Privacy Policy

Thank you for visiting our website. Compliance with the data protection regulations has a special significance for us. The purpose of this privacy policy is to inform you, as the user of the website, about the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you, the person affected, according to Article 4 (1) of the General Data Protection Regulation (“GDPR” or “DSGVO”) applies. The following privacy policy is compliant with all mandatory requirements of the General Data Protection Regulation (GDPR). At the same time, this privacy policy declaration also fulfills the requirements of § 13 Digitale-Dienst-Gesetz (DDG-“Digital Services Act”)). Since Konux is acting globally, The California Consumer Privacy Act, and the California Privacy Rights Act amendment, collectively referred to as the “CCPA” requirements are mentioned as well by the CCPA Supplemental Section, which applies to California residents (see section 18).

1. Responsible Body (Controller) This website and its services are provided by: KONUX GmbH Flößergasse 2 81369 München Deutschland Tel.: +49 89 18955010 E-Mail: [email protected] Website: www.konux.com Managing Directors: Johanna Leisch, Shlomo Hagai, Andreas Loy

2. General The development of the website was conceptualized with the maxim to collect as little data as possible from you. Basically, it is possible to visit our website without providing personal information. Only when you choose to use certain services (such as the contact form) will the processing of personal data become necessary. When doing so, we always take care to process your personal data only in accordance with the legal regulations or your consent. We comply with the provisions of the General Data Protection Regulation (GDPR) applicable from 25.5.2018 and the applicable national regulations, such as the German Federal Data Protection Act, the German Teleservices Act or other more specific data protection laws. Please note that our products and services as well as the contents of this website are directed at commercial and industrial addressees.

3. Definition The terms used in this Privacy Policy have the following meaning in accordance with the GDPR. “Personal data” means any information relating to an identified or identifiable natural person (‘the data subject’); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person; “Processing” means any operation or series of operations performed with or without the aid of automated processes, such as collecting, organizing, storing, adapting or modifying, reading, querying, disclosure by submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction; “Restriction of processing” means the marking of stored personal data in order to limit its future processing; “Pseudonymization” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data cannot be assigned to an identified or identifiable natural person; “Controller” means the natural or legal person, public authority, body or other party that alone or jointly with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or, as the case may be, the specific criteria of his appointment may be provided for under Union or national law; “Processor” means a natural or legal person, public authority, body or party that processes personal data on behalf of the controller; “Recipient” means a natural or legal person, public authority, agency or other entity to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be recipients; the processing of such data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing; “Third party” means a natural or legal person, public authority, institution or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data; “Consent” of the data subject means any expression of will, in an informed and unambiguous manner, in the form of a statement or other unambiguous confirmatory act by which the data subject expresses his approval of the processing of the personal data concerning him.

4. Consent In part, when you visit our website, we collect certain personal data for which we require your consent. This happens, for example, if you send us a message via our contact forms. Declaration of Consent • By using our available forms, you consent to the collection and use of personal information provided by you as described in this Privacy Policy. You can revoke this consent at any time with effect for the future by making a corresponding declaration to us. We point out, however, that use of our service without your consent is no longer possible. For your revocation, please use the above contact ways (please tell us in this case your name, e-mail and postal address).*

5. Purpose and Legal Basis of the Processing of Personal Data Personal data required for the establishment, implementation or processing of our services is processed on the legal basis of Art. 6 para. 1 lit. b DSGVO. Insofar as we use external service providers in the context of order data processing, processing is based on the legal basis of Art. 28 DSGVO. The personal data are collected, processed and used by us exclusively for the following purposes:

6. Collected and processed personal data

We collect and process your personal data only if you voluntarily, under your knowledge, make it available, e.g. by filling out forms or sending e-mails. In the context of the available forms, these are first of all the following data:

General contact details:

• Surname*
• E-mail address*
• Message

Required fields are marked with an *.

The personal data you provide and its contents remain solely with us and our affiliates. We will store and process your data only for the purposes stated in 5. Any use exceeding the stated purpose requires your express consent. The same applies to the transmission and transfer of your data to third parties.

