Privacy policy.

1. Data controller

TK-SHK, owned by Tom Stefan Karg
Barnetstraße 31a, 12305 Berlin
Phone: +49 178 4485933
Email: service@tk-shk.com

2. Website hosting

This website is hosted by Hostinger. When you visit, technically necessary connection data is processed, including your IP address, the time of access, the requested page, and browser and operating system information. This supports delivery, stability and security of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure operation of our website.

Information about Hostinger is available in the provider’s privacy notice.

3. Contact and customer enquiries

For enquiries by phone, email or form, we process the information you provide to handle your request. A description and a means of contact are required in the form. Your name, town or postcode, project scope, building type, equipment, error code and preferred timing are optional. The legal basis for contractual or pre-contractual enquiries is Article 6(1)(b) GDPR; otherwise it is Article 6(1)(f) GDPR (responding to your enquiry).

You may optionally upload up to five project photos. These are sent only to TK SHK, stored outside the public website directory and attached to the notification email. Images are re-encoded as JPEG files, removing embedded metadata such as GPS coordinates. Only authorised administrators can access the internal copies. Photos are deleted with their associated enquiry after 90 days during the next cleanup run. Please do not upload images of people, identity documents or other sensitive content.

Form enquiries are stored internally in WordPress and a notification email is sent to TK SHK. Internal website copies are deleted after 90 days during the next scheduled cleanup. Emails and any resulting business relationship are subject to purpose-based retention and legal requirements. Form contents are not automatically sent to the AI service. A chat alone does not confirm an order or appointment.

Funding and cost checks

Die Antworten in unseren Förder- und Kostenchecks werden im Arbeitsspeicher Ihres Browser-Tabs verarbeitet. Es erfolgt keine Übermittlung dieser Antworten an OpenAI oder Google Analytics. Einkommens- und Familienangaben werden nicht gespeichert und nicht in eine Kundenanfrage übernommen. Beim Verlassen oder Neuladen der Seite werden die Check-Eingaben verworfen. Erst wenn Sie eine Anfrage ausdrücklich absenden, übermitteln Sie die dort sichtbaren Projektdaten und optionalen Fotos an TK SHK; dafür gelten die oben beschriebenen Regeln für Kontaktanfragen. Manuell eingegebene Postleitzahlen werden lokal anhand eines hinterlegten Verzeichnisses zugeordnet.

Freiwillige Standortübernahme

Die Schaltfläche „Aktuellen Standort verwenden“ fragt erst nach Ihrem Klick die Standortfreigabe Ihres Browsers ab. Zur Ermittlung eines Adressvorschlags werden Ihre Koordinaten und Ihre IP-Adresse an Photon / komoot (photon.komoot.io, Adressdaten von OpenStreetMap) übermittelt. Ungenaue Positionen werden nicht zur Adresssuche gesendet. Das Bundesland wird auf Ihrem Gerät zugeordnet. Die Website speichert keine Koordinaten und sendet sie nicht an Luna oder Google Analytics. Erst nach Ihrer Bestätigung wird der Vorschlag in das Formular übernommen; an TK SHK geht die sichtbare Adresse erst mit dem Absenden Ihrer Anfrage. Bitte Hausnummer, PLZ und Projektort prüfen. Die manuelle Eingabe ist jederzeit ohne Standortfreigabe möglich.

4. TK SHK assistant

Once you expressly agree at the start, the optional AI chat processes your messages automatically through the OpenAI API. The recipient is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Processing is used to answer relevant questions and prepare an enquiry. The legal basis is your consent under Article 6(1)(a) GDPR. You can stop further processing at any time by selecting “End chat & clear messages”; this does not affect the lawfulness of earlier processing.

