PRIVACY NOTICE

  1. CONTROLLER

Loepre GmbH
Immanuelkirchstraße 14a
10405 Berlin
Germany

Managing Director: Presley Prescott
Telephone: +49 30 68908366
Email: info@loepre.com

  1. GENERAL INFORMATION

We process personal data only where necessary to operate this website, communicate with interested parties and customers, provide our services, fulfil contractual and legal obligations, and protect our legitimate business and security interests. Personal data means any information relating to an identified or identifiable natural person.

  1. LEGAL BASES

Depending on the purpose, processing is based on consent under Article 6(1)(a) GDPR, steps prior to entering into or performance of a contract under Article 6(1)(b), compliance with a legal obligation under Article 6(1)(c), or legitimate interests under Article 6(1)(f). Where consent is used, it can be withdrawn at any time for future processing.

  1. WEBSITE HOSTING AND ACCESS DATA

This website is hosted using Squarespace. When the website is accessed, technical information required to deliver, operate and secure it may be processed. This can include the IP address, browser and device information, operating system, requested page, date and time, referring page, and technical or security logs.

Processing is based on our legitimate interests in providing a stable, functional and secure website and, where applicable, on contractual or legal obligations. Squarespace and other technical service providers act under applicable contractual and data-protection safeguards.

  1. CONTACT, EMAIL AND TELEPHONE ENQUIRIES

When you contact Loepre, we process the information you provide to answer your enquiry, take steps before entering into a contract, perform a contract where applicable, and administer secure communications and services. The legal basis is Article 6(1)(b) GDPR and, where relevant, Article 6(1)(f).

Please do not send passwords, private keys, complete forensic images or unnecessary sensitive personal data by ordinary email.

  1. CUSTOMER AND CONTRACT DATA

We process customer, supplier and contract data where required to prepare, conclude and perform agreements, provide professional services, manage billing and records, comply with legal obligations, and establish, exercise or defend legal claims. Data is disclosed only where necessary for these purposes or where required by law.

  1. COOKIES AND SIMILAR TECHNOLOGIES

Technologies that are strictly necessary may be used to provide, secure and remember essential website functions. Optional analytics, marketing or embedded third-party technologies are activated only where the required consent has been obtained. Consent may be withdrawn through the website’s cookie settings.

  1. GOOGLE ANALYTICS

Where you have consented, this website uses Google Analytics with measurement ID G-PMBEKQ6E3P to evaluate website use. Information about page views, device and browser characteristics, approximate location data and technical usage events may be processed. The legal basis is Article 6(1)(a) GDPR. Analytics must not be activated until the relevant consent has been obtained. You may withdraw your consent at any time through the website’s cookie settings with effect for the future.

  1. SERVICE PROVIDERS AND RECIPIENTS

Hosting, communications, analytics, security, IT and professional service providers may receive personal data only where necessary to perform their services and subject to applicable contractual and legal safeguards. Any additional video, mapping, newsletter, scheduling or social-media service will be identified and configured in accordance with applicable data-protection requirements before it is enabled.

  1. INTERNATIONAL DATA TRANSFERS

Where a service provider processes personal data outside the European Economic Area, we use an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, together with any supplementary safeguards required for the relevant transfer.

  1. RETENTION

Personal data is retained only for as long as necessary for the relevant purpose and any applicable legal, contractual, security or record-keeping requirement. Retention periods depend on the type of enquiry, contractual relationship and data involved. Data is deleted or anonymised when the purpose and applicable retention obligations no longer apply.

  1. YOUR GDPR RIGHTS

Subject to the legal requirements, you have the right to:

• request access to your personal data under Article 15 GDPR;
• request rectification under Article 16 GDPR;
• request erasure under Article 17 GDPR;
• request restriction of processing under Article 18 GDPR;
• receive data portability under Article 20 GDPR;
• object to processing based on legitimate interests under Article 21 GDPR;
• withdraw consent at any time for future processing under Article 7(3) GDPR; and
• lodge a complaint with a competent data-protection supervisory authority under Article 77 GDPR.

If you object to direct marketing, the relevant personal data will no longer be processed for that purpose.

  1. SECURITY

Loepre applies organisational and technical measures appropriate to the risk, including access controls and encrypted transmission where supported. No internet transmission or storage system can be guaranteed to be completely secure.

  1. AUTOMATED DECISION-MAKING

We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significantly affects website visitors, unless this is separately disclosed and a lawful basis exists.

  1. UPDATES

This privacy notice may be updated when website functions, service providers, legal requirements or processing activities change.

Last updated: 1 September 2026.