Privacy

This notice covers kursfaden.de and Kordwerk's shared platform services.

Controller

Youssef Hanna, Bahnhofstrasse 126a, 14532 Stahnsdorf, Deutschland. Privacy contact: youssef.hanna@haithor.com.

Website and contact

The website runs on a Hetzner server in Germany, with Google Cloud providing the public HTTPS gateway and DNS. These services process technical request data, including IP addresses, request time, URL and browser information, to deliver and secure the service. We rely on our legitimate interest in operating a functional, secure website. This marketing site uses no advertising or analytics cookies. Email inquiries are processed to answer your request or prepare a contract. Platform email is delivered through Brevo under kordwerk.de, with the relevant product's sender name.

Demo appointments

You can choose a demo appointment directly on this website. We process your name, email address, company, selected time, preparation answers and the source product page and path to arrange and prepare the conversation. Our shared Kordwerk onboarding service stores these details on our Hetzner server. Google Calendar checks availability and creates the calendar invitation with Google Meet. Your booking details and answers appear in the calendar event; private calendar contents are never shown to website visitors. A short-lived booking identifier prevents duplicate bookings. While confirmation is pending, your browser keeps the associated form details in session storage so you can resume the same attempt. We briefly process a hashed IP identifier to prevent abuse. Contact us to ask questions, change or cancel an appointment.

Accounts and connected services

Google Identity Platform manages credentials, email verification and multi-factor authentication. Product sessions and permissions remain product-specific; Astplan and Platzklar have separate identity directories. When you explicitly connect Gmail, Google Calendar or Microsoft, Kordwerk accesses the data needed to provide your selected feature. Tokens are encrypted and scoped to your product, business and account. This data is not used for advertising or training general-purpose AI models. You may disconnect in the product and revoke permission at the provider. Use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.

Processing and retention

Our providers are Hetzner for hosting, Google Cloud/Identity Platform for the public gateway and authentication, Brevo for platform email, and Google or Microsoft for connected accounts. Processing may occur outside the EU under applicable provider agreements and transfer mechanisms. Data is retained for its purpose and applicable retention obligations. Contact us for information about storage and deletion.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction or portability, object to processing and withdraw consent for future processing. You may also complain to a supervisory authority.