Privacy Policy
This policy explains the nature, scope and purpose of processing personal data on this website pursuant to Art. 13/14 GDPR. This English version is provided for convenience; the German original (/datenschutz.html) is authoritative.
1. Data controller
Kai-Lothar Klinghoff
Zahari Stojanov 9, 8740 Granitovo (Elhovo/Yambol), Bulgaria
Email: info@klivantis.ai
Under current EU thresholds, this website is not required to appoint a data protection officer. Please direct any privacy-related enquiries to the email address above.
2. Access data / server log files
When you visit this website, the hosting provider's web server automatically records technical access data, including IP address, date and time of the request, the page accessed, the amount of data transferred, the referrer URL, and browser/operating system information. This data is technically required to deliver the website and to detect and defend against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and stability).
Retention period: PLACEHOLDER — depends on the hosting provider, typically a few days to weeks, after which the data is automatically deleted.
3. Contact form
When you use the contact form, we process the data you provide (name, email address, optionally company, selected subject, message text) solely to handle your enquiry. In addition to sending an email, the data is stored in a database so your enquiry is not lost even if the email delivery fails technically.
To protect against automated spam submissions, we additionally use a form field invisible to human visitors ("honeypot"), a server-side minimum time between loading and submitting the form, and IP-based request throttling (rate limiting). For rate limiting, your IP address is not stored in plain text but only briefly as a cryptographic hash, and is automatically deleted afterwards.
Legal basis: Art. 6(1)(b) GDPR (handling your enquiry/pre-contractual measure) and Art. 6(1)(f) GDPR (spam protection).
Retention period: Until your enquiry has been fully handled, then deleted unless statutory retention obligations apply.
Recipients: The enquiry is delivered to the mailbox info@klivantis.ai (sent via the hosting provider's mail server, no external third-party mail service).
4. Cookies & cookie consent logging
This website uses cookies and comparable storage technologies (localStorage). Before you give consent, only strictly necessary cookies are set — no analytics tool, no external embeds (including no connection to Google Fonts: all fonts are self-hosted and served from our own server).
| Name | Purpose | Category | Duration |
|---|---|---|---|
klv_lang | Remembers your chosen language (German/English) | Necessary | 1 year |
klv_consent_id | Random, non-personal ID used to link your cookie decision (not an IP address) | Necessary | 1 year |
klv-consent (localStorage) | Stores your cookie choice locally in your browser | Necessary | until revoked/browser data cleared |
klv-theme (localStorage) | Remembers your light/dark mode preference | Necessary | until revoked/browser data cleared |
For every cookie decision (accept all / reject all / individual selection), we log the timestamp, the consent ID mentioned above, and the specific categories accepted/rejected on our server — as proof of your consent pursuant to Art. 7(1) GDPR. We explicitly do not store your IP address for this purpose.
Legal basis (necessary cookies): Art. 6(1)(f) GDPR (legitimate interest in technical operation) and Art. 4a of the Bulgarian Electronic Commerce Act (ЗЕТ, the Bulgarian equivalent of the ePrivacy cookie rule). In practice we apply the stricter opt-in standard (no cookie without prior consent), even though Art. 4a ЗЕТ itself only requires an opt-out option.
Legal basis (consent logging): Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (legal obligation to demonstrate consent).
Retention period (consent log): Until you revoke your consent, at minimum as long as required to demonstrate consent.
You can change your selection at any time via the "Cookie settings" link in the footer of this page.
Statistics & external content (currently inactive)
The cookie dialog already contains categories for a future analytics tool and for future external embeds (e.g. videos). Currently, nothing is loaded or embedded in either category — the categories are prepared so a future addition won't require rebuilding the consent mechanism. Should a concrete tool be added later, this privacy policy will be updated accordingly.
5. Fonts
This website uses the typefaces "Bricolage Grotesque", "Space Grotesk" and "Inter". All are self-hosted and served directly from our own server. There is no connection to Google Fonts or any other external font provider, so no data (in particular no IP address) is transmitted to third parties.
6. Recipients / processors
Hosting provider: PLACEHOLDER — to be replaced before go-live (a data processing agreement pursuant to Art. 28 GDPR is in place). No transfer to third countries outside the EU/EEA currently takes place.
7. Your rights as a data subject
- Right to access data stored about you (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent with future effect (Art. 7(3) GDPR)
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — either the authority of your habitual residence or the Bulgarian authority responsible for us: Commission for Personal Data Protection (Комисия за защита на личните данни, KZLD), www.cpdp.bg
To exercise your rights, simply send an email to info@klivantis.ai.
8. Data security
This website is served exclusively over an encrypted HTTPS connection. Contact form and cookie consent data are processed server-side using prepared SQL statements to rule out SQL injection. Passwords for the installation wizard, where applicable, are never stored in plain text.
Last updated: August 2026. This policy is updated whenever processing activities change; all items marked PLACEHOLDER will be replaced with the actual Klivantis company data before the final go-live.