Privacy policy of this website

As of October 2026 · applies to lazylist.de. The privacy policy of the apps is available here (German). This is a courtesy translation: the German version is legally binding.

1. Controller

Paul Schauenburg, Römerstr. 132, 69126 Heidelberg, Germany
Email: info@lazylist.de

2. Hosting and server log files

This website is delivered through Google Firebase Hosting. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). A data processing agreement exists with the provider.

When you open a page, your browser transmits technically necessary data to the server: IP address, date and time of the request, the requested page or file, the amount of data transferred, the response status and information about the browser and operating system. This data is processed to deliver the website and to ensure its security and stability. I do not evaluate it, combine it with other data or use it for profiling.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable operation of the website).

Third countries: Delivery takes place through a worldwide network of servers. Your IP address may therefore also be processed on servers outside the EU, in particular in the USA. Google is certified under the EU-US Data Privacy Framework; in addition, the standard contractual clauses of the European Commission apply under Google’s data processing terms.

Retention: Log data is stored only as long as necessary for operation and security.

The contact form (section 4) is processed through Google Cloud Functions in the Belgium region (europe-west1, EU), likewise by Google Ireland Limited. Technically necessary log data (for example IP address, time, status code) also arises there.

3. No cookies, no local storage

This website sets no cookies and stores no data in your browser (no local storage, no tracking pixels, no fingerprinting). No analytics or advertising services and no reach measurement services are used. Access to information in your end device within the meaning of § 25 TDDDG does not take place, so consent is not required.

The demonstrations on the home page (for example the check mode you can try out) run exclusively in your browser; inputs are neither stored nor transmitted.

4. Contact form

What is processed: If you use the form, I process the details you enter: name, email address, message and topic and, voluntarily, your organisation. In addition, the time of the request and the fact of your consent are recorded (in the email to me).

Purpose: Solely to answer your request and, if applicable, to prepare a conversation or quote. There is no advertising, no newsletter and no disclosure for other purposes.

Legal basis: Your consent, which you give by ticking the box in the form (Art. 6 (1) (a) GDPR) and, where it concerns initiating a cooperation, Art. 6 (1) (b) GDPR. You can withdraw your consent at any time with effect for the future, for example by email to info@lazylist.de. The lawfulness of processing carried out until then remains unaffected.

How it works: The details are transmitted encrypted (HTTPS) to a function (Google Cloud Functions, EU region). It checks them and forwards them as an email to my mailbox at IONOS (section 5). No database and no file is created; the function does not store your details. To protect against abuse (spam) there is a field invisible to humans and a timing check; your IP address is held only briefly in memory as a random hash value to limit too many requests in a short time. No third-party CAPTCHA services are used.

Retention: Your message is deleted as soon as the request has been dealt with and no statutory retention obligations (for example for business letters) apply. If a request has no follow-up contact, I delete it after six months at the latest.

Required details: The fields marked with * are required, otherwise I cannot reply to you. Everything else is voluntary. Please do not enter patient data or confidential information.

5. Contact by email

If you write to me by email, I process your email address, the content of your message and the time in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR where it concerns initiating a cooperation, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Your message is deleted as soon as the request has been dealt with and no statutory retention obligations apply.

The email mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (data processing agreement). Please note that emails are not always fully encrypted in transit; therefore do not send confidential data and never patient data.

6. External links

This website does not automatically embed third-party content. References to other sites, where present, only take effect when clicked; from then on the privacy policy of the respective operator applies.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21), as well as the right to withdraw consent given at any time (Art. 7 (3)). Please contact the controller named above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

8. Data security

This website is transmitted encrypted (HTTPS/TLS). In addition, security headers of the server prevent, among other things, embedding in other sites and loading of external content. The contact form checks all inputs on the server and accepts only requests from this website.

9. Changes

This policy will be adapted if the website or the legal situation changes. The version published here at the time applies.