Privacy Policy

← Home LEGAL

Privacy Policy

This English text is a translation. The German version is the original and the only legally binding one. In the event of any discrepancy, the German wording prevails: Datenschutzerklärung.

Privacy Policy

This policy informs you, in accordance with Art. 13 and Art. 14 GDPR, about which personal data we process when you use our website lisocon.de, for what purpose, and on what legal basis.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

lindner software & consulting GmbH
Postkamp 6, 30159 Hannover, Germany
Authorised Managing Director: Dipl.-Ing. Reinhard Lindner
Phone: +49 (0)511 30 17 90-30
E-mail: info@lisocon.de

2. General information on data processing

We process the personal data of our users only to the extent necessary to provide a functional website and to deliver our content and services. As a rule, processing only takes place with the user’s consent or where permitted by law.

Legal bases

  • Art. 6 (1) lit. a GDPR: consent of the data subject
  • Art. 6 (1) lit. b GDPR: performance of a contract or pre-contractual measures
  • Art. 6 (1) lit. c GDPR: compliance with legal obligations
  • Art. 6 (1) lit. f GDPR: legitimate interests of the controller

Erasure and retention period

Personal data is erased as soon as the purpose of storage no longer applies. Data may be stored beyond that point where European or national legislation to which we are subject requires it, in particular under commercial-law or tax-law retention periods.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The servers used are located in a data centre in Germany. Hetzner processes the data generated when our website is accessed (see section 4) exclusively on our behalf and on our instructions.

A data processing agreement under Art. 28 GDPR is in place with Hetzner. No personal data is transferred to a third country outside the EU in the course of hosting.

We do not use a content delivery network (CDN) or any upstream proxy or security service to deliver this website. All page content, scripts, stylesheets, fonts, and images are served directly from our own server under the domain lisocon.de.

Further information on data protection at our hosting provider: hetzner.com/rechtliches/datenschutz.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure, resilient, and high-performance delivery of the web service).

4. Server log files

Each time our website is accessed, the web server automatically records data from the requesting system. This collection is technically necessary for the page to be delivered at all. The following data is processed:

  • IP address of the requesting system
  • Date and time of access
  • Page or file requested
  • HTTP status code and amount of data transferred
  • Referrer URL (previously visited page)
  • Information on the browser, operating system, and device used

This data is used to ensure technical operation and the security of our IT systems, and to investigate any incidents. It is not combined with other data sources and is not evaluated for marketing purposes. The log files are kept on the infrastructure of our hosting provider (see section 3).

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a stable and secure web service). Retention period: a maximum of 30 days, unless a longer period is required in an individual case to investigate security-related incidents.

5. Cookies and consent management

When you first access our website, we set strictly necessary cookies only. Specifically, these are:

  • pll_language: stores the language version you accessed (German or English) so that language switching and internal links work correctly. Lifetime: one year.
  • Consent management cookies (names beginning with cmplz_): store your choice in the cookie banner so that you are not asked again on every page view. These cookies are only set once you make a selection in the banner.

Cookies and services requiring consent

For all other cookies and services, we obtain your consent via a cookie banner. We use the consent management tool Complianz, which runs as a plugin on our own server; no data is transmitted to third parties in the process. The banner uses the following categories: Functional, Preferences, Statistics, and Marketing.

As long as you do not give consent, the corresponding scripts are blocked and are not loaded at all. We currently do not use any cookies in the Preferences or Marketing categories. In the Statistics category we use Google Analytics 4 (see section 6).

Withdrawing consent

You can withdraw or adjust your consent at any time with effect for the future. To do so, use the consent management link in the footer of every page. In addition, you can delete cookies at any time via your browser settings or prevent them from being stored at all.

Legal basis: Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) for strictly necessary cookies; for all other cookies and services, Section 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR (consent).

6. Google Analytics 4

For audience measurement, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It is integrated via a Google tag (identifier GT-KDQM66JQ), which sends data to the Analytics property with the measurement ID G-EBBVGNFJMJ.

Google Analytics is loaded only if you have expressly consented to the “Statistics” category. If you do not give consent, no Google script is loaded, no connection to Google servers is established, and no analytics cookies are set. The service is likewise not loaded for logged-in users of our website.

Once consent has been given, Google Analytics processes information about your use of the website, in particular the pages viewed, time spent, approximate geographic origin, device and browser used, and the source of your visit. Google Analytics 4 does not store full IP addresses; the IP address is only evaluated for approximate location and is then discarded. We receive aggregated reports only and cannot identify individuals from them.

We manage the connection to our Google account via the WordPress plugin Google Site Kit, which is also used to connect Google Search Console. The measurement tag itself is not embedded by that plugin; we embed it ourselves, subject to consent. Search Console evaluates aggregated search statistics only and does not set any cookies for visitors to our website.

Processing of your data in the USA by Google LLC cannot be ruled out. Google is certified under the EU-U.S. Data Privacy Framework. In addition, EU Standard Contractual Clauses are in place. A data processing agreement under Art. 28 GDPR is in place with Google. Further information: policies.google.com/privacy.

Legal basis: Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG (consent). Withdrawal: at any time via the consent management link in the page footer. Retention period: the analytics cookies expire after 24 months at the latest; the user and event data stored in Google Analytics is deleted automatically after 14 months.

7. Fonts

The fonts used on this website are served exclusively from our own server (self-hosting). No connection to servers operated by Google or any other third party is established when the fonts are loaded.

We do not use the online version of Google Fonts. Consequently, your IP address is not transferred to Google when fonts are rendered.

8. Contact form

If you send us enquiries via our contact form, the information you provide, including the contact details you enter, will be stored to handle your enquiry and any follow-up questions. Mandatory fields are marked as such; all other information is voluntary.

We process the following data in this context:

  • Name
  • E-mail address
  • Subject
  • Content of your message

The form runs on our own server using the WordPress plugin Contact Form 7. The submission is then forwarded by e-mail to our business address.

Protection against spam submissions

To protect against automated spam submissions, we use a server-side filtering procedure. It evaluates additional fields that are invisible to you (honeypot method), checks the timing of the form completion, and examines the content of the message for typical spam characteristics. If a submission is classified as spam, we store the sender’s IP address in order to prevent repeated automated submissions. Entries on this block list are automatically removed each day; if no further spam attempts occur, the entry is deleted completely after a few days. This processing takes place exclusively on our own server; no data is transmitted to external services.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures) and Art. 6 (1) lit. f GDPR (legitimate interest in efficient handling of business enquiries and in preventing spam). Retention period: until your enquiry has been fully handled; in the event of a subsequent business relationship, in line with commercial-law and tax-law retention periods (typically 6 or 10 years).

9. Contact by e-mail or phone

If you contact us by e-mail or phone, your information (name, contact details, content of the message) will be stored to handle your enquiry and any follow-up questions. We do not pass on this data without your consent unless we are legally obliged to do so or unless it is necessary for the performance of a contract.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual or contractual measures) and Art. 6 (1) lit. f GDPR (legitimate interest in handling enquiries).

10. Your rights as a data subject

You have the following rights in relation to the personal data we hold about you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (“right to be forgotten”, Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, simply send an informal message using the contact details given in section 1.

11. Right to lodge a complaint with the supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5, 30159 Hannover, Germany
Phone: +49 (0)511 120-4500
Web: lfd.niedersachsen.de

12. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection when the address bar of your browser changes from “http://” to “https://” and a lock icon appears there.

13. Changes to this privacy policy

We reserve the right to amend this privacy policy to ensure that it always meets current legal requirements and to reflect changes to our services. The version in force at the time of your next visit applies.

Last updated: August 2026