Privacy Policy
Introduction
We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website.
​
1. Data Controller
The data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Lacterra GmbH,
Heiderfelder Straße 25a, 23816 Leezen, Germany,
Phone: +49-(0)4191-9990-806
Email: info@lacterra.de
​
2. Collection of Personal Data
We collect personal data from you when you:
-
Visit our website
-
Register on our website
-
Subscribe to our newsletter
-
Contact us via email or contact form
-
Use our services
​
3. Types of Data Collected
The types of personal data we may collect include:
-
Contact details (name, email address, phone number)
-
Demographic information (age, gender, interests)
-
Technical data (IP address, browser type, operating system)
-
Usage data (pages visited, time spent on the website, links clicked)
​
4. Use of Personal Data
We use your personal data for the following purposes:
-
To provide and improve our services
-
To communicate with you and respond to your inquiries
-
To send you newsletters and promotional materials
-
To analyze website usage and improve our website
-
To comply with legal obligations
​
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
-
Your consent (Article 6(1)(a) GDPR)
-
Performance of a contract (Article 6(1)(b) GDPR)
-
Compliance with a legal obligation (Article 6(1)(c) GDPR)
-
Legitimate interests (Article 6(1)(f) GDPR)
​
6. Sharing of Personal Data
We do not share your personal data with third parties except in the following cases:
-
With your consent
-
To comply with legal obligations
-
To protect our rights and property
-
With service providers who process data on our behalf
​​
Use of AI Services (Claude Enterprise)
We use the AI service Claude Enterprise provided by Anthropic to support internal business processes. The service is used in compliance with the General Data Protection Regulation (GDPR). Personal data is processed solely for specified purposes and only to the extent necessary. According to the service provider’s contractual terms, customer data submitted to Claude Enterprise is not used to train AI models and is processed under appropriate technical and organizational safeguards. Where required, data processing is based on a data processing agreement pursuant to Art. 28 GDPR.
​
Our presence on the social network LinkedIn:
(1) We operate a presence on LinkedIn. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”). The parent company is LinkedIn Corporation, 1000 W. Maples Ave., Sunnyvale, CA 94085, USA.
(2) With regard to the processing of so-called Insights data (statistical information about interaction with our LinkedIn presence), we are jointly responsible with LinkedIn within the meaning of Art. 26 GDPR. LinkedIn provides us, as page operators, with anonymized statistics on the use of our presence (so-called Page Insights). The detailed arrangement of joint responsibility is set out in the Page Insights Joint Controller Addendum. According to this, LinkedIn is primarily responsible for fulfilling the information obligations under Art. 13 and 14 GDPR as well as for handling data subject requests related to Insights data.
(3) The following data is processed in connection with our LinkedIn presence:
Types of data: Contact data (e.g., email, phone numbers), content data (e.g., entries in online forms), usage data (e.g., pages visited, interest in content, access times), as well as meta/communication data (e.g., device information, IP addresses).
Data subjects: Visitors of our LinkedIn presence and users of the LinkedIn platform.
Purposes of processing: Tailoring our LinkedIn presence to user needs, communication with interested parties and users, responding to contact requests, analysis of page usage via Page Insights.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in tailoring our LinkedIn presence to user needs and in targeted communication with interested parties).
(4) We would like to point out that you use our LinkedIn presence and its features on your own responsibility. This applies particularly to the use of interactive functions (e.g., commenting, sharing, rating). When visiting our presence, LinkedIn collects, among other things, your IP address and other information stored in cookies on your device. If you are currently logged into LinkedIn, LinkedIn can track how you navigate the internet using a cookie on your device. Based on this data, content or advertising can be tailored to you.
(5) The data collected about you in this context is processed by LinkedIn and may be transferred to the USA. LinkedIn Corporation is certified under the EU-U.S. Data Privacy Framework, so an adequacy decision by the European Commission pursuant to Art. 45 GDPR exists. The certification can be found at https://www.dataprivacyframework.gov/list.
(6) As the operator of the LinkedIn presence, we only process the data that you provide to us through your interactions (e.g., messages, comments, contact requests). If you ask us a question that we can only answer via email, we will process your data in accordance with the general principles of this privacy notice. This data is deleted as soon as the purpose of processing no longer applies, and at the latest after the expiry of any statutory retention periods.
(7) To exercise your data subject rights, you may contact either us or LinkedIn. According to the Page Insights Joint Controller Addendum, LinkedIn is primarily responsible for responding to requests related to Insights data. For questions regarding the processing of your data in connection with interactions on our presence, please contact the controller using the contact details provided in this privacy notice.
(8) Further information about data processing by LinkedIn:
LinkedIn Privacy Policy: https://de.linkedin.com/legal/privacy-policy
Opt-out options: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Page Insights Joint Controller Addendum: https://www.linkedin.com/legal/l/page-joint-controller-addendum
​
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, and misuse.
​
8. Your Rights
You have the following rights regarding your personal data:
-
Right to access
-
Right to rectification
-
Right to erasure
-
Right to restrict processing
-
Right to data portability
-
Right to object
-
Right to withdraw consent
​
To exercise these rights, please contact us at the contact details provided above.
​
9. Changes to the Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website.
​
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Lacterra GmbH
Heiderfelder Str. 25a, 23816 Leezen, Germany
Phone: +49-(0)4191-9990-806
Email: info@lacterra.de
