Privacy notice
Interim version, subject to legal review
1. Controller
Kilum Automation & Service GmbH, Steinkirchring 43, 78056 Villingen-Schwenningen, Germany.
Managing directors: Vijikkumar Sritharan, Kajeeban Kanagasingam, Kadadsan Kanagasingam.
Contact: mail@velai.eu.
Data protection officer: not appointed.
2. Hosting and server logs
We use Cloudflare (CDN, Worker and Turnstile) to deliver this website. Server logs (IP address, user agent, time) are kept for up to 7 days. Legal basis: Art. 6(1)(f) GDPR.
Our database provider Convex, Inc. (USA) hosts data with its cloud provider; data may be processed outside the EU/EEA, protected by EU Standard Contractual Clauses.
3. Waitlist
Data we process: your answers, name, email address, LinkedIn link (if you give it), attribution data (how you reached us), your consent record and a hash of your IP address.
Purposes: reviewing your profile, emailing you about your request (including status updates) and crediting a friend who referred you.
Legal basis: your consent, Art. 6(1)(a) GDPR and section 6 DPDP Act. You can withdraw it at any time by emailing mail@velai.eu.
Retention: unconfirmed requests 7 days; requests outside the criteria and withdrawn requests 12 months; all other requests 24 months.
Recipients: only our processors (section 6).
4. Contact form
Data: name, email address, topic, message and, if you give it, company.
Purpose: answering your message. Legal basis: Art. 6(1)(f) and (b) GDPR.
Retention: 12 months.
5. Email
We send emails through Resend (EU region) as our processor. Delivery events such as bounces and complaints are processed.
We do not track opens or clicks in emails to waitlist leads.
6. Processors and transfers
Our processors are Convex (database), Cloudflare and Resend. Analytics providers are listed here only if they are enabled.
Our database provider Convex, Inc. (USA) hosts data with its cloud provider; data may be processed outside the EU/EEA, protected by EU Standard Contractual Clauses.
If you provide data from India, it is transferred from India to Germany, where we are established.
7. Cookies and storage
The table lists what this website stores in your browser. Legal basis: section 25 TDDDG and, for non-essential items, Art. 6(1)(a) GDPR.
You can change your choice at any time via "Cookie settings" in the footer.
| Name | Kind | Purpose | Lifetime | Class |
|---|---|---|---|---|
| velai-locale | Cookie | Language | 1 year | Essential (preference) |
| velai-consent | Cookie | Stores this choice | 180 days | Essential |
| Cloudflare Turnstile storage | Cookie/storage by Cloudflare | Bot protection on forms | Session/up to 1 day | Essential |
| velai-waitlist-draft | sessionStorage | Step 1–2 answers | Tab session | Functional |
| velai-wl-ack | sessionStorage | Thank-you page name/masked email | Up to 30 minutes | Functional |
| velai-attr | sessionStorage | ref/from/track/degree (functional); utm_* only if analytics is accepted | Tab session | Functional / analytics |
| Provider cookies | Cookie | Only after consent | Per provider | Analytics / advertising |
8. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent, and the right to complain to the competent supervisory authority (the Baden-Württemberg state data protection authority).
Under the DPDP Act you have the right of access, correction and erasure, and to use the grievance process.
We respond within 30 days. Contact: mail@velai.eu.
9. Automated decisions
No automated decision-making with legal effect; the waitlist criteria flag a request for a person to review.
10. Minors
This website is not directed at people under 18.
11. Changes
This notice is version privacy-2026-10-a (October 2026).