Data controller
Data Controller (Art. 4 No. 7 GDPR): Steffen Grell
Address: Clemensstr. 54, 53225 Bonn, Germany
Email: kontakt@lagerimgriff.de
Phone: +49 (0) 151 – 50 700 521
We take the protection of your personal data very seriously. This privacy policy aims to inform you about the processing of your personal data that we collect during your visit to our website. Our data protection practices comply with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Website provision and server logs
Whenever you access our website, our system automatically collects data and information from the accessing device. The following data is collected:
- Browser type and version
- Operating system of the device
- Host name of the accessing computer
- IP address of the device
- Date and time of access
- Pages and resources visited on our website
- Referring website (referrer)
- Request status and volume of data transferred
Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest). Our legitimate interest consists in ensuring the correct operation of the website.
Storage duration: Technical data is deleted as soon as it is no longer needed, but no later than 3 months after access.
Statistical analysis — Google Analytics 4 with Consent Mode v2
We use Google Analytics 4 (a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use our website. We also use Google Consent Mode v2, which means no analytics cookies or personal data are collected until you have given consent via the cookie banner.
What is collected (only with consent): anonymized IP addresses (IP anonymization is active), page views, clicks and interaction with the "Try Free" button, and general device information (browser, operating system, approximate geographic location).
What is NOT collected: personal data such as name, email or phone number (unless you have entered it yourself), detailed behavioral profiles, or data from users who have declined cookies.
Third-party transfer: Google may transfer data to the United States. The transfer is made under the EU-US Data Privacy Framework and standard contractual clauses approved by the European Commission.
Withdrawal: You can withdraw consent at any time by declining cookies in the banner or by clearing cookies in your browser. Google Analytics will then stop collecting data from you.
Legal basis: Art. 6 (1) (a) GDPR (consent via cookie banner).
Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in website optimization).
External web services
Our website uses active content from external providers (web services). When you access our site, these external providers may receive information about your visit. The following services are used:
Legal text snippets (Website-Check GmbH)
We use the service of Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, to load current legal texts. Data transmission takes place exclusively to servers in the European Union. Legal basis: Art. 6 Abs. 1 lit. c GDPR.
Data security
Your personal data is protected by technical and organizational measures during its collection, storage, and processing. For information with a high degree of confidentiality, we recommend encrypted communication or postal mail.
Your rights
According to the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): the right to obtain confirmation as to whether your personal data is being processed.
- Right of rectification (Art. 16 GDPR): the right to correct inaccurate personal data.
- Right of erasure (Art. 17 GDPR): the right to request deletion of your data when it is no longer needed.
- Right to restrict processing (Art. 18 GDPR): the right to request restriction of processing in certain cases.
- Right to withdraw consent: if you have given consent, you may withdraw it at any time.
- Right to object (Art. 21 GDPR): the right to object to processing based on legitimate interests.
- Right to data portability (Art. 20 GDPR): the right to receive your data in a structured and machine-readable format.
To exercise your rights, you can contact:
Right to lodge a complaint with a supervisory authority
If you suspect that your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You can contact the data protection authority of the EU member state where you reside, work, or where the alleged infraction occurred.