Privacy notice

This notice explains how Lopez IT Welt GmbH processes personal data when you visit this website or contact us. The website provides company and service information and a way to make enquiries. Customer accounts, online orders and payments are not offered through this website.

1. Controller and contact details

The controller is Lopez IT Welt GmbH, Alte Bahnhofstraße 13, 31515 Wunstorf, Germany, represented by managing director Ramiro Lopez Rodriguez. For privacy enquiries, contact info@lopez-it-welt.de or call +49 5031 7005576.

2. Website and hosting

We operate this website and its Odoo CRM ourselves on server infrastructure provided by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup provides the contracted server, storage and email infrastructure and processes the associated data under a data processing agreement. Fonts and design files are served by our own website.

3. Technical data and security

When you access the website, we process the connection and request data transmitted for its operation and for delivering the response. The resulting operational and error logs serve to deliver content, diagnose errors and protect against misuse. The contact form also uses technical verification information to prevent misuse and duplicate submissions. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are an available, functioning and secure website and reliable handling of incoming enquiries. The connection to the website is encrypted using HTTPS.

4. Contact form, email and CRM

When you contact us through the form or by email, we process the contact details and enquiry content you provide. The form requires your name, email address, subject and message; a telephone number is optional. The enquiry is recorded in the self-hosted Odoo CRM of Lopez IT Welt GmbH and assigned for handling. We use our existing company mailboxes for further communication. Please do not send passwords or information that is unnecessary for your enquiry.

Where your enquiry concerns steps taken at your request before entering into a contract, or a contract with you, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries and communication with business contacts under Article 6(1)(f) GDPR; our legitimate interests are providing appropriate answers and organising business communication. Contacting us does not subscribe you to advertising or a newsletter.

5. Information you provide

Contacting us is voluntary. There is no general statutory obligation to provide data through this form. The fields marked as required are needed to identify and answer your enquiry. The form cannot be submitted without them. A telephone number is not required. You can alternatively use the contact details above.

6. Who may receive data

Within Lopez IT Welt GmbH, access is limited to authorised people responsible for handling the enquiry or operating the systems. netcup is involved as a technical service provider to the extent described above. Membership of the Lopez group does not automatically result in your enquiry being shared with other companies. Any further disclosure takes place only where necessary for the particular matter and legally permitted, for example to fulfil a specific legal obligation.

7. Retention and deletion

We retain personal data for as long as it is needed for its particular purpose. For ongoing enquiries and contracts, this depends on their handling and performance. After an enquiry closes without an order, the criterion is whether a specific, substantiated handling purpose remains. Data no longer needed for that purpose is deleted unless a statutory retention duty or a specifically justified need to establish, exercise or defend legal claims requires otherwise. In those cases, further retention depends on the document category, the relevant duty or legal matter, and its conclusion. Retention required by law is based on Article 6(1)(c) GDPR; defending legal claims is based on Article 6(1)(f) GDPR. An enquiry is not automatically treated as an accounting record subject to statutory retention.

Technical logs and verification information are retained for a limited period according to their operational and security purposes. Backups serve recovery and have separate rotation cycles; deletion from the live system does not immediately remove every older backup. Backups are not used for new sales or advertising purposes.

The front-end web server’s access logs are rotated weekly, with four archived versions retained. Its error logs are rotated weekly with ten archived versions retained. The current log file is retained in addition to those archives. Empty files are not rotated. Actual retention therefore depends on the logging activity and rotation runs; the number of archived versions does not constitute a fixed maximum number of days.

8. Session functions and embedded content

The website may use cookies or similar technical information for strictly necessary session, security and language functions. These functions support operation of the website and submission of the contact form. This website does not use audience analytics, advertising pixels, campaign or UTM cookies, or other optional tracking services. No external font files are loaded. A link to another website is not in itself an embedded service; when you follow a link, the other provider’s notice applies.

Where personal data is processed for these necessary functions, the legal basis is Article 6(1)(f) GDPR for providing and protecting the functions. This notice does not provide blanket coverage for adding optional analytics or marketing services.

9. Your data protection rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on your consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of earlier processing. You can use the contact details above to exercise your rights.

You may also complain to a data protection supervisory authority, particularly where you normally live or work, or where the suspected infringement occurred. The supervisory authority for Lower Saxony is the Landesbeauftragte für den Datenschutz Niedersachsen.

10. Objection to processing based on legitimate interests

Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then stop the processing concerned unless compelling legitimate grounds override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. You may object to processing for direct marketing at any time.

11. Automated decisions

In the website and enquiry process described here, we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Technical assignment of an enquiry within the CRM is not such a decision.

Prepared using an activeMind privacy template and adapted for the website operation described here. activeMind privacy template