Privacy Policy

Last updated: 17 September 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy set out below.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the "Information about the controller" section of this privacy policy.

How do we collect your data?
Your data is collected, on the one hand, by you providing it to us. This may, for example, be data you enter into a contact form.

Other data is collected automatically, or after you give your consent, when you visit the website through our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated through the website, the data transmitted is also processed for contract offers, orders or other service requests.

What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any further questions on the subject of data protection.

2. Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated via a website.

The website itself is a static site and is hosted on Cloudflare Pages, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Inquiries submitted via the contact form, as well as price calculations in the price calculator/shop, are transmitted to our own server system (intern.nanofassadendaemmung.de); see Section 4 for details. This server system is also connected via the Cloudflare network: Cloudflare receives the encrypted connection, protects the server against attacks and forwards the request to it. When you access the website and when these requests are made, Cloudflare automatically collects information in so-called server log files that your browser automatically transmits: browser type and version, operating system used, referrer URL, time of the server request, and IP address. If a connection fails, your browser may also report this to Cloudflare (Network Error Logging). This data is not merged with data from other sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and security of their website.

Cloudflare processes this data as our processor (Art. 28 GDPR). Since Cloudflare, Inc. is a US company and operates data centres worldwide, processing may also take place outside the European Union, in particular in the USA. The transfer is based on Cloudflare, Inc.’s certification under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023); in addition, the European Commission’s standard contractual clauses (Implementing Decision (EU) 2021/914) form part of the contract with Cloudflare. For details on data processing by Cloudflare, please see the provider's privacy policy: www.cloudflare.com/privacypolicy.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various pieces of personal data are collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

mkm International GmbH
Represented by the managing director: Kevin Lind
Boschstr. 16, 47533 Kleve, Germany

Phone: +49 28 21 / 786 99 - 85
Email: [email protected]

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (such as names, email addresses, etc.).

Who is responsible for what (Art. 26 and Art. 28 GDPR)

When you send us an inquiry, we work on your project together with the sales agent responsible for you and – once it comes to execution – with the executing business; both receive your inquiry and project data to the extent they need it for advice and execution. Who is responsible under data protection law depends on the individual step – not on the company. Four steps, four answers:

Receiving your inquiry, keeping it in our internal area and passing it to a partner business: we are solely responsible for this.

Working on your project jointly, once a sales agent or an executing business has taken it on – maintaining its status, filing documents, corresponding with you: we and the respective partner are jointly responsible for this. An agreement on joint controllership under Art. 26 GDPR is in place for it.

The executing business’s own quotation, its contract with you and its performance: for these it is solely responsible. The contract for the work is concluded between you and that business, not with us.

If we produce the related documents – quotation, order confirmation, invoice – on its letterhead, we do so as an office service on its instructions. For that processing it is the controller and we are its processor (Art. 28 GDPR).

None of this changes your rights: access, rectification, erasure, restriction, data portability and objection can be asserted against either of us (Art. 26(3) GDPR); we coordinate our answer so that you do not receive two different ones. We inform you at collection via this website and the contact form; the partner involved informs you when it collects data directly from you, for example during an on-site appointment. mkm International GmbH, Boschstr. 16, 47533 Kleve, Germany, [email protected] is available as the point of contact. Irrespective of this, you may contact a data protection supervisory authority at any time.

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place once these reasons no longer apply.

Specifically for projects: we keep documents relating to a commissioned project for ten years after the project has been completed. The decisive factor is the limitation periods – claims for defects in a building become time-barred five years after acceptance (§ 634a(1) no. 2 of the German Civil Code), and claims for damages, irrespective of our knowledge, only after ten years (§ 199(3) no. 1); we must be able to defend ourselves for that long. In addition, the retention obligations under commercial and tax law apply, which range from six to ten years depending on the document (§ 257 German Commercial Code, § 147 German Fiscal Code). If your inquiry does not lead to an order, we delete it as soon as it is clear that this will remain so, and at the latest after three years at the end of the year.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data pursuant to Art. 9(1) GDPR are processed. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary for the fulfilment of a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data; this also applies to profiling based on these provisions. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent it is related to such direct marketing.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Access, rectification and erasure

Within the scope of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or erasure of this data. You may contact us at any time regarding this or any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction of processing exists in the following cases: if you dispute the accuracy of your personal data stored by us; if the processing of your personal data was/is unlawful; if we no longer need your personal data, but you need it to assert, exercise or defend legal claims; or if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether our legitimate grounds override yours.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the padlock icon in your browser bar.

