Privacy Policy

‍

1. Controller

The controller responsible for data processing on this website is:

LCX NEXUS GmbH
‍Grimmastr. 6
88250 Weingarten
Germany

Represented by the managing directors Oliver Fendler and Thomas Zysk
Phone: +49 (0)6196 9530-226
Email: info@lcxnexus.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2. General information

We take the protection of your personal data seriously. Personal data is any information that can be used to identify you personally.

This policy explains which data we process when you visit this website, for what purpose, on what legal basis and for how long. It also explains your rights and how to exercise them.

Please note that data transmission over the internet can have security gaps. Complete protection of data against access by third parties is not possible.

3. Hosting and content delivery

Webflow‍

This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow").

When you access this website, Webflow processes the technically necessary connection data on our behalf, in particular your IP address. Delivery takes place via a global content delivery network; access from the United States cannot be technically excluded.

Webflow is certified under the EU-U.S. Data Privacy Framework. The European Commission has determined that certified companies provide an adequate level of data protection. Standard contractual clauses apply in addition.

The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in the secure, fast and reliable provision of our website.

We have concluded a data processing agreement with Webflow pursuant to Art. 28 GDPR.

Webflow privacy policy: https://webflow.com/legal/privacy

Additional content delivery services

To deliver fonts, scripts, images and video we embed content via content delivery networks. Your IP address is transmitted to the respective provider, as delivery to your browser would otherwise not be possible. These are:

• Amazon Web Services (amazonaws.com, cloudfront.net), Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
• jsDelivr (cdn.jsdelivr.net), operated by Prospect One, Królewska 65A, 30-081 Kraków, Poland
• unpkg (unpkg.com), operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA
• esm.sh (esm.sh)

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in the technically correct and performant presentation of our website. Where consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

4. Server log files

When you access this website, our hosting provider automatically collects and stores information in server log files that your browser transmits:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing device
• time of the server request
• IP address

This data is not merged with other data sources.

Collection is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website, for which the collection of server log files is strictly necessary.

5. Cookies and consent management

This website uses cookies and comparable technologies. Some are strictly necessary to operate the site (Section 25(2)(2) TDDDG). All technologies beyond that are used exclusively with your express consent, Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

When you first access the website, we ask for your consent via a notice. The default setting is rejection; nothing is loaded before you have actively agreed. You can allow individual categories separately:

Necessary: Core functionality of the website and storage of your cookie decision. Cannot be disabled.
Statistics: Aggregated analysis of website usage to improve our offering.
Marketing: Measurement of advertising campaigns and delivery of relevant content on other platforms.

We store your decision locally in your browser (localStorage, key lcx.cookieConsent.v1). You can change or withdraw it at any time via the "Cookie Settings" link in the footer. On withdrawal we delete the cookies set by the affected services. The lawfulness of processing carried out before withdrawal remains unaffected.

Google Analytics 4 Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of your use of the website. IP anonymisation is enabled. Transfer to the United States cannot be excluded; Google LLC is certified under the EU-U.S. Data Privacy Framework. We use Google Consent Mode v2 with the default setting "denied". Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG. A data processing agreement is in place with Google.

Microsoft Clarity Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records usage behaviour in aggregated form, including mouse movement and scrolling. Input into form fields is masked. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

LinkedIn Insight Tag Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The Insight Tag enables campaign measurement and audience building. Legal basis: Art. 6(1)(a) GDPR, Section 25(1) TDDDG.

6. Contact form

If you send us an enquiry via the contact form, we process the data you provide (name, email address, phone number, subject and message) in order to handle your enquiry and for any follow-up questions.

Transmission and storage of form data takes place via our hosting provider Webflow (see section 3), which acts as a processor for us in this respect.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual measures. In all other cases we base processing on our legitimate interest in responding to enquiries, Art. 6(1)(f) GDPR.

The data remains with us until you request deletion, withdraw your consent or the purpose ceases to apply. Statutory retention periods, in particular under commercial and tax law, remain unaffected.

Job applications

If you apply to us by email, we process the data you submit (contact details, CV, references and other application documents) exclusively for the purpose of conducting the application procedure.

The legal basis is Section 26(1) sentence 1 BDSG in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR, in each case for the purpose of deciding on the establishment of an employment relationship.

If no employment relationship comes about, we delete your documents at the latest six months after the procedure has been concluded. This period serves to defend against potential claims under the German General Equal Treatment Act, Art. 6(1)(f) GDPR. If you would like us to retain your documents beyond that period for future positions, we require your separate consent, which you may withdraw at any time.

If an employment relationship comes about, the data is transferred to your personnel file.

7. Newsletter

If you wish to subscribe to our newsletter, we require your email address and your confirmation that you agree to receive it.

Registration uses the double opt-in procedure: after you sign up you receive an email containing a confirmation link. Registration is only complete once you click that link. This serves as evidence of your consent and protects against sign-ups by third parties.

Mailchimp

We use Mailchimp for distribution, a service of The Rocket Science Group LLC d/b/a Mailchimp, 405 North Angier Ave. NE, Atlanta, GA 30308, USA, an Intuit company.

The data you enter into the sign-up form is transmitted directly to Mailchimp servers in the United States and stored there. Mailchimp also evaluates technical delivery data, such as whether an email was delivered and opened and whether links it contains were clicked. This evaluation serves to improve our newsletter.

Mailchimp is a covered entity under Intuit's Data Privacy Framework programme and is certified under the EU-U.S. Data Privacy Framework. In addition, the standard contractual clauses apply, which form part of the data processing agreement concluded with Mailchimp.

The legal basis for processing is your consent alone, Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of every newsletter email or by message to info@lcxnexus.com. The lawfulness of processing already carried out remains unaffected.

After you unsubscribe we remove your email address from the distribution list. Your email address may remain stored in a suppression list where this is necessary to prevent future mailings. Data from the suppression list is used exclusively for this purpose and is not merged with other data. The legal basis is our legitimate interest in complying with the statutory requirements for sending newsletters, Art. 6(1)(f) GDPR.

Mailchimp privacy information: https://www.intuit.com/privacy/statement/

8. Retention period

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing ceases to apply. If you assert a justified request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it. In the latter case, deletion takes place once those grounds no longer apply.

9. Your rights

You have the right at any time:

• to request information about the personal data we process (Art. 15 GDPR)
• to request rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• to request erasure of your data (Art. 17 GDPR)
• to request restriction of processing (Art. 18 GDPR)
• to receive your data in a structured, commonly used and machine-readable format or to have it transmitted to another controller (data portability, Art. 20 GDPR)
• to withdraw consent at any time (Art. 7(3) GDPR). The lawfulness of processing carried out before withdrawal remains unaffected.

An informal message to info@lcxnexus.com is sufficient to exercise these rights.

Right to object under Art. 21 GDPR

Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions.

We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is related to such direct marketing. Following your objection, your data will no longer be used for direct marketing purposes.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

The authority responsible for us is:
‍Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
‍Lautenschlagerstraße 20, 70173 Stuttgart, Germany
‍https://www.baden-wuerttemberg.datenschutz.de

10. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://". When encryption is active, the data you transmit to us cannot be read by third parties.

11. Changes to this privacy policy

We adapt this privacy policy whenever the legal situation, our services or our data processing change. The version published on this page applies.

Last updated: September 13th 2026