Privacy Policy

Protecting your personal data is important to us. Below we explain which data is processed when you visit our website, for what purposes and on which legal basis.

1. Controller

The controller responsible for data processing on this website is:

LUBPLUS GmbH
Radlkoferstraße 2
81373 Munich
Germany

Phone: +49 89 66 31 11
Email: info@lubplus.de

2. Legal bases for data processing

Depending on the purpose, we process personal data on the basis of the following legal grounds:

• Art. 6 (1) (a) GDPR – your consent, e.g. for certain cookies or the use of third-party services (if requested via a consent/cookie banner).
• Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures, e.g. in the context of enquiries via the contact form relating to an offer or contract.
• Art. 6 (1) (c) GDPR – legal obligations, e.g. retention obligations under commercial and tax law.
• Art. 6 (1) (f) GDPR – legitimate interests, e.g. in the secure, stable and user-friendly provision of our website or in efficiently handling enquiries.
• § 25 (1) TDDDG – where consent is required for storing information on your device (e.g. cookies or similar technologies).

3. Hosting (STRATO) & server log files

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit our website, certain data is automatically recorded in server log files, such as IP address, date and time of access, page accessed, amount of data transferred, browser type and operating system. This data is processed in order to ensure the stability and security of our services and is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the reliable and secure provision of the website).

We have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR. For further details, please refer to STRATO’s privacy policy at https://www.strato.de/datenschutz/.

4. Cookies

Our website may use cookies. Cookies are small text files stored on your device. They can be session cookies (deleted when you close the browser) or persistent cookies (stored for a defined period) and can be set by our site (first-party) or by third parties.

Technically necessary cookies are required to provide basic functions of the website (e.g. page navigation, saving certain settings) and are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified.

Where cookies or similar technologies are set by third-party providers (e.g. in connection with Google Maps) and are not strictly necessary, their use may depend on your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with §25 (1) TDDDG. You can configure your browser to inform you about cookie setting, allow cookies only in individual cases or reject them entirely. Disabling cookies may limit the functionality of the website.

5. Contact form & other contact

When you send us an enquiry via the contact form on our website, we process the data you enter (e.g. name, email address, company, subject, message) as well as technical metadata (e.g. IP address, date/time of the request) in order to process your enquiry and handle follow-up questions. Data is not transmitted to third parties without your consent, unless this is necessary to perform a contract.

Depending on the context, processing of data entered in the contact form is based on Art. 6 (1) (b) GDPR (pre-contractual measures or contract performance) or on our legitimate interest in effectively handling enquiries (Art. 6 (1) (f) GDPR). If we explicitly ask for your consent, processing is additionally based on Art. 6 (1) (a) GDPR.

If you contact us by email or phone, we process the data you provide (e.g. name, contact details, content of your enquiry) for the same purposes and on the same legal bases as for the contact form. Data is deleted once the purpose no longer applies and no legal retention obligations conflict with deletion.

6. Google Maps

Our website uses the map service Google Maps to display locations. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you access the page with the embedded map, a connection to Google’s servers is established. Your IP address and further technical data and, if allowed on your device, location data may be transmitted to Google. In this context, Google may also use cookies or similar technologies and may load Google Fonts to ensure consistent font rendering.

The use of Google Maps is based on our legitimate interest in presenting our online offers in an attractive way and making it easy to find our locations (Art. 6 (1) (f) GDPR). If your consent is requested (e.g. via a cookie banner), processing is additionally based on Art. 6 (1) (a) GDPR in conjunction with §25 (1) TDDDG; consent can be withdrawn at any time.

Data may also be transferred to servers of Google LLC in the USA. Google relies, among other things, on EU standard contractual clauses and certifications under the EU-US Data Privacy Framework for such transfers. Further information on how Google processes data can be found in Google’s privacy policy at https://policies.google.com/privacy.

7. Recipients of personal data

In the course of our business activities, we work with external service providers (e.g. hosting providers, IT service providers). Personal data is only passed on where a legal basis exists, e.g. for contract performance, due to legal obligations, based on our legitimate interests or your consent. We conclude data processing agreements with processors in accordance with Art. 28 GDPR.

8. Storage period

Unless a more specific storage period is stated in this policy, personal data is stored by us until the purpose of processing no longer applies. If you exercise your right to deletion or withdraw consent, we will delete your data unless legal retention obligations or other permissible reasons (e.g. tax and commercial law requirements) prevent deletion.

9. Your rights

Within the scope of applicable law, you have in particular the following rights:

• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR),
• Right to erasure (“right to be forgotten”, Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object to processing based on Art. 6 (1) (e) or (f) GDPR (Art. 21 GDPR), in particular to direct marketing.

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of processing based on consent before its withdrawal remains unaffected.

You also have the right to lodge a complaint with a competent data protection supervisory authority. To exercise your rights, you can contact us at any time using the contact details provided above.

10. Updates to this privacy policy

This privacy policy is currently valid and was last updated in March 2025. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this policy. The latest version is always available on this website under “Datenschutz / Privacy Policy”.

Note: This privacy policy is a general template that should be aligned with the specific services used by LUBPLUS (e.g. cookie banner, further third-party services) and legally reviewed where necessary.