Privacy Notice

A. Controller within the meaning of the GDPR

B. General information on data processing

We process personal data exclusively within the limits of applicable law (GDPR, German Federal Data Protection Act). Our website can be used without entering personal data; no contact form is offered on this website. You can contact us only by email via the email addresses provided (mailto links) or by phone.

C. Hosting and provision of the website

This website is provided via the Lovable platform. According to the provider's current public documentation, the platform operator acting as our processor is:

The contact address stated for the provider's data protection officer is Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden.

For content delivery, the provider uses Cloudflare as a sub-processor for edge routing, DNS and worker execution. When the website is accessed, technically necessary connection and server log data (in particular IP address, date and time, URL requested, referrer, user agent) are processed in order to deliver the website and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and performant provision of the website).

D. Processing in third countries

The service providers used operate globally. Processing of personal data — in particular connection data — in third countries outside the EU/EEA, notably in the USA, takes place or cannot be excluded. No assurance is given that processing takes place exclusively or predominantly within the EU.

Page content is delivered via a global content delivery network; requests from Europe are regularly served from locations within the EU/EEA. This is not an assurance, however: providers domiciled in the USA (Lovable Labs Incorporated, Cloudflare, Inc.) may also access data from third countries in the course of operation, support, security and logging.

Where appropriate safeguards pursuant to Art. 46 GDPR (in particular EU standard contractual clauses) have been agreed in the applicable data processing agreement, these serve as the basis for such transfers. Information on the applicable data processing agreement and the safeguards agreed is available on request at info@dcd-services.de. The providers' publicly available information can be found at lovable.dev/privacy and cloudflare.com/privacypolicy.

E. Cookies and storage technologies

Access to information stored on your device is governed by Sec. 25 TDDDG; the subsequent processing of that data is governed by Art. 6 GDPR. Both levels are assessed separately.

Sec. 25 (2) no. 2 TDDDG: When the website is accessed, the hosting and edge infrastructure sets the following strictly necessary cookies; no consent is required for these:

• __dpl (hosting platform): assignment of the deployed version so that all parts of the page originate from the same program version.
• __cf_bm (Cloudflare, domain .lovable.app, lifetime 30 minutes): bot detection and mitigation of automated access to protect the availability and security of the website.

According to our review, no further cookies are set. No entries are created in local storage, session storage or IndexedDB.

Art. 6 (1) (f) GDPR: The data processed in connection with these cookies is based on our legitimate interest in a technically faultless, available website that is protected against misuse.

No analytics, tracking or marketing cookies are used. Should consent-requiring technologies be used in future, this will only occur after your explicit consent via a consent banner (Sec. 25 (1) TDDDG, Art. 6 (1) (a) GDPR); consent can be withdrawn at any time with effect for the future.

F. Communication by email

If you contact us via the email links (mailto) provided on this website, a new message opens in your default email program. We process the data you provide (e.g. name, email address, content of the message) solely to handle your inquiry. The website itself does not collect or store this data. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your inquiry).

G. Recipients and categories of recipients

• Hosting and platform provider (Lovable Labs Incorporated) as processor
• Content delivery and edge infrastructure (Cloudflare) as sub-processor
• Email service providers in the context of our business communication
• Advisors, auditors and public authorities, where legally required or necessary for legal proceedings

H. Storage periods

• Server log data: deleted or anonymized by the infrastructure providers after a short period; the respective provider's specifications apply.
• Deployment cookie __dpl: stored only for as long as required for consistent delivery of the version.
• Bot management cookie __cf_bm: 30 minutes from being set or last refreshed.
• Email correspondence: deleted once the purpose no longer applies, unless commercial or tax retention periods (regularly 6 or 10 years pursuant to Sec. 257 HGB, Sec. 147 AO) apply.

The criteria for determining storage periods are fulfillment of purpose, statutory retention obligations and the necessity for the establishment, exercise or defense of legal claims.

I. Your rights

As a data subject you have the following rights, subject to the respective statutory requirements:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a supervisory authority:

J. Third-party content

This website does not embed services such as Google Maps, YouTube or Google Fonts. The fonts used are served locally; no connection to Google servers is established.

Should further external services be integrated in future and require consent, they will only be used after your explicit consent (Sec. 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

This English version is a convenience translation. In case of discrepancies, the German version prevails.