Privacy Policy

Important Notice: This is an English translation of our privacy policy for your convenience. The legally binding version is the German Datenschutzerklärung in accordance with EU GDPR requirements.

We, Love & Kindness GmbH, take the protection of your personal data very seriously. Below we inform you in accordance with the requirements of the General Data Protection Regulation (GDPR) and other relevant data protection laws about what personal data we collect when you use our PIQY KDS service, how we process it, and what rights you have.

1. Controller

Love & Kindness GmbH
Beimoorstr. 20
22081 Hamburg
Germany

Tel: +49 160 7780371
Email: datenschutz@piqy.de

2. Data We Process

We process only the personal data necessary to provide our services:

• Contact information (name, business email, company name)
• Account and login data
• Order data from your POS system
• Technical data (IP address, browser type) for security and service provision

3. Legal Basis

We process data based on:

• Article 6(1)(b) GDPR: Contract performance
• Article 6(1)(f) GDPR: Legitimate interests (security, service improvement)
• Article 6(1)(a) GDPR: Your consent (where applicable)

4. Service Providers (Subprocessors)

We use carefully selected service providers to operate PIQY KDS:

• Cloudflare: Hosting and CDN (Data Processing Agreement in place, EU Standard Contractual Clauses)
• PlanetScale: Database hosting (EU-based, Frankfurt)
• AWS SES: Transactional email delivery (EU-based processing)
• Intercom: Customer support (Data Processing Agreement with SCCs)
• Plausible Analytics: Privacy-friendly website analytics (no cookies, no personal data stored)

5. Data Storage and Retention

Your data is stored primarily within the European Economic Area (EEA). We retain your data only as long as necessary for the purposes stated or as required by law. User accounts and associated data are deleted after termination of the contract and expiration of any legal retention periods.

6. Cookies

We use only technically necessary cookies required to provide our service. These include session cookies and security-related cookies. We do not use cookies for tracking, analytics, or marketing purposes that require consent.

7. Your Rights

Under GDPR, you have the following rights:

• Right of access (Art. 15): Request information about your stored data
• Right to rectification (Art. 16): Correct inaccurate data
• Right to erasure (Art. 17): Request deletion of your data
• Right to restriction (Art. 18): Limit processing under certain conditions
• Right to data portability (Art. 20): Receive data in a structured format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to lodge a complaint: With a supervisory authority

To exercise your rights or for privacy questions, contact us at datenschutz@piqy.de.

8. Security

We implement appropriate technical and organizational measures (TOMs) pursuant to Article 32 GDPR. All data transmission uses SSL/TLS encryption. Our application and infrastructure undergo regular security reviews.

9. Changes to This Policy

We reserve the right to adapt this privacy policy to comply with current legal requirements or to reflect changes in our services. The new privacy policy applies to your next visit.

Last updated: August 8, 2025