Legal
Privacy Policy
1. Overview
This policy explains what personal data we process when you use Kerzio. Personal data is any information that can identify you (e.g. name, email address, IP address).
2. Controller
Marten Koch, Benzstraße 13, 22177 Hamburg, Germany.
Email: hello@martenkoch.de. Further details in our Legal Notice.
3. Hosting
Our website is hosted on a dedicated server located in Germany. The hosting provider acts as a processor on our behalf (Art. 28 GDPR). Server log data may be stored there.
4. Server log files
Our server automatically collects standard log data your browser transmits: browser type, operating system, referrer URL, host name, time of request and IP address. This is used to ensure stability and security. Legal basis: Art. 6 (1)(f) GDPR.
5. User accounts & registration
To rate candles, write reviews or build a collection you can create an account. We store your display name, email address and a hashed (irreversibly encrypted) password. We use your email address to verify your account and for essential service messages. Purpose: providing the community features. Legal basis: Art. 6 (1)(b) GDPR (performance of the user agreement). You can delete your account at any time by contacting us.
6. Cookies
We only use technically necessary cookies: a session cookie that keeps you signed in, and a cookie that stores your language preference. These are required for the site to work and do not track you. Legal basis: Art. 6 (1)(f) GDPR. We do not use advertising or analytics cookies.
7. User-generated content
Ratings, reviews and candle entries you submit are stored and shown publicly together with your display name. Your candle collection remains private unless you explicitly enable its public visibility in your profile settings. Please do not include personal data of third parties.
8. Anonymous reach measurement
We count page views and selected actions in aggregated daily totals to understand which parts of Kerzio are useful. We do not use tracking cookies, create user profiles, or store an IP address, browser identifier or full referrer URL for this purpose. Only the page path and a shortened source such as “direct”, a campaign name or a referring domain are retained. Legal basis: Art. 6 (1)(f) GDPR.
9. Newsletter and partner enquiries
If you subscribe to the newsletter, we store your email address, language and confirmation status. Subscription uses a confirmation email and can be revoked at any time. Partner enquiries additionally store the information entered in the form and the associated account. Legal basis: consent under Art. 6 (1)(a) GDPR for the newsletter and Art. 6 (1)(b) or (f) GDPR for partner enquiries.
10. SSL/TLS encryption
This site uses SSL/TLS encryption for security. You can recognise it by the https:// in the address bar.
11. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to its processing. You also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at the address above.