Privacy Policy

1. Data Controller

LETOX
Leonhard Merz
Alexanderstraße 125, 70180 Stuttgart
Phone: +49 1521 1911876
Email: letox-studio@proton.me

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the website, Vercel processes technically necessary data (e.g. IP address, date and time of access, browser type) in server log files to deliver the website securely and reliably. Processing is based on our legitimate interest in stable, secure operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; transfers to the USA are based on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

3. Contacting us

If you contact us by email or phone, we process the information you provide (for example your name, contact details and the content of your enquiry) in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its preparation, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed for handling your enquiry, unless statutory retention obligations apply. This website does not have a contact form.

On this website you can message us via a WhatsApp link. Only when you click the link does WhatsApp open (via wa.me) and data is transferred to the provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of the Meta group. WhatsApp processes, among other things, your phone number, your messages and technical data under its own privacy policy; a transfer to the USA is possible. According to WhatsApp, message content is end-to-end encrypted. We use your message solely to handle your enquiry (Art. 6(1)(b) or (f) GDPR). If you prefer not to use WhatsApp, you can reach us by email or phone.

4. Email Delivery (Resend)

For internal notifications from the Laboratory archive (see section 5) we use the email service Resend (Resend, Inc., USA). What is transmitted is the time, the entered number and the name and industry of the business to which we personally handed the card. No names, email addresses or messages of the person entering the number are transmitted. The legal basis is our legitimate interest in following up on our offer (Art. 6(1)(f) GDPR); a data processing agreement based on the EU Standard Contractual Clauses is in place with Resend.

5. Laboratory Archive

On our unlisted Laboratory page, an experiment number noted on a personally handed-over card can be entered. Upon successful entry, we pseudonymously log the time of access together with the entered number and notify ourselves internally by email (delivered via Resend, see the Email Delivery section). This log contains no IP address, no device data, and no cookies. Processing serves to handle your inquiry and to follow up on our offer, based on our legitimate interest (Art. 6(1)(f) GDPR). To prevent automated queries, the IP address is processed for no more than ten minutes in memory, in an altered form that cannot be traced back. It is neither stored nor logged. The legal basis is our legitimate interest in protecting the website from misuse (Art. 6(1)(f) GDPR).

6. Analytics & Performance (Vercel)

This website uses Vercel Web Analytics and Vercel Speed Insights to evaluate visitor numbers and loading performance in anonymized form. No cookies are set, no personal profiles are created, and visitors are not tracked across sites. The provider is our hosting service Vercel Inc. (see Hosting section); processing is based on our legitimate interest in analyzing and improving this website (Art. 6(1)(f) GDPR).

7. Legal Bases

Unless stated otherwise above, we process personal data to respond to inquiries and initiate contracts (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in the secure, reliable operation of this website (Art. 6(1)(f) GDPR). This website does not use cookies that require consent.

8. Your Rights

You have the right at any time to request information about, correction of, deletion of, and restriction of processing of your stored personal data. Feel free to reach out to us by email. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. Where we process data on the basis of our legitimate interest, you may also object to the processing (Art. 21 GDPR).