Privacy Notice

Legal Cognition GbR

Hamburger Kamp 4c

22113 Oststeinbek, Germany

Email: mans@legalcognition.com

This website is hosted through AWS Amplify Hosting in the AWS Europe (Frankfurt) Region, eu-central-1. The service provider for an AWS account maintained in Germany is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Amplify uses the Amazon CloudFront content delivery network to deliver the website globally.

When you visit, AWS processes technically necessary access data. This may include, in particular, the IP address, date and time, requested address and URL parameters, referrer, HTTP status, volume transferred and browser and operating-system identifiers. AWS processes this data to deliver requested files, route requests, maintain availability and detect and prevent errors, abuse and attacks.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interests are the secure, fast and reliable delivery of the website. Recipients are Amazon Web Services EMEA SARL, the AWS entities involved in delivering the service and AWS subprocessors. The AWS Data Processing Addendum forms part of the AWS Service Terms and applies automatically when AWS processes customer data.

According to the current product documentation, AWS Amplify retains an application's access logs until the relevant Amplify application is deleted. We do not export these logs for our own analytics or profiling purposes. Longer retention required by law or necessary to prevent and investigate security incidents remains unaffected.

The website files and the AWS configuration we select are stored in the Europe (Frankfurt) Region. In its Data Processing Addendum, AWS states that it does not transfer customer data outside the selected Region unless this is necessary to provide or maintain the services we initiate or to comply with a valid and binding legal order.

Amazon CloudFront is a globally distributed content delivery network. Requests and cached website files may therefore be processed at network locations outside the EEA. For transfers to countries without an adequacy decision, the European Commission's Standard Contractual Clauses form part of the AWS Data Processing Addendum and AWS Service Terms. AWS also requires its subprocessors to implement appropriate data-protection safeguards.

Our own website code does not set cookies. When you use the colour-scheme switch, your browser stores your chosen colour scheme under “lc-theme” in local storage. An automatically detected system preference alone is not persistently stored; without a stored choice, the colour scheme follows your system settings. The language is determined solely by the address you open (English pages under “/en”) and is not stored.

Storage is used solely to remember your expressly selected preference on subsequent visits, under § 25 (2) no. 2 TDDDG. This entry has no automatic expiry and remains until changed or deleted through your browser's website-data settings. The value is not transmitted to us during ordinary page views. When you submit the contact form, the active language is sent with it so that we can answer in your language.

We do not embed analytics, advertising, remarketing or session-recording services in our own pages and do not create usage profiles. Processing within the externally provided Cal.com booking interface is addressed separately in section 5.

We use the appointment-booking service Cal.com, provided by Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States, to schedule product demonstrations. The booking interface is embedded in an iframe supplied by Cal.com on our internal “Book a demo” page. A connection to Cal.com is established only when you actively open this booking page. Cal.com is not loaded on any other page.

Connection data is transmitted to Cal.com as soon as the iframe loads, before a booking is submitted. Information you enter is added during the booking process. Data processed may include your IP address, browser and device information, referrer, date and time, name, email address, organisation, time zone, selected appointment and answers to booking questions. Cal.com states that its product uses cookies for login, preferences and security, but no third-party advertising cookies. This provider statement should be distinguished from the different information about Cal.com's marketing website. Cal.com processes booking data on our behalf for appointment management.

We have a data processing agreement (Data Processing Addendum, DPA) with Cal.com. The legal basis is Art. 6 (1) (b) GDPR where booking and holding the appointment serve to take steps towards entering into a contract; otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in efficient appointment management and business communications. Recipients are Cal.com and its subprocessors, as well as the calendar and video-conferencing services used for the appointment.

Different video-conferencing services may be used for video appointments. The service intended for your appointment is identified in the booking interface or invitation. To set up the video meeting and send the invitation, information such as your name, email address, appointment title, date and time may be transmitted to the respective provider. Depending on the booking configuration, this may already happen during booking, before you join. When you join, the provider also processes connection and device information and any audio, video, chat or screen-sharing content you provide through the functions you use. The video conference itself is not embedded in our website; you join through the meeting link provided.

Cal.com is established in the United States and states that it processes data in the United States and, where applicable, at other locations used by its subprocessors. For transfers from the EEA, Cal.com identifies Standard Contractual Clauses or an applicable adequacy mechanism such as the EU-US Data Privacy Framework. Further information about safeguards is available through the provider information linked below and on request to mans@legalcognition.com.

Cal.com states that account and booking data is retained while the account is active. This describes the provider's retention, not a separate legal basis for retaining individual bookings indefinitely. Whether continued processing is necessary depends on appointment management, any subsequent business relationship and, where applicable, statutory retention duties or the establishment, exercise or defence of legal claims. Please address requests to erase your booking data to mans@legalcognition.com. Information already copied to calendars or email mailboxes must be considered separately.

The contact forms on our product, integration, deployment, security and solution pages transmit the information you enter directly to an AWS endpoint in the Europe (Frankfurt) Region. This may include your name, business email address, organisation, phone number, topic, message content, the active language choice and the form category. Forms on solution pages are assigned to the “Legal Cognition OS” category. Separate “Contact” links may open the email application on your device.

Contacting us is voluntary; there is no statutory or contractual obligation to use this form. Name, business email address, organisation and topic are marked * and are required to submit the form. Without them, the form cannot be submitted. Phone number and additional details are optional. Alternatively, you can email mans@legalcognition.com. We cannot reply without a way to contact you.

AWS Lambda validates the request and Amazon Simple Email Service forwards it to our IONOS mailbox. We do not store form submissions in a database. The function does not write form fields or message content to its technical logs; error metadata without the request content is retained for 14 days. The data is nevertheless contained in the email received and stored in our mailbox.

We process this data to answer your request and take steps towards a possible business relationship. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual requests; otherwise Art. 6 (1) (f) GDPR based on our interest in handling business communications.

Our email mailbox is provided by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. As our email provider, IONOS processes, in particular, sender and recipient addresses, header and content data, attachments and technical connection and log data where necessary to transmit, receive and store email and to filter spam and malware.

Recipients are the responsible members of our team, AWS and IONOS as our processors and, where applicable, other technically necessary email providers. We delete requests once they have been finally resolved unless statutory retention duties, contractual reasons or legitimate interests in the establishment, exercise or defence of legal claims require longer storage.

Where this Notice does not state a specific period, we retain personal data only for as long as the relevant purpose continues. We then delete or anonymise the data unless statutory retention duties, contractual obligations or legitimate interests in the establishment, exercise or defence of legal claims require longer storage.

Subject to the statutory conditions, you have the right of access under Art. 15 GDPR, rectification under Art. 16 GDPR, erasure under Art. 17 GDPR, restriction of processing under Art. 18 GDPR and data portability under Art. 20 GDPR.

Right to object: Where processing is based on Art. 6 (1) (f) GDPR, you may object under Art. 21 GDPR on grounds relating to your particular situation.

You may withdraw any consent you have given at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.

To exercise your rights, email mans@legalcognition.com.

Under Art. 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Our website contains links to websites operated by other providers, such as events and publications. These links do not embed the linked content. When you open such a link, the respective provider processes, in particular, the connection data required for the visit. Please refer to that provider's privacy notice for details.

This differs from the Cal.com booking interface embedded on our demo page: a connection is established there as soon as the booking page is opened. Please refer to section 5 for details.