Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information on how your personal data is handled when using our website. In this context, personal data refers to any data that can be used to personally identify you.

1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Luca Lintweiler, Memeler Str. 11, 45884 Gelsenkirchen, Germany, Tel.: 01749403011, E-Mail: info@lucalintweiler.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When using our website for purely informational purposes—that is, if you do not register or otherwise transmit information to us—we collect only the data that your browser transmits to the server (so-called “server log files”). When you visit our website, we collect the following data, which are technically necessary for us to display the website to you:

  • Our visited Website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you arrived at the page
  • Browser used
  • Operating system used
  • IP address used (where applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to retrospectively examine the server log files should concrete evidence point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.

3) Cookies

To make visiting our website appealing and to enable the use of certain functions, we use cookies—small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period, allowing site settings to be saved (so-called "persistent cookies"). In the latter case, you can view the storage duration in your web browser's cookie settings.

If personal data is processed via specific cookies we use, such processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been granted, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a customer-friendly, effective user experience.

You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to exclude the acceptance of cookies in certain cases or entirely.

Please note that the functionality of our website may be limited if cookies are not accepted.

4) Contacting us

Personal data is collected when you contact us (e.g., via a contact form or email). The specific data collected when using a contact form is evident from the form itself. This data is stored and used solely for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided there are no statutory retention obligations to the contrary.

5) Web analytics services

5.1 Google Tag Manager

This website uses "Google Tag Manager," a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google Tag Manager provides a technical framework for consolidating various web applications—including tracking and analytics services—and for configuring, controlling, and setting conditional rules for them via a unified user interface. Google Tag Manager itself does not store information on users' devices or access such information. Nor does the service perform independent data analysis. However, when a page is loaded, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to Google LLC servers in the USA is also possible.

This processing takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

Further legal information regarding Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ und https://policies.google.com/privacy?hl=de&gl=de

5.2 Jetpack

This website uses the web analytics service of the following provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data—including information about the device used, such as the IP address and browser details—in order to analyze usage patterns on our website and create pseudonymized usage profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally precludes any direct identification of the individual. The data is not combined with other personally identifiable information collected about you through other means.

All processing operations described above—specifically the reading or storing of information on the device you are using—are carried out only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

6) Page functionalities

6.1 Instagram-Plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when a page of our website containing such plugins is accessed.

Only when you activate the plugins—thereby granting your consent to the data transfer in accordance with Art. 6(1)(a) GDPR—does your browser establish a direct connection to the provider's servers. In this process, information regarding the device you are using (including your IP address), your browser, and your browsing history is transmitted to the provider to a certain extent—regardless of whether you are logged into an existing user profile—and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information regarding interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the enabled plugin—simply click on it again. However, the revocation does not affect data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

6.2 Zoom

We use the following provider to conduct online meetings, video conferences, and/or webinars: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

The provider processes various types of data; the scope of the data processed depends on the information you provide before or during your participation in an online meeting, video conference, or webinar. Your data as a participant in the communication is processed and stored on the provider's servers. This may include, in particular, your registration details (name, email address, telephone number (optional), and password) and session data (subject, participant IP address, device information, and description (optional)).

In addition, participants' video and audio contributions as well as voice inputs in chats can be processed.
Article 6(1)(b) of the GDPR serves as the legal basis for the processing of personal data required for the performance of a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures). Where you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. You may revoke any consent granted at any time with effect for the future.
Furthermore, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the effective conduct of the online meeting, webinar, or video conference.

We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

7) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a so-called "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications that require consent. When the page is accessed, the "cookie consent tool" is displayed to users as an interactive interface where they can grant consent for specific cookies and/or cookie-based applications by selecting the corresponding checkboxes. The tool ensures that any cookies or services requiring consent are loaded only if the user has granted the necessary consent via these checkboxes. This guarantees that such cookies are placed on the user's device only when consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. As a general rule, no personal user data is processed in this process.

If, in an individual case, the processing of personal data (such as the IP address) does occur for the purpose of storing, assigning, or logging cookie settings, this takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring legally compliant, user-specific, and user-friendly cookie consent management—and, consequently, in the legally compliant design of our website.

A further legal basis for the processing is Article 6(1)(c) of the GDPR. As the controller, we are subject to a legal obligation to make the use of cookies that are not technically necessary conditional upon the respective user's consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information regarding the operator and the configuration options for the cookie consent tool can be found directly in the corresponding user interface on our website.

8) Rights of the data subject

8.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, with reference made to the cited legal basis for the respective conditions of exercise:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to be informed pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given, pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing, and—where applicable—any relevant statutory retention periods (e.g., retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data are routinely deleted after the retention periods have expired, provided they are no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in their continued storage.

When processing personal data based on Article 6(1)(f) of the GDPR, such data is stored until you exercise your right to object pursuant to Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, such data is stored until you exercise your right to object pursuant to Article 21(2) of the GDPR.

Unless otherwise indicated in the other information provided in this statement regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.