Privacy Policy

Last updated: 5 November 2026

1. Data Controller

The controller responsible for processing personal data on this website is:

Lizard Innovation GmbH
Karlsplatz 2
78166 Donaueschingen
Germany

Managing Director: Christophe Geisert

E-Mail: info@lizard-innovation.com
Website: https://lizard-innovation.com

2. General Information on Data Protection

Protecting your personal data is important to us. We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is information that can be used to identify a natural person directly or indirectly.

This Privacy Policy explains what data is processed when you visit our website, for what purposes it is processed, and what rights you have.

3. Hosting and Server Log Files

Our website is technically maintained and hosted by the following service provider:

Virtual Gaps
Website: https://virtualgaps.de

Virtual Gaps uses services provided by OVH for its technical infrastructure.

According to our hosting provider, the server hosting our website is located in France and therefore within the European Union.

When you visit our website, technically necessary information may be processed in server log files. This may include, in particular:

  • IP address of the device accessing the website
  • Date and time of access
  • Pages and files accessed
  • Browser type and version
  • Operating system
  • Referrer URL, if transmitted
  • HTTP status code

This data is processed to provide the website technically, ensure system security, and detect and resolve technical problems.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

According to our hosting provider, server log files are retained for 7 days and then deleted, unless longer retention is necessary to investigate specific security incidents.

[PLEASE VERIFY: Whether a data processing agreement pursuant to Article 28 GDPR has been concluded with Virtual Gaps.]

4. Contacting Us via the Contact Form

Our website provides a contact form implemented using the WordPress plugin SureForms.

If you contact us using this form, we process the information you provide, in particular:

  • Name
  • Email address
  • Content of your message
  • Any additional information you voluntarily provide

We use this information solely to process your enquiry and communicate with you in connection with it.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to pre-contractual measures or the performance of a contract. For other enquiries, processing is based on our legitimate interest in responding to incoming messages under Article 6(1)(f) GDPR.

Contact form entries stored in WordPress are, according to our configuration, automatically deleted after 180 days.

Longer retention may be necessary where statutory retention obligations apply or continued handling of a matter justifies it.

Data is transmitted over an encrypted HTTPS connection.

[PLEASE VERIFY: Email delivery via Microsoft 365 or the email delivery service to be configured. Retention of emails in the mailbox is separate from the automatic deletion of contact form entries.]

5. Cookies and Consent Management

Our website may use cookies and similar technologies.

Strictly necessary cookies support the basic functionality, security, and delivery of the website.

Where strictly necessary technologies process personal data, the legal basis is Article 6(1)(f) GDPR. The requirements of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) additionally apply to storing information on, or accessing information from, your device.

For non-essential cookies and similar technologies, we obtain your consent before using them where required by law.

For this purpose, we use the WordPress plugin SureCookie.

You can give or refuse consent through the cookie banner. You can withdraw consent at any time with effect for the future.

The legal bases for processing requiring consent are Article 6(1)(a) GDPR and Section 25(1) TDDDG.

[PLEASE VERIFY: Which specific cookies, services, and retention periods are covered by the SureCookie banner, and how users can reopen cookie settings later.]

6. Google Maps

Our website may include maps provided by Google Maps.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a Google Maps map is loaded, personal data, particularly your IP address and technical information about your device and browser, may be transmitted to Google. This may also involve transfers to third countries, particularly the United States.

The map is loaded only after you have given prior consent, provided it is appropriately blocked by our consent management system.

The legal basis is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Further information is available at:

https://policies.google.com/privacy

[PLEASE VERIFY: Whether Google Maps is actually embedded on the published website and fully blocked before consent is given.]

7. External Links and Social Networks

Our website may contain links to external websites and social networks, particularly LinkedIn.

Simply visiting our website does not automatically transmit personal data to the providers of ordinary external links.

When you click an external link, you leave our website. The respective provider is responsible for any subsequent processing of your data.

Information about LinkedIn’s processing of personal data is available at:

https://www.linkedin.com/legal/privacy-policy

[PLEASE VERIFY: Whether only ordinary external links are used or whether embedded social media content is also present.]

8. Fonts and External Resources

Our website uses fonts to display content consistently.

Where fonts are hosted locally on our web server, loading these fonts does not establish a connection to external font providers.

[PLEASE VERIFY: Requests to Google Fonts were still detected during technical testing. Before publishing this policy, determine whether fonts are still being loaded from Google servers. If so, this section must be amended accordingly and compliance with data protection law must be assessed.]

9. Data Security

We implement technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or unlawful disclosure.

Our website uses SSL/TLS encryption. You can recognise an encrypted connection by the HTTPS protocol in your browser’s address bar.

10. Recipients of Personal Data

Personal data is disclosed to external service providers only where necessary to operate our website, respond to your enquiry, or comply with legal obligations.

These may include hosting providers, technical service providers, and email service providers.

Where service providers process personal data on our behalf, the necessary contractual and data protection arrangements are made in accordance with Article 28 GDPR.

Personal data is not disclosed for advertising purposes without an appropriate legal basis.

11. Your Rights

Subject to the applicable legal requirements, you have the following rights:

  • Access to your personal data under Article 15 GDPR
  • Rectification of inaccurate data under Article 16 GDPR
  • Erasure of your data under Article 17 GDPR
  • Restriction of processing under Article 18 GDPR
  • Data portability under Article 20 GDPR
  • Objection to certain processing activities under Article 21 GDPR
  • Withdrawal of consent under Article 7(3) GDPR

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, please contact us at:

info@lizard-innovation.com

12. Right to Lodge a Complaint with a Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The supervisory authority responsible for the location of our registered office is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW)

Website: https://www.baden-wuerttemberg.datenschutz.de

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, technical features, or the processing of personal data on our website change.

The version published on this website at any given time applies.