Privacy Policy for the KOH-I-NOOR B2B Shopping App
Last updated: August 2026
1. Controller
The controller responsible for the processing of personal data in connection with the mobile application “KOH-I-NOOR B2B Shopping App” (hereinafter the “App”) is:
KOH-I-NOOR Deutschland GmbH, Mühlenstraße 15–19, 14913 Jüterbog OT Kloster Zinna, Germany
• Managing Director: Petr Miksatko
• Commercial register: HRB 29285 P
• VAT ID: DE815647897
• Phone: +49 (0) 3372 406290
• E-mail: info@kin-de.de
2. Scope
This Privacy Policy applies to the use of the App on iOS and Android devices. The App is an ordering channel for registered business customers (B2B) of KOH-I-NOOR Deutschland GmbH. Registration within the App is not possible; you can only log in using the credentials of an existing customer account. The privacy policy published in our online shop applies to the use of the shop.
3. Data processed
When you use the App, we process the following categories of personal data:
• Login data: the e-mail address and password of your customer account (the password is transmitted and stored exclusively in encrypted form).
• Master data of your B2B customer account: company, contact person, delivery and billing address, customer-specific prices and conditions.
• Order data: shopping cart, orders, order history and functions derived from them, such as “Frequently bought”.
• Technical log data required for the secure provision of the service: IP address, date and time of access, operating system version and device type. These data are used exclusively to ensure stability and security.
• Image data used in the EAN product search: see Section 4.
• A pseudonymous device token for push notifications: see Section 5.
4. Camera and photo access (product search by EAN)
The App offers a product search by barcode (EAN). For this purpose, you can scan a barcode with your camera or select an existing picture from your photo gallery in which the product’s barcode is clearly visible. Access to the camera or photo gallery takes place only after you have explicitly granted permission via your operating system’s system dialog, and it is used exclusively for this purpose. The images are processed exclusively locally on your device and are not transmitted to our servers – only the recognized barcode is transmitted. The images are not stored permanently and are not linked to your person. You can revoke the permission at any time in your device settings; the text-based product search remains unaffected.
5. Push notifications
The App can send you push notifications (e.g., information about orders or other important information). For delivery, we use Firebase Cloud Messaging provided by Google Ireland Ltd. and Google LLC (USA) and, on iOS devices, the Apple Push Notification service (APNs) provided by Apple Inc. (USA). A pseudonymous device token is processed for this purpose. The servers of these services may be located outside the EU; the transfer takes place on the basis of the EU-U.S. Data Privacy Framework, to which Google and Apple are certified, and/or the EU Standard Contractual Clauses (Art. 45, 46 GDPR). We send push notifications only if you have allowed them on your device; the legal basis is your consent (Art. 6(1)(a) GDPR), which you grant via your device’s system dialog and can revoke at any time in your device settings.
6. Purposes and legal bases of processing
Processing is carried out to handle orders and to manage your customer account, i.e., for the performance of a contract or in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). We process technical log data on the basis of our legitimate interest in providing the App securely and reliably (Art. 6(1)(f) GDPR). Where statutory retention obligations exist, processing is carried out to comply with legal obligations (Art. 6(1)(c) GDPR).
7. No analytics, tracking or advertising tools
The App does not use any analytics or tracking tools, advertising networks, or cookies for marketing purposes. Your data is not analyzed for advertising purposes and is not sold to third parties.
8. Recipients of the data
Your data is processed on the servers of our shop and ERP system; our backend and the product data interface are operated in the European Union. For the technical development, maintenance, and operation of the App, we use carefully selected service providers that are contractually bound as processors pursuant to Art. 28 GDPR. Apart from the push notification services of Google and Apple described in Section 5, no data is transferred to countries outside the European Union. Data is disclosed to other third parties only where this is necessary for the performance of the contract (e.g., to shipping providers) or where we are legally obliged to do so.
9. Storage period
We store personal data only for as long as necessary for the purposes stated above. Order and invoice data are subject to the statutory retention periods under commercial and tax law (generally six or ten years). Technical log data is deleted automatically after a short period of time.
10. Your rights
Subject to the statutory requirements, you have the following rights:
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
To exercise your rights, an informal message to info@kin-de.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, in particular with the State Commissioner for Data Protection and for the Right to Inspect Files of Brandenburg (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg).
11. Deletion of the customer account
Registration or account creation within the App is not possible. If you would like your customer account to be deleted, please contact us by e-mail at info@kin-de.de or by phone at +49 (0) 3372 406290. We will delete your account and the associated personal data unless statutory retention obligations prevent this.
12. Changes to this Privacy Policy
We will update this Privacy Policy whenever changes to the App or to the legal situation make this necessary. The current version is available in the App and at https://shop.kohinoordeutschland.de/.