Convenience translation. The German version is legally binding. Status: 21 August 2026.
These notes explain what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Who is responsible? Data processing on this website is carried out by the website operator, see “Responsible party” below.
How do we collect your data? Partly because you provide it to us (e.g. by e-mail or via the self-check). Other data is collected automatically by our IT systems when you visit the website (technical data such as browser, operating system, time of the page request).
This website is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, Strato records log files including your IP address. Legal basis: Art. 6 (1) (f) GDPR. A data processing agreement is in place. The “Satoshi” font is served from our own hosting; no connection to third-party font servers takes place.
Server log files. When you visit this website, your browser automatically transmits information that our host stores in what are known as server log files: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. We do not merge this data with other sources and do not evaluate it on a personal basis. Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest lies in technically sound operation and in defending against attacks. Our host Strato stores visitors’ IP addresses solely to detect and defend against attacks and deletes them after seven days at the latest. We do not evaluate the log files on a personal basis ourselves; the hosting account only gives us aggregated access statistics without personal reference.
No transfer to third countries. Both of our processors are based in the European Union and process the data there: Strato AG in Germany for hosting, domain and e-mail dispatch, and Sendinblue GmbH with its parent company Brevo SAS in Germany and France for managing our marketing contacts, only where consent has been given. No personal data is transferred to a third country outside the EU or EEA.
Jonas Bettenbühl, Weyertal 109, 50931 Cologne, Germany.
Phone: +49 221 4701126, e-mail: jonas.bettenbuehl@levve.eu.
Levve has not yet been incorporated; the person named above is currently the responsible party. Processing takes place exclusively in the EU.
You have the right to information, rectification, erasure, restriction of processing, data portability, objection (Art. 21 GDPR) and to withdraw any consent with effect for the future. You may lodge a complaint with a supervisory authority; competent for us is the Data Protection Commissioner of North Rhine-Westphalia (LDI NRW). This site uses SSL/TLS encryption.
No automated decision-making. No automated decision within the meaning of Art. 22 GDPR that produces legal effects concerning you or similarly significantly affects you takes place. The self-check does evaluate your answers automatically into a score and a classification, but that is a non-binding initial assessment without legal consequence; every further step is your decision. No profiling for advertising purposes takes place.
This website sets no cookies. No analytics, marketing or third-party cookies are used, no tracking takes place, and no content is loaded from third-party servers.
The self-check (in German) runs entirely in your browser while you answer. Data is only transmitted when you actively request your results: your answers and the contact details you enter (name, company, e-mail, optional phone number), plus your IP address for rate limiting. The IP address is never stored in clear text, only as a non-reversible checksum used solely for counting. Legal bases: Art. 6 (1) (b) GDPR for producing and sending the report you requested, Art. 6 (1) (f) GDPR for rate limiting, our legitimate interest being protection against abuse and server overload.
Providing your data is voluntary. Providing this data is required neither by statute nor by contract. The form asks for name, company and e-mail address as mandatory fields; the telephone number is expressly optional. Without a confirmed e-mail address we cannot send you the report. No other disadvantage arises for you, and you can run through the self-check itself without providing anything.
Storage. Records awaiting confirmation are stored on our web server until you confirm your request, for seven days at the latest, and are deleted automatically thereafter; once you confirm, they are deleted immediately after the report has been sent. Your results and details are additionally sent to us by e-mail and kept in our mailbox for the duration of the business enquiry, for 24 months at the latest. The rate-limiting counters contain no names and are deleted after two hours (IP) and 26 hours (e-mail address) at the latest.
We only send the full report to a confirmed address. After your request you receive an e-mail containing a single-use link. Opening that link shows a page with a button; the report is only produced and sent once you press it. The link alone triggers nothing. This second step is necessary because many corporate e-mail systems open the links in incoming messages automatically in order to scan them. The procedure makes sure the confirmation genuinely comes from you and prevents anyone from entering someone else’s address.
This confirmation is independent of any consent to marketing. You receive the report even if you did not tick the optional consent box.
Purpose and legal basis. Sending the report you requested and verifying that the address belongs to you. Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR; our legitimate interest lies in preventing delivery to third-party addresses.
In the self-check form you may voluntarily consent to us contacting you by e-mail and telephone about your results and our services. This consent is not required in order to receive your results.
Confirmation procedure. Consent only becomes effective once you open the link in our confirmation e-mail and press the confirmation button on the page that then appears (double opt-in). Without that step you receive no marketing from us.
Record of consent. To evidence your consent we store the time of your entry in the form, the time of your confirmation, the exact wording and version of the consent text you agreed to, and the browser identification (user agent) used for the confirmation. If you did not consent, that is recorded as well. We are required to keep this record under Art. 7 (1) GDPR.
Transfer to Brevo. If you have consented, we transfer your data after your confirmation to our contact management and e-mail marketing provider: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, for its parent company Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France (“Brevo”). Transferred are: your e-mail address, name, company, telephone number (if provided), your self-check result as score and reporting-duty classification, the dates of your self-check and confirmation, and the wording, version and origin of your consent.
Purpose. We use Brevo to manage these contacts, to evidence your consent and to send you the information you asked for. If you did not consent, your data is not transferred to Brevo.
Legal basis. Art. 6 (1) (a) GDPR (your consent), for e-mail marketing in conjunction with Sec. 7 (2) UWG (German Act Against Unfair Competition). For retaining the record of consent, Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) and Art. 5 (2) GDPR.
Data processing agreement. We have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR. Brevo processes the data solely on our instructions and within the European Union.
Retention. Your data remains stored at Brevo until you withdraw your consent, and for 24 months without contact with us at the latest. We then delete the contact. The record of your consent and of any withdrawal is kept separately for three years so that we can demonstrate the lawfulness of the processing; it is not used for any other purpose.
Withdrawal. You may withdraw your consent at any time with effect for the future, via the unsubscribe link at the end of each of our e-mails or informally to contact@levve.eu. After withdrawal we remove you from all distribution lists and block your address at Brevo against further dispatch. The lawfulness of processing carried out before the withdrawal remains unaffected.
How we send our e-mails. The confirmation e-mail and your report are sent via the mail server of our host Strato, not via Brevo. No analysis of opens or clicks takes place.
If you provided a telephone number and consented to being contacted, we may also call you about your results. Legal basis: Art. 6 (1) (a) GDPR. You may withdraw this consent informally at any time.
If you contact us by e-mail or telephone, we process the details you provide — name, e-mail address or telephone number and the content of your enquiry — solely in order to handle your request and for any follow-up questions. We do not pass this data on without your consent.
Legal basis. Art. 6 (1) (b) GDPR where your enquiry relates to a contract or is necessary for pre-contractual measures. In all other cases Art. 6 (1) (f) GDPR; our legitimate interest lies in answering enquiries addressed to us. Where you have given separate consent, the legal basis is Art. 6 (1) (a) GDPR.
Retention. We keep your enquiry for the duration of the business enquiry, for 24 months at the latest, unless statutory retention periods apply. You may request deletion at any time.
Status: 21 August 2026.