Privacy policy

Controller and contact

The operator identified in the legal notice is the data controller. Please send privacy enquiries to the contact email listed there. Legal notice

Hosting and server logs

When you access this website, the server processes technically necessary connection data, including your IP address, time, requested address and device and browser information supplied by your browser. Processing to provide and secure this website is based on Article 6(1)(f) GDPR. The legitimate interest is secure and reliable operation. Whether and for how long these data are logged depends on the hosting configuration to be specified below.

Hosting provider and location

STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin

Server log retention

Visitor IP addresses are stored by the hosting provider STRATO for a maximum of seven days to detect and defend against attacks.

Cookies and local storage

lhp_privacy: stores your privacy choice for 180 days. This necessary cookie contains no random user identifier. The legal bases are section 25(2)(2) TDDDG and, where personal data are involved, Article 6(1)(f) GDPR to respect your choice.

language: remembers your selected language for one year after permission. lhp-families: stores favourites in your browser's Local Storage with no automatic expiry, until you delete them or withdraw permission. Favourites are not transmitted to the server. Optional storage is based on section 25(1) TDDDG and, where personal data are involved, Article 6(1)(a) GDPR. Without permission, favourites remain only in the open page's memory; language can be selected using the language link.

The protected administration area uses the HPADMIN session cookie for login and protection against abusive requests. It lasts for the browser session; authentication expires after 30 minutes of inactivity or eight hours at the latest. The bases are section 25(2)(2) TDDDG and Article 6(1)(f) GDPR to secure administrative access. Administrative changes and failed login attempts are recorded in the database for access security. Retention periods must be defined before launch.

Advertising, analytics and external content

No advertising networks or analytics services are currently integrated. Fonts, scripts, images and maps are served locally. External sources are provided as links; the destination is accessed only when clicked. Before future advertising or analytics services are integrated, this policy and the consent choices will be updated with the specific providers, purposes, recipients, retention periods and any international transfers. The current choice does not consent to future advertising.

Contacting us

If you contact us by email, we process your email address and message to handle your enquiry. The basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for contractual enquiries. Messages are deleted once the enquiry is resolved unless statutory retention obligations or legitimate reasons require longer storage.

Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for the future; prior processing remains lawful. You may lodge a complaint with a supervisory authority, particularly where you live, work or where the alleged infringement occurred.

Supervisory authority responsible for the operator

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) P.O. Box 20 04 44 40102 Düsseldorf, Germany Telephone: +49 211 38424-0 Email: poststelle@ldi.nrw.de Website: https://www.ldi.nrw.de

Privacy settings

You may allow or withdraw permission to remember your language and favourites. Withdrawal removes the stored favourites and language cookie. Other open pages use the new choice on their next interaction or after reloading.