Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Marc Eyrich
Deffnerstr. 5, 73728 Esslingen am Neckar, Germany

Email: marc@lucent-comms.eu
Phone: +49 177 6941297

Scope of processing: Users' personal data is generally only collected and used to the extent necessary to provide a functioning website along with its content and services. Any processing beyond that takes place only with consent or where another legal basis permits it.

Legal bases: Where consent is obtained, Art. 6 (1) (a) GDPR serves as the legal basis. For contractual or pre-contractual processing, Art. 6 (1) (b) GDPR applies. For legal obligations it is Art. 6 (1) (c) GDPR, and for legitimate interests Art. 6 (1) (f) GDPR.

Erasure and storage period: Personal data is erased or blocked as soon as the purpose of storage no longer applies or a statutory storage period expires, unless mandatory legal retention obligations require further storage.

Where personal data is processed, data subjects have the following rights in relation to the controller:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) for processing based on Art. 6 (1) (e) or (f) GDPR
• Right to withdraw consent (Art. 7 (3) GDPR) with effect for the future
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

An informal message to the contact details above is enough to exercise these rights.

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can tell an encrypted connection by the browser address bar switching from "http://" to "https://" and by the padlock symbol in the browser bar. When SSL or TLS encryption is active, the data you send to us cannot be read by third parties.

The provider of this website automatically collects and stores information in what are known as server log files, which your browser transmits automatically:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address (truncated or anonymised)

This data is not merged with other data sources. Collection takes place on the basis of Art. 6 (1) (f) GDPR. There is a legitimate interest in the technically error-free presentation and the optimisation of the website. The data is erased as soon as it is no longer needed for the purpose it was collected for, as a rule after 7 to 30 days.

This website uses cookies and comparable technologies (local storage, for example). Cookies are small text files stored on your device that contain certain information. Two categories are distinguished in principle:

• Technically necessary cookies, which are essential for the operation of the website (Art. 6 (1) (f) GDPR in conjunction with § 25 (2) no. 2 TDDDG).
• Cookies requiring consent, which are not set without your express consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG).

When you open the website, a cookie banner informs you about the use of cookies requiring consent. Consent once given can be withdrawn at any time with effect for the future through the settings in the cookie banner.

This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow"). Among other things, Webflow uses servers operated by Amazon Web Services, Inc. (AWS) to deliver the content. When you open the website, personal data, in particular your IP address, is transmitted to Webflow or AWS and processed there.

Use takes place on the basis of Art. 6 (1) (f) GDPR. There is a legitimate interest in presenting the website as reliably and as fast as possible.

Transfer of personal data to the USA cannot be ruled out. Any such transfer takes place on the basis of the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR). Where Webflow or its sub-processors are certified under the EU-U.S. Data Privacy Framework, the transfer additionally takes place on the basis of an adequacy decision pursuant to Art. 45 GDPR.

Further information: webflow.com/legal/eu-privacy-policy

Contact form: Through the contact form, the personal data marked in the input mask (in particular name, email address and the content of the message) is collected and used solely to handle the enquiry. The legal basis is Art. 6 (1) (a) GDPR (consent given by sending the enquiry) and, where the enquiry aims at concluding or performing a contract, Art. 6 (1) (b) GDPR.

Contact by email: If you get in touch by email, the personal data you send (at least your email address and the content of the message) is processed. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in answering the enquiry) and, where applicable, Art. 6 (1) (b) GDPR.

The data stays with us until you ask for it to be erased, until you withdraw your consent, or until the purpose of storing it no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

To display typefaces consistently, this website uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Fonts").

When you open a page, your browser loads the required web fonts into its cache. To do so the browser has to connect to Google's servers. Through this, Google learns that the website was accessed from your IP address.

Use takes place in the interest of a consistent and appealing presentation, on the basis of Art. 6 (1) (f) GDPR. Where consent has been obtained through the consent banner, processing takes place on the basis of Art. 6 (1) (a) GDPR.

Transfer of personal data to the USA cannot be ruled out. Any such transfer takes place on the basis of the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework. Further information: policies.google.com/privacy

This website uses Webflow Analytics, an analytics tool integrated into the Webflow platform and operated by Webflow, Inc. Webflow Analytics records aggregated, anonymised usage statistics (page views, time on page, referrer and approximate geographic location based on the truncated IP address, for example). No cross-site profiles are built.

Processing takes place on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in the statistical evaluation of website use in order to improve the offering. Where consent through the consent banner is required or has been given, Art. 6 (1) (a) GDPR serves as the legal basis.

