Privacy Policy

1. Controller

Klein & Laut Consulting UG (haftungsbeschränkt)
Represented by Managing Director Anna Schwengle
Köhlerstraße 9A, 12205 Berlin, Germany
Email: hello@kleinundlaut.com
Phone: +49 30 57791793

No data protection officer is legally required for Klein & Laut and none has been appointed.

2. Website hosting and delivery

This website is operated using Lovable infrastructure (Lovable Labs) and may use infrastructure and security services from subprocessors such as Cloudflare, Inc. When you visit the site, technically necessary connection and request data may be processed, including your IP address, date and time of the request, requested URL, referrer, browser and device information, operating system and technical request data.

We process this information to deliver the website securely and reliably, prevent misuse, troubleshoot errors and protect our systems. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and technically stable operation of this website.

Technical logs are kept only for as long as they are needed for secure operation, troubleshooting and abuse prevention, and for any applicable legal obligations. They may be retained longer where a specific security incident or legal claim requires this. Where providers process data outside the European Economic Area, transfers are protected by an applicable adequacy decision, the EU-U.S. Data Privacy Framework where available, and/or the European Commission's Standard Contractual Clauses.

3. Fonts

The fonts used on this website (Libre Franklin, Libre Baskerville and VT323) are hosted locally. Loading a page does not create a connection to Google Fonts or another external font provider.

4. Cookies and browser storage

We do not use advertising cookies or marketing pixels. We store your analytics choice in your browser's local storage so the consent notice does not have to appear on every visit. This storage is technically necessary to remember the privacy choice you requested and is used on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

Analytics is optional and is not loaded until you actively allow it. Details and the option to change your choice are available under Cookie details.

5. Google Analytics 4

If you consent, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure visits and understand how the website is used. Google Analytics is not loaded before consent.

Google Analytics may process information such as pages viewed, approximate location derived from technical connection data, device and browser information, referrer information, session and interaction data and identifiers stored in the _ga and _ga_<ID> cookies. According to Google, Google Analytics 4 does not log or store IP addresses.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw consent at any time via Cookie details. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Google Analytics data may be processed by Google LLC and other Google group companies in the United States. Google relies, where applicable, on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses for relevant transfers. User- and event-level retention follows the retention period configured in our Google Analytics property; Google currently provides configurable retention periods for standard GA4 properties. We review this setting and keep identifiable analytics data no longer than needed for website and traffic trend analysis.

6. Project enquiries and contact form

If you send a project enquiry through the website, we process the information you provide, such as your project or business opportunity, name, email address and any optional information about your company, timing, budget, links or project context. Your project summary, name and email address are required so we can respond; the remaining fields are optional.

We use this information to assess and respond to your enquiry, prepare for a conversation and, where relevant, prepare a proposal or take other steps before entering into a contract. The legal basis is Art. 6(1)(b) GDPR for pre-contractual steps requested by you. Where an enquiry is not directly aimed at a contract, Art. 6(1)(f) GDPR may also apply; our legitimate interest is responding to genuine business enquiries and managing business communications.

The form is submitted directly to our website server and forwarded to our Google Workspace mailbox through the Gmail API. We do not maintain a separate database of project-form submissions. The website infrastructure may process technical request data as described above. Please do not submit passwords, access credentials or other information that is not necessary for your enquiry.

7. Email and Google Workspace

Project enquiries and direct emails are received and processed in Google Workspace (Gmail). Google Ireland Limited and, where applicable, Google affiliates act as service providers for email and related business services. Google provides contractual data-processing terms for Google Workspace. Where personal data is transferred outside the EEA, Google uses applicable transfer mechanisms such as adequacy decisions, the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

We retain enquiries only for as long as needed to answer and handle them. If an enquiry leads to a client relationship or contract, relevant correspondence may be kept for the duration of that relationship and afterwards where required by statutory record-keeping duties or necessary to establish, exercise or defend legal claims. Enquiries that do not lead to further business are deleted when they are no longer needed, subject to those obligations.

8. External links

This website links to external services and websites, for example LinkedIn and websites of projects or clients. Data is transferred to the external provider only when you follow such a link. The provider's own privacy information then applies. We do not use embedded social-media plugins, maps or videos that load automatically on the pages covered by this notice.

9. Your rights

Subject to the legal requirements, you have the right to:

• access your personal data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability where the requirements of Art. 20 GDPR are met,
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR), and
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, email hello@kleinundlaut.com. You also have the right to lodge a complaint with a data protection supervisory authority. Our competent supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
Email: mailbox@datenschutz-berlin.de

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

11. Encryption

This website uses TLS encryption for data transmitted between your browser and the website. You can recognise an encrypted connection by the https:// address in your browser.

12. Changes to this Privacy Policy

We update this Privacy Policy when our website, services, providers or the legal framework change. The version published on this page is the current version.