PRIVACY NOTICE.

Controller and privacy contact

Wehron GmbH
Mörsenbroicher Weg 191
40470 Düsseldorf
Germany
Represented by managing director Nicolas Thiery

Privacy enquiries: info@lagebureau.de

Scope of this notice

This notice applies to the public website at lagebureau.de. The separate application at app.lagebureau.de has its own data processing and privacy information. Visiting a link to the application or another website causes your browser to connect to that destination.

Website delivery and Vercel hosting

We use Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, on a Pro plan to host and deliver this website. Vercel processes customer data for us under its Data Processing Addendum and uses approved subprocessors where needed to provide the service.

When you access the website, technically necessary request data are processed. These may include your IP address, the date and time, the requested address, HTTP method and response information, referrer, browser or user-agent information, language preferences, and technical error or security information.

We process these data to deliver the website, maintain its security and availability, prevent misuse, and diagnose faults. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of the website and protection against abuse.

Vercel states that its primary processing facilities are in the United States. Where applicable, transfers rely on the EU-US Data Privacy Framework. Vercel's Data Processing Addendum also incorporates the European Commission's Standard Contractual Clauses for transfers requiring additional safeguards. You may request a copy of the applicable safeguards from us.

Technical request and security data are retained only for as long as needed to deliver and protect the website and within the retention of our Vercel configuration. We do not export them to a separate analytics or log service. Individual records may be retained longer to investigate a specific security incident or establish, exercise or defend legal claims, and are deleted when that purpose and applicable legal periods end.

Language and appearance preferences

The website reads your browser's Accept-Language header to choose an initial language. If you explicitly choose a language, we store the cookie lb-website-locale for one year so that the website can remember your choice. The cookie is sent with later website requests.

If you choose a light or dark appearance, the value is stored under lb-website-theme in your browser's local storage until you change it or delete this website's local data. The theme value is not sent as part of a website request.

These preferences contain only the selected language or appearance. Storage is necessary to provide the function you expressly requested and is covered by section 25(2)(2) TDDDG. To the extent the preference is personal data, processing is based on Article 6(1)(f) GDPR and our interest in retaining the user-selected presentation.

Contact by email

If you contact us, we process the information you provide, your contact details and associated message metadata to answer and administer your request. Where the message concerns steps before a contract or an existing contractual relationship, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR based on our legitimate interest in responding to communications about our business and website.

We use Proton Mail, provided by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, as our email service. Proton processes company email data under its Data Processing Agreement. The European Commission recognizes Switzerland as providing an adequate level of data protection. Proton's agreement provides for approved safeguards, including Standard Contractual Clauses, if an onward transfer requires them.

Messages are available to staff responsible for the request and to Proton where necessary to provide the email service. We delete them when the matter has concluded and no contractual, statutory-retention or legal-claims reason requires further storage.

Aggregate analytics and search management

We use Plausible Analytics, an aggregate web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, to understand how the public website is used and to improve its content, navigation and technical performance. Wehron GmbH determines the purposes of this measurement; Plausible processes the website statistics for us under the Data Processing Agreement that applies to Plausible customers.

For a measured visit, Plausible receives the hostname and path of the page, a restricted referrer origin where available, and technical information derived from the browser request, including browser, operating system, device type and approximate country, region and city. It also measures aggregate visit and engagement information such as page views, visit duration and scroll depth. Our integration discards query strings and fragments, does not send form contents or user-entered search terms, and is restricted to published pages on lagebureau.de. It does not measure the separate application at app.lagebureau.de.

Plausible does not set analytics cookies and does not use browser storage or another persistent identifier. To estimate daily unique visitors, Plausible uses the IP address and User-Agent contained in the request to create a daily identifier with a salt that is rotated and deleted every 24 hours. Plausible states that raw IP addresses and full User-Agent values are not stored and that visitors are not followed across days, devices or websites.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are to obtain privacy-minimised, aggregate information about reach and use of the website and to improve its content, usability and technical operation. Because this configuration neither stores information on nor reads information from your device for analytics, no consent is required under section 25(1) TDDDG.

Plausible states that visitor data is processed and stored entirely in the European Union. Its listed infrastructure providers for visitor data are Hetzner in Germany, Bunny in Slovenia and UpCloud in Finland. Aggregate website statistics remain available while our site and account are active, unless we delete them earlier; Plausible states that site data is deleted without undue delay when the site or account is deleted. We can delete the analytics data under our control.

You may object to this processing for reasons arising from your particular situation by contacting info@lagebureau.de. You can also prevent measurement with a browser or content-blocking setting without losing access to the website.

We use Google Search Console and Bing Webmaster Tools to manage how search engines crawl and index public pages. These services do not embed a visitor-side script on this website or set a cookie on our behalf. Plausible is the only visitor analytics service enabled; Vercel Web Analytics, Vercel Speed Insights, advertising trackers and analytics or advertising cookies remain disabled. Loops is used only for email-address collection as described below.

Email-address collection with Loops

If you use the email form, we send only the email address you enter to the Loops form endpoint. Loops also receives the technically necessary connection data used to accept and protect the request, such as the IP address, time and HTTP metadata. We do not send your name, company, interests, form activity outside the submission, website analytics identifier or browsing history to Loops.

We use the address only to maintain the Lage Bureau contact list for possible future product, Article and resource updates and to manage confirmation of your entry. The form is not connected to a campaign or automated workflow at launch. Loops sends a double-opt-in message; the address remains pending until you use its confirmation link.

Processing is based on your consent under Article 6(1)(a) GDPR. Providing an email address is voluntary and is not required to use the website, its resources or the application. You may withdraw consent at any time by contacting info@lagebureau.de. A withdrawal does not affect processing carried out before it was received.

Loops is operated by Astrodon Corporation, 9450 SW Gemini Dr, PMB 22902, Beaverton, Oregon 97008-7105, United States. Astrodon processes the contact data for us under its Data Processing Agreement. Its privacy policy states that transfers from the EEA may rely on its EU-US Data Privacy Framework certification and that Standard Contractual Clauses are used where required.

We delete unconfirmed entries after 30 days. We keep a confirmed address until consent is withdrawn, the contact-list purpose ends or an earlier deletion request is fulfilled, and review the list at least annually. Under its Data Processing Agreement, Loops must return or delete relevant personal data within 30 days after termination or our written request unless law requires continued retention.

Your rights

Subject to the applicable legal conditions, you may request access to, rectification or erasure of your personal data, restriction of processing, and data portability. You may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Contact info@lagebureau.de to exercise these rights.

You may lodge a complaint with a supervisory authority. The supervisory authority responsible for Wehron GmbH is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

Required data and automated decisions

Technical request data are necessary to deliver the website. Without them, the website cannot be provided to your browser. Language and appearance choices are optional.

We do not use website visitor data for automated decisions or profiling within the meaning of Article 22 GDPR.