LinkedIn Instagram Imprint Privacy Policy DEEN
About
Brand Experience
Street Promo
CLIENTS
CONTACT

Privacy Policy

Privacy Policy

Last updated: January 12, 2026

Responsible Party:

l'attentionists - Gesellschaft für Aufmerksamkeit mbH
Max-Brauer-Allee 247
22769 Hamburg, Germany

Phone: +49 (0)176 21 19 69 87
Email: hello@lattention.com

Managing Director: Alexander Grieschat

Tax number: 41/739/00371
VAT ID: DE459210129
Commercial register: HRB 195776
Tax office Hamburg-Altona

1. General Information on Data Processing and Legal Basis

1.1 Scope

This privacy policy informs you about the type, scope, and purpose of processing personal data on our website and associated services (hereinafter "Website"). It applies regardless of the domains, systems, platforms, and devices used (e.g., desktop or mobile).

1.2 Definitions

The terms used, such as "personal data" or its "processing," correspond to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

1.3 Types of Data Processed

Processed personal data includes:

  • Master data (e.g., names and addresses of business partners and customers)
  • Contact data (e.g., email addresses, phone numbers)
  • Content data (e.g., entries in contact forms)
  • Usage data (e.g., pages visited, access times)
  • Meta/communication data (e.g., IP addresses, device information)

1.4 Affected Persons

The term "user" encompasses all persons affected by data processing: business partners, customers, prospects, and website visitors. The terms are gender-neutral.

1.5 Legal Basis for Processing

We process personal data only on the basis of legal permission:

  • Art. 6 para. 1 lit. a GDPR – User consent
  • Art. 6 para. 1 lit. b GDPR – Contract fulfillment and pre-contractual measures
  • Art. 6 para. 1 lit. c GDPR – Fulfillment of legal obligations
  • Art. 6 para. 1 lit. f GDPR – Legitimate interests (e.g., analysis, optimization, economic operation, IT security)

2. Security Measures

We implement technical and organizational security measures in accordance with state-of-the-art technology to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security measures are regularly reviewed and adapted to technological progress.

3. Disclosure of Data to Third Parties

3.1 General Principle

Data is only disclosed to third parties within the framework of legal requirements, particularly:

  • For contract fulfillment (Art. 6 para. 1 lit. b GDPR)
  • Based on legitimate interests (Art. 6 para. 1 lit. f GDPR)
  • Due to legal obligation (Art. 6 para. 1 lit. c GDPR)
  • With your consent (Art. 6 para. 1 lit. a GDPR)

3.2 Data Processors

When we engage service providers to deliver our services, we conclude data processing agreements pursuant to Art. 28 GDPR and implement technical and organizational data protection measures.

3.3 Data Transfer to Third Countries

When using services based outside the EU/EEA, data transfer only occurs when:

  • Adequate data protection level exists (e.g., EU-US Data Privacy Framework)
  • Appropriate safeguards are in place (e.g., EU Standard Contractual Clauses)
  • You have given explicit consent

4. Hosting & Technical Infrastructure

4.1 Hosting Provider

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the following data on our behalf:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of server request
  • Amount of data transferred

Purpose: Provision, operation, and security of the website

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient website operation)

Data processing agreement: A data processing agreement pursuant to Art. 28 GDPR exists with IONOS.

Further information: https://www.ionos.de/terms-gtc/terms-privacy/

5. Collection of Access Data and Log Files

5.1 Automatic Data Collection

With each access to our website, the following data is automatically collected:

  • Name and URL of the accessed page
  • Date and time of access
  • Amount of data transferred
  • Notification of successful retrieval
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)
  • IP address
  • Requesting provider

5.2 Purpose and Legal Basis

Processing occurs for security reasons (e.g., investigation of abuse) and for technical provision of the website based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).

5.3 Storage Duration

Log file data is stored for a maximum of 14 days and then deleted. Data whose retention is necessary for evidentiary purposes is excluded from deletion until final clarification.

6. Cookies & Similar Technologies

6.1 What are Cookies?

Cookies are small text files stored on your device by our web server or third-party providers. They enable recognition of your browser.

6.2 Cookie Types

We distinguish:

  • Technically necessary cookies – Required for basic functions (Art. 6 para. 1 lit. f GDPR)
  • Analysis cookies – For reach measurement (only with consent, Art. 6 para. 1 lit. a GDPR)
  • Marketing cookies – For personalized advertising (only with consent)

6.3 Your Choices

You can:

  • Block or delete cookies in your browser settings
  • Adjust your cookie settings at any time via our cookie banner
  • Object to the use of analysis and marketing cookies

Note: Blocking technically necessary cookies may limit the functionality of our website.

