Privacy Policy

1. Data Controller

The controller responsible for processing personal data on this website is:

Lutrisoft GmbH
Lübecker Straße 1
22087 Hamburg
Germany

Email: kontakt@lutrisoft.com

2. Website Hosting

Our website is hosted on a virtual private server (VPS) provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany.

When you access our website, technically necessary connection data is processed to deliver the requested content and ensure the security and stability of our website. This may include your IP address, the date and time of the request, the requested resource, and technical information transmitted by your browser, such as the user agent.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and technically functional operation of our website.

We do not create personal HTTP access logs or use connection data to analyze visitor behavior.

Our hosting provider processes personal data on our behalf under a data processing agreement in accordance with Article 28 GDPR. In providing its services, netcup may involve affiliated companies of the Anexia group and other authorized service providers for infrastructure, operations, and support.

Further information on the processing of personal data by our hosting provider is available in netcup's privacy information.

3. Contact by Email

If you contact us by email, we process the personal data you provide, particularly your name, email address, the content of your message, and associated communication metadata, to handle and, where appropriate, respond to your inquiry.

If your inquiry relates to entering into or performing a contract with you as an individual, the legal basis is Article 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in handling business inquiries and correspondence under Article 6(1)(f) GDPR.

Email Hosting

We use Google Workspace to manage our business email communication. Our contractual service provider is:

Google Cloud EMEA Limited
Velasco
Clanwilliam Place
Dublin 2
Ireland

When you communicate with us by email, personal data contained in your messages and associated communication metadata is processed using Google Workspace.

Google processes personal data on our behalf under the Google Cloud Data Processing Addendum (CDPA), which forms part of our contractual agreement and governs processing in accordance with Article 28 GDPR.

International Data Transfers

When using Google Workspace, personal data may be stored and processed outside the European Union (EU) or European Economic Area (EEA), including in the United States. We do not restrict the storage of Google Workspace data to a specific geographic region.

Transfers of personal data outside the EU/EEA are subject to the requirements of Chapter V GDPR. Depending on the destination and applicable circumstances, such transfers are based on adequacy decisions issued by the European Commission, including the EU-US Data Privacy Framework for certified US organizations, or appropriate safeguards such as the European Commission's Standard Contractual Clauses (Article 46 GDPR).

Further information about Google's international data transfers and applicable safeguards is available at:

https://cloud.google.com/terms/data-processing-addendum

https://policies.google.com/privacy/frameworks

Data Retention

We retain personal data contained in email correspondence for as long as necessary to handle the inquiry and any resulting business relationship. Where statutory retention obligations apply, the relevant correspondence is retained for the legally required period. Otherwise, personal data is deleted when it is no longer necessary for the purposes for which it was collected, unless another legal basis justifies continued retention.

4. Cookies and Third-Party Services

Our website does not use cookies, tracking technologies, or analytics services.

All website content is delivered through our own hosting infrastructure. No externally embedded third-party services are loaded when you visit our website.

5. Your Rights

Subject to the applicable legal requirements, you have the following rights regarding your personal data:

You may exercise your rights at any time by contacting us using the email address provided above.

You also have the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR.

The supervisory authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit)

Ludwig-Erhard-Str. 22
20459 Hamburg
Germany

Website: https://datenschutz-hamburg.de

6. Changes to This Privacy Policy

We will update this privacy policy if our website's data processing activities or applicable legal requirements change.