Controller
Lockchain Invest GmbH & Co. KG
Eremitenstraße 1
96231 Bad Staffelstein, Germany
Email: info@lockchain-invest.com
Hosting and access data
We use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, for hosting. IONOS processes technical access data to deliver and protect the website, including requested files, access times, browser/device information and referrers. IONOS describes immediate IP anonymisation and retention of the described visitor data for eight weeks. The legal basis is Article 6(1)(f) GDPR: our interest in an available, secure website. IONOS acts as a processor under Article 28 GDPR.
IONOS WebAnalytics
We also use server-side IONOS WebAnalytics for statistical evaluation and technical improvement. IONOS describes this analysis as cookie-free, with immediate IP anonymisation. The technical access data arise when pages are requested. The legal basis for the preceding processing is Article 6(1)(f) GDPR, our interest in a useful and reliable website. We do not add a separate tracking pixel for this analysis.
Contact form and email
When you contact us, we process your name, email address, selected topic, message and any organisation you optionally provide to handle and answer the enquiry. The form passes the message through the IONOS webspace to our email inbox; it does not maintain a separate message database. Article 6(1)(b) GDPR applies where the enquiry concerns or prepares a contract with you; otherwise Article 6(1)(f) GDPR applies, based on our interest in answering business enquiries. The relevant persons handle the message. Please do not submit special categories of personal data through the form.
Contact form protection
To prevent misuse, the form uses a necessary session cookie, a time-limited security token and sending counters. LCICONTACT is a session cookie; the token remains valid for 30 minutes. The source address is transformed into a check value using a secret key for rate limiting. Counters contain no names, email addresses or message contents. Counters older than 24 hours are removed during the next automatic cleanup. The legal basis is Article 6(1)(f) GDPR. Necessary device storage/access is based on section 25(2)(2) TDDDG.
Retention of correspondence
We retain enquiries and correspondence as necessary for handling the matter, meeting statutory retention duties or establishing, exercising or defending legal claims. The relevant data are deleted when these purposes and duties cease. The period depends on the content and purpose of the matter; indefinite storage of all enquiries is not intended.
Local fonts and external links
Font files and design assets are loaded from our own webspace. Montserrat does not require font requests to Google. External sites, such as product pages or the Medium interview, are opened only when their links are followed; their privacy information governs processing on those sites.
Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent for the future. You may object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation. Please use the contact above. You may also complain to a supervisory authority, particularly where you live, work or suspect an infringement. The Bavarian State Office for Data Protection Supervision supervises private entities based in Bavaria.
Required information and automated decisions
Name, email address, topic and message are required to use the form. Without them, the form enquiry cannot be processed. This website and its contact form do not make automated decisions with legal or similarly significant effects.
Google Analytics 4
Google Analytics is currently inactive. No Google Analytics tags are loaded.
With your consent, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse website use. Usage events, page views, browser/device information and technical connection data may be processed. This integration does not send contact-form names, email addresses or message contents to Google. Google signals, advertising features and personalised advertising are not enabled by our integration.
The legal bases are Article 6(1)(a) GDPR and, for device access, section 25(1) TDDDG. The Google tag remains completely blocked before consent. You may change your choice through “Privacy settings” in the footer. Analytics cookies are set for no more than six months. User/event data retention is 2 months. Google may process data outside the EU, particularly in the United States; the applicable Google data-processing terms and transfer mechanisms govern this. See Google’s privacy information and data-processing terms.
Last updated: 28 October 2026