1. An overview of data protection General information The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Data recording on this website The data processing on this website is carried out by the website operator. The responsible party (Controller) within the meaning of the General Data Protection Regulation (GDPR) is: Lethoris Thomas Laumann Aublick 10 24594 Remmels Germany Email: info@lethoris.com Phone: +110110110110 2. General information and mandatory information Data protection The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this Privacy Policy. Revocation of your consent to data processing Many data processing operations are only possible with your express consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. Information, deletion, correction, and restriction Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing (Art. 15 GDPR). You also have a right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR), or restriction of processing (Art. 18 GDPR) of this data. Right to data portability You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format (Art. 20 GDPR). Right to complain to the competent supervisory authority In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority for data protection issues for our company is: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) Holstenstraße 98 24103 Kiel Germany Storage duration Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will take place after these reasons cease to apply. 3. Hosting and Content Delivery Networks (CDN) Onepage.io & Squarespace Our website is hosted by Onepage.io (Onepage GmbH, Germany). Additionally, our domain and email services are managed via Squarespace (Squarespace Ireland Ltd.). These providers process personal data (e.g., IP addresses, log files) to ensure the technical availability and security of the website. The use of these providers is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in a secure and efficient provision of our online offer. We have concluded a Data Processing Agreement (DPA) with these providers to ensure that they process your data only in accordance with our instructions and in compliance with the GDPR. Data transfers to the US by Squarespace are safeguarded by the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs). 4. Consent Management Usercentrics Cookiebot This website uses Cookiebot, provided by Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark), to obtain your consent for the storage of certain cookies on your device and to document this in a data protection-compliant manner. When you enter our website, a connection is established with Cookiebot's servers to obtain your declarations of consent. Cookiebot stores a cookie in your browser to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. The legal basis for this is Art. 6 (1) (c) GDPR, as we are legally obliged to obtain consent for the use of certain cookies. 5. Analysis Tools Google Analytics This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies", which enable an analysis of your use of the website. This data is processed only if you give your express consent via our cookie banner (Art. 6 (1) (a) GDPR). You can revoke your consent at any time. The data is usually transferred to a Google server in the USA and stored there. We use IP anonymization. Google LLC is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection for data transfers to the US. Onepage Analytics We also use the integrated analytics tool from Onepage.io to statistically evaluate visitor traffic. This data is processed based on our legitimate interest (Art. 6 (1) (f) GDPR) in optimizing our services. The data is processed anonymously and no personal tracking cookies are set. 6. Plugins and Tools Calendly On our website, you have the option to book appointments via the Calendly service. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA. When you use the tool, data such as your name, email address, and IP address are transmitted to Calendly. The legal basis for this is Art. 6 (1) (b) GDPR (contract initiation) or Art. 6 (1) (f) GDPR (legitimate interest in efficient appointment management). Data is transferred to the USA. Calendly LLC is certified under the EU-US Data Privacy Framework (DPF), which guarantees compliance with European data protection standards. 7. Contact via Email If you contact us by email, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass this data on without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested. The data sent by you to us via contact requests remains with us until you request us to delete it, revoke your consent to the storage, or the purpose for the data storage lapses (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.