Privacy Policy

Last updated: July 2026. We will revise this policy whenever the technology or the legal situation changes. This translation is provided for information; the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is LogiStuff GmbH, Michaelispassage 6, 20459 Hamburg, represented by its management (Louisa Chantal Vurmaz), email: info@logistuff.de.

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Data minimisation by design

This website is deliberately built to collect as little data as possible: it is fully static, sets no cookies, uses no analytics or tracking services and embeds no third-party services. Fonts and videos are served from our own server. We access your device only in the single case described below, which is exempt from consent under § 25(2)(2) TDDDG (the German act on data protection in digital services). That is why this website works without a cookie banner.

There is one exception, and it concerns the short opening animation on your first visit: so that it does not run again on every page change, your browser stores a single switch with the value "1" in session storage. This entry contains no personal data whatsoever, is never transmitted to us, and your browser deletes it as soon as you close the tab. It serves only the presentation you asked for and is therefore exempt from consent under § 25(2)(2) TDDDG.

3. Hosting

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (servers located in Germany/EU). IONOS processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The legal basis for hosting is Art. 6(1)(f) GDPR; our legitimate interest is the secure and efficient operation of this website. No data is transferred to third countries.

4. Server log files

When you visit the website, the hosting provider automatically collects the following data in server log files:

The purpose is to ensure operational security and stability, to analyse errors and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the technically sound and secure operation of the website. Our hosting provider anonymises your IP address as soon as it is collected; the log files are deleted after eight weeks. The data is not combined with other data or analysed for marketing purposes.

  • IP address (anonymised by the hosting provider as soon as it is collected)
  • Date and time of access
  • Requested file/URL and volume of data transferred
  • Referrer URL
  • Browser type and version, operating system
  • HTTP status code

5. Contact by email and contact form

Our contact form transmits no data to our server and stores nothing there: when you submit it, it simply opens your email program with a prepared message (mailto method). You send the message entirely yourself; processing by us only begins once your email arrives in our inbox.

We then process your name, your email address, your phone number (if provided) and the content of your message, solely to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and contract enquiries) or Art. 6(1)(f) GDPR (legitimate interest in answering other enquiries).

We store your enquiry until it has been dealt with in full and delete it afterwards, unless statutory retention obligations for business correspondence require otherwise (Art. 6(1)(c) GDPR in conjunction with § 257 HGB (German Commercial Code) and § 147 AO (German Fiscal Code)).

6. Job applications

We accept applications by email; the application button on the careers page likewise just opens your email program (the same mailto method as the contact form). We process the details and documents in your application in order to decide on employment. The legal basis is § 26(1) BDSG (German Federal Data Protection Act), which rests on the opening clause in Art. 88 GDPR.

If no employment results, we delete your application documents no later than six months after the process has ended. That period protects our legitimate interest in defending against possible claims under the German General Equal Treatment Act (Art. 6(1)(f) GDPR). We keep your documents for longer only where you have expressly consented.

7. Locally hosted fonts and videos

All fonts (Manrope) and videos are served from our own server. No connection to third-party servers (e.g. Google Fonts or video platforms) is established; your IP address is not transmitted to anyone in this respect.

8. Recipients of the data

The only recipient of the access data listed under section 4 is our hosting provider, acting as our processor. If you send us an email or an application, it reaches our inbox via our email provider, who likewise acts as a processor in that respect. Data is not shared with any other third parties or transferred to countries outside the EU or the EEA, unless the website is running in the preview operation described above.

9. Your rights

As a data subject, you have the following rights:

  • Access to the data processed (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of a consent already given, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI), the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, phone: 040 42854-4040, email: mailbox@datenschutz.hamburg.de, https://datenschutz-hamburg.de.

11. No automated decision-making

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

12. Obligation to provide data

You are under no statutory or contractual obligation to provide personal data. The only consequence of withholding details is that we cannot answer your enquiry or consider your application.

13. Encryption

For security reasons, this website uses TLS encryption (indicated by "https://" and the padlock icon in your browser's address bar).