Privacy Policy

This is an English courtesy translation. In case of discrepancies, the German version is legally binding.

Controller

Lot Internet GmbH
Friedrich-Engels-Straße 23, 14473 Potsdam, Germany
Phone: +49 160 8801035
E-mail: info@lot-internet.de
Website: www.lot-internet.de

Data protection officer

Our data protection officer can be reached at: Lot Internet GmbH, Friedrich-Engels-Straße 23, 14473 Potsdam, Germany; e-mail: info@lot-internet.de.

How and why we process your data

We process personal data only where a legal basis under Article 6(1) GDPR applies: your consent (lit. a), the performance of a contract or pre-contractual measures (lit. b), compliance with a legal obligation (lit. c), or our legitimate interests (lit. f). We process your data to operate and secure this website, to respond to enquiries you send us, to handle applications, and — only with your consent — to measure how our website is used.

Recipients of your data

Processors and service providers we engage may receive data for specific purposes; these fall into the categories of IT services, telecommunications, and consulting. We disclose information about you to third parties only where one of the legal bases above applies, where you have consented, or where we are under a legal obligation to do so. Data is processed within the European Union and in the USA. For the USA, an adequacy decision of the European Commission has been in place since 10 July 2023; we ensure that US recipients are certified under the EU-US Data Privacy Framework. For transfers to third countries without an adequacy decision, we conclude the European Commission's Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.

Retention periods

We store your personal data for as long as necessary for the purpose concerned. Statutory retention and documentation obligations — for instance under the German Commercial Code (HGB) and the Fiscal Code (AO) — may require retention for up to ten years. Retention is also governed by statutory limitation periods, which under sections 195 et seq. of the German Civil Code (BGB) are generally three years, but may extend to thirty years in certain cases.

Your rights

You have the right to request access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object to processing (Article 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal. An informal message to the e-mail address above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority.

Right to object under Article 21 GDPR

Where we process your data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Is there an obligation to provide data?

You are not obliged to provide personal data. However, if you contact us, we need the data you provide in order to respond to your enquiry.

Automated decision-making

We do not use your data for automated decision-making, including profiling or scoring, within the meaning of Article 22 GDPR.

SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the padlock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.

Cookies

Cookies are small text files stored on your device by your browser. They do no harm to your computer and contain no viruses. We use them to make our offering more user-friendly, effective and secure.

Most of the cookies we use are session cookies, which are deleted automatically at the end of your visit. Others remain on your device until you delete them and allow us to recognise your browser on your next visit. Cookies that are strictly necessary to carry out the transmission of a communication or to provide a service you have expressly requested are stored on the basis of Article 6(1)(f) GDPR and section 25(2) no. 2 TDDDG. You can configure your browser to notify you about cookies, to accept them only in individual cases, to exclude them generally, or to delete them automatically when the browser closes. Disabling cookies may limit the functionality of this website.

Consent banner

When you first visit our website, a consent banner lets you decide whether statistics cookies may be set in addition to the strictly necessary ones. No analytics or tracking service is loaded without your explicit consent — the relevant scripts are not even requested from the server until you agree. The legal basis is your consent under Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG; strictly necessary cookies rely on section 25(2) no. 2 TDDDG.

Your decision is stored locally in your browser only (localStorage entry lot-consent); it is not transmitted to us or to any third party. Declining is as easy as accepting and puts you at no disadvantage.

Withdrawal: you can withdraw your consent at any time with effect for the future — open privacy settings. The lawfulness of processing carried out before withdrawal remains unaffected. On withdrawal we delete the analytics cookies that were set.

Hosting (Netlify)

This website is hosted and delivered via the content delivery network of Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you access our pages, Netlify processes technical access data (server log files) on our behalf, in particular your IP address, the date and time of access, the URL requested, the referrer URL, the volume of data transferred, the HTTP status code, and browser and operating system identifiers.

This processing is technically necessary in order to deliver the website at all, and also serves operational security and the prevention of attacks. The legal basis is our legitimate interest in the secure and performant operation of this website under Article 6(1)(f) GDPR. A data processing agreement pursuant to Article 28 GDPR is in place with Netlify.

As Netlify is based in the USA, personal data may be transferred there. Netlify, Inc. is certified under the EU-US Data Privacy Framework, and an adequacy decision of the European Commission dated 10 July 2023 applies to the USA. Netlify has additionally entered into the European Commission's Standard Contractual Clauses. Further information: netlify.com/privacy and netlify.com/gdpr-ccpa.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how our website is used so that we can improve its content and structure. The data collected includes pages viewed, time on page, approximate geographic origin, device type, browser and referrer.

Google Analytics is loaded only after your explicit consent via the consent banner. Until you consent, the Google script is not requested from the server and no analytics cookies are set. The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.

We use Google Consent Mode v2; the storage types analytics_storage and ad_storage default to "denied". Collection takes place with a truncated IP address; Google Signals and advertising personalisation are disabled, so no cross-device advertising profiles are created. The cookies used (_ga, _ga_*) have a lifetime of up to 24 months; the retention period for usage data in Google Analytics is limited to 14 months.

A transfer to Google LLC in the USA cannot be excluded. Google LLC is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses apply in addition. A data processing agreement pursuant to Article 28 GDPR is in place with Google.

You can withdraw your consent at any time via the privacy settings. Further information is available in Google's privacy policy. Independently of this, you can prevent collection using the Google Analytics opt-out browser add-on.

Contact form and e-mail

If you send us enquiries via the contact form or by e-mail, we store your details in order to process the enquiry and in case of follow-up questions. We do not pass on this data without your consent. Legal basis: Article 6(1)(b) GDPR (contract or pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest).

Status

This privacy policy is currently valid and dated July 2026. Further development of this website or changes in legal requirements may make an update necessary.