Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?
Your data is collected in part when you provide it to us (e.g., via the contact form). Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g., internet browser, operating system or time of page access).

2. Hosting

This website is hosted by Cloudflare. For details, please refer to Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

The use of Cloudflare is in the interest of a secure, fast and efficient delivery of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR (DSGVO).

3. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Information About the Responsible Party

The responsible party for data processing on this website is:
György Lomaha
Lomageek
Burgeräcker 8
71364 Winnenden
Germany
Email: kontakt@lomageek.de

Retention Periods

Unless a more specific retention period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. The specific retention periods are:

Contact form inquiries: 6 months after completion of the inquiry
AI chat messages: 30 minutes (automatic deletion after session end)
Server log files: 14 days

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. Our responsible supervisory authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de/

Automated Decision-Making

We do not use automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR. The AI chat used on this website serves solely for general information purposes and does not make any legally binding or similarly significant decisions.

4. Data Collection on This Website

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR, if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6(1)(f) GDPR).

Cookies

This website only uses technically necessary cookies and a cookie to store your cookie consent. Analytics cookies are only set with your explicit consent.

Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP address.

The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest). The data is automatically deleted after 14 days.

5. Fonts

This website uses fonts from Bunny Fonts (bunny.net), a privacy-friendly European service. No personal data is transmitted to Google or other US-based services. For more information, visit: https://bunny.net/privacy

6. AI Chat

This website uses an AI-powered chat assistant. Chat messages are transmitted via an API to Claude (Anthropic, Inc., San Francisco, USA). Personal data that you provide in the chat is processed in accordance with Art. 6(1)(a) GDPR (consent). Before using the chat for the first time, you will be asked for your explicit consent.

Chat messages are automatically deleted after 30 minutes and are not stored permanently. You can revoke your consent at any time by no longer using the chat and deleting the stored browser data.

7. Google Analytics 4

Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and similar technologies to analyze website usage and generate reports on website activity.

Data collected: IP address (anonymized), device and browser information, approximate location data (country/city), pages visited, time spent, interactions.

Legal basis: Art. 6(1)(a) GDPR (consent) in conjunction with § 25(1) TTDSG. Without your consent, no analytics cookies are set and no data is transmitted to Google. You can withdraw your consent at any time via the .

Retention period: Data collected by Google Analytics is automatically deleted after 2 months.

IP anonymization: Google Analytics 4 truncates IP addresses within the EU before storage, so no direct personal reference can be established.

Data transfer to the USA: Google may transfer data to servers in the USA. Transfers are carried out on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR and the EU-U.S. Data Privacy Framework.

For more information, see Google's Privacy Policy .

8. Data Processors

We use the following data processors:

Cloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, USA
Purpose: Hosting, CDN, DNS, DDoS protection
DPA: https://www.cloudflare.com/cloudflare-customer-dpa/

Anthropic, Inc.
548 Market St, San Francisco, CA 94104, USA
Purpose: AI chat processing (Claude API)
DPA: https://www.anthropic.com/legal/data-processing-addendum

Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Web analytics (Google Analytics 4) — only with consent
DPA: https://business.safety.google/adsprocessorterms/

9. International Data Transfers

Some of the above-mentioned data processors have their registered office or servers in the USA. Data transfers to the USA are carried out on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR and the EU-U.S. Data Privacy Framework. All named providers (Cloudflare, Anthropic, Google) have signed corresponding Data Processing Agreements (DPAs).

10. Your Rights

You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as a right to correction or deletion of this data. For this and other questions regarding personal data, you can contact us at any time: kontakt@lomageek.de

Last updated: April 2026