Privacy Policy
This policy informs you about the nature, scope and purpose of the processing of personal data on this website pursuant to Art. 13/14 GDPR.
1. Controller
Kai-Lothar Klinghoff
Zahari Stojanov 9, 8740 Granitovo (Elhovo/Yambol), Bulgaria
Email: info@klivantis.ai
There is currently no statutory obligation to appoint a data protection officer for this website. Please direct privacy inquiries to the email address above.
2. Access data / server log files
When you visit this website, the hosting provider's web server automatically collects technical access data, including IP address, date and time of the request, page requested, amount of data transferred, referrer URL, and browser/operating system information. This data is technically necessary to deliver the website and to detect and defend against attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security and stability).
Retention period: depends on the hosting provider, typically a few days to weeks, then automatically deleted.
3. Contact form
If you use the contact form, we process the data you enter (name, email address, optionally company, selected topic, message text) exclusively to handle your request. In addition to immediate email delivery, the data is also stored in a database so your request is not lost in case of a technical email delivery failure.
To protect against automated spam submissions, we additionally use a form field invisible to you ("honeypot"), a server-side time window between loading and submitting the form, and IP-based rate limiting. For rate limiting, your IP address is not stored in plain text but only as a cryptographic hash value, briefly, and automatically deleted afterwards.
Legal basis: Art. 6(1)(b) GDPR (handling your request/pre-contractual measure) as well as Art. 6(1)(f) GDPR (spam protection).
Retention period: Until your request has been fully handled, then deleted unless statutory retention obligations apply.
Recipient: The request is delivered to the mailbox info@klivantis.ai (sent via the hosting provider's mail server, no external third-party mail service).
4. Cookies & consent logging
This website uses cookies. Before your consent, only technically necessary cookies are set - no statistics tool, no external embeds (no Google Fonts connection either: all fonts are self-hosted and delivered from our own server).
| Name | Purpose | Category | Duration |
|---|---|---|---|
klv_lang | Remembers your chosen language (German/English/Bulgarian) | Necessary | 1 year |
klv_consent | Stores your cookie choice (necessary/statistics/external content) | Necessary | 6 months |
klv_consent_id | Random, non-personal ID used to match your consent decision (no IP address) | Necessary | 6 months |
For every cookie decision (accept all / reject all / custom selection) we log server-side the timestamp, the consent ID mentioned above, and the categories specifically accepted/rejected - as proof of your consent under Art. 7(1) GDPR. No IP address is stored.
Legal basis for necessary cookies: Art. 6(1)(f) GDPR (legitimate interest in technical operation) as well as Art. 4a Закон за електронната търговия (ЗЕТ, the Bulgarian equivalent of the ePrivacy cookie rule). In practice we apply the stricter opt-in standard (no cookie without prior consent), even though Art. 4a ЗЕТ itself only requires a right to object.
Legal basis for consent logging: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (legal obligation to provide proof).
Retention period for the consent log: Until you withdraw your consent, at least as long as required for evidence purposes.
You can change your selection at any time via the "Cookie settings" link in the footer of this page.
Statistics & external content (currently inactive)
The cookie dialog already contains categories for a future statistics tool and future external embeds (e.g. videos). Currently, nothing is actually embedded or loaded in either category - the categories are prepared so that a later integration is possible without another technical overhaul of the consent mechanism. Should a concrete tool be added in the future, this privacy policy will be updated accordingly.
5. Fonts
This website uses the fonts "Sora", "Onest" (for the Bulgarian language version), "Space Grotesk" and "Inter". All are self-hosted and delivered directly from our own server. There is no connection to Google Fonts or any other external font provider, so no data (in particular no IP address) is transmitted to third parties.
6. Recipients / processors
Hosting provider: max1.bg (a data processing agreement under Art. 28 GDPR is in place). No transfer to third countries outside the EU/EEA currently takes place.
7. Your rights as a data subject
- Right of access to your stored personal data (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent already given, with effect for the future (Art. 7(3) GDPR)
- Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) - the authority of your habitual residence or our competent Bulgarian authority: Комисия за защита на личните данни (KZLD / Commission for Personal Data Protection), www.cpdp.bg
To exercise your rights, an email to info@klivantis.ai is sufficient.
8. Data security
This website is delivered exclusively over an encrypted HTTPS connection. Contact form and cookie consent data are processed server-side using prepared SQL statements to prevent SQL injection.
As of: August 2026. This policy will be updated when data processing changes.