7. General Log Files

The web server temporarily records the connection data of the requesting computer (IP address), the pages you visit with us, the date and duration of the visit, the recognition data of the browser and operating system type used, the website from which you visit us and the successful retrieval in log files. The technical administration of the websites and anonymous statistical surveys allow an evaluation of the access to the offer of Konux and an evaluation with the aim to increase the data protection and data security in our company in order to ensure an optimal level of protection for the personal data processed by us. The data of the server log files are stored separately from all personal data provided by you.

Subject to any legal retention requirements, we will delete or anonymize your IP address after you leave our website.

8. Cookies

Use of Cookies

On our website, information is collected and stored by the use of so-called browser cookies.

What are Cookies?

These are small text files that are stored on your device and that store certain settings and data in order to share it with our system through your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier.

Why do we use Cookies?

Cookies allow our systems to recognize the user’s device and make any presets available immediately. As soon as a user accesses the platform, a cookie is transmitted to the hard disk of the user’s computer. Cookies help us improve our website and offer you a better and more personalized service. They enable us to recognize your computer or your (mobile) device when you return to our website and thereby:

• Store information about your favorite activities on the website, thus tailoring our website to your individual interests.
• Accelerate the speed of processing your requests.

We work with third party services that help us to make the website and its offers more interesting to you. Therefore, when visiting the website, cookies from these partner companies (third-party providers) will also be stored on your hard drive. These are cookies that automatically delete after the given time. A list of the cookies we set can be found in the following table:

Can I control the use of Cookies?

If you do not wish to use browser cookies, you can set your browser so that the storage of cookies is not accepted. Please note that in this case you may be able to use our website only partially or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can choose the setting in your browser "block third-party cookies". We assume no responsibility for the use of third party cookies.

9. Integration of Services and Content of Third Parties

Our website uses content and services of third parties. These are, for example, videos provided by Vimeo. In order for these data to be accessed and displayed in the user’s browser, the transmission of the IP address is absolutely necessary. The providers (hereinafter referred to as "third-party providers") thus are aware of the IP address of the respective user.

Although we strive to use only third-party providers who solely need the IP address to deliver content, we have no control over whether the IP address may be stored. This process might be used, inter alia, for statistical purposes. If we become aware that the IP address is being stored, we will inform you.

Use of HubSpot

This website uses HubSpot for customer coordination and marketing activities. HubSpot Inc. is a software company in the USA (https://www.hubspot.com/, 25 First Street, 2nd Floor, Cambridge, MA 02141 USA) We use this integrated software solution for our own marketing, lead generation and customer service purposes. These include email marketing, which controls the sending of newsletters and automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages and contact forms. HubSpot uses cookies, which are small text files that are stored locally in the cache of your web browser on your device and allow us to analyze your use of the site. The information collected (e.g., IP address, geographic location, browser type, length of visit and pages viewed) is analyzed by HubSpot on our behalf so that we can generate reports about the visit and the pages visited. Information collected by HubSpot and the content of our websites solutions.reg.tech, knowledge.reg.tech and email.reg.tech is stored on servers of HubSpot’s service providers. If you have given your consent (Art. 6 (1) lit. a GDPR), the processing on these websites is for the purpose of website analysis.

HubSpot’s tracking code sets a number of tracking cookies when a visitor lands on our website. These cookies have different lifetimes. Some may remain valid for up to 2 years while others expire at the end of the session.

You can permanently object to the collection of data by HubSpot and the setting of cookies by preventing the storage of cookies through your browser settings. For more information about how HubSpot works, please refer to HubSpot’s Product Privacy Policy, available at https://legal.hubspot.com/product-privacy-policy.

Use of Vimeo

For the integration and presentation of video content, our website uses plugins from Vimeo. Provider of the video portal is the Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When a page with integrated Vimeo plugin is viewed, a connection to the servers of Vimeo is established. Vimeo learns by this which of our pages you have viewed. Vimeo learns your IP address, even if you are not logged in to the Vimeo portal or do not have an account there. The information collected by Vimeo is transmitted to servers of the video portal in the USA. Vimeo can assign your surfing behavior directly to your personal profile. By logging out beforehand you have the option of preventing this. The use of Vimeo is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For details on how user information is handled, see the Vimeo Privacy Policy.