7. Contact

7.1 Contact Form & Email

When contacting us via our form or email, we process:

  • Name
  • Email address
  • Phone number (optional)
  • Message content
  • Time of inquiry

7.2 Purpose and Legal Basis

Processing occurs to handle your inquiry based on:

  • Art. 6 para. 1 lit. b GDPR (pre-contractual measures)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest in customer service)

7.3 Storage Duration

Contact data is deleted once processing is complete and no legal retention obligations exist (typically after 3 years).

8. Contractual Services

8.1 Processed Data

To fulfill our contractual obligations, we process:

  • Master data (names, addresses, company data)
  • Contract data (scope of services, terms)
  • Payment data (billing address, bank details for SEPA direct debit)
  • Communication data (emails, phone calls)

8.2 Legal Basis

Art. 6 para. 1 lit. b GDPR (contract fulfillment and pre-contractual measures)

8.3 Storage Duration

Contract data is stored for the duration of the business relationship and beyond in accordance with statutory retention periods (see section 12.2).

9. Web Analytics

9.1 Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processed data:

  • IP address (anonymized)
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited and duration
  • Device type and screen resolution

Purpose: Analysis of website usage, optimization of our services, reach measurement

Legal basis:

  • Art. 6 para. 1 lit. a GDPR (consent via cookie banner)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymized usage)

Data transfer to USA: Google Ireland Limited forwards data to Google LLC (USA). Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection (https://www.dataprivacyframework.gov/).

IP anonymization: We use the IP anonymization function. The IP address is shortened within the EU before being transmitted to Google.

Storage duration: User and event-based data is automatically deleted after 14 months.

Objection: You can prevent data collection by Google Analytics through:

Further information:

10. Social Media & External Content

10.1 Links

Our website contains links to our social media profiles (Instagram, Facebook, LinkedIn). Clicking these links redirects you to the respective platforms.

No plugin integration: We do not integrate social media plugins that transmit data to providers merely by visiting our website.

10.2 External Content (when embedded)

If we embed videos or other content from third-party providers, this occurs in accordance with their respective privacy policies:

YouTube (Google Ireland Limited):

Instagram (Meta Platforms Ireland Limited):

11. Rights of Data Subjects

You have the following rights regarding your personal data:

11.1 Right of Access (Art. 15 GDPR)

You can request information about the data we process.

11.2 Right to Rectification (Art. 16 GDPR)

You can request correction of inaccurate data.

11.3 Right to Erasure (Art. 17 GDPR)

You can request deletion of your data, provided no legal retention obligations exist.

11.4 Right to Restriction of Processing (Art. 18 GDPR)

You can request restriction of processing.

11.5 Right to Data Portability (Art. 20 GDPR)

You can receive your data in a structured, commonly used, and machine-readable format.

11.6 Right to Object (Art. 21 GDPR)

You can object to the processing of your data at any time for reasons arising from your particular situation. This applies especially to data processing based on Art. 6 para. 1 lit. f GDPR (legitimate interests).

Objection to direct marketing: If we use your data for direct marketing, you can object at any time. We will then cease processing.

11.7 Withdrawal of Consent (Art. 7 para. 3 GDPR)

You can withdraw consent at any time with effect for the future.

11.8 Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority.

Competent supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg, Germany
Phone: +49 40 / 428 54 – 4040
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de

12. Deletion of Data

12.1 General Principle

We delete personal data as soon as it is no longer necessary for the purposes for which it was collected and no legal retention obligations exist.

12.2 Statutory Retention Periods

The following statutory retention obligations exist:

6 years pursuant to § 257 HGB:

  • Commercial books
  • Inventories
  • Opening balance sheets
  • Annual financial statements
  • Commercial letters
  • Accounting documents

10 years pursuant to § 147 AO:

  • Books and records
  • Annual financial statements
  • Management reports
  • Opening balance sheets
  • Accounting documents
  • Invoices
  • Documents relevant for taxation

12.3 Restriction of Processing

If data cannot be deleted because it is necessary for other legally permissible purposes, processing is restricted. The data is then blocked and not processed for other purposes.

13. Changes to the Privacy Policy

We reserve the right to amend this privacy policy to adapt it to changed legal situations or changes to our services.

Significant changes: In case of significant changes that require your consent or affect contractual arrangements, we will inform you separately.

Recommendation: We recommend reviewing this privacy policy regularly to stay informed about how we handle your data.

Last updated: January 12, 2026

14. Data Protection Contact

For questions about data protection or to exercise your rights, contact us:

Email: hello@lattention.com
Phone: +49 (0)176 21 19 69 87
Mail: l'attentionists GmbH, Max-Brauer-Allee 247, 22769 Hamburg, Germany

End of Privacy Policy