Information on the processing of personal data when visiting this website in accordance with the GDPR.
01Controller
The controller responsible for data processing on this website is:
Kathrin Cäcilia Dahmen
Am Anger 26
91365 Weilersbach
Germany
Email: info@luftraumwerk.de
Phone: +49 9191 7190161
02General information on data processing
Personal data may be processed when you visit this website. Personal data is data by which a person can be identified directly or indirectly. Processing only takes place to the extent necessary to provide the website, to communicate or to handle enquiries. Statistical analysis of usage (Google Analytics) only takes place if users have given their consent beforehand.
03Hosting and server log files
This website is hosted by the following provider:
Elgendorfer Str. 57
56410 Montabaur
Germany
When the website is accessed, the hosting provider automatically processes information in so-called server log files. This may include:
- IP address
- Date and time of access
- Page / file accessed
- Referrer URL
- Browser used
- Operating system
- Volume of data transferred
- Status code
Technical provision, stability, security and error analysis of the website.
According to IONOS, visitors’ IP addresses are anonymised in the log files. Log data is stored for a maximum of eight weeks. According to IONOS, the data is not passed on to third parties or transferred to countries outside the European Union.
IONOS processes this data on our behalf. The basis is a data processing agreement pursuant to Art. 28 GDPR, which forms part of the contract with IONOS.
Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and trouble-free operation of the website.
04Contact by email or telephone
If users make contact by email or telephone, the data they provide is processed in order to handle the enquiry. This may include:
- Name
- Email address
- Telephone number
- Content of the enquiry
- Project information
Art. 6(1)(b) GDPR, where the enquiry relates to a contract or to pre-contractual measures. Art. 6(1)(f) GDPR, where it is a general enquiry.
05Contact via WhatsApp
Links to WhatsApp may be used on the website. When a WhatsApp link is clicked, the user is redirected to WhatsApp. The provider is Meta Platforms Ireland Limited.
Making contact via WhatsApp is voluntary. Alternatively, contact can be made by email. If users use WhatsApp, WhatsApp's privacy policy applies. Luftraumwerk has no influence over data processing by WhatsApp.
06Instagram link
The website may link to Luftraumwerk's Instagram profile. When the Instagram link is clicked, the user is redirected to Instagram. The provider is Meta Platforms Ireland Limited.
Data is transferred to Instagram only when the link is clicked. Instagram's privacy policy applies to data processing on Instagram.
The website also contains links to other websites, including www.luftraumwerk.com (Academy and platform). The respective website is only called up when such a link is clicked; its own privacy information applies there.
07Fonts
The fonts used on this website are embedded locally and are loaded exclusively from our own web server. No connection to servers of Google or other third-party providers is established when the fonts are loaded.
08Local media / videos / images
The website includes images and videos that are provided locally via the web server. When these media are loaded, no data is transmitted to external video platforms such as YouTube or Vimeo. Embedded content from external providers (for example videos or maps) is not used on this website.
09Local storage in the browser
The website stores individual technical details in the user’s browser (sessionStorage and localStorage). These details remain on the device and are not transmitted to us or to third parties.
- sessionStorage: the point at which the tour of the studio was left, so that users arrive back there when returning from a subpage, and whether the intro has already been shown in this session. These details are deleted when the browser tab is closed.
- localStorage: the choice made in the cookie notice (key “lw_consent_v1”), see section 13.
Section 25(2) no. 2 TDDDG (strictly necessary to provide the website) and Art. 6(1)(f) GDPR.
10Cookies and tracking
This website uses technically necessary storage functions and – after consent – Google Analytics. Non-essential analytics functions are only loaded after active consent (Section 25(1) TDDDG). The website itself does not set any cookies; cookies are only set by Google Analytics and only after consent.
11Google Analytics
Subject to consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics helps to understand how visitors use the website, which content is relevant and how the website can be improved.
In particular, the following data may be processed:
- Page views
- Interactions on the website
- Technical information about the browser and device
- Approximate location information
- Referrer information
- Truncated or otherwise processed IP address
According to Google, no IP addresses of users in the EU are logged or stored when data is collected in Google Analytics. The “Google signals” feature and advertising features are not activated.
After consent, Google Analytics sets the cookies “_ga” (distinguishes individual users) and “_ga_<ID>” (stores the session status). Both have a lifetime of up to two years. If consent is withdrawn, these cookies are deleted.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; in this respect, an adequacy decision of the European Commission exists for the USA (Art. 45 GDPR).
In Google Analytics, a retention period of 2 months is set for event data and 14 months for user data. After that, the data is deleted automatically.
Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Use only takes place after active consent via the cookie notice. Consent can be changed or withdrawn at any time with effect for the future via “Cookie settings” at the bottom of every page.
12Google Consent Mode
This website uses Google Consent Mode to communicate users' consent settings to Google services. Google tags adjust their behaviour depending on whether consent has been granted or refused. No analytics cookies are set before consent is given; advertising and personalisation functions remain deactivated.
13Cookie settings
The website stores the choice made locally in the browser (localStorage, key “lw_consent_v1”) so that the decision does not have to be requested again on every page view. This storage serves to manage the consent settings and remains in place until the choice is changed or the browser storage is cleared. The choice can be changed or withdrawn at any time via the “Cookie settings” link at the bottom of every page.
Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
14Legal bases for processing
Depending on the purpose, personal data is processed on the following legal bases:
- Art. 6(1)(a) GDPR in the case of consent
- Art. 6(1)(b) GDPR in the case of a contract / pre-contractual measures
- Art. 6(1)(c) GDPR in the case of a legal obligation
- Art. 6(1)(f) GDPR in the case of a legitimate interest
- Section 25 TDDDG for storing information on, and accessing information in, the terminal device
15Storage period
Personal data is only stored for as long as is necessary for the respective purpose or as long as statutory retention obligations exist. The periods for server log files and Google Analytics are set out in sections 03 and 11. Enquiries by email or telephone are deleted as soon as they have been dealt with and no statutory retention obligations stand in the way.
16Rights of data subjects
Subject to the statutory requirements, users have the following rights:
- Access
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent
- Complaint to a data protection supervisory authority
17Right to lodge a complaint with the supervisory authority
Data subjects have the right to lodge a complaint with a data protection supervisory authority. For Bavaria, the competent authority may be:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de/
18Currency of and changes to this privacy policy
This privacy policy may be amended if legal requirements or the services used on the website change.
Last updated: 8 October 2026