Transparent information on personal-data processing on lukasteissl.com and in the proposal workflow.
For the general website, the controller is normally the operator identified in the Legal Notice. For an individual proposal, the person or company expressly identified as the contractor in that proposal may be the controller for contract-related processing. The concrete contract identity is disclosed before acceptance. An affiliated company does not become controller for a specific contract merely because of a brand, domain or technical infrastructure.
When the website is accessed, technically necessary data such as IP address, timestamp, requested resource, browser/device information and security events may be processed where required for delivery, stability, abuse prevention and IT security. Session cookies are used only for technical functions. Depending on the context, processing is based in particular on Article 6(1)(b) or (f) GDPR.
Data submitted through contact forms or direct communication are processed to handle the request. Depending on the content, this is for pre-contractual steps/contract performance or the legitimate interest in proper communication and documentation.
For voluntary newsletter registration, the email address, confirmation status and technically required evidence of subscription/unsubscription are processed. Where sending is based on consent, consent may be withdrawn at any time for the future.
If Cloudflare Turnstile is technically enabled for forms, technical information required for abuse and bot detection may be processed by Cloudflare. If Turnstile is not configured, the website uses the existing local protection mechanisms. Only data required for the respective security purpose should be processed.
When offers.lukasteissl.com is used, and to the extent the respective feature is actually enabled, proposal/customer data, proposal number and revision, email verification/OTP, company and representative details, confirmed B2B status, acceptance timestamp, accepted Terms version, confirmations, document access and technical integrity/audit data may be processed. Purposes include delivery of the proposal, contract performance, evidence of acceptance, security and legal defence. Full contractual addresses belong in private contract records and should not be publicly indexable.
Where external payment, hosting, email, cloud or other service providers are used, they receive data only to the extent required for their service and on an appropriate legal basis. Full card or online-banking access data are not stored solely because of this website unless a specific payment integration expressly requires it.
Data are retained only as long as required for the relevant purpose, statutory retention duties, contract handling or the establishment, exercise or defence of legal claims. Security data may be retained for shorter periods, while contract and evidentiary records may be retained for applicable statutory periods.
Subject to the statutory conditions, individuals may have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent for the future. A complaint may also be filed with a competent data-protection supervisory authority.
A private or contract-only address of the contractor is not made public merely because of this Privacy Notice. Where a public geographic business/establishment address is legally required, a legally suitable public address must be provided in the Legal Notice. Contract addresses are disclosed to the relevant contracting party in private proposal documents.
Transparent information on personal-data processing on lukasteissl.com and in the proposal workflow.
Deutsch
English
Español