Privacy Policy
Last updated: 24 September 2026
This policy explains transparently which personal data is processed when you visit this website, why it is processed and which rights you have.
1. Controller
Lehrmann GmbH
Bramfelder Straße 102 A
22305 Hamburg
Germany
Phone: +49 (0) 40 577 09 091
Fax: +49 (0) 40 577 09 092
Email: info@lehrmanngmbh.de
2. General information
We process personal data only to the extent necessary to operate this website securely and reliably, respond to enquiries or protect legitimate interests. Personal data means any information relating to an identified or identifiable person.
3. Hosting and server logs
This website is hosted by Domainfactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany. According to the provider, the servers are located in data centres in Cologne and Strasbourg.
When you access this website, technically necessary access data may be processed, including your IP address, date and time of access, requested file or page, amount of data transferred, referrer URL, browser type, operating system and access status. This processing is necessary to provide the website securely, analyse errors and prevent abuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log data is generally deleted after seven days unless longer retention is required to investigate a specific security incident.
We have entered into a data processing agreement with the hosting provider in accordance with Article 28 GDPR.
4. Contacting us
If you contact us via the contact form, email, telephone or fax, we process the information you provide, in particular your name, contact details, subject and message, to handle your enquiry.
If your enquiry relates to a contract or pre-contractual steps, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR; our legitimate interest is to respond appropriately to your enquiry. Your data will be deleted once the enquiry has been completed unless statutory retention duties or legitimate grounds require further storage.
5. Google reCAPTCHA
We use Google reCAPTCHA Enterprise to protect our contact form against automated submissions and abuse. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data processed may include your IP address, referrer URL, device and browser information, date and time and interaction data, which may be transmitted to Google.
Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to protect the website and contact form against spam and abuse. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework; Standard Contractual Clauses may also be used. Further information is available in Google’s Privacy Policy.
6. Cookies and local storage
Our website only uses cookies or similar storage technologies that are technically necessary for security, session management, website display or to remember your privacy choice. Access to your device is based on Section 25(2)(2) TDDDG; subsequent processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the secure and user-friendly operation of the website.
You can delete or block cookies in your browser. This may restrict individual website functions. You can change your privacy choice at any time via “Privacy settings” in the website footer.
7. Campaign links
If you access our website through a specially marked link in an email, the technical service at stat.serenity-mail.de may record the visit using an identifier contained in the link. The identifier, IP address, date and time and technical device and browser data may be processed. This is used to measure the reach of our business communications. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to evaluate and improve our communications. You can avoid this measurement by opening the website address without the “smrel” parameter.
9. Recipients and international transfers
Personal data is only made available to recipients that require it for the purposes described above, in particular our hosting provider, technical service providers and, when reCAPTCHA is used, Google. We disclose data to other recipients only where permitted or required by law, with your consent, or where necessary to establish, exercise or defend legal claims.
10. Your rights
Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and objection (Article 21 GDPR). You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise your rights, email info@lehrmanngmbh.de.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22
20459 Hamburg, Germany
datenschutz-hamburg.de
12. Data security and updates
This website uses TLS encryption. We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. We update this Privacy Policy when the law, the website or the services used change.
8. Links to social networks
This website contains ordinary links to our profiles on Facebook, Instagram, LinkedIn and YouTube. Merely visiting our website does not establish a connection to these providers through the links. Only when you click a link do you leave our website; any subsequent processing is governed by the privacy policy of the respective provider.