Use of YouTube

For the integration and presentation of video content, our website uses plugins from the Google-powered YouTube page. Provider of the video portal is the YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with an integrated YouTube plug-in, it will connect to YouTube’s servers.

YouTube will find out which of our sites you’ve visited. YouTube can directly map your browsing behavior to your personal profile, should you be logged into your YouTube account. By logging out beforehand you have the option to prevent this.

The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For details on how user information is handled, please refer to the YouTube Privacy Policy.

Use of Cloudflare Our website uses the services of Cloudflare Inc. (USA) for secure encrypted data transmission on the Internet (SSL), to improve worldwide website performance through the Cloudflare Content Delivery Network (CDN) and to improve security and protection against hacker attacks through the Cloudflare Web Application Firewall (WAF). It is possible that Cloudflare uses its own cookies to provide these services. With Cloudflare a corresponding GDPR-compliant contract for commissioned data processing exists. More detailed information about GDPR and Cloudflare can be found on the GDPR pages of Cloudflare: www.cloudflare.com/de-de/gdpr/introduction/ 

a) What is Cloudflare?  A Content Delivery Network (CDN), as provided by Cloudflare, is nothing more than a network of servers connected via the Internet. Cloudflare has distributed such servers all over the world to bring websites faster to your screen. Simply put, Cloudflare makes copies of our website and places them on their own servers. When you visit our website now, a load balancing system ensures that the majority of our website is delivered from the server that can display our website the fastest. The distance of the data transfer to your browser is considerably shortened by a CDN. Thus the content of our website is delivered to you by Cloudflare not only from our hosting server, but from servers all over the world. The use of Cloudflare is especially helpful for users from abroad, because here the page can be delivered from a server nearby. Besides the fast delivery of websites Cloudflare also offers various security services like DDoS protection or the Web Application Firewall. 

b) Why we use Cloudflare on our website?  Of course we want to offer you the best possible service with our website. Cloudflare helps us to make our website faster and more secure. Cloudflare offers us web optimizations as well as security services such as DDoS protection and web firewall. This includes a reverse proxy and the content distribution network (CDN). Cloudflare blocks threats and limits abusive bots and crawlers that waste our bandwidth and server resources. By storing our website in local data centers and blocking spam software, Cloudflare allows us to reduce our bandwidth usage by about 60%. Delivering content from a data center near you and some web optimizations performed there reduces the average loading time of a website by about half. According to Cloudflare, the setting "I’m Under Attack Mode" can be used to mitigate further attacks by displaying a JavaScript calculation task that must be solved before a user can access a web page. Overall, this makes our website much more powerful and less susceptible to spam or other attacks. 

c) Which data is stored by Cloudflare?  Cloudflare generally only forwards those data that are controlled by website operators. The contents are therefore not determined by Cloudflare, but always by the website operator himself. In addition, Cloudflare may collect certain information about the use of our website and process data that is sent by us or for which Cloudflare has received appropriate instructions. In most cases, cloudflare receives data such as contact information, IP addresses, security fingerprints, DNS protocol data and performance data for web pages derived from browser activity. For example, log data helps cloudflare to detect new threats. So Cloudflare can guarantee a high security protection for our website. Cloudflare processes these data within the framework of the services in compliance with the applicable laws. This naturally includes the General Data Protection Regulation (GDPR).  For security reasons Cloudflare also uses a cookie. The cookie (__cfduid) is used to identify individual users behind a shared IP address and to apply security settings for each individual user. This cookie is very useful, for example, if you use our website from a location where there are a number of infected computers. However, if your computer is trustworthy, we can recognize this by the cookie. So you can surf through our website unhindered, despite infected PCs in the area. It is also important to know that this cookie does not store any personal data. This cookie is essential for the cloudflare security features and cannot be disabled.  Cloudflare also works together with third party providers. They may only process personal data under instructions from Cloudflare and in accordance with the privacy policy and other confidentiality and security measures. Cloudflare will not pass on any personal data without our explicit consent.  

d) How long and where is the data stored?   Cloudflare stores your information mainly in the USA and the European Economic Area. Cloudflare can transmit and access the above described information from all over the world. In general, Cloudflare stores user-level data for domains in the Free, Pro and Business versions for less than 24 hours. 

