Legal

Privacy policy

This English version is a convenience translation. The German version is authoritative.

1. Controller

LMA GmbH, Kornweg 2, 86551 Aichach, Germany, represented by its Managing Director Lukas Mangold
Email: info@lma-advisory.de

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Hosting

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the site, the hosting provider processes technically necessary data (e.g. IP address, date and time of access, page requested, browser identifier) in server log files. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable operation of the website). According to Netlify, this access data is stored for less than 30 days.

A data processing agreement pursuant to Art. 28 GDPR is in place with Netlify. According to its own statements, Netlify is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023); EU standard contractual clauses have been agreed in addition.

3. Contact by email

If you contact us by email, we process your details in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).

For email we use Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as a processor; a data processing agreement is in place with Google. Processing by Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; EU standard contractual clauses apply in addition.

We delete enquiries once they have been dealt with, unless statutory retention obligations apply. We retain business correspondence for six years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

4. Contact form

If you use the contact form, we process the details you enter (name, email address, message, optionally company) in order to respond to your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).

Your entries are received by our hosting provider Netlify as a processor (see section 2). Netlify checks them for spam automatically, using the Akismet service for this purpose, stores them and delivers them to us by email. Section 3 applies accordingly to the storage period.

5. Cookies and tracking

This website does not use cookies or any tracking or analytics services. No information is stored on or read from your device (Section 25 TDDDG).

6. Booking appointments via Google Calendar

To arrange appointments, we link to a booking page provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It opens outside this website in a new tab; Google's privacy notices apply in addition when you use it. No data is collected on this website itself in the process.

If you book an appointment, we receive the details you enter (name, email address, the selected time and, where applicable, your message). We process them to prepare and hold the conversation (Art. 6 (1) (b) GDPR) in Google Workspace, see section 3. Section 3 applies accordingly to the storage period.

7. Fonts

All fonts are hosted locally. No connection to Google Fonts or other external font services is established.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). A message to the email address above is sufficient.

Right to object: Where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

9. Provision of data and automated decisions

You are neither legally nor contractually required to provide your data. Without your details, however, we cannot respond to an enquiry. No automated decision-making, including profiling, takes place.

10. Version

October 2026