Your messages and the limited conversation history are sent to OpenAI through our server. Please do not include sensitive information in the chat; enter contact details only in the separate enquiry form. We do not store chat history in our WordPress database. After you explicitly start the chat, the conversation and message draft are temporarily saved in this browser tab’s session storage so you can continue after navigating to another page or accidentally reloading. After 30 minutes without chat activity, the conversation is no longer restored. “End & delete chat” removes it immediately. Enquiry forms and photos are not saved this way. Chat-window and Luna-icon positions are also remembered only for the browser session.

The API is called with store: false . OpenAI does not use API content for model training by default unless different data-sharing settings have been enabled. Security and abuse-monitoring logs may still be retained by OpenAI for up to 30 days, or longer where legal or security exceptions apply. Processing outside the EEA, particularly in the USA, is possible and is governed by the service’s contractual data protection safeguards. Further information: OpenAI privacy policy and API data processing.

The assistant does not replace an on-site inspection, a professional diagnosis or an emergency call. Answers may be incorrect. To prevent abuse, we use short-lived session tokens and server-side counters based on a daily keyed hash of the IP address. Raw IP addresses are not stored in these counters; technically necessary hosting logs are separate. Counters expire within one day and are deleted during the following cleanup. The legal basis is Article 6(1)(f) GDPR (security and cost control).

Security check

To help prevent automated misuse, we host ALTCHA on our own server. The security check performs a short computation in your browser; no picture puzzles are required. No data is sent to an external CAPTCHA provider and no CAPTCHA tracking cookies are set. Challenges expire after ten minutes and can only be used once. A verified session lasts up to one hour. Telephone and email remain available without this check.

5. Website analytics

With your consent, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We analyse page views, visitors, landing pages, traffic sources and selected contact interactions. The Google tag loads only after you agree to “Analytics”. If you decline, this integration sends no data to Google. The legal bases are Article 6(1)(a) GDPR and Section 25(1) of the German TDDDG.

Analytics uses pseudonymous identifiers and technical information. It records pages from a predefined list and events such as phone or email clicks, confirmed enquiries and use of the assistant. For project enquiries, only the selected predefined service category (such as gas boiler replacement) is sent as service_type . Names, phone numbers, email addresses, postal addresses, form contents and chat messages are not sent as event parameters. URLs are transmitted without query parameters or fragments, and referrer information is limited to the origin. Google receives connection information as technically necessary. Processing in the USA is possible. This integration does not use Google Signals, ad personalisation or user-provided data collection.

The analytics cookies _ga and _ga_… are limited to a maximum of 180 days. The property is configured to retain personal event data for 2 months. You can withdraw consent at any time via “Cookie settings” in the footer. This reloads the page and deletes these analytics cookies. Further information: Google privacy policy.

The selected language is saved as a functional setting locally in your browser. You can change it anytime in the language menu. The first access without a stored selection is in German.

6. Your privacy settings

Your choice is stored as an essential setting under tkshk_privacy_choice in your browser’s local storage. We store the configuration version, choice and time, but no contact details. The choice is valid for up to 180 days; expired entries are discarded on your next visit. You can change it at any time via “Cookie settings” or delete it in your browser. If storage is disabled, the website will ask again on a later visit. The legal basis for storing your requested choice is Section 25(2)(2) TDDDG; processing supports reliable privacy management under Article 6(1)(f) GDPR.

No marketing or advertising services are used. Consent to the optional AI chat is obtained separately when you start the chat and is independent of your analytics choice. The website, contact options and enquiry form work without analytics consent.

7. Local media and external links

Images, typography and animations are provided locally. Maps are not embedded automatically. If you open external links, the respective provider’s privacy policy applies.

8. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it with effect for the future.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority, such as the Berlin Commissioner for Data Protection and Freedom of Information.

For questions about your data, please contact service@tk-shk.com.

Last updated: September 2026

Voluntary site selection

If you voluntarily use the location function in the cost check, your browser processes the position to assign it to Berlin or Brandenburg. The website does not transmit these coordinates to our server, Luna, or Analytics and does not store them. The location determination itself is carried out by your browser or device provider after its permission query. Manual entry remains possible.