Transfer to the USA cannot be ruled out in the context of hosting by Webflow. The notes in the "Hosting (Webflow)" section apply accordingly.

YouTube (extended privacy mode): This website embeds videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded in extended privacy mode (domain youtube-nocookie.com). According to YouTube, no cookies for profiling are set in this mode as long as a video is not actively played. When you open a page with an embedded video, a connection to YouTube's servers is established and the server is told which pages you have visited.

Vimeo: This website embeds videos from Vimeo.com, Inc., 555 West 18th Street, New York, NY 10011, USA. When you open a page, a connection to Vimeo's servers is established and your IP address is transmitted. Vimeo uses cookies and comparable technologies; cookies requiring consent only become active once consent has been given through the consent banner.

The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (a) GDPR where consent has been obtained. Transfer to the USA cannot be ruled out; it is based on the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework. Technically, videos are embedded through the service Embed.ly (Embedly, Inc., USA), which Webflow uses to display embedded media. Depending on the particular video, and only after your consent through the consent banner, cookies from YouTube, Vimeo and Embed.ly may be set and personal data, in particular your IP address, may be transferred to the USA. Where a video is not delivered in youtube-nocookie mode, marketing cookies may also be set.

Further information: policies.google.com/privacy · vimeo.com/privacy

This website uses the service Calendly to arrange calls and consulting appointments. The provider is Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA ("Calendly").

When you use the booking tool, the data you enter in the booking form (in particular name, email address, phone number where given, the reason for the appointment and the slot chosen) together with technical information (IP address, date and time, browser and device information) is transmitted to Calendly and processed there. The data is used to organise, remind and where necessary follow up on appointments.

The legal basis is Art. 6 (1) (b) GDPR where the appointment serves to initiate or perform a contract, otherwise Art. 6 (1) (f) GDPR (efficient scheduling). Where consent has been obtained, Art. 6 (1) (a) GDPR serves as the legal basis.

Transfer to the USA cannot be ruled out. It takes place on the basis of the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Calendly. The Calendly integration also loads Stripe (payment processing) and Twilio Segment (usage and audience analytics). These services set their own cookies and may process personal data, in particular your IP address, and transfer it to the USA. The legal basis is Art. 6 (1) (a) GDPR (consent through the consent banner) or Art. 6 (1) (f) GDPR; transfers to third countries take place on the basis of the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Further information: calendly.com/privacy

This website uses the map service Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page with Google Maps embedded, information about your use of this website (including your IP address) is transmitted to Google's servers and processed there. Transfer to the USA cannot be ruled out.

Use takes place in the interest of an appealing presentation of the online offering and of making the stated locations easy to find. The legal basis is Art. 6 (1) (f) GDPR. Where consent has been requested, processing takes place on the basis of Art. 6 (1) (a) GDPR.

Transfer to the USA takes place on the basis of the European Commission's standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework. Further information: policies.google.com/privacy

Links to profiles on social networks: This website links to profiles on social networks (LinkedIn, Instagram, Facebook, X/Twitter and YouTube, for example) through linked icons or buttons. These are plain HTML links that only establish a connection to the respective provider's servers when you actively click them. No personal data is transmitted automatically when you simply open the website.

Embedded social media content (plugins and feeds): Where content from social networks (posts, feeds or updates, for example) is embedded directly, personal data (in particular IP address, browser information and where applicable cookie IDs) is transmitted to the respective provider's servers when you open the relevant page. If you are logged in there, this can be linked to your user account.

Where such embeds require consent, they are only loaded once you have actively given it through the consent banner. The legal basis is Art. 6 (1) (a) GDPR (consent) or Art. 6 (1) (f) GDPR. Transfer to third countries cannot be ruled out; it takes place on the basis of the European Commission's standard contractual clauses and, where applicable, further appropriate safeguards.

Where personal data is transferred to recipients outside the European Economic Area (EEA), in particular to the USA, this takes place on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These include in particular:

• the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR);
• where applicable, the EU-U.S. Data Privacy Framework and corresponding adequacy decisions of the European Commission (Art. 45 GDPR);
• where necessary, supplementary technical and organisational measures.

Despite these safeguards, it cannot be ruled out that US authorities in particular may gain access to transferred data. By using the respective services you acknowledge this.

This privacy policy is currently valid and carries the date given above. As the website and the services develop, or as legal or regulatory requirements change, it may become necessary to amend this privacy policy. The current version can be accessed and printed from this website at any time.

Note: this text was written to current standards (Art. 13 GDPR, TDDDG) and does not replace legal advice.