Privacy Policy

1. Controller

ictt system-consulting
Owner Karl Cziumplik
Eschholzstraße 94
79115 Freiburg
Email: sales@ictt-consulting.de
Phone: +49 (761) 89759120

2. Overview

This privacy policy informs you about the processing of personal data on the KiDig landing page (kidig-online.de) and within the KiDig application (app.kidig-online.de).

The landing page serves to provide information about the product and to facilitate contact. The application itself processes employee data for time tracking, scheduling, and report generation as part of contract fulfilment.

3. Data Collection on the Landing Page

a) Analytics (Plausible)

We use Plausible Analytics as a privacy-friendly analytics tool. Plausible does not use cookies and does not collect personal data. Analytics are only activated after explicit consent via the consent banner.

Collected data includes aggregated page views, referral sources, and device categories. Individual user identification is not possible.

Legal basis: Art. 6(1)(a) GDPR (consent).

b) Demo Contact Form

When using the callback form on the landing page, the following data is collected:

• Name
• Email address
• Facility / operator
• Message (optional)

This data is stored solely for the purpose of processing your enquiry and is not shared with third parties. Storage is based on our legitimate interest in responding to customer enquiries.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Data Collection in the Application

Within the KiDig application (app.kidig-online.de), the following personal data is processed as part of contract fulfilment:

• Employee master data (name, contact details, contract information)
• Time tracking data (daily entries, weekly schedules, monthly overviews)
• Sick notes and certificates of incapacity
• Vacation requests and absence entries
• Schedules and group assignments

This data is processed solely for the fulfilment of the service agreement.

Legal basis: Art. 6(1)(b) GDPR (contract fulfilment).

Further details on data processing within the application can be found in the in-app privacy policy.

5. Data Processors

We use the following data processors to provide the Service:

• Heroku / Salesforce — Application and database hosting (EU region)
• AWS (Amazon Web Services) — Web hosting and infrastructure (EU region)
• Stripe — Payment processing and subscription management
• Loops.so — Transactional emails (invitations, notifications)
• Sentry — Error monitoring and performance tracking
• Plausible — Privacy-friendly website analytics (consent-based only)

Data processing agreements pursuant to Art. 28 GDPR are in place with all data processors.

6. Retention Periods

Personal data is stored for the duration of the contractual relationship. After termination of the contract, data is deleted in compliance with statutory retention periods.

• Contract data: duration of the contractual relationship plus statutory retention periods
• Audit logs: 90 days
• GDPR deletion requests: fulfilled within 30 days of confirmation

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access (Art. 15 GDPR) — You may request information about your stored data.
• Rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.
• Erasure (Art. 17 GDPR) — You may request the deletion of your data, unless statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR) — You may request the restriction of the processing of your data.
• Data portability (Art. 20 GDPR) — You may receive your data in a structured, machine-readable format. KiDig provides a GDPR export function for this purpose.
• Objection (Art. 21 GDPR) — You may object to the processing of your data insofar as processing is based on legitimate interest.

To exercise your rights, please contact: sales@ictt-consulting.de

8. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI)
Lautenschlagerstraße 20
70173 Stuttgart
Phone: +49 (711) 615541-0
Email: poststelle@lfdi.bwl.de

9. Cookies

The KiDig landing page does not use cookies. Plausible Analytics operates without cookies and is only activated after explicit consent via the consent banner.

The consent preference is stored in the browser's localStorage and can be reset at any time through the browser settings.

Last updated: March 2026