Objection to promotional emails

We hereby object to the use of contact data published within the scope of the legal notice (Impressum) obligation for the purpose of sending unsolicited advertising and information materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising material being sent, such as spam emails.

4. Data collection on this website

Sales agent attribution (local storage)

If you access our website via a link containing a sales agent identifier (e.g. "?vb=1234"), we store this identifier locally in your browser (local storage) for 30 days, so that it can be automatically attributed to the responsible sales representative in a subsequent email or WhatsApp inquiry. The identifier is only inserted into the inquiry you yourself initiate (subject/text of the email or WhatsApp message) and is not automatically transmitted to third parties or to us. When contacting us by phone, such transmission is technically not possible.

Storage only takes place once you have agreed in the notice window; the legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your agreement we store nothing in your browser – the attribution then applies only to your current visit. You can withdraw at any time, at the end of this section.

Discount code from shared links (local storage)

If you access our website via a link containing a discount code (e.g. “?code=MUSTERMANN”), we store this code locally in your browser (local storage) for 30 days. It is then applied automatically in the price calculator and the complete offer and is carried over into any inquiry you send, so that the discount can be granted and the inquiry attributed to the referring partner. To check its validity, the code is transmitted to our own server system (see “Price calculator, shop and discount codes”). Storage only takes place once you have agreed in the notice window; the legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your agreement we store nothing in your browser – the attribution then applies only to your current visit. You can withdraw at any time, at the end of this section.

Storage-notice cookie (local storage)

When you confirm the notice banner about local storage with "Understood", we store this confirmation locally in your browser (local storage) so that the notice is not shown to you again on a repeat visit. This is a purely technical storage necessary for the operation of the website, without any analytics or tracking purpose, carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR). You may end this storage at any time via your browser settings (clear local storage).

Contact form

If you send us inquiries via the contact form, the details you provide in the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. The data is transmitted in encrypted form to our own server system (intern.nanofassadendaemmung.de), where it is stored in our internal customer and project management system and processed only by those persons who have access according to their role in the project. In addition to us, your details are received by the sales agent responsible for you and, once the work is commissioned, by the executing company – in each case as joint controllers with us (see "Joint controllership"). Beyond that, we do not share your data without your consent; exceptions are our tax adviser within the scope of bookkeeping and our IT service provider as a processor.

If you attach documents – photos, plans or floor plans as image or PDF, up to ten files – these are transmitted to our system as soon as you select them and are held there for no more than 24 hours at first, together with the IP address they came from. If you submit the inquiry, they are moved into the project file; if you do not, they are deleted automatically. Please note that images may contain information about other people.

This data is processed on the basis of Art. 6(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions — in particular retention periods — remain unaffected.

Newsletter

If you tick the newsletter box in the contact form or subscribe in the internal area, we use your e-mail address and your name to inform you about news on Nano facade insulation, about changes to the system and about funding programmes and their deadlines. Consent is optional; the processing of your enquiry does not depend on it (Art. 7(4) GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 7(2) no. 2 of the German Act against Unfair Competition). You may withdraw it at any time, without giving reasons and at no cost other than transmission costs at basic rates: informally to [email protected], via the unsubscribe link in every newsletter e-mail, or in the internal area. The withdrawal takes effect for the future; the lawfulness of processing carried out until then remains unaffected (Art. 7(3) GDPR).

We do not pass your address on to third parties for their own advertising purposes. For the technical dispatch we may use a service provider as a processor (Art. 28 GDPR). To document your consent (Art. 7(1) GDPR) we store its wording, the point in time and the IP address from which it was given. After a withdrawal we remove the address from the distribution list; the declaration and the withdrawal remain stored as evidence.

Price calculator, shop and discount codes

If you use the price calculator or the shop on this website, or enter a discount code, your browser sends a technical request to our own server system (intern.nanofassadendaemmung.de). In doing so, your IP address and the calculation data you enter (e.g. area, selected tariff, discount code) are transmitted and processed exclusively in order to calculate the price or to verify the discount code. These calculation requests are not stored permanently beyond technically customary server log files; personal data is only stored if you subsequently submit an inquiry yourself (see "Contact form"). The legal basis is Art. 6(1)(b) GDPR (implementation of pre-contractual measures at your request) as well as our legitimate interest in providing the calculator function (Art. 6(1)(f) GDPR).

