Google recognises this based on the cookie that has been set. If you click on the video, Google receives information about the website from which you accessed the YouTube videos. If you are logged into your YouTube account, Google can associate your browsing behaviour with you personally. You can prevent this by logging out of your YouTube account beforehand. Further information about data protection at YouTube can be found in the privacy policy for this service, available at: https://www.google.de/intl/de/policies/privacy/. The data is collected on the basis of your consent (Art. 6(1), sentence 1, lit. a) GDPR).
6. Careers
Under the “Careers” link, you have the opportunity to apply for a position with us. Clicking on a job vacancy takes you to the job description, at the end of which you can select the “Apply now” button. After clicking this button, you will be taken to a page where you can enter your application details (name, email address, etc.). Text fields marked with an asterisk contain mandatory information. This information is used to assess whether you are generally suitable for an internal position within our company and for our subsequent response. For this purpose, we use software provided by HR4YOU AG, Germany.
The provision of this data serves to carry out pre-contractual measures (Art. 6(1), sentence 1, lit. b) GDPR) and for application purposes (Section 26 BDSG). The information entered in the other text fields is voluntary and, if provided, is also used for the aforementioned purposes.
Without the mandatory information, we cannot consider your application or provide you with feedback. Failure to provide voluntary information has no consequences. If your application is successful, your data will be used for contractual purposes, namely the possible conclusion of an employment or training contract.
7. Contact form
The form contains mandatory information marked with an asterisk, such as your name, as well as voluntary information. You also have the option of uploading images or image files. These images may contain personal data or permit conclusions to be drawn about personal data. All data and images transmitted via the contact form are used to respond to your enquiry and therefore for pre-contractual purposes (Art. 6(1), sentence 1, lit. b) GDPR).
8. Statutory and contractual obligations to provide data
The provision of any data to us is neither contractually nor legally required.
Without the mandatory information, we cannot consider your application or provide you with feedback. Failure to provide voluntary information has no consequences.
9. Storage period and deletion of data
Personal data and file attachments stored on our web server and transmitted to us by your browser are deleted no later than 7 days after the end of your Website visit, contact or appointment request, or application. Data provided to us for the purpose of contacting us, requesting an appointment or ordering brochures will be deleted as soon as your request has been fully resolved.
The contact details you provide to us for an application will, in the event of rejection, be deleted no later than 6 months after notification of the rejection. This does not apply if you consent to being included in our database. Data used on the basis of consent will remain stored until consent is revoked or until the end of the agreed retention period.
The data you provide to us as part of a contact request via the form or, where applicable, by email or telephone will be deleted as soon as we can assume that your request has been dealt with and there are no statutory retention periods. This is generally the case 3 months after the enquiry.
Order data is stored for the duration of warranty, guarantee and limitation periods and subsequently for 6–10 years in accordance with the statutory retention periods pursuant to Sections 257 HGB and 149 AO.
Where data is required as evidence, it will be retained for the duration of the statutory limitation periods or the contractually granted warranty period. The limitation period may be up to 30 years, while the regular limitation period ends after 3 years.
10. Disclosure of your data / source of your data
We only disclose your data to third parties if we are entitled or obliged to do so under applicable law. The same applies if we receive your data from third parties.
Such authorisation also exists where third parties process data on our behalf: If we do not carry out our business activities ourselves (e.g. operation of the Website, creation and distribution of advertising material, data analysis and, where applicable, data cleansing), but instead have these activities carried out by other companies, and these activities involve the processing of your data, we have contractually required these companies in advance to use the data only for purposes that are legally permitted to us. We are entitled to monitor these companies in this regard.
The data we process originates exclusively from you or from the devices or services used by you.
11. Our presence on social media (LinkedIn)
On our Website, we provide links to our publicly accessible profiles on social media.
Social networks such as LinkedIn can generally analyse your user behaviour extensively when you use their apps or third-party services containing integrated social media content (e.g. like buttons or advertising banners) from these networks. Visiting a social media presence triggers numerous processing operations relevant to data protection.
If you are logged into your social media account and visit our social media presence, the operator of the social media portal may associate this visit with your user account. Under certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, such data may be collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles containing your preferences and interests. This allows interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or have been logged in.
11.1 Legal basis
Our social media presence is intended to ensure the broadest possible online presence and to address all age groups. This constitutes a legitimate interest within the meaning of Art. 6(1), sentence 1, lit. f) GDPR. The analysis processes initiated by the social networks are based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1), sentence 1, lit. a) GDPR), in particular on a separate contractual relationship with you and therefore on Art. 6(1), sentence 1, lit. b) GDPR.
