Privacy Policy

1. Overview

This privacy policy explains how personal data is processed when you visit this website, use the contact form or contact us by email.

2. Controller

The controller is LU Procurement UG (haftungsbeschränkt) i.G., Schmidtbornstraße 8, 65934 Frankfurt am Main, Germany. Email: contact@luprocurement.de.

3. Hosting through Cloudflare

This website is delivered through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages). When the website is accessed, technically necessary connection data may be processed. This can include the IP address, access time, requested URL, browser information and other technical metadata. The processing is used to provide the website securely and reliably.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of the website. Cloudflare processes data on our behalf under the data processing terms applicable to the service.

4. International data transfers through Cloudflare

Cloudflare is a provider based in the United States. According to Cloudflare, personal data may also be processed outside the European Economic Area. Cloudflare identifies the European Commission Standard Contractual Clauses and, for transfers to the United States, the EU-U.S. Data Privacy Framework as transfer safeguards where applicable.

5. Contact form

When you use the contact form, we process the information you provide. This includes the reason for your enquiry, your name, your company if provided, your email address and your message. Submission is handled by a server-side function (Cloudflare Pages Function) that forwards your details to us by email. We use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) to send that email.

We use this data solely to process your enquiry and communicate with you. Where the enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR, with our legitimate interest being the proper handling of incoming enquiries.

Form submissions are not stored in a database — they are forwarded directly to our inbox by email. We review incoming enquiries regularly and delete them once they are no longer required for handling and documenting the enquiry and no statutory retention obligation requires continued storage.

6. Email communication

We use IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, for business email communication. If you contact us by email, we process your email address, sender information, message content and the technical data required for delivery. Depending on the purpose of the enquiry, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR. IONOS processes data required for the email service under the data processing terms applicable to the service.

7. Cookies and tracking

We currently do not use analytics tools, advertising trackers or other non-essential tracking technologies. We therefore do not currently display a consent banner. If we introduce technologies that require consent in the future, we will obtain the required consent before using them.

8. Retention

Personal data is retained only for as long as necessary for the relevant purpose. It is then deleted unless statutory retention periods, documentation duties or legitimate interests require continued storage.

9. Your rights

Under the GDPR, your rights include in particular:

• Access to personal data processed about you
• Rectification of inaccurate or incomplete data
• Erasure of personal data where the legal requirements are met
• Restriction of processing
• Objection to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR
• Data portability where the legal requirements are met
• Withdrawal of consent with effect for the future
• Lodging a complaint with a data protection supervisory authority

10. Data protection supervisory authority

You may in particular contact the Hessian Commissioner for Data Protection and Freedom of Information. You also have the right to lodge a complaint with any competent supervisory authority under Article 77 GDPR.

11. Changes to this privacy policy

We update this privacy policy when the website, the services used or the legal requirements change. The version published on this website applies.