Skip to content

Privacy Policy

What we store, why we store it, and the rights you have over it.

Responsible body in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

KV GmbH
Johannisstr. 112
49074 Osnabrück
Deutschland

Your rights as a data subject

Write to domain@kv-gmbh.de to exercise the following rights at any time:

  • Information about your data stored with us and their processing
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 GDPR),
  • Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR),
  • Data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. the supervisory authority of the federal state of your residence or the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with addresses can be found at the BfDI.

Collection of general information when you visit our website

Nature and purpose of the processing:

When you access our website, i.e. when you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information which does not allow any conclusions to be drawn about your person.

They are processed in particular for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring a smooth use of our website,
  • Evaluation of system security and stability as well as for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is evaluated statistically by us if necessary, in order to optimize our website and the technology behind it.

This website (the portal together with its marketing and legal pages) uses no analytics or advertising trackers and loads its fonts and scripts from our own servers.

Legal basis:

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

The data will be deleted as soon as they are no longer necessary for the purpose of collection. This is generally the case for data that is used to provide the website when the respective session has ended.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

Your account and the portal

When you register and use DomainPortal we process the data you give us: your name, email address and password (stored only as a hash), optional company and billing details, the domains you add together with the content, prices and settings of their pages, buyer inquiries and messages you receive, visit statistics, support tickets with their attachments, and the notifications we send you.

Legal basis:

Legal basis is Art. 6 para. 1 lit. b GDPR (performing the contract with you) and, for security and the prevention of abuse, Art. 6 para. 1 lit. f GDPR.

Storage duration:

We keep this data until you delete your account. You can delete domains and your account yourself in the portal. When you delete your account we delete your domains, DNS entries, servers and tickets and cancel your subscriptions. Invoices and payment records are kept without a link to your account for the statutory period only.

Our support team can look at your account to help you. For this, staff open a read-only view of your account; every such use is logged.

Payments and invoices

Paid plans are billed through PayPal. We receive the payment status and the details needed for the invoice, not your complete card or bank details. Invoices are created with the accounting service SevDesk. Legal basis is Art. 6 para. 1 lit. b and c GDPR; invoices are kept for the periods required by tax and commercial law.

Emails

We send emails that belong to your account: confirmation, password reset, notices about your domains, buyer inquiries and tickets, and optionally a weekly summary that you can switch off in your profile or with the link in the email.

Parking and for-sale pages

When someone opens a page that we serve for a customer, our server receives the technical data described above. If a visitor clicks an advertisement or product on a parked page, they are passed on to the ad network (AdIndex) or the advertiser, who process data under their own privacy policy. Buyer inquiries are described in the next section.

Cookies and browser storage

We use only technically necessary cookies and browser storage: the session cookie that keeps you signed in, a security token against forged requests, and small settings such as the state of the support bot. They are not used for tracking.

Service providers

We use the following processors: Hetzner (hosting and servers), Mailgun (email delivery) and SevDesk (invoicing). PayPal processes payments as an independent controller.

Buy inquiries for a listed domain

If you send an inquiry about a domain offered for sale through us, we store what you enter and what your request carries with it:

  • Name, email address, and optionally phone number and company
  • Your offer, your message, and the domain you asked about
  • IP address, browser identification, the page you came from, and the country derived from your IP

Who receives this

The owner of the domain you asked about. That is the point of the inquiry: we pass your details on so the owner can answer you. Their own address stays hidden from you until they choose otherwise. We do not sell your data and we do not pass it to anyone else.

Legal basis

Handling your inquiry rests on Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract. Storing the IP address, browser identification and country rests on Art. 6(1)(f) GDPR: it lets the owner judge whether an inquiry is genuine and lets us recognise automated abuse.

How long we keep it

An inquiry you never confirm by email is deleted after 7 days, together with your record. A concluded negotiation is deleted 24 months after it closes. You can ask us to delete it sooner at any time.

Domain offers by email

Only if you tick the separate, optional box do we later send you domain offers that match your inquiry. That consent is independent of the inquiry itself — the inquiry works exactly the same without it. Every such email carries a one-click unsubscribe link, and you can withdraw your consent at any time with effect for the future.

Change of our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply for your next visit.

Questions about data protection

If you have any questions about data protection, please write to us at domain@kv-gmbh.de.

Last updated: November 2026