Privacy policy

We process personal data (hereinafter mostly just “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Art. 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We also inform you below about third-party components used, insofar as third parties process data under their own responsibility as a result.

Our privacy policy is structured as follows:

• I. Information about us as controller
• II. Rights of users and data subjects
• III. Information on data processing

I. Information about us as controller

The controller of this website within the meaning of data protection law is:

Lumen 21
Stefan Fuchs
Maistraße 15a
82377 Penzberg
Germany

Phone: +49 8856 8690552
E-mail: info@lumen21.de

The provider’s data protection officer is: Stefan Fuchs

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation of whether data concerning them is being processed, to access to the processed data, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
• to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
• to the immediate erasure of data concerning them (see also Art. 17 GDPR) or, alternatively, where further processing is necessary under Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
• to receive the data concerning them and provided by them and to have this data transmitted to other providers/controllers (see also Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they consider that the data concerning them is being processed by the provider in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out on the basis of Articles 16, 17(1) and 18 GDPR. This obligation does not apply, however, where such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, where the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permitted.

III. Information on data processing

Your data processed when you use our website will be erased or blocked as soon as the purpose of storage lapses, there are no statutory retention obligations preventing erasure, and no differing information on individual processing procedures is given below.

Hosting and server data

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our hosting provider. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you came to our website (referrer URL), the pages of our website that you visit, the date and time of each access and the IP address of the internet connection from which our website is used. The IP address is shortened as soon as it is stored (for IPv4 by the last number field, for IPv6 to the first 48 bits), so that it can no longer be assigned to an individual connection.

The data collected in this way is stored temporarily, but not together with other data about you. This storage takes place on the legal basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.

The data is erased after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data is wholly or partly exempt from erasure until an incident has been finally resolved.

Website Check

On the “Website Check” page, you can have the address of a website analysed. The address is transmitted to our own server, which retrieves and evaluates the publicly accessible page. The result is returned to your browser. The address entered is neither stored nor logged, no cookies are set and no data is passed on to third parties. To protect against misuse, the number of checks per shortened IP address is counted in working memory for one hour and then discarded.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing you with an analysis at your request and in protecting the service from misuse.

Anonymous visitor statistics

To find out which pages are read, we analyse the server log files described above with the GoAccess software on our own server. This produces only aggregated figures, such as page views per day and per page, referring pages, and browser and device types. No cookies are set, no analytics script is loaded, no profiles are created and no data is passed on to third parties. As IP addresses are already shortened when stored, it is not possible to identify individuals.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing and improving our website to meet needs. The underlying log files are deleted after seven days; the aggregated figures contain no personal data.

Cookies and local storage

This website itself uses no cookies and no tracking tools. In your browser’s local storage (localStorage) we only store whether you have switched the website’s light off and whether you have closed the notice “Cookies? Not here.” This information does not leave your device and serves only to take your choice into account on your next visit (Section 25(2) No. 2 TDDDG). You can delete it at any time via your browser settings.

Only when you actively start an embedded video can YouTube use cookies or similar technologies (see below).

Fonts

The fonts used on this website are delivered from our own server. No connection is made to third-party servers, such as Google’s, for this purpose.

Contact

If you contact us by e-mail or phone, the data you provide is used to process your enquiry. Providing the data is necessary to process and answer your enquiry; without it, we cannot answer your enquiry or can do so only to a limited extent.

The legal basis for this processing is Art. 6(1)(b) GDPR.

Your data will be erased once your enquiry has been conclusively answered and there are no statutory retention obligations preventing erasure, for example in the case of any subsequent contract processing.

Appointment booking via Calendly

To arrange initial calls, we link to the appointment booking service Calendly, operated by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. Calendly is not embedded on this website. You are only redirected to the Calendly website once you click the relevant link. Calendly’s privacy notices apply there: calendly.com/de/privacy.

YouTube videos

We embed videos from the YouTube platform on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The videos are loaded in the so-called enhanced privacy mode (youtube-nocookie.com) and only after you click the “Play” button. No data is transmitted to YouTube before this click. After the click, your browser connects to YouTube’s servers. In particular, your IP address, the page you are visiting and information about your device may be transmitted to YouTube, and YouTube may use cookies or comparable technologies. If you are logged in to your YouTube or Google account, YouTube may be able to assign your browsing behaviour to your profile.

The legal basis is your consent, given by clicking “Play”, pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. Further information can be found in Google’s privacy policy: policies.google.com/privacy.