Privacy Policy
How we protect and process your personal data
1. Controller
Salty Lemon GmbH
Feldbrunnenstraße 9, 20148 Hamburg, Germany
Phone: +49 (0)40 82211940
Email: [email protected]
2. Scope
This policy explains how we process personal data when you visit kiteequipment.com, contact us via forms or email, start a configurator request, or follow links to saltylemonkites.com services.
3. Categories of data we process
Technical usage data:
Browser type/version, operating system, internet service provider, IP address, date/time of access, referrer URL, pages accessed.
Contact/lead data:
First/last name, email, country, riding level, weight/height, wind conditions, spots/travel plans, gear interests, free message, page URL where the form was sent, consent details (timestamp/version).
Communications:
Emails and messages exchanged with you.
4. Purposes and legal bases (GDPR)
- •Provide and secure our website (incl. temporary IP processing, anti‑abuse) — Art. 6(1)(f) GDPR.
- •Respond to enquiries and provide recommendations / pre‑contractual steps — Art. 6(1)(b) GDPR (and Art. 6(1)(a) GDPR where consent is given in forms).
- •Analytics and performance measurement — Art. 6(1)(a) GDPR (consent via cookie banner) or Art. 6(1)(f) GDPR where permitted.
- •Direct marketing by email (optional) — Art. 6(1)(a) GDPR (consent; unsubscribe any time).
5. Logs and server operation
We collect and store technical usage data (see §3) to deliver content to your device and maintain the security and stability of the site. Log files are kept only as long as necessary and then deleted or anonymised.
6. Contact forms and email
If you contact us via a form or email, we process the data you provide to handle your request. When sending a form we may additionally capture IP address, date/time, the URL of the page where the form was submitted and consent details to prevent misuse and document compliance. Data is deleted once processing is complete unless longer storage is required by law or for the establishment, exercise or defence of legal claims.
7. Transfers to credit information services (where applicable)
Within contractual relationships we may transmit personal data relating to contract initiation, performance and termination, as well as data on claims not settled despite being due or behaviour not in accordance with the contract, to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany. Legal bases: Art. 6(1)(b) and 6(1)(f) GDPR; transfers on the basis of Art. 6(1)(f) take place only where our legitimate interests are not overridden by your interests or fundamental rights and freedoms. SCHUFA may use the received data for scoring to inform contractual partners about creditworthiness. Further information: www.schufa.de/datenschutz.
8. Processors and other recipients
We use carefully selected service providers (e.g., hosting, analytics, CRM/helpdesk, email delivery, shipping partners) who process data on our behalf under data‑processing agreements and strict confidentiality. In other cases, we inform you before any disclosure that requires your consent.
9. International data transfers
Where recipients are located outside the EEA/UK, we rely on appropriate safeguards (e.g., EU Standard Contractual Clauses) or adequacy decisions.
10. Cookies and similar technologies
We use essential cookies to operate the site and, subject to your consent, analytics/marketing cookies. You can manage preferences via the cookie banner or your browser settings. Rejecting cookies may limit functionality.
11. Google Ads Conversion Tracking
We use Google Ads and its conversion tracking to measure the effectiveness of advertising campaigns and improve our offers. This may involve cookies placed by Google. Details on how to opt out can be found in your browser settings and Google's ads settings.
12. Retention
We store personal data only as long as necessary for the purposes described or as required by law. Lead and communication data are typically retained for up to 24 months after our last interaction.
13. Your rights
You have the rights of access, rectification, erasure, restriction, data portability and objection, and to withdraw consent at any time. You may lodge a complaint with your supervisory authority. To exercise rights, contact: [email protected].
14. Security
We implement technical and organisational measures appropriate to the risk, including transport encryption (HTTPS), access controls and least‑privilege policies.
15. Children
Our services are not directed to children under 16; we do not knowingly collect their data.
16. Third‑party links
Links to saltylemonkites.com or other third‑party sites are subject to their own privacy notices.
17. Changes to this policy
We may amend this policy from time to time. The latest version applies.
Effective date & version: 27 October 2025 — v1.0