Privacy policy.

We, Kenza GmbH, Carl-Herz-Ufer 5, 10961 Berlin, Germany, inform you here about our processing of personal data. You may contact us at the address above or by email to privacy@kenza.io at any time.

Below is the most important information about data processing through this website, sorted by group of data subject. Where the term data is used, it refers in each case to personal data as defined in the GDPR.

This website is hosted by Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany, acting as our processor under a data processing agreement in accordance with Article 28 GDPR. The servers are located in Germany.

Our web server processes a range of data with each request, which your browser transmits automatically. This includes the IP address assigned to your device, the date and time of the request, the time zone, the page or file accessed, the http status code, the volume of data transmitted, the website from which the request originated, the browser used, the operating system of your device, and the language setting. The web server uses this data to deliver the contents of this website to your device.

We use Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses small text files, known as cookies, on your device to allow us to analyse your visitor behaviour under a pseudonym. Information stored in these cookies is transmitted to Google servers. The anonymize IP function is active for this website, so Google shortens your IP address before analysis. Google uses the information transmitted as a processor under Article 28 GDPR to analyse visitor behaviour, to provide reports on website activity, and to provide further services relating to website and internet use.

Transfers to Google LLC in the United States are governed by Standard Contractual Clauses approved by the European Commission.

We set these cookies only where you have consented through our cookie banner. You may withdraw your consent at any time with effect for the future through the banner settings, or prevent the storage of cookies through your browser settings. You may also install the opt-out browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout

We use Leadinfo B.V., Rotterdam, Netherlands, a lead generation service. Leadinfo reads the IP address of visitors to this website and matches it against a database of publicly available company information to identify the organisation from which a visit originates. Leadinfo also sets a first-party cookie to recognise returning visits.

The service identifies companies rather than individuals. Where an IP address permits an inference about an identifiable person, that data is personal data and is processed on the basis of your consent.

We set these cookies only where you have consented through our cookie banner. You may withdraw your consent at any time with effect for the future.

This website offers a conversational interface, Talk to Kenza. You are interacting with an artificial intelligence system rather than a person.

The language model runs locally on our own infrastructure at Hetzner in Germany. Your messages are not transmitted to any third-party model provider, and no data leaves the European Economic Area. Nothing you write is used to train a model shared with other customers or made available to any third party.

To use the interface you provide an email address. We process the address and the content of the conversation to provide the service and to respond where a request calls for a person.

Conversation content is retained for 30 days and then deleted.

Where you request an introduction, you provide the details set out in the form. We use these to respond to your enquiry and, where a conversation follows, to prepare for it.

We record your enquiry in Salesflare BV, Vaartstraat 25, 2800 Mechelen, Belgium, our customer relationship management system, acting as our processor under a data processing agreement in accordance with Article 28 GDPR.

Where you subscribe to our newsletter, we process your email address to send it. Subscription is confirmed by a double opt-in: you receive an email asking you to confirm the subscription, and we record the confirmation. You may unsubscribe at any time using the link in every newsletter, and we then delete your address.

This website links to our profiles on LinkedIn and Instagram. These are ordinary links. No data is transmitted to those networks until you follow one, and from that point the terms and privacy policies of the network concerned apply. We have no influence over the type or scope of processing they perform.

The purpose of processing is the presentation of our company and its services, and interaction with those who contact us. The purpose of analysing use of the website is its needs-oriented design. No change of purpose is planned.

The legal basis for processing during use of the website is Article 6(1)(f) GDPR, our legitimate interest in operating a website and in interaction with those who visit it.

The legal basis for the analysis of visitor behaviour, for company identification, and for the storage of the cookies these require, is your consent under Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

The legal basis for the newsletter is your consent under Article 6(1)(a) GDPR.

The legal basis for responding to your enquiry is Article 6(1)(b) GDPR where the enquiry precedes a contract, and otherwise Article 6(1)(f) GDPR.

Log data and communications data are not passed to third parties except in special circumstances. We use processors under service agreements to perform services, in particular to provide, maintain, and support IT systems.

IP addresses in server logs are anonymised no later than 24 hours after collection. Newsletter data is deleted when you unsubscribe. Communications content is deleted after six calendar years.

Use of the website without disclosing personal data such as your IP address is not possible. Providing your email address is necessary to use the conversational interface and to receive the newsletter, and providing the details in the contact form is necessary for us to respond. The website can be used without consenting to analysis or company identification.

We process the data of communication partners and business contacts in order to communicate with them.

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in communication with communication partners and business contacts.

We record business contacts in Salesflare BV, Vaartstraat 25, 2800 Mechelen, Belgium, acting as our processor under a data processing agreement in accordance with Article 28 GDPR.

We use processors to perform services, in particular to provide, maintain, and support IT systems.

All contractual data and data relevant to accounting is stored for ten calendar years in accordance with retention periods under tax and commercial law. Other communications data is deleted after six calendar years. Business card data of business contacts is deleted on request.

Providing data is necessary for communication with communication partners and business contacts. Communication without providing data is not possible.

Where personal data is transferred to countries outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR. This includes Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms.

The conversational interface and our hosting operate entirely within Germany. No data from either is transferred outside the European Economic Area.

You have the right to request information at any time about all personal data we process about you.

Where your personal data is inaccurate or incomplete, you have the right to rectification and completion.

You may request deletion of your personal data at any time, unless we are legally obliged or entitled to continue processing it.

Where the statutory conditions are met, you may request restriction of processing.

You have the right to object to processing where it is carried out for the purposes of direct marketing or profiling. Where processing rests on a balancing of interests, you may object on grounds relating to your particular situation.

Where processing rests on your consent or on a contract, you have the right to receive the data you provided in a portable form, unless the rights and freedoms of others are impaired.

Where we process your data on the basis of consent, you have the right to withdraw that consent at any time with effect for the future. Processing carried out before withdrawal remains unaffected.

You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that processing has occurred in breach of applicable law. The competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin Germany

Last updated: August 2026