Privacy Policy (Datenschutz­erklärung)

This is a non-binding translation. The legally binding version is the German one. Read the German version

Data protection · GDPR

1. Controller

The controller under the GDPR is: Kraftmar GmbH, Am Mühlgraben 12, 08527 Plauen, Germany. Phone: +49 152 5657 2897. Email: office@klardenkmal.de. Managing directors: Bogdan Mihalcea, Claudiu Mihalcea. Register: Amtsgericht Chemnitz, HRB 35854.

2. Scope and general

This privacy policy applies to klardenkmal.de and its related sites start.klardenkmal.de (online assessment), decalculator.klardenkmal.de (Denkmal-AfA calculator) and the project exposés ikle-de.klardenkmal.de, oberlosa-de.klardenkmal.de and sebnitzer.klardenkmal.de.

We process personal data only as far as necessary to provide functional sites, our content and services, or where you have consented (Art. 6 GDPR). Storing and accessing information on your device, for example through cookies, is also governed by § 25 TDDDG: we set strictly necessary cookies without consent and all others only with your consent.

3. Hosting

All sites listed in section 2 are hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel processes technically necessary connection data as our processor. A data-processing agreement is in place (Art. 28 GDPR). Where data is transferred to the USA, the transfer relies on the EU Standard Contractual Clauses (Art. 46 GDPR). Legal basis: Art. 6(1)(f) GDPR.

4. Server log files

To deliver the sites technically, connection data (e.g. IP address, requested resource, time, browser type) is processed transiently, as on any internet connection. Beyond this we keep no server log files, and this data is not merged with other sources. Legal basis: Art. 6(1)(f) GDPR.

5. Contact and enquiry forms

The form on klardenkmal.de lets you request a consultation. Data collected: name, email address, country of tax residence, your message (free text) and, optionally, your tax adviser's email address if you want them in copy. The forms in the project exposés collect your name, email address and message.

Together with your enquiry we receive the campaign parameters (UTM parameters, e.g. utm_source and utm_campaign) from the address through which you reached our sites. This shows us which campaign led to your enquiry. If you have consented to marketing, the LinkedIn click ID (li_fat_id) is added (sections 14 and 15).

Form entries are sent to us by email (section 6) and used to handle your request. Legal basis: Art. 6(1)(b) and (f) GDPR. Retention: until your request is resolved, and beyond that only where statutory retention obligations apply.

Third-party data: if you provide your tax adviser's email address, please do so only with their consent. We use it solely to fulfil your request for a copy, never for marketing.

6. Sending emails (Resend)

We send the emails from the forms and from the online assessment through Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as our processor (Art. 28 GDPR). Resend processes the content of the email and the sender and recipient addresses. The transfer to the USA relies on the EU Standard Contractual Clauses (Art. 46 GDPR). Legal basis: Art. 6(1)(b) and (f) GDPR.

7. Email (Google Workspace)

For email, including handling form requests, we use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as our processor; a data-processing agreement is in place. Any US transfer relies on the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(b) and (f) GDPR.

8. WhatsApp and phone

Our sites link to our phone number and to WhatsApp. Clicking the WhatsApp link opens WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland); WhatsApp's own privacy terms apply to its use. If you write to us, we process your phone number, profile name and the content of your message in WhatsApp Business to answer your enquiry. Legal basis: Art. 6(1)(b) and (f) GDPR.

We count that such a link was clicked without cookies and without personal data (section 16). On the result page of the online assessment, if you have consented to marketing, we also report the click to LinkedIn (section 15).

9. "Share with your tax adviser"

This function opens your own email client with a prepared message; you send it yourself via your own email provider. We do not process or store the recipient address on our systems.

10. Calculators

The Klar calculator on klardenkmal.de and the Denkmal-AfA calculator on decalculator.klardenkmal.de process your inputs (e.g. income, purchase price) entirely in your browser. They are not transmitted to us or stored. We count that the Denkmal-AfA calculator was used, without cookies and without your inputs (section 16).

11. Online assessment on start.klardenkmal.de

The online assessment checks whether a heritage property fits your situation. We process your answers (gross monthly income, tax class, own capital, details of your banking and financing situation), the time of each step, your name, email address and phone number, your preferred time for a call back and the campaign parameters (UTM) of the address through which you arrived. If you have consented to marketing, we also store click IDs from the address (e.g. li_fat_id) and the referring site.

The purpose is to calculate and show your result, to email you the link to it (section 6) and to contact you, including by phone, as described in the form. If you ask for it on the result page, we notify you when a new calculation becomes worthwhile. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request) and Art. 6(1)(a) GDPR for contacting you and for notifications.

We store the data in a database of Upstash (Upstash, Inc., USA) in an EU region; Upstash is our processor, and any access from the USA relies on the EU Standard Contractual Clauses. 24 months after creation we delete name, email address, phone number, click IDs and referring site; answers and result remain without personal reference for statistics. We delete earlier at your request.

The result page can only be reached through your personal link. It is not indexed by search engines, does not load the LinkedIn Insight Tag and does not pass its address on to other sites.

12. Consent management and cookies

On your first visit a dialog asks which categories you allow:

• Strictly necessary (always on): stores your choice and, in the partner area, your login session.

• Statistics: PostHog on start.klardenkmal.de (section 13).

• Marketing: LinkedIn Insight Tag, LinkedIn Conversions API and our cookie klar_attr (sections 14 and 15).

Without your consent, statistics and marketing stay off; all pages, forms and calculators work the same. Your choice applies to all sites listed in section 2. You can change or withdraw it at any time via "Cookie settings" in the footer; after you withdraw marketing consent we delete klar_attr and the LinkedIn cookies on our domain.

