Privacy — Plain-English summary
This page summarizes the key points of our Privacy Policy in plain English.
Who is the data controller?
LavaLoft UG (haftungsbeschränkt), Am Kirchweg 29, 06188 Landsberg, Germany.
Phone: +49 32 221095222. Email: [email protected].
What data do we process?
- Server log data — your IP address, browser, referrer, and timestamp are processed automatically when you visit our pages (for security and operations).
- Form data — first/last name, business email, company, phone, message, when you submit the contact form, the brochure-download form, or the pricing form. Forms are processed via HubSpot (EU servers).
- Demo bookings — handled by HubSpot Meetings (EU servers).
- Analytics & advertising — Google Analytics, Microsoft Clarity, LinkedIn Insight Tag. All are loaded only after explicit consent via Cookiebot (Google Consent Mode v2).
- Cookies — strictly necessary cookies are set without consent. Statistics and marketing cookies require opt-in.
Legal basis
Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(f) GDPR (legitimate interest in secure operations), Art. 6(1)(a) GDPR (consent for analytics and marketing).
Where is the data stored?
Primary servers are located in Germany / the EU. Some service providers (e.g. Google) operate in the USA — in those cases we rely on EU Standard Contractual Clauses (SCCs).
How long do we keep your data?
As long as required for the stated purpose and statutory retention periods (e.g. 6–10 years for tax-relevant data). Contact and lead data are usually deleted on request.
Your GDPR rights
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise these rights, please email [email protected].
Third-party services we use
- HubSpot (forms, meetings) — data processor agreement in place
- Vercel / IONOS (hosting)
- Google Analytics & Consent Mode v2 (only with consent)
- Cookiebot (consent management)
- Microsoft Clarity (session insights, only with consent)
- LinkedIn Insight Tag (only with consent)