Inquiries by email, phone or WhatsApp

If you contact us by email, phone or WhatsApp, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. If your inquiry concerns a project, your details are also received by the sales agent responsible for you and, once the work is commissioned, by the executing company – in each case as joint controllers with us (see "Joint controllership"). Beyond that, we do not share your data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.

5. Analytics tools, tracking and social media

This website does not use any analytics or tracking tools (such as Google Analytics, Matomo, etc.) or cookies for analytics or advertising purposes. No plugins or content from social networks (such as Facebook, Instagram, LinkedIn, XING, Pinterest) are embedded through which data could be transmitted to third parties when visiting the website. No external fonts or other third-party resources are loaded either.

Our own presences on Facebook, Instagram and TikTok are a separate matter; what happens to your data there is described in Section 6.

The only information stored client-side is the local storage described in Section 4: the sales agent attribution, the discount code from shared links and the storage-notice status. These take place exclusively locally in your browser, are not automatically transmitted to us or third parties, and do not serve any analysis or tracking of your usage behaviour.

6. Our presences on social networks

We maintain a Facebook page, an Instagram profile and a TikTok account. This section describes what happens to your data when you visit these presences, follow us there, comment on a post or write to us. It supplements the networks’ privacy policies; we have only limited influence on their own processing.

Who is responsible

Insofar as we decide on the processing, mkm International GmbH is responsible (for contact details, see “Information about the controller”). We have not appointed a data protection officer. The networks are operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Facebook and Instagram), and by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (TikTok). They also process their users’ data under their own responsibility, for example for advertising, in accordance with their own privacy policies.

Statistics on our presences

Meta provides us with aggregated statistics on our Facebook page (“Page Insights”), for example how many people have seen a post. We and Meta are jointly responsible for the processing from which these statistics are generated (Art. 26 GDPR; Court of Justice of the European Union, judgment of 5 June 2018, C-210/16). Meta’s agreement “Page Insights Controller Addendum” applies to this: facebook.com/legal/terms/page_controller_addendum. In it, Meta assumes the obligations under the GDPR for this data, in particular the provision of information about the processing and the fulfilment of your rights; only Meta can decide on the processing itself. Meta explains which data is processed for this purpose, and how you can reach Meta, at facebook.com/legal/terms/information_about_page_insights_data. Meta also provides us with aggregated statistics on our Instagram profile; insofar as we and Meta are jointly responsible for this, the above applies accordingly.

TikTok also compiles aggregated statistics on our account, for example on views, likes and comments. TikTok’s agreement on joint controllership (“TikTok Analytics Joint Controller Addendum”) applies to this: tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum. Under it, TikTok is responsible, among other things, for its own legal basis, the fulfilment of your rights and the security of the data. TikTok explains further details at tiktok.com/legal/page/global/information-about-tiktok-analytics.

In both cases, we only see aggregated figures, not information about individual persons. The legal basis for our part is our legitimate interest in aligning our presences with what interests visitors (Art. 6(1)(f) GDPR). If you contact us with a request concerning these statistics, we will forward it to Meta or TikTok, as applicable.

Comments on our posts

If you comment on a post on our Facebook page or our Instagram profile, we retrieve the comment via Meta’s interface into our internal area in order to read it, reply to it and, if necessary, hide or delete it. In doing so, we process your name or username, insofar as Meta transmits it, the identifier of the comment and, where applicable, of your profile, the text and the time. We do not copy profile pictures or images from comments. We do not retrieve comments on TikTok.

The legal basis is our legitimate interest in answering questions on our posts and keeping our presences free of spam, insults and unlawful content (Art. 6(1)(f) GDPR). Only the persons who manage our presences have access. Our replies appear publicly in the name of our page or our profile.

We delete our copy after 90 days at the latest. If a comment is deleted on the network – by you or by us – we also remove it at our end at the next synchronisation. On the network itself, a comment remains in place until it is deleted there.

Messages

If you write to us via Messenger, Instagram Direct or TikTok, we read and answer the message on the respective network. If it concerns a project, we transfer your details to our internal area; the information on your enquiry in Section 7 then applies. The legal basis is Art. 6(1)(b) GDPR insofar as a quotation or a contract is concerned, and otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR).

