Privacy policy

This policy covers the marketing website and the calendar connection in KJUNA. The German version is binding.

1. Controller

The controller for the processing of personal data is:
Hößl Holding GmbH
Weidener Straße 23, 95469 Speichersdorf, Germany
Email: info@kjuna.de

2. Scope

This policy applies to the marketing website at kjuna.de and to the calendar connection in the KJUNA application. Data a customer keeps in its own tenant (employees, applicants, assignments, time records, invoices) is not described here. The customer is the controller for that data; the contract with the customer governs it. The website uses no cookies, no tracking and no third-party services in the browser. Fonts and files are served locally.

3. Website server logs

When you visit the website, the web server processes standard connection data: IP address, date and time, requested address, referrer, browser identification and status code. The purpose is operation, security and incident analysis. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technical operation). Logs are deleted after 7 days unless a longer retention is required to investigate a security incident.

4. Inquiry form

You may send an inquiry via the form on the homepage. We process:

The purpose is to handle and answer your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual request). Name, email and message are required for that. Without them we cannot reply. The data is stored for as long as needed to handle the inquiry, at most 6 months after the inquiry is closed, unless a statutory retention duty applies.

Inquiries are sent by email to info@kjuna.de. No third-party captcha is used.

5. Calendar connection (Google, Microsoft, Apple)

This section concerns the KJUNA application, not the marketing website. It is for users who connect their private calendar in Settings, and for review by Google and Microsoft.

Purpose

The calendar connection exists solely so that assignments from KJUNA can be seen in the user’s own calendar and reconciled with that calendar. The user can spot conflicts and avoid maintaining dates twice. It is a user-facing dispatch feature. There is no other use.

Consent and providers

The connection is created only when the signed-in user creates it:

The legal basis is Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR where the feature is part of the licensed software. Consent may be withdrawn at any time by disconnecting the calendar in Settings.

Data read and written

With the user’s consent, KJUNA accesses that user’s calendar data:

KJUNA writes events that represent dispatch assignments into the same calendar so they appear in the private calendar. Full content remains limited to the connecting user. Colleagues see at most a “scheduled” status, not private calendar content.

Credentials (OAuth tokens or CalDAV credentials) are stored encrypted in the respective customer tenant database in Germany. They are not exposed to the user interface.

No other use

Calendar data is used solely for the reconciliation feature described above. It is not sold, not used for advertising, not used to train AI models and not disclosed to third parties — including other customers or other tenants. KJUNA does not transfer calendar data to data brokers or advertising networks.

Google Limited Use

Use of Google Calendar data is subject to the Google API Services User Data Policy, including the Limited Use requirements. KJUNA uses Google user data only to provide or improve user-facing calendar features that are prominent in the requesting application. KJUNA does not transfer this data to third parties except as necessary to provide or improve those features (hosting of the tenant in Germany). KJUNA does not allow humans to read this data unless we have the user’s affirmative agreement, it is necessary for security purposes, it is necessary to comply with applicable law, or the data is aggregated and used for internal operations and has been de-identified. KJUNA does not use Google user data for serving advertisements. See the Google API Services User Data Policy.

Microsoft: corresponding restriction

The same applies to Microsoft Graph (Outlook calendar): data obtained with Calendars.ReadWrite and User.Read is used only for the calendar feature in KJUNA. It is not sold, not used for advertising and not disclosed to third parties except as required for technical operation of the tenant. KJUNA complies with the Microsoft APIs Terms of Use and the applicable policies for Microsoft identity and Graph data.

Retention

The connection and the tokens required for it remain in place until the user disconnects. Retrieved calendar data is kept only as long as needed for reconciliation, and only in the customer tenant database.

Withdrawal

The user may disconnect at any time in KJUNA Settings. Upon withdrawal:

6. Hosting, recipients and third countries

Hosting is in Germany. The processor is Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen. A data-processing agreement under Art. 28 GDPR is in place with Hetzner.

Google, Microsoft and Apple are not processors of KJUNA. Data reaches them only when a signed-in user connects a calendar. They then process that data on their own responsibility:

Where that involves a transfer to the United States, it relies on an adequacy decision of the European Commission (EU-US Data Privacy Framework) if the provider is certified under it, otherwise on appropriate safeguards under Art. 46 GDPR, in particular the provider’s standard contractual clauses.

7. Legal bases

Depending on the processing: Art. 6(1)(a) GDPR (consent, calendar connection), Art. 6(1)(b) GDPR (pre-contractual inquiries via the form), Art. 6(1)(f) GDPR (legitimate interest in operating and securing the website, in particular server logs).

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR. Consents may be withdrawn with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise these rights: info@kjuna.de.

9. Right to lodge a complaint

You may lodge a complaint with a supervisory authority. This is usually the authority of your place of residence or the authority at the controller’s seat: Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

10. No cookies on this website

The marketing website uses no cookies, no audience measurement and no embeds. A consent banner is therefore not required. This statement does not apply to the signed-in KJUNA application, which may set technically required cookies for session and operation.