e) How can I delete my data or prevent data storage?  Cloudflare keeps data logs only as long as necessary and in most cases these data are deleted within 24 hours. Cloudflare also does not store any personal data, such as your IP address. However, there is information that Cloudflare stores indefinitely as part of its permanent logs to improve the overall performance of Cloudflare Resolver and to identify any security risks. You can find out exactly which permanent logs are saved at developers.cloudflare.com/1.1.1.1/commitment-to-privacy/privacy-policy/privacy-policy/. All data that Cloudflare collects (temporary or permanent) will be cleaned from all personal data. All permanent logs are also anonymized by Cloudflare.  Cloudflare will mention in your privacy policy that they are not responsible for the content they receive. For example, if you ask Cloudflare whether they can update or delete your content, Cloudflare always refers to us as the website operator. You can also completely prevent the entire collection and processing of your data by Cloudflare by deactivating the execution of script code in your browser or by including a script blocker in your browser.  Cloudflare is an active participant in the EU-U.S. Privacy Shield Framework which regulates the correct and secure transfer of personal data. You can find more information on www.privacyshield.gov/participant. 

WordPress We use WordPress.com, a website building system, for our website. The service provider is the American company Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA. WordPress also processes data from you in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be accompanied by various risks to the legality and security of data processing.   As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, thus especially in the USA) or a data transfer there, WordPress uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 DSGVO). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through these clauses, WordPress undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de  The Data Processing Agreements, which correspond to the standard contractual clauses, can be found at https://wordpress.com/support/data-processing-agreements/.To learn more about the data processed through the use of WordPress.com, please see the Privacy Policy at https://automattic.com/de/privacy/.

10. Data Security

Unfortunately, the transmission of information over the Internet is never 100% secure, which is why we can not guarantee the security of data transmitted via the Internet to our website.

However, we secure our website through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons.

In particular, your personal data is encrypted with us. We use the SSL / TLS (Secure Sockets Layer / Transport Layer Security) coding system. Our security measures are continuously improved in line with technological developments.

11. Contact

You can contact us by e-mail or via our contact form. In this case, we will store the personal data you provide to process your request and to contact you with respect to your request. These data will be transmitted to us on a purely voluntary basis. A passing on of the personal data communicated to us in this way to third parties does not take place.

The information for contacting us can be found above in this privacy policy and in our imprint.

12. Rights of the data subject

Insofar as you are the affected person according to Art. 4 No. 1 DSGVO, you have the following rights regarding the processing of your personal data under the GDPR. The EU regulation text that these rights are based on can be found here.

Right to Confirmation and Information

Under the preconditions of Art. 15 DSGVO you have the right to request a confirmation as to whether personal data of you are being processed and at any time, free of charge, to receive information from the controller regarding the personal data stored about you and a copy of these data.

Right of Erasure („Right to be forgotten“)

Under the preconditions of Art. 17 GDPR and depending on the respective jurisdiction, you have the right to demand that personal data concerning you be deleted without delay, provided that one of the reasons stated in Art. 17 GDPR exists and the processing is not required.

If we have made personal data public and if we are obligated to erase said data in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical ones, to inform data controllers who are responsible for the processing of your personal data, considering the available technology and the implementation costs, that you have requested erasure of any links to your personal data or copies or replications of your personal data.

Please address your right of erasure for effective and rapid processing via e-mail to [email protected] or by mail to Konux Inc., 580 California Street, Suite 1200, San Francisco, CA 94104, USA.

Right to Rectification

Under the conditions of Art. 16 DSGVO you have the right to demand the immediate correction of incorrect personal data concerning you. In addition, you have the right, under consideration of the purposes of the processing, to demand the completion of incomplete personal data, also by means of a supplementary declaration.

Right of Deletion

Under the preconditions of Art. 17 GDPR, you have the right to demand that personal data concerning you be deleted without delay, provided that one of the reasons stated in Art. 17 GDPR exists and the processing is not required.

Right to Restriction of Processing

Under the conditions of Art. 18 GDPR, you have the right to demand the restriction of processing if one of the conditions set out in Art. 18 GDPR exists.

