Privacy policy
This is a courtesy translation. In case of any discrepancy, the German version shall prevail.
Last updated: September 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
HKS Knitwear Germany GmbH & Co. KG
represented by HKS Knitwear Germany Verwaltungs-GmbH, which in turn is represented by its managing director Robert Müller
Mahdentalstraße 82
71065 Sindelfingen, Germany
Phone: +49 7031 41816-0
Email: office@hks-germany.de
2. Overview
We only process personal data insofar as this is necessary to provide a functional website, to answer your enquiries or on the basis of your consent. There is no tracking, no audience measurement and no advertising on this website. No cookies are set and no third-party content is loaded.
3. Legal bases
We base the processing of your data on the following legal bases:
- Art. 6 (1) (a) GDPR – your consent,
- Art. 6 (1) (b) GDPR – performance of a contract and pre-contractual measures (e.g. handling an enquiry),
- Art. 6 (1) (c) GDPR – compliance with legal obligations,
- Art. 6 (1) (f) GDPR – legitimate interests, in particular in the secure and stable operation of the website.
Insofar as information is stored on or read from your device, this is done in accordance with Section 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act) where strictly necessary, and otherwise only with your consent pursuant to Section 25 (1) TDDDG.
4. Hosting and server log files
This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR. Further information can be found in the provider’s privacy policy.
Each time the website is accessed, the host automatically processes information transmitted by your browser (server log files): IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system. This data is not combined with other data sources and is only evaluated to ensure trouble-free operation and to fend off attacks.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website in a technically error-free and secure manner. The log files are deleted after 14 days at the latest, unless they are needed to investigate a security incident.
5. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol and “https://” in your browser’s address bar. When encryption is active, the data you transmit to us cannot be read by third parties.
6. Fonts
The fonts used on this website (Raleway and Roboto) are hosted locally on our server. No connection to servers of Google or other third-party providers is established when the pages are accessed.
7. Contacting us
Project enquiry
If you send us an enquiry via the “Start a project” form, we process the data you provide (company and email address and, optionally, contact person, phone number and details of your project such as type of project, materials, quantity, delivery date and project description) in order to handle your enquiry and make you a suitable offer.
The form data is transmitted to our web server in encrypted form and forwarded from there to us exclusively by email. No external form service is used; the content is not stored on the web server. To protect against automated misuse, a salted, non-reversible hash of your IP address (not the IP address itself) is kept for a maximum of 10 minutes and then deleted automatically.
The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures, and otherwise your consent pursuant to Art. 6 (1) (a) GDPR, which you give by submitting the form and which you can withdraw at any time. Protection against misuse is based on Art. 6 (1) (f) GDPR.
Withdrawal form
The same applies to the withdrawal form. In addition, we send a confirmation of receipt to the email address provided. The legal basis is Art. 6 (1) (b) and (c) GDPR.
Email mailbox (Microsoft 365)
We receive and store form enquiries and emails sent to us in Microsoft 365 (Exchange Online) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. A transfer to the USA cannot be ruled out; Microsoft Corporation is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR).
Enquiries by email, phone or fax
If you contact us by email, phone or fax, we process your enquiry, including the data provided in it, in order to deal with your request.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or is necessary for carrying out pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We delete the data as soon as the enquiry has been fully dealt with and no statutory retention obligations (e.g. under the German Commercial Code or Fiscal Code) prevent this.
8. External links
Our website contains links to third-party websites (e.g. in the legal notice). When you click on such a link, you leave our website; the operator of the linked site is solely responsible for data processing on that site.
9. Storage period
Unless a more specific storage period is stated in this policy, your data will remain with us until the purpose of processing no longer applies, you withdraw your consent or you request deletion – unless statutory retention periods prevent this.
10. Your rights
Within the scope of the statutory provisions, you have the right at any time to
- access the data we store about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdraw consent given with effect for the future (Art. 7 (3) GDPR).
To do so, simply contact us using the contact details above.
Right to object (Art. 21 GDPR)
If processing is based on Art. 6 (1) (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
11. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
12. Changes to this privacy policy
We will adapt this privacy policy as soon as the technology of the website or the legal situation changes. The version published here applies.