1. Controller
KKKonsulting LLC, Sharjah Media City (SHAMS), Sharjah, United Arab Emirates. Represented by Karsten Kaya.
Privacy contact: [email protected]
2. What this website does
karstenkaya.com is a personal, informational website. We only process personal data when you actively contact us or when it is technically required to deliver the site.
3. Data we process
- Contact by e-mail: If you write to [email protected], we process your e-mail address, name and message content to respond to your inquiry. Legal basis: our legitimate interest in answering your request or steps prior to entering into a contract.
- Call booking: If you book a call, your name, e-mail address and selected time are processed via our scheduling and CRM system (see section 4) to organize the appointment. The booking is synchronised with our Microsoft 365 calendar and the call takes place via Microsoft Teams (Microsoft Corporation, USA).
- Newsletter (The Forwarder Brief): If you sign up, we process your first name and e-mail address to send you the newsletter. We use double opt-in: you receive a confirmation e-mail and are only subscribed after you confirm. You can unsubscribe at any time via the link in every e-mail or by writing to [email protected]. Legal basis: your consent.
- AI assistant, chat, phone and WhatsApp: Enquiries via the chat on this website, via WhatsApp and via our phone number are first handled by an AI assistant operated on our CRM platform (see section 4). The assistant is identified as such at the start of every conversation. Phone calls are recorded and transcribed for quality and follow-up; you can object at any time and we will delete the recording. Conversations are reviewed by Karsten Kaya personally. WhatsApp messages are additionally processed by Meta Platforms under the WhatsApp Business terms. Legal basis: steps prior to entering into a contract at your request and our legitimate interest in answering enquiries; your consent where we message you outside an ongoing conversation. You can withdraw consent at any time by replying STOP or writing to [email protected].
- Server log data: When you visit this site, technical data (IP address, browser type, date and time, pages accessed) is processed automatically by our hosting provider to deliver the website securely. This data is not merged with other data sources.
4. Service providers (processors)
- Website hosting, forms, scheduling and CRM: This website, its forms, scheduling and CRM are operated on the platform of a specialised website and CRM provider based in the USA, acting as our processor. Data submitted through forms, newsletter sign-ups or bookings is stored and processed there on our behalf. Data may be transferred to servers outside the EU/EEA.
- Calendar and video calls: Booked calls are synchronised with Microsoft 365 (Outlook calendar) and held via Microsoft Teams, provided by Microsoft Corporation, USA. Data may be transferred to servers outside the EU/EEA.
- Fonts: This website loads the Montserrat typeface from Google Fonts (Google LLC, USA). When the page loads, your IP address is transmitted to Google servers.
5. Cookies and tracking
This website itself does not set marketing or advertising cookies and does not use analytics or advertising pixels. Technically necessary cookies may be set by the hosting platform to deliver the site.
6. External links
This website links to external services (LinkedIn, Instagram, YouTube, X, Spotify, Amazon, yngln.com, rynr.io). When you follow these links, the privacy policy of the respective provider applies. We recommend reviewing those policies.
7. How long we keep data
We store personal data only as long as necessary for the purposes described above or as required by applicable retention obligations. Inquiry correspondence is deleted once the matter is concluded, unless a business relationship follows.
8. Your rights
Subject to applicable law (including the GDPR where it applies to you), you have the right to request access to, rectification of or erasure of your personal data, restriction of processing, data portability and to object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority.
To exercise your rights, contact: [email protected]
9. No sale of data
We do not sell personal data and do not share it with third parties for their own marketing purposes.
10. Changes to this policy
We may update this policy when the website or the legal situation changes. The current version is always available on this page.