Right to Data Portability

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data you have provided us in a structured, common and machine-readable format, and you have the right to transfer this data to another person without hindrance provided that the further requirements of Article 20 GDPR are met.

Right to Revoke Consent

You have the right to withdraw your consent to the processing of personal data at any time with future effect. The revocation should be directed to the above contact details.

Right of Objection

Under the conditions of Art. 21 GDPR you have the right to object at any time to the processing of your personal data. If the conditions for an effective contradiction exist, we may no longer process them.

Right of Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is violating the requirements of the DSGVO.

13. Disclosure of your Personal Data

The transfer of your personal data takes place as described below.

Website Hoster The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing takes place in Germany alone. This is necessary for the operation of the website, as well as for the establishment, implementation and execution of the existing user contract and also without your consent.

In addition, disclosure shall take place if we are entitled or obliged to forward data due to statutory provisions and / or official or judicial orders. This may, in particular, be the provision of information for law enforcement purposes, security or enforcement of intellectual property rights.

Insofar as your data is passed on to service providers to the required extent, they will only have access to your personal data to the extent necessary to fulfill their duties. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR.

13.1 Candidate personal data / HR data

Also, the personal data that you have disclosed or transferred to us – applying for a open position as a candidat – will be processed in our HR portal, which is made available to us by Greenhouse Software, Inc., (“Greenhouse”) located outside EU/EEA in USA. Accordingly transfer of personal data to a third country will take place. In case of third country transfer to Greenhouse, the appropriate or suitable safeguards are the use of the U.S.-EU Data Protection Framework (https://www.greenhouse.com/privacy-policy).

14. Storage Period for the Personal Data

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfillment of the original purpose and there are no longer any statutory retention periods. The statutory retention periods ultimately form the criterion for the final duration of the storage of personal data. After the deadline, the corresponding data will be routinely deleted. If retention periods exist, processing is restricted by blocking the data.

15. References and Links

When accessing websites referred to on our website, you may again be asked for information such as name, address, e-mail address, browser properties, etc. This privacy policy does not govern the collection, transfer or handling of personal data by third parties.

Third party service providers may have different and separate terms in dealing with the collection, processing and use of personal data. It is therefore advised to check the websites of third parties about their practice for the handling of personal data before entering personal data.

16. Amendments of the Privacy Policy

We are constantly developing our website further to provide you with an ever-improving service. We will always keep this privacy policy up-to-date and adjust it accordingly, if and as far as necessary.

Of course, we will inform you in good time about any changes to this privacy policy. We will do this, e.g. by e-mail to the e-mail address you have given us. In addition, if further consent from you is required for us to handle your data, we will, of course, obtain this from you before such changes take effect.

You can access the latest version of our Privacy Policy at any time on the Internet.

17. Data Protection Officer

If you have data protection questions, please contact our data protection officer.

Robert Niedermeier
Data Business Services GmbH & Co. KG
Noerdliche Muenchner Str. 47
82031 Gruenwald/Munich

E-Mail: [email protected]

18. Supplemental Privacy Notice for California Residents

This Supplemental Privacy Notice for California Residents (“California Notice”) applies only to Konux’s business consumers who reside in the State of California or candidates applying for a job at Konux. Konux adopts this Notice to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (“CCPA”). This Notice provides information to California residents about Knoux’s collection, use, disclosure, and processing of California resident personal information, and certain rights and choices California residents have under California law.

CCPA Notice at Collection/Categories of Personal Information Collected

Konux collects, shares, and discloses for a business purpose the personal information as described in this Notice. The personal information in the table below includes the categories of personal information collected, shared, and disclosed for a business purpose by Konux during the preceding 12 months:

Business Purpose for which the Categories of Personal Information is Collected, Shared, and Disclosed

The categories of personal information listed above may be used to operate, manage and maintain the Konux business; to provide products and services; and to accomplish business purposes and objectives, including, for example, using personal information to develop, improve and maintain products and services; conduct research, analytics, and data analysis; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; debugging to identify and repair errors that impair existing intended functionality; perform accounting, audit, and other internal functions, such as internal investigations; comply with law, legal process, and internal policies; maintain records; exercise and defend legal claims; service accounts, process, and fulfill orders and transactions; processing payments; improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by Konux, as well as candidate administration.

