© 2026 Lhotse Technologies GmbH
All systems operational
ISO 27001 Certified · Hosted in EU Last updated: 28.02.2025
The data controller is Lhotse Technologies GmbH, Mindspace, Münzstraße 12, 10178 Berlin, Germany.
Email: security@lhotse.de
Legal representative: Can Akin
Data protection officer: heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany (datenschutz@heydata.eu)
We process personal data based on the following legal grounds under GDPR:
The security of data during transfer is guaranteed by adequacy decisions of the EU Commission for certain countries. For other transfers, standard contractual clauses apply per Art. 46(2)(b) GDPR.
Data is deleted when no longer necessary for its purpose, unless legal retention obligations exist. Data may be restricted rather than deleted if required for other lawful purposes.
You have the right to:
Complaints may be filed with the competent data protection authority.
Mandatory data needed for business relationships is clearly marked. Without such data, contract formation or service provision may be refused.
We do not use fully automated decision-making processes in accordance with Article 22 GDPR.
Contact inquiries are processed based on our legitimate interest to respond to questions. Data is deleted when no longer necessary or restricted per retention obligations.
Survey data collection relies on our legitimate interest in understanding customer preferences (Art. 6(1)(f) GDPR). Data is deleted after evaluation.
Existing customers may receive email offers unless they object. The legal basis is our legitimate interest in direct advertising.
Newsletter subscriptions require explicit consent via our website. Consent can be revoked at any time, e.g. by clicking the corresponding link in the newsletter.
We measure opening and click-through rates based on recipient consent. HubSpot (HubSpot, Inc., 25 1st Street, Cambridge, MA 02141, USA) handles newsletter distribution, processing data in the USA.
During passive browsing, we collect: IP address, request timestamps, timezone data, page content, HTTP status codes, data transfer amounts, referrer information, and browser/OS details. This data is stored in log files and deleted when no longer necessary, at the latest after 14 days.
Webflow (Webflow, Inc., 398 11th St., San Francisco, CA 94103, USA) hosts the website and provides content delivery. They process usage, content, and meta/communication data in the USA under standard contractual clauses.
Form submissions are stored to respond to inquiries based on legitimate interest (Art. 6(1)(f) GDPR). Data is deleted when no longer necessary or per retention obligations.
Job application data is processed for recruitment under Art. 88 GDPR and German Data Protection Act Section 26(1). Required application data is marked; additional information requires consent. Applicant data is shared with HR personnel, recruiters, and involved employees. Data is deleted six months post-rejection, or one year if consent for future consideration was granted.
Appointment scheduling relies on legitimate interest (Art. 6(1)(f) GDPR). Third-party tools may be used.
Cookies for language settings, search terms, and media playback are based on legitimate interest in providing functional website access (Art. 6(1)(f) GDPR).
We maintain profiles on multiple social media platforms where network operators process user behavior for advertising purposes.
Profile operator: Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. Joint controllership arrangement exists under Art. 26 GDPR.
Profile operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Profile operator: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
We reserve the right to modify this privacy policy prospectively. The current version remains available on our website.
For inquiries regarding this policy, please contact us at security@lhotse.de.