11.2 architecto’s LinkedIn account
architecto also operates its own account for presenting the company on the LinkedIn social platform at https://www.linkedin.com/company/architecto-by-k-chen-aktuell-gmbh/.
Within the European Economic Area, this platform is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) (https://www.linkedin.com/legal/impressum).
11.3 Data transfers to the USA
LinkedIn is part of a large corporate group whose parent company, LinkedIn Corp., is based in the USA. LinkedIn reserves the right to transfer and store data in the USA. The USA is currently considered a country with an adequate level of data protection (see the European Commission adequacy decision of 10 July 2023, C (2023) 4745 final), and LinkedIn Corporation has been certified accordingly: https://www.dataprivacyframework.gov/list.
11.4 LinkedIn privacy information
LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy and its cookie policy at https://www.linkedin.com/legal/cookie-policy contain information about how LinkedIn processes your data. architecto has no influence over this data processing and cannot control it. In particular, confidential messages are processed by LinkedIn and analysis tools are used from which LinkedIn can infer your preferences and interests and determine your location via your IP address and GPS data. This data may be used to send or display targeted advertising. Such data is not made available to architecto. Any rights of data subjects in this regard should therefore be asserted directly against LinkedIn.
architecto only receives personal data about you if you actively connect with architecto or follow architecto using your profile. Even then, we only receive information that you have chosen to make publicly available to your contacts.
If you are active on LinkedIn and use functions such as sharing, posting or liking posts, you do so on your own responsibility and on the basis of your own user relationship with LinkedIn. According to the current state of affairs, there is no joint controllership with regard to the LinkedIn account in this respect, but rather shared responsibility; see https://de.linkedin.com/legal/l/dpa.
architecto only receives personal data about you if you actively connect with architecto or follow architecto. Even then, we only receive information that you have chosen to make publicly available to your contacts.
11.5 LinkedIn Page Insights
In addition, architecto uses the LinkedIn Page Insights analysis service, which also uses cookies. Data is processed in this context only if you have given your consent.
Usage data, interactions (likes, comments, visits), demographic information and device data are collected. LinkedIn also uses cookies and similar technologies for this purpose.
The Insights data helps architecto understand user behaviour on the website, assess the attractiveness of the content and services offered and optimise the website on the basis of the results generated.
With regard to the data generated in this context, architecto and LinkedIn are joint controllers pursuant to Art. 26 GDPR. For this purpose, we have entered into a Joint Controller Agreement specified by LinkedIn, which you can access here: https://www.linkedin.com/legal/l/page-joint-controller-addendum
Summary of the Joint Controller Agreement with LinkedIn:
- Each party is independently responsible for ensuring that a legal basis exists for the respective data processing.
- Data subject rights are handled by LinkedIn unless the data processing is carried out exclusively by us. To exercise your data subject rights, however, you may contact us and/or LinkedIn.
LinkedIn is responsible for reporting personal data breaches pursuant to Art. 33 GDPR. We are obliged to report immediately if there is any suspicion of a personal data breach.
11.6 Settings and contact options at LinkedIn
Further important information and settings relating to LinkedIn are available here:
| Action / Information | Link |
|---|---|
| Contact | https://www.linkedin.com/help/linkedin/solve |
| Change privacy and security settings | https://www.linkedin.com/psettings/ |
| View personalisation data and change advertising settings | https://www.linkedin.com/psettings/advertising/profile-data |
| Option to block LinkedIn accounts | https://www.linkedin.com/psettings/data-log |
12. Your rights
You may object at any time to our processing of personal data concerning you. In addition to the direct contact options specified below, you may also exercise your right to object by automated means using technical specifications.
You have the right at any time and free of charge to obtain information about the data we store about you, to have incorrect data corrected and to have the processing of your data restricted or your data deleted. You also have the right to receive your data in a structured, commonly used and machine-readable format and to have your data transmitted by us to another person. Furthermore, you have the right to withdraw any consent you have given at any time with effect for the future. In particular, consent may be withdrawn by email to info@myarchitecto.de. The lawfulness of processing carried out on the basis of consent prior to its withdrawal remains unaffected.
You may contact us regarding your respective request using the contact details provided in Sections 1 or 2.
In addition to the rights set out above, you also generally have the right to lodge a complaint with a data protection supervisory authority.
Last updated: August 2026