Privacy policy
This policy explains which personal data we process when you visit lavionic.com or hangar.lavionic.com or contact us, why, on what legal basis, and what rights you have.
Controller
Lavionic GmbH
Leoprechtingstraße 34, 81739 Munich, Germany
Managing director: Oguz Hicdurmaz
Email: [email protected]
Telephone: +49 174 789 6366
Hosting and delivery
The sites are hosted and delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which processes the data on our behalf under a data processing agreement. To deliver each page and protect the sites against attacks, Cloudflare processes your IP address, the date and time of the request, the address requested, the referring page, and your browser and operating system.
Legal basis: our legitimate interest in delivering the sites securely and reliably (Art. 6(1)(f) GDPR). Cloudflare may process data in the USA; Cloudflare, Inc. is certified under the EU-US Data Privacy Framework.
Visitor counts without cookies
For every visitor, Cloudflare Web Analytics counts page views, the referring site, country, browser and device type. It sets no cookies, stores nothing on your device and does not recognise you across visits or sites.
Legal basis: our legitimate interest in knowing how much the sites are used (Art. 6(1)(f) GDPR).
Analytics with your consent
Only if you accept in the cookie banner, we use Contentsquare (Contentsquare SAS, Paris, France) and Google Analytics (Google Ireland Limited, Dublin, Ireland) to understand how visitors use the sites: pages viewed, clicks, scrolling, the campaign link you came from, device and approximate location, and with Contentsquare session replays. Google may process the data in the USA; Google LLC is certified under the EU-US Data Privacy Framework.
Legal basis: your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time under Cookie settings at the bottom of every page; the analytics then stop and their cookies are deleted. Which cookies are set and for how long is listed on the Cookies and analytics page.
Contact form and email
When you use the contact form, we receive your name, email address, optional company and your message. The form is processed by Formspree, Inc., USA, which forwards it to us by email; transfers to Formspree are based on the EU Standard Contractual Clauses. When you email or call us, we process the details you give us.
Legal basis: answering your enquiry and preparing a possible contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in replying (Art. 6(1)(f) GDPR). We delete enquiries once they are dealt with, unless commercial or tax law requires us to keep them (up to ten years under § 257 HGB and § 147 AO).
Download Center waiting list
When you join the waiting list on the Download Center page, we store your full name, your email address and its domain, the time, the consent text you agreed to and its version, the page and campaign link (UTM parameters) you came from, and later the time you confirm or unsubscribe. We check whether the domain of your address can receive email; your IP address is not stored.
We send you a confirmation email first, and you join the list only when you click the link in it (double opt-in). After that, we email you when a new free template or tool is published.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in each email or by writing to [email protected]. Unconfirmed requests are deleted after 30 days. After you unsubscribe, we keep your address and the record of your consent for up to three years, only to prove that we had your consent (Art. 6(1)(f) GDPR, our legitimate interest in proving it), and we send you no more email.
The records are stored in a Cloudflare D1 database located in the European Union (Cloudflare, Inc., see Hosting and delivery). The emails are sent by Resend (Plus Five Five, Inc., San Francisco, USA) on our behalf under a data processing agreement; transfers to Resend are based on the EU Standard Contractual Clauses.
Fonts and links
All fonts are served from our own sites; no font service is contacted. Links to other sites, such as LinkedIn, wingman360.ai or regulators, are plain links: nothing is sent to those sites until you follow one, and their own privacy policies then apply.
Your rights
You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). You can withdraw a consent at any time with effect for the future (Art. 7(3)).
You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21 GDPR).
To exercise these rights, write to [email protected]. You can also complain to a supervisory authority, for us the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Other information
You are not obliged to provide personal data; without the required form fields we cannot answer through the form, but you can always write to us by email. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
We update this policy when the sites or the law change; the date below shows the current version.
Last updated 20 October 2026