Privacy notice
Last updated: August 2026
Protecting your personal data matters to us. In line with Articles 13 and 14 of the General Data Protection Regulation (GDPR) we explain below which data we process when you use this website, for which purposes and on which legal basis.
1. Controller
Khoch3 KlimaKarten UG (haftungsbeschränkt), Schaffhausener Straße 13, 50935 Cologne, Germany, represented by the managing directors Janik Wischmeyer and Nils Derboven.
Email: info@khoch3klimakarten.de, phone: +49 172 6522638. Further details are available in the legal notice.
We are currently not required to appoint a data protection officer. Please address data protection requests to the email address above.
2. Hosting and server log files
When you access this website, our hosting provider processes technically necessary access data as a processor on our behalf: IP address, date and time of access, the address requested, volume of data transferred, referrer, browser type and operating system.
The purpose is the provision, stability and security of the website. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). Log files are deleted after 30 days at the latest unless they are needed to investigate a security incident.
3. Cookies and local storage
This website does not set analytics, marketing or tracking cookies and does not embed any advertising networks. Technically necessary storage is used only to keep your entries in the climate risk check available inside your browser. That data never leaves your browser and is not transmitted to us.
On your first visit a consent dialog (cookie banner) asks whether external embeds may be loaded. Your decision is stored in your browser's local storage under the key khoch3-consent-v1. This storage is necessary to carry out your choice (Section 25(2)(2) TDDDG). External services are loaded only after your consent or an explicit click, see sections 5 and 6.
You can change or withdraw your consent at any time via the cookie settings link in the footer. A withdrawal takes effect for the future.
Local storage therefore holds at most two entries: your consent decision (khoch3-consent-v1) and, if you use the climate risk check, the saved progress of your answers (khoch3-klimacheck-v1). Both entries remain on your device, are not transmitted to us or to third parties and can be deleted at any time in your browser settings.
Fonts: The fonts used on this website (Inter and Instrument Sans) are served locally from our own server as part of this website. No connection is made to Google Fonts or other external font providers, so your IP address is not transmitted to such providers.
4. Contact requests
If you contact us by email, phone or through a form on this website, we process the details you provide, usually your name, organisation, email address, where applicable your phone number, and the content of your enquiry.
The purpose is to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries and otherwise our legitimate interest in communicating with prospective clients and partners (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed for that purpose, at the latest after statutory retention periods expire (generally six to ten years for business correspondence).
5. Appointment booking via Calendly
We use Calendly, provided by Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA, to schedule meetings. The calendar is not loaded automatically. Only when you select the booking button does your browser connect to Calendly's servers and embed the calendar.
In doing so your IP address as well as browser and device data are transferred to Calendly. If you book a slot, we additionally process the details you enter (name, email address, and where applicable organisation and topic) in order to hold the meeting.
The legal basis for loading the calendar and the associated transfer to a third country is your consent, given by selecting the button (Art. 6(1)(a) and Art. 49(1)(a) GDPR). The legal basis for holding a booked meeting is Art. 6(1)(b) GDPR. A data processing agreement and EU standard contractual clauses are in place with Calendly. You can withdraw your consent at any time by reloading the page and not opening the calendar again. You can also reach us by email at any time.
Calendly privacy information: calendly.com/privacy
6. YouTube videos
On some pages we embed videos using YouTube's extended privacy mode (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Initially only a preview image is shown. Only when you start the video does your browser connect to youtube-nocookie.com and transfer your IP address to Google.
The legal basis is the consent you give by starting the video (Art. 6(1)(a) GDPR). In extended privacy mode YouTube states that it does not set personalisation cookies before you play a video. More information: policies.google.com/privacy
7. Climate risk check
The climate risk check on this website runs entirely in your browser. Your entries on municipality, exposure and planned projects are neither transmitted to our servers nor stored, unless you afterwards actively choose to book a meeting or contact us.
8. Recipients and processors
We share personal data only where this is necessary to deliver our services or where a legal obligation applies. Recipients are in particular our hosting provider, the appointment booking provider and our email provider, each on the basis of a data processing agreement under Art. 28 GDPR.
9. Transfers to third countries
Where data is transferred to providers in the USA, this takes place on the basis of your consent, the EU standard contractual clauses, or the recipient's participation in the EU-US Data Privacy Framework. Despite these safeguards, access by US authorities cannot be fully ruled out.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
To exercise your rights, a message to info@khoch3klimakarten.de is sufficient.
You may also lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2 to 4, 40213 Düsseldorf, Germany.
11. Obligation to provide data and automated decisions
Providing your data is voluntary. Without the details required for an enquiry or a booking we cannot process your request. Automated decision-making including profiling under Art. 22 GDPR does not take place.
12. Changes to this notice
We update this privacy notice when changes to our website or to legal requirements make it necessary. The version published here applies.
