Privacy policy

1. Controller

The controller responsible for data processing within the meaning of the GDPR is:

Sina Mahsouli
Dr.-Kallen-Straße 12
53797 Lohmar
Email: info@lamassu.info

2. General information on data processing

We process personal data of our visitors only to the extent necessary to provide a functioning website, to answer enquiries or to fulfil legal obligations.

Legal bases

• Art. 6 (1) (b) GDPR – performance of a contract and pre-contractual measures
• Art. 6 (1) (c) GDPR – legal obligation
• Art. 6 (1) (f) GDPR – legitimate interest (e.g. secure and efficient provision of the website)
• Art. 6 (1) (a) GDPR – consent

3. Hosting and server log files

This website is operated on a server in Germany. When you access the pages, data is automatically recorded in server log files, including IP address, browser type, operating system, referrer URL and time of access. This data is used solely for security and error analysis, is not combined with other data sources and is deleted after 30 days. The legal basis is Art. 6 (1) (f) GDPR.

4. Language selection by country

When the home page is first opened without a language in the address, your country is determined from your IP address in order to redirect you to the matching language version. The lookup takes place solely on our server using a locally stored database (IP geolocation by DB-IP, db-ip.com, licensed CC BY 4.0). Only the country is determined; the IP address is neither stored nor transmitted to third parties for this purpose. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in an understandable website). You can choose a different language at any time via the language switcher.

5. Cookies

This website uses only one technically necessary session cookie. It protects the contact form against misuse (CSRF protection) and is deleted when you close your browser. There is no analysis of user behaviour, no statistics or marketing cookies are set and no third-party services are embedded. A consent request is therefore not required. The legal basis is Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act).

6. Contact form and contacting us

If you contact us via the contact form or by email, we process the data you provide (name, email address, telephone number and company where given, and your message) in order to answer your enquiry. In addition, we store the time of submission and a truncated IP address that can no longer be linked to a person, to prevent misuse.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR. Your details are deleted once your enquiry has been fully dealt with and no statutory retention obligations apply, and in any case no later than 24 months after submission.

Your data is not passed on to third parties.

7. Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics is only loaded after you have agreed to the “Statistics” category in the cookie banner; before that, no connection to Google is made.

Google Analytics uses cookies (section 5) and collects information about your use of the website, in particular pages viewed, time spent, approximate location (country/region), device type and browser, and the source through which you reached the site. Google Analytics 4 does not store IP addresses; they are used only in truncated form for coarse location. We use Google Consent Mode v2: until you decide, all storage and advertising signals are set to “denied”; after your consent only the statistics signal is granted. Google Signals, personalised advertising and any link to Google Ads are disabled.

The purpose is statistical analysis of usage in order to improve the website. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Data is processed on Google servers, including in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU Commission’s standard contractual clauses apply in addition. Usage data stored by Google Analytics is deleted after 14 months.

You may withdraw your consent at any time via “Cookie settings” at the bottom of every page. Further information: policies.google.com/privacy.

8. Recipients and transfers to third countries

Contact-form data and server log files are processed exclusively on our server within the European Union and are not transferred to third countries. No external fonts, map or video services are embedded.

The only recipient outside the EU is Google, in the context of Google Analytics 4 – and only if you have consented (section 7). The transfer to the USA is based on Google LLC’s certification under the EU-US Data Privacy Framework and on the EU Commission’s standard contractual clauses.

9. Rights of data subjects

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to info@lamassu.info is sufficient.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy when new services are introduced or changes in the law require it. Please check the current version regularly.