Privacy policy
Last updated: 2026-08
1. Controller
Controller within the meaning of Art. 4 (7) GDPR:
Christian Storm Beethovenstr. 10 85591 Vaterstetten Deutschland
2. Hosting and server logs
This website is hosted by Lovable (Lovable Labs Incorporated) with infrastructure inside the EU. When you visit a page, the hosting provider processes technical connection data such as IP address, time of request, browser and referrer in server logs. Legal basis: Art. 6 (1) (f) GDPR (secure, stable operation).
3. User accounts and company areas
If you create an account, we store your email address, an encrypted password token and your role assignments in order to provide sign-in, the company self-service area and the review of change requests. Legal basis: Art. 6 (1) (b) GDPR (performance of contract).
4. Contact form
Data you enter in the contact form (name, company, email, role, message) is stored in our database and used solely to handle your enquiry. Legal basis: Art. 6 (1) (b) and (f) GDPR. Enquiries are deleted at the latest 24 months after final processing.
5. Visit statistics
With your consent we record aggregated visit statistics (pages viewed, referrer, approximate region, device type) to improve the catalogue. No advertising profiles are created and no data is shared across websites. Legal basis: Art. 6 (1) (a) GDPR. You can withdraw consent at any time via the cookie notice.
6. Cookies and local storage
Necessary storage keeps your sign-in session, your language selection and your cookie decision. Optional measurement is only activated after consent.
7. Processors
We use Lovable Cloud (database, authentication, storage, email delivery) as a processor. Data processing agreements are in place.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. You may withdraw consent at any time and lodge a complaint with a supervisory authority. Requests go to the contact address in the imprint.
9. Storage periods
We store personal data only as long as necessary for the stated purposes or as required by statutory retention obligations.
10. Supervisory authority
The competent supervisory authority for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Deutschland