Privacy policy

1. Summary

This website does not set cookies, does not store anything in your browser and does not load content from other providers. There are no analytics or advertising services, no contact form and no newsletter.

We process personal data in these cases:

• when you visit the website, as far as technically necessary (section 3)
• when you contact us by email or phone (section 4)
• when you apply for a job with us (section 5)
• when you visit our company page on LinkedIn (section 6)

2. Controller

The controller responsible for data processing on this website is:

Lückenlos GmbH & Co. KG
Dieselstraße 6
63512 Hainburg
Germany

Represented by Lückenlos Verwaltungs GmbH, which in turn is represented by Erhan Atuk and Björn Weißenborn.

Phone: +49 6182 84 233-0
Email: info@agentur-lueckenlos.de

3. Visiting the website

Hosting

The website runs on a server that Starck & Som GmbH, Wingertstraße 24b, 63533 Mainhausen, Germany, operates and maintains for us. The server is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its data centre in Nuremberg. Starck & Som processes the data on our behalf in accordance with Art. 28 GDPR, with Hetzner involved as a sub-processor of Starck & Som. For more information, see Hetzner's privacy policy.

Connection data

When you open a page, your browser sends data to our server for technical reasons: your IP address, the requested address, date and time, the page you came from (referrer) and your browser's identifier (user agent). We need this data to deliver the page to your device. The web server does not keep an access log. Your IP address is not stored after the page has been delivered.

If a request cannot be answered because of a fault, for example during a restart, the web server writes an error message to the server's system log. It contains the IP address, the requested address, the browser identifier and the time. We use these messages for troubleshooting only, and they are deleted automatically after 14 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to deliver the website securely and without errors.

Log of pages not found

If someone requests an address that does not exist on this website, we store that address together with the referrer, the browser identifier, the time and the number of requests. We do not store the IP address. The log helps us find broken links and redirect old addresses. It holds at most 10,000 entries, beyond that the oldest are deleted automatically. The nightly backups of the database, which also contain this log, are deleted after 14 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a website without broken links.

No cookies

This website does not set cookies and does not store data in your browser's storage, such as local storage. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required, and no cookie banner appears.

The only cookie is used in the website's administration area, where our staff edit the content. After login it stores a session cookie that is technically necessary for the login (Section 25(2) no. 2 TDDDG).

Fonts

The fonts Bitter and Barlow are hosted on our own server. Visiting the website does not create a connection to Google or any other provider.

Encryption

The connection to this website is encrypted with TLS. You can recognise this by "https://" in your browser's address bar.

Links to other websites

The website links to our company page on LinkedIn, among others. Such links are plain references: no data is sent to the other provider until you click the link. The operator of the linked page is responsible for any processing there.

4. Contact by email or phone

If you contact us by email or phone, we process the information you provide, such as your name, contact details and the content of your enquiry, in order to deal with it. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or steps prior to entering into one. In all other cases it is Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

We delete the data once your enquiry has been dealt with. Business correspondence, including email, is kept for six years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

Email via Microsoft 365

Our email runs on Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the emails on our behalf. This is based on the data processing agreement (Data Protection Addendum) that forms part of Microsoft's contract terms.

Access by Microsoft Corporation in the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework. Such transfers are covered by the European Commission's adequacy decision (Art. 45 GDPR). For more information, see Microsoft's privacy statement.

5. Job applications

We accept applications by email. We process the documents you send us, such as contact details, CV and references, as well as notes from interviews, in order to decide on employment. The legal basis is Art. 6(1)(b) GDPR (steps prior to an employment relationship). If you voluntarily provide special categories of personal data, such as a severe disability, we process them under Art. 9(2)(b) GDPR. Only the people involved in the selection have access. The emails run on Microsoft 365 (section 4).

You are not obliged to provide any data. Without documents, however, we cannot consider your application.

If we hire you, we transfer the data to your personnel file. Otherwise we delete it six months after the end of the application process. We keep it for this period to defend ourselves against claims under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR). If we would like to keep your documents for future vacancies, we will ask for your consent first (Art. 6(1)(a) GDPR). You can withdraw it at any time.

6. Our company page on LinkedIn

We run a company page on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When you visit the page, LinkedIn processes your data under its own privacy policy.

We are jointly responsible with LinkedIn for the visitor statistics of the company page (Page Insights) under Art. 26 GDPR. We only receive aggregated reports that do not allow conclusions about individual persons. The details are set out in the Page Insights Joint Controller Addendum. Under it, LinkedIn answers requests concerning your rights, but you can also contact us. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in presenting our company on LinkedIn.

7. Recipients and retention

We only pass on personal data to the service providers named in this policy or if we are legally obliged to do so. Where no period is given above, we delete data as soon as the purpose no longer applies and no statutory retention period requires us to keep it. There is no automated decision-making or profiling under Art. 22 GDPR.

8. Your rights

You have the right to:

• access the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Please write to info@agentur-lueckenlos.de or to the address in section 2.

Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
Wilhelmstraße 7
65185 Wiesbaden, Germany
datenschutz.hessen.de

9. Last updated

Last updated: November 2026. We will update this policy when the website or the legal situation changes.