1. Controller and contact

The controller responsible for processing personal information on kinugrinders.cn is Graef GmbH, Borsigstr. 41, 63110 Rodgau, Germany. For privacy questions and to exercise your rights, contact info@kinugrinders.de or telephone +49 (0) 174 419 1656.

This notice covers visits to our website, product, contact and partnership enquiries, and the Kinu China newsletter. The website presents products for mainland China. It has no online checkout and does not accept payments. Submitting an enquiry does not place a binding order. A subsequent, separately agreed purchase or an external ordering platform may involve further processing, which is addressed separately.

2. Hosting and email

We use the services of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, to operate this website and provide our email communications.

Information necessary to provide, operate and secure these services is processed. This may include technical access information such as your IP address, access time, pages requested, and browser and device information.

When you contact us, your contact details, message content and any attachments are also processed through the email services we use so that we can handle and answer your enquiry.

IONOS also provides visitor statistics through SiteAnalytics/WebAnalytics. According to its service information, these statistics use requested pages, referrers, access times, browser, operating system, device type and anonymised IP information, among other information; IONOS describes this statistics function as cookie-free. Retention of technical logs depends on the service and log type. The provider's information about web hosting, WebAnalytics and service-specific deletion periods is linked below; these periods are separate from our retention rules for enquiries and newsletters.

IONOS: web hosting data processing

IONOS: WebAnalytics

IONOS: service-specific retention information

3. Product, contact and partnership enquiries

For a product enquiry, we process your name, requested quantity, email address or WeChat ID, and any message you enter. The enquiry also includes the product name, product reference, SKU, displayed price, page address and selected language. Your name, quantity and at least one contact channel are needed to handle the enquiry.

Contact and partnership enquiries require your name, email address and message. Telephone number, WeChat ID, subject and, where offered, company name are optional. You may browse our website without submitting a form.

The information is emailed to info@kinugrinders.de. The forms do not create a customer account or an additional WordPress record containing your enquiry message. Messages may be included in our email system and its backups. We use the information to answer your enquiry, explain products and discuss availability, prices, delivery or a potential partnership. Without necessary contact information, we may be unable to reply.

4. Newsletter

You receive Kinu news and offers only after registering separately for the newsletter and confirming your email address. A product enquiry does not automatically subscribe you. Participation is voluntary. You must select the consent checkbox and then activate the subscription on the confirmation page through the confirmation email. The confirmation link is valid for 48 hours.

The separate kinugrinders.cn WordPress newsletter list stores your email address, language, subscription status, signup, confirmation and, where applicable, unsubscribe times, consent wording and version, signup source, and technical confirmation and unsubscribe identifiers. It is not automatically synchronised with the kinugrinders.de Shopify newsletter list.

We retain your newsletter signup information for the duration of your existing subscription. You can unsubscribe at any time using the unsubscribe link in the confirmation email or by contacting info@kinugrinders.de. You will then receive no further newsletters. Necessary evidence of your consent and unsubscription is retained only for as long as it is needed for legal evidentiary purposes.

Signups that have never been confirmed are deleted from the active newsletter database 30 days after the most recent signup request. This also applies when sending the confirmation email failed. WordPress checks automatically each hour; if there are no page or cron requests, the check is performed on the next request. Confirmed subscribers are excluded from this 30-day rule. The database cleanup does not immediately overwrite existing backups.

5. Cookies and technical safeguards

When you choose a language, the kinucat_lang cookie can store your selection for one year. It is used for language preferences, not advertising. Opening the homepage address directly without a language parameter always opens the Chinese version; explicitly selected language links take priority. You can delete or block the cookie in your browser. Visitors do not need to log in to browse or send enquiries; WordPress also uses administration and authentication cookies for logged-in staff.

WordPress may store the result of a technical emoji-display test in your browser's session storage. If fallback images are needed, they may be requested from s.w.org, transmitting technical connection information to the external WordPress service.

Our forms use security identifiers, hidden spam checks and temporary submission limits. Our own rate-limit records use keyed hashes derived from connection or email information instead of storing a raw IP address. Limits last one minute for enquiries, and ten minutes per email address and one hour per connection for newsletter signups. Technical enquiry receipts may remain for up to 15 minutes and do not contain the message text. The hosting provider's own logs are separate.

6. Purposes and legal bases

Where the GDPR applies, we handle specific contract-related enquiries under Article 6(1)(b) to take steps before entering into a contract at your request. General correspondence, secure website operation and prevention of misuse rely on Article 6(1)(f); our legitimate interests are responding to requests and protecting the service. Newsletter marketing relies on your consent under Article 6(1)(a). Legally required retention relies on Article 6(1)(c); necessary evidence and the defence of specific legal claims may also justify a legitimate interest.

Where Chinese privacy law applies, its additional requirements and your rights under that law remain unaffected. This privacy notice does not replace any separately required consent. Merely visiting the website does not constitute consent to newsletter marketing.

7. Recipients and cross-border processing

Graef GmbH handles enquiries and newsletter signups received through the website in Germany. Using these functions therefore involves processing outside mainland China. IONOS and the technical service providers involved in hosting and email process the information necessary for those services. We do not claim that all information is stored exclusively in Germany.

To handle your enquiry, our customer service in Germany and China may access the contact and enquiry information necessary for that purpose. Forwarded information may be used only for our customer service, not for the recipient's own advertising or other independent purposes. An enquiry does not automatically add your information to a dealer or newsletter list.

8. Retention and deletion of enquiries

We retain personal information from enquiries for as long as needed to handle the enquiry and necessary follow-up. Once the enquiry is closed, we review which information remains necessary. Information no longer needed is deleted or anonymised unless statutory retention duties or other legal grounds require otherwise.

Where a specific legal dispute or a statutory retention duty requires continued storage, only information needed for that purpose is retained for that purpose. Newsletter retention is described in section 4. Cleanup of active records does not immediately remove existing backups. If a backup is restored, intervening deletions and unsubscriptions must be taken into account in subsequent processing.

9. Your rights

Subject to the applicable law, you may request information about processing, access to or a copy of your personal information, correction, completion, deletion, restriction of processing and, where applicable, data portability. You may withdraw consent at any time for the future. Withdrawal does not affect the lawfulness of processing previously carried out on that consent.

Where GDPR Article 21 applies, you may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to direct marketing at any time. Under applicable Chinese law, you may also request an explanation of our rules for processing your personal information.

Send requests to info@kinugrinders.de or the postal address above. We may need reasonable information to verify your identity and handle your request within the applicable legal response periods. You may also complain to a competent data protection authority, in particular the Hessian Commissioner for Data Protection and Freedom of Information. Your rights to complain to competent Chinese authorities remain unaffected.

Hessian data protection authority

10. External links, security and changes

Our links to Facebook, Instagram and any external ordering platforms lead to independent services. Their privacy notices apply when you visit them. An ordinary link does not automatically transmit your enquiry message to the linked shop. Product and story images and the homepage video are served from our website. The inspected public page templates do not integrate Google Analytics or Meta Pixel; the IONOS statistics described above are separate.

We use HTTPS and technical form safeguards. Newsletter administration is restricted to authorised WordPress administrators. Please do not send passwords, payment details, identity document copies or unnecessary sensitive information. The service is not directed at children under 14. If such information has been sent to us, please contact us so that we can review and handle it.

We update this notice when the processing described here changes. This notice does not replace additional information or consent where required. The German, English and Chinese versions describe the same processing activities; no language version limits statutory rights.