Data protection
Privacy policy of KUGU Home GmbH according to the DSGVO
Privacy policy
The protection of our customers' data is a top priority for KUGU Home. It is important to us to explain to you when and how we store data and how we use this data. In the following, we therefore describe our comprehensive data protection concept. From this it follows that we process data in accordance with the statutory provisions. In this way, we can ensure that we can provide our services with the highest level of protection for your data.
Overview
Person responsible
Data protection officer
Legal basis for data processing
Provision of the website
Contact/E-mail contact
Provision of contractual services and registration
Newsletter service
Cookies and range measurement
Web analysis by Google Analytics
Google Tag Manager
Purposes of the processing of personal data
Voluntary data
Recipients / passing on of data
Data processing outside the European Union
Rights of the data subject
Deletion of data
Security
Right of complaint to a supervisory authority
Amendment of this data protection notice
Person responsible
The responsible party for this website is:
KUGU Home GmbH
Saarbruecker Strasse 20
10405 Berlin
germany
Phone: +49 30 92152990
email: kundenservice@kugu.de
Site: www.kugu.de
Data protection officer
The external data protection officer of the responsible party is:
Berit Schubert, DataSolution LUD GmbH
Isarstraße 13
D-14974 Ludwigsfelde
Germany
Phone: +49 3378 205729
email: datenschutz@kugu.de
Legal basis for data processing
In order to provide you with our website and related services, we process personal data on the basis of the following legal grounds:
- Consent (Art. 6 para. 1 lit. a) DSGVO).
- for the fulfillment of contracts (Art. 6 para. 1 lit. b) DSGVO)
- on the basis of a consideration of interests (Art. 6 para. 1 lit. f) DSGVO)
- for the fulfillment of a legal obligation (Art. 6 para.1 lit. c) DSGVO).
We will refer to the relevant terminology in connection with the respective processing so that you can classify on which basis we process personal data.
If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with effect for the future.
If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing of personal data, taking into account the requirements of Art. 21 DSGVO.
Provision of the website
When you visit our website, personal data is processed in order to display the content of the website on your terminal device.
In order for the pages to be displayed in your browser, the IP address of the terminal device you are using must be processed. In addition, there is further information about the browser of your end device.
We are obliged by data protection law to also ensure the confidentiality and integrity of the personal data processed with our IT systems.
For this purpose and out of this interest, the following data is logged on the basis of a balancing of interests:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The user's Internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system accesses our website
(7) Websites that are accessed by the user's system via our website
The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user.
The data is also used to identify and correct errors on the website.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Contact/E-mail contact
We offer a contact form on our website, which you can use to request information about our products or services or to contact us in general. We have marked the data that is absolutely necessary for you to respond to a request as mandatory fields. Information on other data fields is voluntary.
We need this information to process your request, to address you correctly and to send you a reply. In the case of specific inquiries, data processing is carried out to fulfill a contract or to initiate a contract. In the case of general inquiries, processing takes place on the basis of a balancing of interests.
Inquiries received via the contact form on our website are processed electronically by us in order to respond to your inquiry. In this context, other persons or departments and possibly third parties may also become aware of the form content that you have sent.
The form data is transmitted via the Internet using encrypted connections.
If the contact is a pre-contractual relationship (e.g. offer), the transmitted data will also be stored in our CRM system and used to execute the contract. If there is no contractual relationship, we delete the data after one year at the end of the year.
Provision of contractual services and registration
On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:
At the time of registration, the following data is also stored:
(1) The IP address of the user
(2) Date and time of registration
As part of the registration process, the user's consent to the processing of this data is obtained. If the registration serves the fulfillment of a contractor the initiation of a contract, the legal basis of the fulfillment or initiation of the contract applies here.
For the support, advice and advertising of corporate customers, we also collect and use the contact person, telephone number and postal address. We obtain this information from various sources, either through an inquiry (e-mail or telephone), but also through events, trade fairs, business cards received by our sales staff, etc.
We use this contact information exclusively for our own purposes and to tailor our own sales activities to your needs.
For the processing of your data in relation to the implementation of contractual services as well as marketing activities, we use the CRM system of the company HubSpot Inc, 25 First Street, 2nd Floor, MA 02141 Cambridge. Appropriate agreements on order processing have been concluded with the service provider. HubSpot has committed itself to handling your transmitted data inaccordance with data protection laws. To protect your data, the service provider implements organizational and technical security measures.
Newsletter service
On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.
In addition, the following data is collected during registration:
(1) IP address of the calling computer
(2) Date and time of registration
For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter. This also enables revocation of consent to the storage of personal data collected during the registration process.
Cookies and range measurement
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
(1) language settings
(2) Log-in information
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
(1) Adoption of language settings
(2) Remembering search terms
The user data collected through technically necessary cookies are not used to create user profiles. Our legitimate interest in processing personal data also lies in these purposes.
