Last updated: 25 October 2026
1. Controller and contact
The controller responsible for processing personal data in connection with this website is:
Lupus & Company GmbH
Wieslocher Str. 18
69231 Rauenberg, Germany
Telephone: +49 6222 9359575
Email: info@lupusandcompany.com
You can also use these contact details for data protection enquiries and to exercise your rights.
Our data protection officer is:
Rolf Leder
QualitiKs GmbH
Kirchensteig 3a
25899 Niebüll, Germany
Email: leder@qualitiks.de
You may also contact our data protection officer directly and confidentially with data protection questions.
2. Website delivery and hosting
We provide this website through Microsoft’s Azure Static Web Apps. Visiting the website involves processing the connection and request data needed to deliver it. This includes your IP address, the page or file requested, and technical information supplied by your browser, such as browser type and operating system. Depending on your browser settings, the previously visited page may also be transmitted as a referrer.
This processing serves to deliver the website and operate it securely and reliably. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are making information about our company and services available online and protecting the website against disruption and misuse. The website cannot be delivered without the data necessary to establish the connection.
Microsoft receives the data needed for hosting. Azure Static Web Apps uses globally distributed infrastructure; a resource region in Europe therefore does not mean that all processing takes place exclusively within the EU or European Economic Area. Information about Microsoft’s contractual data protection terms and the transfer safeguards provided for in those terms is available in the Microsoft Data Protection Addendum (DPA).
3. Cookies, audience measurement and embedded content
The current website uses no analytics or marketing cookies, Google Analytics or tag manager. It does not create visitor profiles or store visitor identifiers in your browser’s local or session storage.
Fonts and images are delivered through our own website. External maps, videos and social media widgets are not embedded when a page loads. The current functionality therefore does not require consent to analytics or marketing services. This is separate from the necessary transmission of connection data for hosting.
4. Contact by email or telephone
When you contact us, we process the information you provide, such as your name, email address or telephone number, your company where applicable, and the content of your enquiry. The purpose is to deal with your enquiry and communicate with you. The website itself has no contact form; an email link opens your email application.
We use Microsoft 365 for our email communications. Microsoft processes the data needed to transmit and store messages, including address information, message content and attachments. Information about the contractual data protection terms is provided in the Microsoft Data Protection Addendum linked above. Within our company, information needed for your enquiry is received by the people dealing with it.
Where processing is necessary for a contract with you or for steps taken at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, particularly communication with a company’s contact persons, the basis is Article 6(1)(f) GDPR. Our legitimate interests are responding to business enquiries and maintaining the communication needed for that purpose. Statutory retention obligations are based on Article 6(1)(c) GDPR together with the applicable commercial or tax legislation.
You are not generally obliged to send us an enquiry. However, without the contact details and information necessary to respond, we may be unable to deal with it. Please only provide data needed for your enquiry. Contacting us does not constitute consent to advertising.
5. External links
This website contains links to other providers’ websites. When you follow such a link, you leave our website. The respective provider is responsible for processing personal data on the linked website. Please refer to that provider’s privacy information for details.
6. Recipients and retention
The hosting provider processes the data needed to operate this website. For enquiries, recipients may include those involved in handling the enquiry and the communications service providers used. Consent is not the only possible legal basis for disclosure; the particular purpose and statutory requirements determine what is permitted.
Retention depends on the purpose of processing. For enquiries, relevant criteria include completion of the enquiry, any subsequent performance of a contract, and statutory retention obligations. Where data is needed to establish, exercise or defend legal claims, the applicable limitation period or duration of ongoing proceedings must also be considered. Once the purpose ceases and no other legal basis permits further retention, the data must be erased.
7. Your rights
Subject to the applicable statutory conditions, you have in particular the following rights:
- access to information about the processing of your personal data and a copy of that data (Article 15 GDPR);
- rectification of inaccurate data and completion of incomplete data (Article 16 GDPR);
- erasure of your data (Article 17 GDPR);
- restriction of processing (Article 18 GDPR);
- data portability where processing is based on consent or a contract and carried out by automated means (Article 20 GDPR).
You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal (Article 7(3) GDPR). To exercise your rights, please use the contact details above.
8. Right to object
Where we process your data on the basis of Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Article 21(1) GDPR). We will then stop processing the affected data unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
You may object to processing for direct marketing at any time without giving reasons (Article 21(2) and (3) GDPR). The affected data must then no longer be processed for those purposes. This also applies to profiling related to such direct marketing.
9. Right to lodge a complaint
If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority (Article 77 GDPR). In particular, you may contact an authority in the place of your habitual residence, place of work or place of the alleged infringement.
For companies based in Baden-Württemberg, the competent authority is generally the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. Current contact details and information about complaints are available on the authority’s website. You do not have to contact us before lodging a complaint.
10. Transmission security
The website uses HTTPS encryption. Protection of an email sent outside the website also depends on the email services used; this website’s HTTPS connection does not by itself protect your email.