Strictly necessary cookies: klar_consent (Klardenkmal, 180 days) stores your choice, the version of the dialog and the time. kdk_partner, kdk_partner_intl and kdk_partner_de (Klardenkmal, 7 days) keep you logged in to the partner area. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent).

If the purposes change, we ask you again.

13. Statistics: PostHog (start.klardenkmal.de only)

With your consent to statistics we use PostHog (PostHog Inc., USA; processing on servers in the EU) on start.klardenkmal.de as our processor. It shows us where people drop out of the assessment. We record which steps and questions were shown and answered, without your answers, plus session recordings in which all text and inputs are masked; the contact form is not recorded, and on the result page we only record events such as the visit or a click on a contact option.

PostHog sets no cookies: the data stays in the page memory only and is sent to PostHog through our server. Page addresses and referring sites are not transmitted, and no person profiles are created. Any access from the USA relies on the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw at any time via "Cookie settings".

14. Marketing: LinkedIn Insight Tag

With your consent to marketing we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland). It measures which LinkedIn ads lead to enquiries, enables ads on LinkedIn for visitors of our sites and gives us aggregated reports without personal reference. It processes the page address, the referring site, the IP address (truncated or hashed by LinkedIn), device and browser attributes, the time and cookie identifiers. The tag is not loaded on the result page of the online assessment or in the partner area.

We are jointly responsible with LinkedIn for collecting this data and transmitting it to LinkedIn (Art. 26 GDPR); LinkedIn alone is responsible for any further processing. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Cookies: li_fat_id (LinkedIn, 30 days) holds the click ID of a LinkedIn ad. li_giant (LinkedIn, 7 days) is used for conversion tracking, and ln_or (LinkedIn, 1 day) controls whether analytics run on our domain. bcookie (LinkedIn, 1 year), li_sugr (LinkedIn, 90 days), UserMatchHistory (LinkedIn, 30 days), AnalyticsSyncHistory (LinkedIn, 30 days) and lidc (LinkedIn, 1 day) are used by LinkedIn for recognition and attribution. Our own cookie klar_attr (Klardenkmal, 30 days) stores the campaign parameters and the li_fat_id so that attribution survives when you move between our sites.

LinkedIn removes LinkedIn members' direct identifiers within 7 days and deletes the remaining pseudonymised data within 180 days. A transfer to LinkedIn Corporation in the USA relies on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

Withdrawal: at any time via "Cookie settings" in the footer. LinkedIn members can also turn off ads based on website visits in the ad settings of their LinkedIn account. More information: https://www.linkedin.com/legal/privacy-policy

15. Marketing: LinkedIn Conversions API

With your consent to marketing we also report certain events from our server directly to LinkedIn: submitting a contact or exposé form, entering your contact details and completing the online assessment, and, on its result page, clicks on WhatsApp, phone or an exposé, at most once per day and type. This lets LinkedIn know which ad led to an enquiry even when the browser blocks the Insight Tag.

We transmit: your email address as a SHA-256 hash (not in plain text), the LinkedIn click ID (li_fat_id) if present, the country code DE, the type and time of the event and a random event ID that lets LinkedIn recognise duplicate reports from the Insight Tag and the server. LinkedIn matches this data against LinkedIn member accounts and shows us aggregated results only. Without your consent to marketing, including when you have not given it in the browser you are currently using, nothing is transmitted.

If you have consented to marketing, we also later tell LinkedIn whether your enquiry led to a qualified conversation or a reservation (offline conversion). For this we upload a list with your email address, name, the event and its date to LinkedIn Campaign Manager once a month.

Responsibility and retention at LinkedIn as in section 14. Legal basis: Art. 6(1)(a) GDPR. You can withdraw at any time via "Cookie settings", with effect for future events.

16. Audience measurement: Vercel Web Analytics and Speed Insights

On the sites listed in section 2, but not on the result page of the online assessment, we measure audience reach with Vercel Web Analytics (Vercel Inc.). It works without cookies, builds no cross-device profiles and uses no identifiers suited to persistent recognition. It evaluates aggregated information such as page viewed, approximate region and device type.

We also count events: use of the Denkmal-AfA calculator, clicks on WhatsApp, phone or an exposé, submitted forms, and the display of the consent dialog and the choice made. With these events we send the campaign parameters of the entry address (utm_source, utm_medium, utm_campaign, utm_content); they name a campaign, not a person.

On klardenkmal.de, Vercel Speed Insights also measures loading and rendering times, likewise without cookies. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is measuring and improving our sites and campaigns.

17. Embedded content: YouTube and OpenStreetMap

The properties overview on klardenkmal.de embeds a YouTube video in privacy-enhanced mode (youtube-nocookie.com; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the page loads, your browser loads the player from Google's servers and transmits your IP address and technical information. According to YouTube, cookies are only set when you play the video. A transfer to Google LLC in the USA relies on the EU-US Data Privacy Framework.

The contact page shows an OpenStreetMap map (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). Loading the map transmits your IP address and technical information to OpenStreetMap's servers; the European Commission has adopted an adequacy decision for the United Kingdom.

Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is presenting our properties and our location clearly.

18. Fonts

Our sites use the fonts Plus Jakarta Sans and Inter. They are hosted locally and delivered together with the pages by our hosting provider (section 3). When a page loads, no connection is made to Google Fonts or any other font provider; no data is transmitted to third parties for this purpose and no cookies are set. The fonts are licensed under the SIL Open Font License 1.1.

19. Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw consent at any time with future effect; for statistics and marketing most easily via "Cookie settings" in the footer. You also have the right to lodge a complaint with a supervisory authority (in our case, the Saxon Data Protection Commissioner). To exercise your rights, email office@klardenkmal.de.

20. Status and changes

This privacy policy is dated October 2026. We update it when changes in processing or the law require.