Transfer to countries outside the EU

Meta and TikTok also process data outside the European Union. For this, Meta relies on adequacy decisions of the European Commission – for transfers to Meta Platforms, Inc. in the USA, on the EU-U.S. Data Privacy Framework – and otherwise on the Commission’s standard contractual clauses. TikTok relies on adequacy decisions and on standard contractual clauses. Details are set out in the networks’ privacy policies.

Your rights

The rights set out in Section 3 also apply here. You may object at any time to processing based on our legitimate interest (Art. 21 GDPR); we will then delete a comment held by us. What the networks themselves store about you can only be handed over or deleted by them; contact them for this – or us, and we will help.

The networks’ privacy policies: Meta (Facebook), Instagram, TikTok.

7. Data protection information for your enquiry

This is the wording you take note of with the tick box in the contact form. It is recorded in your file together with the time, the version and the IP address – so that it is later clear what you were informed about. The binding original is the German version. Version 2026-09-17.1.

Who is responsible

The controller for the processing of your data is mkm International GmbH, represented by its managing director Kevin Lind, Boschstr. 16, 47533 Kleve, Germany, telephone +49 2821 78699-85, e-mail [email protected].

We have not appointed a data protection officer; the requirements of Section 38 BDSG (German Federal Data Protection Act) are not met. Please address questions about data protection to the above address.

What data we process

From your enquiry: name, e-mail address, telephone number, the address of the property, your message and – if you used the price calculator – the configuration you entered there and any discount code you provided.

In the further course: the correspondence about the project, documents and photographs you send us, quotations, order confirmations and invoices as well as appointments and notes on the state of processing.

Technically: the time of the enquiry and the IP address it was sent from. We store them in order to be able to prove which version of this information and of the terms of use was available to you – and to fend off abusive enquiries.

For what purpose and on what legal basis

To process your enquiry and to prepare and perform a contract for the insulation of your property. The legal basis is Art. 6(1)(b) GDPR – the processing takes place at your request and is necessary for that purpose. We do not require consent for this; the tick box in the form merely confirms that you have taken note of this information.

To pass the data on to the responsible sales agent and to the executing company so that you receive advice and a quotation. The legal basis is Art. 6(1)(b) GDPR in so far as it concerns the initiation of your contract with the executing company, and otherwise our legitimate interest in the brokerage (Art. 6(1)(f) GDPR).

To comply with our obligations under tax and commercial law, in particular the retention of invoices and business letters. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 147 AO and Section 257 HGB.

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. The price calculator determines a guide price; your quotation is decided by people.

We do not send you advertising on this basis. The newsletter is the only thing for which we ask for consent (Art. 6(1)(a) GDPR, Section 7(2) no. 2 UWG) – voluntary, to be ticked separately and revocable at any time. Without it we process your enquiry just the same.

Who gets to see the data

Within the company only those people who are involved in your project: the responsible sales agent, the executing company and the administration. The internal portal restricts access to the participants of the respective project.

Outside the company: the company commissioned with the execution, in so far as it needs the data for the works; our tax adviser within the scope of the bookkeeping; our IT service provider as a processor under Art. 28 GDPR for the operation of the servers and of the e-mail system; Cloudflare, Inc. as a processor for delivering the website and for the connection to the internal area.

The internal area in which your project is managed runs on a server in Germany.

The public website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., San Francisco, USA. The encrypted connection to the internal area also runs via the Cloudflare network – and with it everything you enter into the contact form or the price calculator. When you call up the pages and when you submit, log data (including your IP address) and the transmitted details may therefore also be processed in the USA. The basis is Cloudflare's certification under the EU-U.S. Data Privacy Framework, supplemented by the standard contractual clauses of the European Commission.

If someone referred you, that referrer learns that their recommendation has led to an order – but not the details of your project.

Who is responsible for what (Art. 26 and Art. 28 GDPR)

Several parties are involved in your project, and who is responsible under data protection law depends on the individual step – not on the company. Four steps, four answers:

Receiving your enquiry, managing it in the internal area and passing it on to a company: we are solely responsible for that.

