PRIVACY

What this site knows about you.

Almost nothing. This page says exactly what that means: what happens when you read a page, what happens if you ask for the whitepaper, and how to have any of it removed.

Who is responsible Reading the site The one form After you press send Your rights Website and product

SECTION ONE

Who is responsible.

KOBIL GmbH, Germany, is the controller for the personal data described here. One address covers everything on this page, including every request in the rights section below.

Contact hello@kobil.com

TO BE COMPLETED BY LEGAL

The imprint block belongs here: full legal name and postal address, register court and registration number, VAT identification number, the managing directors, and the date this notice takes effect. Do not publish this page with this note still on it.

TO BE COMPLETED BY LEGAL

The data protection officer: the name or function, and the address to reach them at. If KOBIL is not required to appoint one, replace this note with a line saying so.

SECTION TWO

Reading this site collects nothing.

No cookie is set on this website. Not a necessary one, not a preference one, not an analytics one. There is no analytics tool, no tag manager, no tracking pixel, no advertising script, no A/B test, no session recording and no fingerprinting. Nothing on this site writes anything into your browser.

There is also no third-party request at all. Every file a page is made of comes from this domain, and that includes the typefaces. Self-hosting the fonts is a deliberate choice: an embedded webfont pulled from someone else's server hands your IP address to that server on every visit, and we would rather not tell anyone that you were here.

That is why nothing asked you to accept anything when you arrived. A consent banner exists to make tracking lawful. With nothing to track, there is nothing to consent to.

No cookies

Not on the pages, and not on either of the two endpoints behind the whitepaper form.

No measurement

We do not count you, profile you or follow you from page to page. There is no visitor identifier to follow.

No one else involved

Fonts, images, scripts and styles are all served from this domain. Your browser contacts nobody but us.

One honest caveat, true of every website that has ever existed: sending you a page means your IP address reaches the server that sends it, because that is how the request gets back to you. We build nothing on top of that.

SECTION THREE

The one form on this site.

The whitepaper page is the only place that asks you for anything. It asks for a work e-mail address, because that is where the document goes. Everything else is optional, and leaving it empty changes nothing about what you receive.

FIELD STATUS WHAT IT IS FOR

Work e-mail Required The address the document is sent to. The only field we actually need.

First name Optional So a reply is addressed to a person rather than to a mailbox.

Last name Optional The same reason.

Company Optional Helps us judge whether a follow-up would be worth your time.

Job title Optional The same reason.

The form sends two more things you did not type: the name of the document you asked for, and one hidden field that only automated submissions ever fill in, which lets us drop spam without putting a puzzle in front of a human. Each field is trimmed to 200 characters and the whole submission is capped at 16 kilobytes.

Two boxes, separate on purpose.

REQUIRED

Send me this document

This consent covers one thing: processing the details above so we can deliver the whitepaper to you. Without it the submission is refused outright and nothing is stored. Your consent, and the fact that you gave it, is kept with the record because consent has to be evidenced.

OPTIONAL

You may also contact me

This second consent covers being contacted about KOBIL Enterprise later. It is empty when the page loads and it is never pre-ticked. The download does not depend on it: you get the same file, immediately, whether you tick it or leave it alone. You can withdraw it at any time, and withdrawing does not affect anything that was lawful before.

TO BE COMPLETED BY LEGAL

The legal basis for the optional marketing consent, in the wording counsel wants used, and any national provisions to cite alongside it. The description above is written for a reader, not settled as legal text.

SECTION FOUR

What happens after you press send.

Five things, in this order, and nothing else.

It is checked, never enriched

The address is checked for a plausible shape, and refused if it belongs to a short built-in list of well-known disposable-mailbox domains. No lookup service, no data broker and no enrichment provider is contacted, so nothing is ever added to what you typed.

It is stored once, and handed to at most one place

The record is the fields you filled in, the two consent flags, the time, the page you came from and a random request id. It is stored as a single lead record on the site's hosting infrastructure, in a private store that is not reachable from the internet without the operator's key, so your registration and the consent you gave survive as one findable, erasable entry. It is additionally handed to at most one destination that KOBIL configures: an internal endpoint, or a notification e-mail to a KOBIL mailbox. In both directions it only ever travels over an encrypted connection, because an unencrypted destination is refused by the code rather than used. How long the record is kept is stated below, and an erasure request to hello@kobil.com covers this store like everything else.

The server log does not contain you

One operational line is written per registration: the request id, the time, which page it came from, whether the optional box was ticked, and a fingerprint of your e-mail address. The fingerprint is a keyed hash, twelve characters long, and it cannot be turned back into an address by anyone who does not hold the server secret. Your address, your name and your company never appear in that line.

The download link is not you

You are sent back a signed link. It carries three things: which document, the moment it stops working, and a keyed hash of the address that asked for it. It does not carry your e-mail address, your name or anything else readable, and it cannot be edited into someone else's link without the server secret. It is valid for thirty minutes by default, after which it returns an expired page instead of the file. A fresh one is a form away, so the link can sit in a browser history or a support ticket without identifying anybody.

Still no cookie

Neither the form, nor the endpoint that receives it, nor the one that serves the PDF, sets a cookie or stores anything in your browser. The document itself is streamed from this domain, so downloading it involves nobody else either.

One more use of your IP address, and only on this form: the endpoint counts recent submissions per address, at most five in ten minutes, so an automated flood cannot bury a real registration. That counter holds the address and the times of those attempts in the memory of the running server only. It is never written to the record, never written to the log, and it disappears when the server instance does.

TO BE COMPLETED BY LEGAL

How long a whitepaper record is kept, what happens at the end of that period, and how long the consent evidence is kept if it differs. The form promises the reader a retention period, so this is the one gap a visitor is most likely to notice.

SECTION FIVE

What you can ask us to do.

These are your rights under the GDPR. One address handles all of them: hello@kobil.com. Say what you want, and if you asked for the whitepaper, tell us the address you used so we can find the record. We answer within a month, there is no charge, and you do not have to explain why.

Access

A copy of what we hold about you, and what we do with it. Art. 15.

Rectification

Correct anything that is wrong or incomplete. Art. 16.

Erasure

Have it deleted. Art. 17.

Restriction

Have us keep it but stop using it while something is being sorted out. Art. 18.

Portability

Receive what you gave us in a machine-readable form, or have it passed on. Art. 20.

Objection

Object to processing we base on a legitimate interest, including direct marketing. Art. 21.

Withdrawal of consent

Take back either box at any time, with effect from then on. What was lawful before stays lawful. Art. 7(3).

Complaint

Complain to a supervisory authority, in the country where you live, where you work, or where you think this went wrong. Art. 77.

TO BE COMPLETED BY LEGAL

The supervisory authority competent for KOBIL, named in full with its postal address, so a reader does not have to go looking for it.

SECTION SIX

This page is about the website, not the product.

Two different things share a name here, and it is worth keeping them apart. Everything above describes this website and the single form on it.

KOBIL Enterprise the product runs inside a customer's own tenant. If your employer uses it, the personal data inside that tenant is not covered by this page at all. What is processed there, why, and for how long, is set by the contract and the data processing agreement between that company and KOBIL, and it is that company that decides. Your own employer or IT department has the notice that applies to you.

If you are evaluating KOBIL Enterprise and need the data processing agreement, the technical and organisational measures or the deletion concept for the product, ask at hello@kobil.com and we will point you to the right document.

Create trust in the digital world.

See KOBIL Enterprise inside your own tools. A 30-minute demo, on your stack.

Book a demo Read the whitepaper