Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Rudolf Latikan
Dennhäuser Str. 116
34134 Kassel, Germany
Phone: +49 152 060 879 40
Email: info@latikan.de

Competent supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany

2. Introduction

Protecting your personal data is important to me. This policy informs you about what data is collected when you visit this website, what it is used for, and what rights you have. Personal data is only collected to the extent necessary to operate this website and to process your enquiries.

3. Hosting

This website is hosted with Hostinger. When you access the website, the hosting provider automatically collects technical server log files transmitted by your browser. These include: IP address, date and time of the request, the page accessed, referrer URL, browser type and version, and the operating system.

This data is technically necessary to deliver the website securely and reliably, and is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website). Log files are automatically deleted after 7–14 days, unless they are needed to clarify a specific security incident.

A data processing agreement (Data Processing Addendum) exists with Hostinger (Hostinger International Ltd., Cyprus, or the Hostinger entity named in the respective contract). It forms part of Hostinger's terms of service and takes effect upon their acceptance. For transfers of personal data outside the EEA, EU Standard Contractual Clauses apply. The sub-processors used are listed in the agreement: hostinger.com/de/legal/dpa.

4. Contacting Us

If you use the contact form on this website or write to me by email, I process the data you provide (name, email address, company, message text) in order to process your enquiry and get in touch with you. The legal basis is Art. 6(1)(b) GDPR (measures to initiate a contract at your request).

The contact form does not send your input to a server of this website: when you submit it, your email program opens with a pre-filled message to info@latikan.de, which you send yourself. The content of the message (and, only if you accepted cookies in the banner, source details such as the landing page or campaign parameters, which you can see in the message text and delete before sending) is transmitted via your and my email provider. My emails (info@latikan.de) are delivered and processed by the provider Hostinger. The "business within the meaning of § 14 BGB" confirmation serves to ensure that the offer is directed at businesses only.

6. Cookies and Consent Management

On your first visit to this website, a cookie banner appears where you can decide whether to consent to the use of analytics and marketing cookies or to use only technically necessary functions. Your choice is stored locally in your browser (localStorage); analytics and marketing scripts (see point 7) are only loaded after you have given explicit consent.

To document your consent (Art. 7(1) GDPR), we log your selection without any personally identifiable information (no name, no IP address) in a central consent log. You can withdraw or change your decision at any time via the "Cookie Settings" link in the footer (Art. 7(3) GDPR); upon withdrawal, any tracking cookies already set are actively deleted.

Source details (lat_attr). Only if you choose "Accept all" in the cookie banner, this website stores source details of your visit under the name "lat_attr" – in your browser's localStorage and additionally as a cookie with a lifetime of up to 90 days. The landing page, the referrer, the time of your first visit and – if present in the address you opened – campaign parameters (UTM values) and click IDs from advertising platforms (e.g. gclid, fbclid, msclkid) are stored. Purpose: attributing enquiries to campaigns. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Without consent, this data is not stored on your device; upon rejection or withdrawal it is deleted.

7. Analytics and Marketing

Google Analytics 4 (GA4). To analyse usage behaviour, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Pseudonymised usage data is collected (e.g. pages visited, time spent, device type); the IP address is shortened (IP anonymisation). Purpose: reach measurement and improvement of our offering. Legal basis: § 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act, consent to setting cookies) in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 14 months. Transfer to the third country USA takes place on the basis of the EU-US Data Privacy Framework.

Meta Pixel. To measure the success of campaigns, we use the Meta Pixel (Meta Platforms Ireland Limited), which records interactions with our ads. Purpose: ad performance measurement and audience building. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 90 days. Transfer to the USA is based on the EU-US Data Privacy Framework. Meta and we are joint controllers for the operation of the Pixel within the meaning of Art. 26 GDPR (cf. CJEU "Fashion ID", case C-40/17); the allocation of responsibilities is set out in Meta's "Controller Addendum", which Meta makes publicly available.

LinkedIn Insight Tag. To measure the success of LinkedIn campaigns, we use the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company). Purpose: campaign performance measurement and retargeting. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Cookie lifetime: up to 180 days. Transfer to the USA is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Here too: LinkedIn and we are joint controllers for data collection via the Insight Tag under Art. 26 GDPR pursuant to LinkedIn's "Page Insight Tag Addendum".

All three services are only loaded after your consent via the cookie banner; without consent, no analytics or marketing cookies are set.

Note: These services are currently not activated, so no corresponding scripts are being loaded at the moment. The information above applies from the time they are activated.

Reach measurement (cms.latikan.com). For simple reach measurement we load – exclusively after your consent via the cookie banner – a small counting script from our own server (cms.latikan.com). The following is transmitted: the page path visited, the type of hit (page view or click on a marked element) and a rough country code that the server derives from your browser language. No cookies are set and no identifier is stored on your device. Your IP address is technically transmitted with every request, but it is not stored by the counter; it is only used briefly in working memory for abuse protection (rate limiting). Purpose: reach measurement. Legal basis: § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Without consent the script is not loaded and no request is made to cms.latikan.com. You can withdraw your consent at any time via the "Cookie Settings" link in the footer; afterwards the script is no longer loaded.

8. Fonts

The fonts used on this website (including Fraunces, Space Grotesk, Manrope, Jost, Cormorant Garamond) are delivered from our own domain (latikan.com) and are not loaded from third-party servers such as Google Fonts. Your IP address is therefore not transmitted to Google or other third parties for the fonts. Delivery takes place as part of the normal retrieval of the website (see point 3, Hosting).

9. Demo Applications (Example Websites)

Under /demos I show example websites with working booking and status forms (hairdresser, restaurant, dog boarding, course studio, workshop). If you enter something there, your input (e.g. name, optional contact detail, note, desired appointment) is sent to a LATIKAN server (demo-api.latikan.com). The demos are fictitious – please do not enter any real personal data there, only made-up data.

Contact detail and note are stored in masked or shortened form on the server. New entries are automatically deleted after 24 hours; in addition, the demos are reset to their initial state overnight. Your IP address is not stored: to limit abuse (rate limiting), it is processed only briefly as a hash with a daily changing salt, from which the IP address is not meant to be derivable. The demo API keeps no access log containing IP addresses. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in demonstrating the demos and protecting them against abuse).

10. Retention Period

Enquiries received via the contact form or by email are deleted once they have been fully processed, but no later than 12 months if they do not result in an order. Invoices and other accounting documents are retained for 8 years pursuant to § 147(3) of the German Fiscal Code (AO). Commercial correspondence (e.g. quotes, order confirmations) is retained for 6 years pursuant to § 257 of the German Commercial Code (HGB). After these periods expire, the data is routinely deleted, unless there is a statutory obligation for further retention.

11. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to withdraw consent already given at any time (Art. 7(3) GDPR). Please contact me informally using the contact details above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular with the HBDI (address see point 1).

Right to object (Art. 21 GDPR). You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR. Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to such processing without giving any reason; this also applies to any related profiling.

Last updated: September 30, 2026