Privacy Policy
Last updated: August 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Kan7 Werbeagentur
Owner: Kan Yao
Am Mittelfelde 59d
30519 Hannover
Germany
Email: info@kan7.de
Website: www.kan7.de
2. General Information on Data Processing
We process personal data only to the extent necessary to provide this website, respond to enquiries, prepare and carry out orders, or comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person.
Processing is carried out in particular on the following legal bases:
- Art. 6(1)(b) GDPR, where processing is necessary for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract;
- Art. 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation;
- Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
3. Hosting
This website is operated on a virtual server provided by:
Host Europe GmbH
c/o Spaces
Gertrudenstraße 30–36
50667 Cologne
Germany
The server region for our hosting contract is specified as Europe in the hosting customer area.
When you access this website, technically necessary connection data may be processed by the web server. This may include, in particular:
- IP address of the accessing device,
- date and time of access,
- page or file requested,
- amount of data transferred,
- referrer URL, where transmitted by the browser,
- browser type and browser version,
- operating system used,
- HTTP status code.
This processing is necessary to technically provide the website, ensure its stability and security, and identify technical errors or abusive access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable operation of our website.
Server log data is stored only for as long as necessary for technical operation, security and error analysis. Data is stored for longer periods only where there is a legal basis for doing so.
Host Europe provides a data processing agreement pursuant to Art. 28 GDPR for the processing of personal data in connection with its hosting services.
4. SSL/TLS Encryption
This website uses SSL/TLS encryption.
An encrypted connection can be recognised in particular by the website address beginning with “https://”.
This protects data transmitted between your browser and our server against unauthorised access during transmission.
5. Contact by Email
You may contact us at:
If you contact us by email, we process the information that you voluntarily provide. This may include, in particular:
- name,
- company,
- email address,
- telephone number,
- content of your message,
- information about products or projects,
- voluntarily submitted files and attachments.
The data is used solely to process your enquiry, prepare an offer and, where applicable, manage the resulting business relationship.
Where your enquiry relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.
For other business enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to business enquiries and maintaining business contacts.
Emails and related data are deleted when they are no longer required for handling the enquiry or the subsequent business relationship, provided that no statutory retention obligations require further storage.
Statutory commercial and tax-related retention obligations remain unaffected.
6. Contact Form
We provide a contact form on our website for business enquiries.
The following information may be processed in particular:
- name or contact person,
- company,
- email address,
- telephone number or WhatsApp number, where provided voluntarily,
- requested service,
- type of product and approximate quantity,
- message or project description,
- preferred method of contact.
Only information required to process an enquiry is designated as mandatory. Any additional information is voluntary.
The information entered in the contact form is initially processed exclusively within the user's browser.
After the form is submitted, an email draft addressed to our business mailbox info@kan7.de is opened in the email application configured on the user's device.
The message is transmitted to Kan7 only when the user personally sends the email draft from their email application.
The form data is not automatically transmitted to our web server and is not stored in a customer database on the website.
Once the email has been sent, the further processing of the message is governed by the provisions set out under “Contact by Email”.
The form uses browser-based plausibility checks and an invisible honeypot field to reduce automated submissions.
External CAPTCHA services such as Google reCAPTCHA are not used.
The contact form includes a reference to this Privacy Policy.
The corresponding checkbox serves solely to confirm that the user has read and acknowledged the privacy information. It does not constitute additional consent to data processing that is necessary for handling the enquiry.
7. File Uploads
The website currently does not provide a publicly accessible file upload function.
Reference images, product lists or other files required for a project may be submitted after initial contact via an agreed method, in particular by email.
Such files are subject to the provisions regarding email communication and the relevant business relationship.
8. Images, Videos and 360° Product Views
Images, animations, GIF files, videos and image sequences used for 360° product views on this website are provided through the website itself or our own hosting server.
We do not use externally embedded media players or platforms such as YouTube, Vimeo, Instagram or TikTok for this purpose.
Interactive 360° product views are operated locally within the user's browser. Using these interactive functions does not itself transmit data to external providers.
9. Fonts
The website uses fonts provided locally or through the operating system of the user's device.
