Website services and privacy
Supplement to the existing privacy and cookie notices · 6 September 2026
Controller and your rights
Lugh Innovation UG (haftungsbeschränkt), Waldhornstr. 44, 82110 Germering, Germany; kontakt@lugh.dev. The contact details, data subject rights and supervisory authority information in our existing privacy notice also apply to these services.
Newsletter
We process your email address, chosen language, confirmation time and consent version to send occasional information about our IT services. Subscription requires a separate email confirmation. Links expire after 24 hours; unconfirmed requests are automatically removed after seven days. We retain the consent evidence while the subscription exists and where needed to establish or defend legal claims. The legal basis for newsletter delivery is your consent (Article 6(1)(a) GDPR). You can withdraw it through the unsubscribe link in the confirmation email and our newsletters or by contacting kontakt@lugh.dev. Withdrawal does not affect prior lawful processing. Newsletter management runs in our Odoo system.
Mara · AI chat
The optional chat is activated only after your permission. Mara uses the OpenAI API to generate responses. Message text and recent conversation context are sent to OpenAI; connection and account data are processed as part of the technical service. Processing may involve countries outside the EU. Please review OpenAI's privacy information before using the chat. Do not send passwords, confidential documents or special categories of personal data. AI responses may be incorrect and do not replace binding advice from our team.
With your separate agreement, your contact details and conversation are recorded in Odoo as an enquiry and a team task; the transcript can be emailed to you. Enquiry retention follows the existing privacy notice. You can disable future optional chat processing through Privacy settings and request deletion by email, subject to applicable retention obligations. The optional AI processing is based on consent; handling a requested enquiry is based on Article 6(1)(b) or (f) GDPR, depending on the context. OpenAI Privacy Policy
Google Maps
Maps remain blocked until you click Allow and load map. Google receives your IP address and technical connection data and may use cookies or comparable storage. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides the service; processing may involve other countries. Activation is based on consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Disable optional services in Privacy settings to remove the map. Data already transmitted remains subject to Google's privacy rules. Google Privacy Policy
Storage, abuse prevention and future tracking
Your chat preference and form challenges are stored in the necessary Odoo session. A local map preference lasts for the browser tab session. Form protection uses a one-time arithmetic challenge, a hidden field and short-lived pseudonymous rate limits derived from the network address; these rate-limit records are automatically removed after two days. This protects the service against automated abuse (Article 6(1)(f) GDPR). No external captcha provider is used. Statistics and marketing tracking are prepared only: no analytics tags, advertising pixels or tracking identifiers are activated. Any future activation requires updated information and a new, purpose-specific choice.
Cookie preference: the necessary, host-only cookie li_privacy_v2 stores either essential services only or your permission for Mara for 180 days. It contains no unique visitor identifier and is not used for tracking. The choice applies independently to each domain and browser; missing or invalid choices keep Mara disabled. Google Maps still requires separate permission for the current tab. Changing your choice overwrites this preference; disabling optional services also clears the local map choice and reloads other open tabs on this origin when browser storage is available.