Categories of Sources

Konux has collected California resident personal information from the following categories of sources:

• Directly from California residents (via completing forms or email)

Notice of Right to Opt-out of Sharing of Personal Information

As is common practice among companies that operate online, Konux may share limited personal information with certain third parties. Konux does not knowingly share the personal information of consumers under 16 years of age. Any personal information Konux may have shared for the purpose of cross-context behavioral advertising, as that term is defined by the CCPA, is limited to:

• Identifiers (i.e., cookies, web beacons, mobile advertising identifiers and other technologies; not your name or other information that directly identifies the California resident)
• Internet or Other Electronic Network Activity Information (i.e., browsing history, search history, last login, information on a Californian resident´s interaction with a website, application, or advertisement)

Third Parties with Whom Konux has Disclosed or Shared Personal Information

To provide goods and services offered, Konux has disclosed or shared personal information with the following third parties:

• Service Providers and Contractors; and,
• Government Entities.

Sale of Personal Information

Konux has not sold any personal information of California residents, including during the preceding 12 months.

Retention of California Residents Personal Information

Konux will keep the personal information it collects about California residents for as long as necessary to carry out the purposes set forth in this Notice or any other notice provided at the time of data collection, but no longer than as required or permitted under applicable law or internal Konux policy. IP address, subject to any legal requirements will be deleted after a consumer leaves the website.

California Resident Rights

As a California resident, you may have the rights listed below in relation to personal information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights may include:

Right to Know 

You have a right to request the following information about our collection, use and disclosure of your personal information over the prior 12 months, and ask that we provide you with a copy of the following: 

• categories of and specific pieces of personal information we have collected, sold or shared about you; 
• categories of sources from which we collect personal information;  the business of commercial purposes for collecting personal information; 
• categories of third parties to whom the personal information was disclosed for a business purpose; and 
• categories of personal information disclosed about you for a business purpose.  

Right to Correct 

You have a right to request that we correct inaccurate personal information maintained about you. 

Right to Delete 

You have a right to request that we delete personal information, subject to certain exceptions. 

Right to Opt out of Selling or Sharing 

You have the right to direct a business that sells or shares personal information about you to third parties to stop doing so.  

Right to Restrict Use of Sensitive Personal Information 

You have a right to request that we limit our processing of sensitive personal information under certain circumstances.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your rights under the CCPA.

Exercising Rights Under CCPA for a California Resident or for Any Questions Concerning KONUX’s California Notice

To exercise rights under this Notice, a California resident is required to contact Konux at one of the methods below:

• E-Mail: [email protected]
• Phone: +49 89 18955010 To protect your privacy and maintain security, we may take steps to verify your identity before complying with your request and may decline your request if we are unable to verify your identity. To verify your identity, we may collect information such as your email address, government issued ID or date of birth, before providing a substantive response to the request.

You can request to opt-out of the sale or sharing of your personal information by clicking on the “Cookies Settings” link in the footer of the webpage. For more information on how to manage the use of cookies and other tracking technologies, please refer to Section 8 “Cookies” in the Privacy Notice above. In addition to using the Cookies Settings preference center, in many cases you may opt-out from the collection of cookies by managing your cookie settings at the browser and/or device level.

California Shine the Light Disclosure

California Residents that have interacted with Konux as consumers can request and obtain from Konux once a year, free of charge: information concerning the categories of personal information, as defined in California Civil Code Section 1798.83, that Konux disclosed to third parties, if any, for direct marketing purposes in the immediately preceding calendar year. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing, if any, will be included in Konux’s response. To request this information, please submit your request in writing to:

KONUX Inc.
 580 California Street, Suite 1200
San Francisco, CA 94104
 USA

Konux is not required to respond to requests made by means other than through this mailing address. There is no cost to California residents in exercising rights under this Section.

Changes to this Notice

Konux reserves the right to amend this Notice at its discretion and at any time. Konux will publish the revised Notice, marked with the date of such update.

Konux Website Privacy Policy Version: April 2024