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can bedeleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.
Web analysis by Google Analytics
Our website uses Google Analytics 4, a web analytics service provided by Google LLC. The entity responsible for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Analytics uses cookies that enable the analysis of how you use our websites. The information generated by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
We use the User-ID feature. The User ID allows us to assign one or more sessions (and the activities within those sessions) to a unique, permanent ID, thereby analyzing user behavior across devices.
We also use Google Signals. Through Google Signals, additional information about users who have personalized ads enabled (interests and demographic data) is collected in Google Analytics, and ads can be delivered to these users in cross-device remarketing campaigns.
In Google Analytics 4, IP anonymization of IP addresses is enabled by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser in connection with Google Analytics is not merged with other Google data.
During your website visit, your user behavior is recorded in the form of “events.” Events may include:
• Page views
• First visit to the website
• Start of the session
• Your “click path,” i.e., interactions with the website
• Scrolls (whenever a user scrolls to the end (90%) of the page)
• Clicks on external links
• Internal searches
• Interactions with videos
• File downloads
• Ads viewed/clicked
• Language settings
In addition, the following are recorded:
• Your approximate location (region)
• Your IP address (in shortened form)
• Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
• Your internet service provider
• The referrer URL (the website/advertising medium through which you arrived at this website)
Purposes of Processing
On our behalf, Google will process the transmitted information to evaluate the use of the website by website visitors and to compile reports on website activities. We use the reports provided by Google Analytics to analyze the performance of our website.
Recipients
Possible recipients of the data are:
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
It cannot be ruled out that U.S. authorities may access the data stored by Google.
Third-Country Transfer
To the extent that data is processed outside the EU/EEA and no data protection level corresponding to the European standard exists, we have concluded EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is headquartered in California, USA. It cannot be ruled out that data may be transferred to the USA and that U.S. authorities may access the data stored by Google. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA. It is possible that no legal remedies are available to you against access by government agencies.
Storage Period
The data we send and link with cookies will be automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month.
Legal Basis and Withdrawal of Consent
We process your data with the help of Google Analytics 4 based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG. You grant your consent via the settings for the use of cookies (cookie banner / consent manager), through which you can also withdraw your consent at any time with effect for the future in accordance with Art. 7(3) GDPR.
You may also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if your browser is set to reject all cookies, certain functionalities on this and other websites may be limited. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of such data by Google, by either (i) not granting consent to set the cookie or (ii) downloading and installing the browser add-on to deactivate Google Analytics, which you can find HERE.
For more detailed information, please refer to Google’s Terms of Service and Google’s Privacy Policy.
Google Tag Manager
Type and scope of processing
We use the Google Tag Manager of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services in order to evaluate user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA takes place in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where there is no adequacy decision by the European Commission (including US companies that are not EU-U.S. DPF certified), we have other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be found at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of transfers to third countries, there may be risks unknown in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager:
https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Purposes of the processing of personal data
We process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations to our customers or the protection ofour legitimate interests. In the case of inquiries from you outside of an active customer relationship, we process the data for the purposes of sales and advertising. You can object to the use of your personal data for advertising purposes at any time.
Voluntary data
If you provide data to us voluntarily, e.g. in forms, and this is not required for the fulfillment of our contractual obligations, we process this data on the legitimate assumption that the processing and use of this data is in your interest.
Recipients / passing on of data
As a matter of principle, data that you provide to us will not be passed on to third parties. In particular, your data will not be passed on to third parties for their advertising purposes.
However, we may use service providers for the operation of this website or for other products or services of ours. Here it may happen that a service provider obtains knowledge of personal data. We select our service providers carefully - especially with regard to data protection and data security - and take allmeasures required by data protection law for permissible data processing.
Data processing outside the European Union
Insofar as personal data is processed outside the European Union, you can find this in the previous explanations.
Rights of the data subject
You have the right to information about the personal data concerning you. You can contact us for information at any time. Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are entitled to this by law. Finally, you have a right to object to processing within the scope of the law. A right to data portability also exists within the framework of the data protection legal requirements. If you have any questions about your rights and how to exercise them, please contact the controller or our data protection officer.
Deletion of data
As a matter of principle, we delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion is only considered after expiry of the respective retention obligation.
Security
We use technical and organizational security measures in accordance with Art.32 DSGVO to protect your data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments. Access to this data is only possible for a small number of authorized persons and persons with a special obligation to protect data who are involved in the technical, administrative or editorial management of data.
Right of complaint to a supervisory authority
You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.
Amendment of this data protection notice
We revise this data protection notice when changes are made to this website oron other occasions that make this necessary. You will always find the current version on this website.
Last updated | September 2025