1. Controller

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Provider	levelbuild AG
Address	Petersstraße 15–17 04109 Leipzig Germany
E-mail	datenschutz@levelbuild.com
Project contact	Christopher Arndt · christopher.arndt@levelbuild.com
Imprint	Imprint of this website

2. Data protection officer

The data protection officer of levelbuild AG is also responsible for this website:

Name	Jan Marschner, LL.M. (attorney at law)
Address	Markt 9, 04109 Leipzig, Germany
E-mail	jm@datenschutzbeauftragter-leipzig.de
Phone	+49 (0) 341 – 2618 9373

3. Website provision and log files

When you visit this website, our technical service provider automatically records technical connection data that your browser transmits to the server. The following is recorded:

• Browser type and version
• Operating system of the device
• Internet service provider
• IP address
• Date and time of access
• Referrer URL (the website you came from)
• Target URL (pages accessed during the visit)

The data is stored in log files with the technical service provider netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR. The legitimate interest lies in the functionality, optimisation and IT security of the website (e.g. attack detection). Log files are deleted after 7 days. There is no right to object, as storage is strictly necessary for operating the website.

4. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address line beginning with “https://” and the lock symbol. This prevents third parties from reading the data you transmit to us.

5. Cookies and tracking

This website sets no cookies and uses no analytics, tracking or marketing services. No information is stored on or read from your device (no local storage, no fingerprinting). A cookie banner is therefore not required. Only if you actively load the Calendly widget on the project cargo subpage (see section 8) does Calendly set functionally necessary cookies.

6. Fonts (self-hosted)

This website uses the “Inter” typeface. The font files are delivered locally from our own server. No connection is made to servers of Google (Google Fonts) or other third parties; no personal data is transferred to third parties for this purpose.

7. Embedded content from levelbuild.com

Individual images (photos of reference contacts) are loaded from www.levelbuild.com. This domain is also operated by levelbuild AG as controller; when accessed, the same technical connection data arises there as described in section 3. No transfer to outside third parties takes place as a result.

8. Appointment scheduling via Calendly

To arrange a discovery appointment we use the scheduling service Calendly. The provider is Calendly, LLC, 271 17th St NW, Ste 1000, Atlanta, GA 30363, USA.

On the start page Calendly is embedded exclusively as a link. Merely visiting the start page transfers no data to Calendly. Only when you actively click the link do you leave our website and calendly.com opens in your browser; from that point Calendly’s data processing applies.

On the project cargo subpage a Calendly widget is embedded. The widget is not loaded automatically. Only when you actively click the button “Load widget & pick a slot” is content retrieved from calendly.com. The following data is then transferred to Calendly:

• IP address
• Browser identifier, operating system, device type
• Referrer URL (this page)
• Cookie identifier (for widget functionality)
• If you actually book: name, e-mail address, chosen slot and any additional information you voluntarily provide

Purpose: provision and management of the appointment booking process.

Legal basis: Art. 6 (1) sentence 1 lit. a) GDPR (consent through actively clicking the Calendly link or the “Load widget” button) and Art. 6 (1) sentence 1 lit. b) GDPR (pre-contractual measures when booking an appointment). You can withdraw your consent at any time by leaving the page without using the widget or by contacting us by e-mail instead.

Data transfer to the USA: Calendly also processes personal data in the USA. Calendly, LLC is certified under the EU-U.S. Data Privacy Framework and on this basis guarantees an adequate level of data protection. In addition, standard contractual clauses pursuant to Art. 46 (2) lit. c) GDPR are in place.

Retention: booked appointments and the data transmitted with them are stored for the duration of the business initiation and beyond within the scope of statutory retention obligations. Technical session data is processed by Calendly in accordance with its privacy policy.

Calendly’s privacy policy is available at: https://calendly.com/privacy.

9. Contact by e-mail

If you contact us by e-mail, the data you transmit (e-mail address, name, message text and any further information provided voluntarily) is stored to process your enquiry. The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR (legitimate interest in answering) or Art. 6 (1) sentence 1 lit. b) GDPR insofar as the communication serves the initiation or performance of a contract. The data is deleted as soon as it is no longer required for the purposes of its processing, at the latest after expiry of statutory retention periods.

10. Rights of the data subject

You have the following rights vis-à-vis us regarding your personal data:

• Access (Art. 15 GDPR) to your processed data
• Rectification (Art. 16 GDPR) of inaccurate data
• Erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR)
• Objection to processing (Art. 21 GDPR) insofar as it is based on a balancing of interests under Art. 6 (1) sentence 1 lit. f) GDPR
• Data portability (Art. 20 GDPR) for processing based on consent or a contract
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, contact us informally at datenschutz@levelbuild.com.

11. Supervisory authority

If you believe that data processing violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice (Art. 77 GDPR in conjunction with Section 19 BDSG). The authority responsible for levelbuild AG is:

12. Changes to this policy

We adapt this privacy policy from time to time to reflect legal requirements or changes to our services. The current version is always available on this page.

Last updated: 20 August 2026