Privacy
This notice covers the website kolonaut.punktdev.com. Kolonaut itself is only available as an app for iPhone, iPad and Android, which has its own app privacy notice.
Controller
Real Movement Analytics GmbH
Kleines Everstal 18d
44388 Dortmund
Germany
Email: hi@punktdev.com
No cookies, no tracking
The website stores nothing in your browser’s local storage and sets no cookies itself. We use no advertising, no tracking pixels and no analytics. There is no account.
Hosting and security
We deliver the website through Cloudflare Workers and the Cloudflare network. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
When the website is accessed, technically necessary connection data is processed, in particular IP address, time, requested address and details sent by your browser. This serves delivery and protection against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, available service. The website cannot be delivered without this data. We do not store it ourselves, and logging for the Worker is switched off. Cloudflare only processes it as long as needed for delivery, security and abuse prevention, and deletes or anonymizes it afterwards.
Cloudflare may also process data outside the EU, in particular in the USA. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Where that does not apply, the European Commission’s standard contractual clauses apply. Both are set out in the Cloudflare data processing addendum. Details on processing and retention are in the Cloudflare privacy policy. For security features such as protection against automated attacks, Cloudflare may set technically necessary cookies. This is permitted without consent (Section 25(2) no. 2 TDDDG); the processing is based on Art. 6(1)(f) GDPR.
Contact by email
If you write to us, we process your email address and message to handle your request. Writing to us is your choice; without contact details we simply cannot reply. The legal basis is Art. 6(1)(b) GDPR for contract-related requests, otherwise Art. 6(1)(f) GDPR based on our interest in answering. We delete the correspondence once your request is dealt with. We only keep it longer if a legal retention obligation applies (such as for business letters under Section 257 HGB) or we need it to defend legal claims.
Our email runs on Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin), which acts as our processor. Processing in the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); the European Commission’s standard contractual clauses also apply. They are part of Microsoft’s Data Protection Addendum, and we will send you a copy on request.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction and data portability. You can also lodge a complaint with a data protection authority, in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
Right to object
Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
Write to hi@punktdev.com.
Last updated: October 2026