Privacy Policy
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
lewema GmbHAuf dem alten Berg 3-4
35796 Weinbach
Germany
Telephone: +49 (0) 6471 41804
Email: info@lewema.de
Further contact details can be found in our legal notice.
2. General information on data processing
We take the protection of your personal data seriously. We process personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only to the extent necessary to provide a functional website, respond to enquiries, perform contracts, comply with another statutory permission or where you have given us your consent.
Processing is carried out in particular in accordance with the principles of lawfulness, purpose limitation, data minimisation, storage limitation and transparency.
3. Accessing our website and server log files
Whenever you access our website, information is automatically processed by the web server.
The following data may be collected in particular:
- IP address of the accessing device
- date and time of access
- page accessed or file requested
- amount of data transferred
- referrer URL
- browser type and browser version
- operating system used
- other technically necessary information, where applicable
This processing is carried out to provide the website technically, ensure the security and stability of our systems and detect and prevent attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable provision of our website.
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the server log data generated when the website is accessed on our behalf. Server log files are stored for seven days and then deleted, unless longer storage is necessary to investigate a security incident.
4. Contact by email or contact form
If you contact us by email or through a contact form, we process the personal data you provide solely to handle your enquiry and any necessary follow-up communication.
This may include in particular:
- name
- email address
- telephone number
- content of your enquiry
- other information you provide voluntarily
The legal basis is Art. 6(1)(f) GDPR where the contact serves general communication with us.
If your enquiry relates to entering into or performing a contract, Art. 6(1)(b) GDPR may also serve as the legal basis.
Where processing is based on consent, Art. 6(1)(a) GDPR is the legal basis.
We store the data provided only for as long as necessary to handle the enquiry or for as long as statutory retention obligations apply.
6. Google Analytics
We use Google Analytics 4 to analyse the use of our website and improve our online services.
Google Analytics is activated only after you have consented to the use of analytics technologies through our consent management system.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When the service is used, information about your usage behaviour, device information and online identifiers may be processed. Depending on the technical configuration, data may also be transferred to companies affiliated with Google or to third countries.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG where the consent concerns access to information on your device.
You can withdraw your consent at any time through the cookie settings.
7. Locally hosted videos
Videos embedded on this website are provided locally from our web server. Playing a video does not establish a connection to YouTube, Vimeo or any other external video platform.
8. Google Fonts
The fonts used on this website are loaded exclusively locally from our web server. Accessing the website does not establish a connection to Google servers.
9. External links
Our website may contain links to third-party websites.
When you click such a link, you leave our website. The respective operators of the linked websites are solely responsible for processing personal data on those websites.
Please refer to the privacy information provided by the respective provider.
10. Recipients of personal data
Personal data is disclosed only where permitted by law or necessary for a specific purpose.
Recipients may include in particular:
- our hosting and IT service provider
- technical service providers
- providers of communication and email services
- analytics and statistics service providers, where applicable and where you have consented
- other service providers that process personal data on our behalf, where applicable
Where service providers process personal data on our behalf, we enter into data processing agreements pursuant to Art. 28 GDPR where legally required.
11. Transfers to third countries
Personal data is transferred to countries outside the European Union or the European Economic Area only where the requirements of Art. 44 et seq. GDPR are met.
Where personal data is transferred to the United States, the transfer may be based in particular on an adequacy decision by the European Commission concerning the EU-US Data Privacy Framework, provided the relevant recipient is certified under that framework.
Alternatively, appropriate safeguards such as standard contractual clauses may be used, provided the statutory requirements are met.
12. Retention period
As a general rule, we store personal data only for as long as necessary for the respective processing purpose.
Statutory retention obligations may also apply. In such cases, the data is stored for the duration of the statutory retention period and then deleted unless another lawful reason requires continued storage.
13. Your rights
You generally have the following rights in relation to us:
Right of access
You may request information as to whether and which personal data we process about you.
Right to rectification
You may request that inaccurate personal data be corrected or incomplete personal data be completed.
Right to erasure
You may request the erasure of your personal data where the statutory requirements are met.
Right to restriction of processing
You may request restriction of the processing of your personal data where the statutory requirements are met.
Right to data portability
Where the statutory requirements are met, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data where the processing is based on Art. 6(1)(e) or (f) GDPR.
If personal data is processed for direct marketing purposes, you may object to this processing at any time.
Withdrawal of consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, an informal notification sent to the contact details above is generally sufficient.
14. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority generally responsible for our company is the data protection authority of the German state of Hesse:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)Wilhelmstraße 7
65185 Wiesbaden
Germany
Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de
You may also exercise your right to lodge a complaint with another competent data protection supervisory authority, in particular the authority at your habitual residence or place of work, provided the statutory requirements are met.
15. Data security
We use appropriate technical and organisational security measures to protect your personal data against loss, destruction, manipulation or unauthorised access.
Our website uses an encrypted connection via HTTPS/TLS where technically supported.
The security measures are reviewed and adapted regularly in line with technological developments.
16. No automated decision-making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, generally does not take place through our website.
17. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, technical processes or the services we use change.
The current version published on this website applies.
Last updated: August 2026