Privacy Policy

1. Controller

We, Lucas-Nülle GmbH, take the protection of your personal data and the statutory obligations serving this protection very seriously. Legal requirements demand comprehensive transparency regarding the processing of personal data. Only if you are sufficiently informed about the purpose, type and scope of processing can the processing be comprehensible to you as a data subject.

Our data protection information therefore explains in detail which personal data are processed by us when using our website www.lucas-nuelle.de (as well as www.lucas-nuelle.ae, www.lucas-nuelle.com, www.lucas-nuelle.es, www.lucas-nuelle.fr, www.lucas-nuelle.com.br, www.lucas-nuelle.pl, www.lucas-nuelle.ru, www.lucas-nuelle.us), all other websites referring to these, and in the other cases explained here.

The controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection requirements is:

Lucas-Nülle GmbH
Siemensstraße 2
50170 Kerpen-Sindorf
Tel.: +49 (0) 2273-567 0
info@lucas-nuelle.com

Hereinafter referred to as "controller" or "we".

The data protection officer can be reached at our address with the addition "the data protection officer" or at datenschutz@lucas-nuelle.de.

Please note that links on our website may take you to other websites that are operated not by us but by third parties. Such links are either clearly marked by us or are recognisable by a change in the address bar of your browser. We are not responsible for compliance with data protection regulations and the secure handling of your personal data on these websites operated by third parties.

2. Definitions

This privacy policy uses the terms of the GDPR legislative text. The definitions (Art. 4 GDPR) can be found, for example, at eur-lex.europa.eu.

Cookies and similar technologies

Cookies are text files that are stored on or read from your device by a website. They contain combinations of letters and numbers to, for example, recognise the user and their settings when reconnecting to the cookie-setting website, enable you to stay logged in to a customer account, or statistically analyse certain usage behaviour.

Web Storage technology makes it possible to store variables and values locally in the user's browser cache. The technology includes the so-called "sessionStorage", which is stored until the browser tab is closed, as well as "localStorage", which is stored in the browser cache until the cache is cleared by the user.

Data categories

When we specify the categories of data processed, these include in particular the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. email addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos), contract data (e.g. subject matter of contract, terms, customer category), payment data (e.g. bank details, payment history), usage data (e.g. history on our website, access times), connection data (e.g. device information, IP addresses, URL referrers), location data (e.g. GPS data, IP geolocation) and diagnostic data (e.g. crash logs, performance data).

3. Information on data processing

We process personal data only insofar as this is permitted by law. Personal data is only passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

4. Retention period

Personal data is deleted as soon as the purpose of the processing ceases to apply or a prescribed retention period expires, unless there is a necessity for further storage for the conclusion or performance of a contract.

5. Automated decisions in individual cases including profiling

Automated decisions in individual cases including profiling do not occur.

6. Rights of data subjects

As a data subject, you have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, and the right to data portability pursuant to Art. 20 GDPR. For the right of access and the right to erasure, the restrictions of §§ 34, 35 BDSG apply.

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). The data protection supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf, Germany

However, you are free to lodge a complaint with another data protection supervisory authority. A list of supervisory authorities can be found at: www.bfdi.bund.de

7. Controller's notification obligations

We shall communicate any rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, Art. 17(1) and Art. 18 GDPR to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves a disproportionate effort.

8. Obligation to provide data

Unless otherwise explained below in the information on legal bases, you are not obliged to provide personal data. In the cases of Art. 6(1)(b) GDPR, however, personal data is required for the performance or conclusion of a contract.

9. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. Where personal data are processed for direct marketing purposes, you have the right to object at any time.

Your objection may be made in any form and should be addressed to the contact details given above. The data protection officer can be reached at datenschutz@lucas-nuelle.de.

10. Withdrawal of consent

Pursuant to Art. 7(3) sentence 1 GDPR, you have the right to withdraw your consent at any time with effect for the future, informally by post or email. The lawfulness of processing carried out on the basis of consent prior to withdrawal is not affected.

Your withdrawal may be made in any form and should be addressed to the contact details given above.

Hosting (Netlify)

This website is hosted via the Netlify service. When each page is accessed, technical connection data (including IP address, timestamp, accessed page, browser type) is recorded server-side in so-called access logs. This processing is technically necessary in order to deliver the website.

Feature	Details
Purpose	Provision and delivery of the website, ensuring IT security
Legal basis	Art. 6(1)(f) GDPR (legitimate interest in secure operation)
Data categories	Connection data (IP address, timestamp, user agent, accessed URL)
Recipient	Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA
Third-country transfer	USA — on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR); Netlify is a certified DPF participant
Retention period	In accordance with Netlify's privacy policy, max. 30 days for access logs
Further information	netlify.com/privacy

Contact (Contact form)

The contact form on this website uses the formsubmit.co service to forward your enquiry by email to Lucas-Nülle GmbH. Formsubmit.co does not permanently store form data.

Feature	Details
Purpose	Forwarding and processing of your contact enquiry
Legal basis	Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent via mandatory checkbox)
Data categories	Master data (name), contact data (email), content data (message), declaration of consent
Recipient	Lucas-Nülle GmbH (via formsubmit.co as transmission service)
Third-country transfer	In individual cases USA (formsubmit.co) on the basis of EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)
Retention period	Only for as long as necessary to process the enquiry, unless statutory retention obligations apply
Cookies / storage on device	No

Newsletter (Brevo)

If you subscribe to our newsletter, your email address will be transmitted to and stored by the Brevo service (formerly Sendinblue). Registration takes place via a double opt-in procedure: after entering your email address, you will receive a confirmation email with which you must actively confirm your registration.

Feature	Details
Purpose	Sending of the newsletter and current information about the Smart Table concept product
Legal basis	Art. 6(1)(a) GDPR (explicit consent via checkbox and double opt-in); § 7(2) no. 3 UWG
Data categories	Contact data (email address), time of registration, proof of consent
Recipient	Brevo SAS, 7 rue de Madrid, 75008 Paris, France (EU company)
Third-country transfer	None — Brevo is a European provider with EU data storage
Retention period	Until withdrawal of consent (unsubscription from the newsletter)
Withdrawal	At any time via the unsubscribe link in any newsletter email or in writing to datenschutz@lucas-nuelle.de
Further information	brevo.com/en/legal/privacypolicy

This website sets no tracking cookies and uses neither analytics nor advertising services. Only technically necessary storage mechanisms are used (e.g. sessionStorage for the disclaimer status), which contain no personal data and require no transfer to third parties.

Legal basis for technically necessary cookies and local storage: Art. 6(1)(f) GDPR and § 25(2) no. 2 TDDDG (no consent required, as they are strictly necessary to carry out the transmission of a communication over a public electronic communications network).