Privacy notice

Last updated: 29 September 2026.

1. Controller

Marco Houillot · Lean Studio
Seeweg Süd 52 · 86911 Dießen am Ammersee · Germany
Phone: +49 170 506 07 10
Email: marco@lean-studio.de

2. Hosting and access data

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, hosts this website under the Webhosting Plus plan. Your IP address is processed to deliver content. Access data include requested files, time, browser, operating system, device type and, where available, the referring page.

Processing supports delivery, security and abuse prevention under Article 6(1)(f) GDPR; the legitimate interest is secure operation. IONOS states an eight-week retention period for hosting visitor data and no transfers to third countries. Details: IONOS hosting privacy information.

3. Technical visitor statistics at IONOS

IONOS describes WebAnalytics as enabled by default. It supports statistics and technical improvements. According to IONOS, IP addresses are anonymised immediately after transmission, and WebAnalytics uses no cookies. This website's code includes no additional analytics pixel. Server-side analysis involves requested pages, access times and browser or device details. Where personal data are processed, Article 6(1)(f) GDPR applies; the legitimate interest is appropriate technical optimisation. Further information: IONOS WebAnalytics.

4. Email and phone

You can contact Marco Houillot by email or phone. Email links open your email application, where you initiate sending yourself. Your details are used to respond to your enquiry. This website does not provide an online contact form.

Where you request steps prior to entering into a contract or the performance of a contract on your own behalf, Article 6(1)(b) GDPR is the legal basis. For other enquiries and communication with a company’s employees, processing is based on Article 6(1)(f) GDPR; the legitimate interest is the appropriate handling of business communication.

Recipients may include the email and IT service providers used. Enquiries are deleted when they are no longer needed for their purpose. Where documents are subject to statutory retention requirements, they are retained under Article 6(1)(c) GDPR for the applicable period. Any retention necessary to establish, exercise or defend legal claims is limited separately.

Contacting us is voluntary. If information needed to respond to your enquiry is not provided, it may not be possible to answer it. Please do not send particularly sensitive information by email without being asked to do so.

Email uses Microsoft 365 Business Standard with Exchange Online (Plan 1). Microsoft's European provider includes Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Dublin D18 P521, Ireland. Processing covers messages, attachments and necessary connection and operational data.

Microsoft and its subprocessors support operation and maintenance. Processing outside the European Economic Area, including the USA, is possible. Microsoft describes safeguards including EU Standard Contractual Clauses and the EU-US Data Privacy Framework. See the Microsoft Data Protection Addendum (DPA) and Microsoft 365 privacy information.

5. Fonts, cookies and external content

Archivo and IBM Plex Sans are hosted locally on the web server. No font provider is contacted. The website code sets no cookies, uses neither local storage nor session storage, and embeds no additional analytics, advertising or tracking services. IONOS server-side processing is described in sections 2 and 3. The selected colour scheme is passed solely through the page address.

Videos, maps and social media content are not embedded from external services. External sources are ordinary links. When you visit another website, its privacy information applies.

6. Your rights

Where the legal conditions are met, you may request access, rectification, erasure, restriction of processing and data portability under Articles 15–18 and 20 GDPR. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal.

7. Right to object

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Processing will then stop unless there are overriding compelling legitimate grounds or grounds relating to legal claims. You may object to direct marketing at any time without giving a reason. To do so, please use the contact details above.

8. Complaints and automated decisions

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. For private-sector organisations in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA) is one relevant authority.

The reviewed website code does not make automated decisions with legal or similarly significant effects and does not carry out profiling.