Fonts are not automatically loaded from Google Fonts, Adobe Fonts or comparable external font services.
Therefore, merely displaying the fonts does not establish a connection to such third-party providers.
10. Cookies and Local Browser Storage
Under the currently intended technical configuration, this website does not use non-essential cookies for analytics, advertising or marketing purposes.
We also do not create personal usage profiles using localStorage, sessionStorage, IndexedDB or comparable browser storage technologies.
If functions requiring prior consent are introduced in the future, such functions will only be activated after the required consent has been obtained, and this Privacy Policy will be updated accordingly.
11. No Web Analytics or Marketing Tracking
We currently do not use, in particular, the following analytics or tracking services:
- Google Analytics,
- Google Tag Manager,
- Meta Pixel,
- LinkedIn Insight Tag,
- Matomo,
- Hotjar,
- Microsoft Clarity,
- or comparable marketing or tracking services.
This website does not perform cross-service tracking of visitor behaviour for advertising or marketing purposes.
12. Links to External Websites and Social Media Services
Our website may contain ordinary links to external websites or services, currently including WhatsApp.
These are not embedded social media plugins.
Simply visiting our website does not establish a connection to the relevant external provider as a result of such an ordinary link.
Only when you actively click such a link do you leave our website and establish a connection with the respective provider.
From that point onward, the privacy policies and data processing terms of the respective external provider apply.
We do not have full control over the processing of data by an external provider after you leave our website.
13. Multilingual Website
The German and English versions of this website are provided directly within our website project.
Automated translation services such as Google Translate or DeepL are not integrated for the translation or display of the website.
Switching between languages therefore does not transmit data to an external translation provider.
14. Recipients of Personal Data
Personal data is disclosed to recipients only where this is necessary to provide our technical infrastructure, carry out an order, or comply with a legal obligation.
Recipients may include, in particular:
- our hosting provider,
- IT service providers where applicable,
- shipping and logistics companies in connection with specific orders,
- tax advisers or public authorities where required by law.
We do not disclose personal data to address brokers or comparable third parties for advertising purposes.
15. Data Retention
Personal data is stored only for as long as necessary for the respective processing purpose.
The data is subsequently deleted unless statutory retention obligations or other legal grounds require continued storage.
Business and tax-relevant documents may be retained for longer periods in accordance with statutory retention requirements.
16. Transfers to Third Countries
The website is technically designed so that, during normal use, personal data is not automatically transmitted to external services outside the European Union or the European Economic Area wherever possible.
If you voluntarily click an external link, for example to an international social media or communication service, the respective provider may process personal data outside the European Union or the European Economic Area.
Such processing is governed by the privacy policy of the respective provider.
17. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
Right of Access
Under Art. 15 GDPR, you have the right to request information as to whether we process personal data relating to you and, where applicable, what data is processed.
Right to Rectification
Under Art. 16 GDPR, you have the right to request correction of inaccurate personal data or completion of incomplete personal data.
Right to Erasure
Under Art. 17 GDPR, you have the right, subject to the statutory requirements, to request the deletion of your personal data.
Right to Restriction of Processing
Under Art. 18 GDPR, you have the right, subject to the statutory requirements, to request restriction of the processing of your personal data.
Right to Data Portability
Where the statutory requirements are met, Art. 20 GDPR gives you the right to receive personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
Right to Object
Where processing is based on Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to such processing on grounds relating to your particular situation.
To exercise your rights, you may contact us at:
18. Right to Lodge a Complaint with a Supervisory Authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority responsible in particular for our place of business is:
**The State Commissioner for Data Protection of Lower Saxony
(Der Landesbeauftragte für den Datenschutz Niedersachsen)**
Prinzenstraße 5
30159 Hannover
Germany
Telephone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
You may also contact any other data protection supervisory authority that is competent under the applicable legal provisions.
19. No Automated Decision-Making
We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with this website.
20. Security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and unauthorised disclosure.
Our security measures are reviewed and adapted in accordance with technological developments and operational requirements.
21. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy if the technical functions of the website, the service providers used, or applicable legal requirements change.
The current version published on this website shall apply.
Last updated: August 2026