Working on your project jointly, as soon as a sales agent or an executing company has taken it on – keeping the status up to date, filing documents, writing to you: for that we and the respective partner are jointly responsible. A joint controllership arrangement under Art. 26 GDPR is in place for this.

The quotation of the executing company, its contract with you and the performance of that contract: for this it is solely responsible. The contract for the execution is concluded between you and that company, not with us.

Where we produce the documents for it – quotation, order confirmation, invoice – on its letterhead, we do so as an office service on its instructions. For this processing it is the controller and we are its processor (Art. 28 GDPR).

For you this changes nothing about your rights: you can assert them against either party (Art. 26(3) GDPR). We inform you at the point of collection via the website and the contact form; the partner involved informs you when it collects information directly from you, for example during an on-site appointment. Your contact point is mkm International GmbH, Boschstr. 16, 47533 Kleve, Germany, [email protected].

How long we store data

We keep documents relating to the project for ten years after the project has been completed. The limitation periods are decisive: claims for defects in a building become time-barred five years after acceptance (Section 634a(1) no. 2 BGB), claims for damages irrespective of our knowledge only after ten years (Section 199(3) no. 1 BGB) – we must be able to defend ourselves for that long.

In addition, the retention obligations under commercial and tax law apply. Depending on the document they are six, eight or ten years (Section 257 HGB, Section 147 AO); for individual documents they are therefore shorter than the ten years above.

If your enquiry does not lead to an order, we delete it as soon as it is established that this will remain so, but no later than three years afterwards at the end of the year.

We delete earlier if you request it and no retention obligation stands in the way. If one does, we block the data against further use instead of deleting it.

Your rights

You have the right to information about the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on a legitimate interest (Art. 21).

An informal message to [email protected] is sufficient. We do not charge anything for the information.

You may also lodge a complaint with a supervisory authority, regardless of whether you have contacted us beforehand. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.

Withdrawal and objection

If you have consented to the newsletter, you can withdraw that consent at any time – without giving reasons and in the same simple form in which you gave it (Art. 7(3) GDPR). The unsubscribe link is in every newsletter e-mail; a message to [email protected] is equally sufficient.

You may object at any time to processing based on our legitimate interest (Art. 21 GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds.

The processing of your enquiry itself is not based on consent but on your enquiry – it can therefore not be withdrawn, but it can be ended: write to us that you no longer wish to receive a quotation. What we have to process in order to perform a contract already concluded, or because of a retention obligation, we continue to process.

Whether you have to provide the data

You do not have to. Without a name and a way of reaching you we cannot answer your enquiry, however; without the address of the property we cannot calculate a quotation. The information is not a legal obligation but the precondition for us being able to do something for you.

8. Consent to the e-mail newsletter

This is the wording of the consent you give with the optional tick box in the contact form. It is likewise recorded with the time, the version and the IP address – without that proof we would not be allowed to send you anything. The binding original is the German version. Version 2026-09-05.1.

What you consent to

I consent to mkm International GmbH, Boschstr. 16, 47533 Kleve, Germany, informing me by e-mail about news relating to Nano facade insulation: about products and system changes, about funding programmes and their deadlines as well as about application examples and practical advice.

The e-mails are sent as the occasion arises, as a rule not more than once a month. My e-mail address is used for sending them, together with my name for the salutation.

Voluntary nature

This consent is voluntary. The processing of my enquiry, a quotation and the execution of a project do not depend on it (Art. 7(4) GDPR).

Withdrawal

I may withdraw this consent at any time, without giving reasons and without any costs other than the transmission costs at the basic rates. The withdrawal takes effect for the future; the lawfulness of the processing carried out until then remains unaffected (Art. 7(3) GDPR).

An informal message to [email protected] is sufficient for the withdrawal. In addition, every newsletter e-mail will contain an unsubscribe link that works without logging in. In the internal area the withdrawal can be declared under “My account”.

No passing on for advertising purposes

My address will not be passed on to third parties for their advertising purposes. A service provider may be used for the technical dispatch, acting exclusively on the instructions of mkm International GmbH (Art. 28 GDPR).

Proof and storage period

As proof of the consent (Art. 7(1) GDPR), the wording of this declaration, the time and the IP address from which it was given are stored.

After a withdrawal the address is removed from the distribution list. The declaration and the withdrawal are retained as proof – without them it would later be impossible to demonstrate either that consent was given or that the withdrawal was observed.