Privacy Policy

1. Introduction and Scope

Linduxtry UG (haftungsbeschränkt) (“Linduxtry”, “we”, “us”) takes the protection of your personal data seriously and processes it exclusively in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz — BDSG), the German Telecommunications-Telemedia Data Protection Act (TTDSG), and other applicable German and EU data protection law.

This Data Protection Notice explains what personal data we collect when you visit our website, contact us, or use our products and services; for what purposes and on what legal basis we process it; how long we retain it; to whom we may disclose it; and what rights you have as a data subject.

“Personal data” means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR), such as your name, email address, IP address, or usage data.

2. Controller

The controller responsible for data processing on this website and in connection with our services within the meaning of Art. 4 No. 7 GDPR is:

Linduxtry UG (haftungsbeschränkt)

Landwehrstraße 19

64293 Darmstadt, Germany

Phone: +49 1639 297130

Email: info@linduxtry.io

3. Data Protection Officer

Where applicable: We have appointed a Data Protection Officer, who can be reached at the address above, marked “Attn: Data Protection Officer”, or at info@linduxtry.io. Where no DPO is legally required or appointed, delete this paragraph and state instead: “We are not legally required to appoint a Data Protection Officer. For any data protection enquiries, please contact us using the details in Section 2.”

4. Your Rights as a Data Subject

Under the conditions set out in the GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 2.

Right of access (Art. 15 GDPR) — to obtain confirmation of and access to the personal data we hold about you.
Right to rectification (Art. 16 GDPR) — to have inaccurate or incomplete data corrected.
Right to erasure (Art. 17 GDPR) — to have your data deleted, subject to statutory retention obligations.
Right to restriction of processing (Art. 18 GDPR) — to have processing limited under certain conditions.
Right to data portability (Art. 20 GDPR) — to receive your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR) — to object, on grounds relating to your particular situation, to processing based on legitimate interest, including profiling; and, at any time and without giving reasons, to processing for direct-marketing purposes.
Right to withdraw consent (Art. 7(3) GDPR) — where processing is based on consent, at any time with future effect.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — in particular the data protection authority of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority competent for Linduxtry (Hesse) is: Der HessischeBeauftragtefürDatenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Provision of personal data is in some cases required by law or contract (e.g. to conclude and perform a contract). Where provision is required, failure to provide the data may mean we cannot enter into or perform the relevant contract. Where provision is voluntary, this is indicated in the relevant section below.

5. Cookies and Similar Technologies

Our website may use cookies — small text files stored on your device — and comparable technologies (e.g. local storage, pixels) within the meaning of § 25 TTDSG.

Strictly necessary cookies, required for the basic functioning of the website (e.g. session management, security, load balancing), are set on the basis of Art. 6(1)(f) GDPR / § 25(2) No. 2 TTDSG (legitimate interest / technical necessity) and cannot be disabled via the consent tool.

Any non-essential cookies (e.g. analytics, marketing, embedded third-party content) are only set with your prior, explicit consent obtained via our cookie consent banner, pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may withdraw your consent at any time with future effect via the cookie settings link in the website footer or by clearing your browser cookies.

6. Contact Form and Email Correspondence

When you contact us via our contact form, by email, or by phone, we process the personal data you provide (e.g. name, email address, phone number, and the content of your message) in order to process and respond to your enquiry.

Legal basis: where your enquiry relates to a (pre-)contractual matter, processing is based on Art. 6(1)(b) GDPR; in all other cases, on Art. 6(1)(f) GDPR (our legitimate interest in efficiently handling enquiries directed to us) or, where applicable, Art. 6(1)(a) GDPR (consent).

We retain this correspondence for as long as necessary to process your enquiry and, thereafter, only where required by statutory retention obligations (see Section 11) or for the establishment, exercise, or defence of legal claims.

7. Data Processing in Connection With Our Products and Services

Where you become a client of Linduxtry or use our software products, digital tools, or consulting services, we process the personal data necessary to perform the relevant contract, including contact and billing details, project- and account-related data, and — where applicable and separately agreed via a Data Processing Agreement pursuant to Art. 28 GDPR — data you or your organisation process using our software on your behalf.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures at your request), Art. 6(1)(c) GDPR (compliance with legal obligations, e.g. tax law), and, where relevant, Art. 6(1)(f) GDPR (legitimate interest, e.g. in fraud prevention or IT security).

Where Linduxtry acts as a processor on behalf of a client organisation (e.g. processing that organisation’s end-user or employee data within our software), the client organisation remains the controller for that data, and processing is governed by the applicable Data Processing Agreement rather than this notice.

8. Recipients and Third-Country Transfers

We only disclose personal data to third parties where necessary to perform the contract, where we are legally obliged to do so, or where you have consented. Categories of recipients may include: IT service providers and hosting providers acting as processors under Art. 28 GDPR, payment service providers, tax advisors/auditors, and, where legally required, courts and public authorities.

Should personal data be transferred to a recipient located outside the European Economic Area (EEA), we ensure an adequate level of protection through appropriate safeguards, such as an adequacy decision of the European Commission (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 GDPR).

9. Data Security

We implement appropriate technical and organisational measures (TOMs) within the meaning of Art. 32 GDPR to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, including transport encryption (TLS/SSL), access controls, and regular review of our security measures. Please note that data transmission over the internet (e.g. via email) can never be guaranteed to be completely secure.

10. Storage Duration

We store personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable statutory retention obligations — for example, commercial and tax retention periods under §§ 257 HGB and 147 AO, which typically require retention of certain business records for six (6) or ten (10) years. Once the purpose no longer applies and no statutory retention obligation exists, the data is deleted or anonymised without undue delay.

11. Automated Decision-Making and Profiling

We do not use fully automated decision-making, including profiling, within the meaning of Art. 22 GDPR, that produces legal effects concerning you or similarly significantly affects you. [If Linduxtry’s software provides AI-assisted scoring, ranking, or recommendation features to end users, this section must be expanded to describe the logic involved, the significance, and the envisaged consequences of such processing, per Art. 13(2)(f) / 22 GDPR.]

12. Changes to This Notice

We may update this Data Protection Notice from time to time to reflect changes in our data processing practices or legal requirements. The version published on our website at the time of your visit or use of our services applies. We recommend reviewing this notice periodically.

13. Contact

If you have any questions about this Data Protection Notice or the processing of your personal data, please contact us:

Linduxtry UG (haftungsbeschränkt)