Simon Lüke growing systems

Privacy policy

This translation is for convenience only. The German version is legally binding.

Controller

Simon Lüke growing.systems

I have not appointed a data protection officer; I am not required to.

Visiting this website

When you visit this website, the web server automatically stores the following data in a log file: IP address, date and time, requested address, HTTP status code, amount of data transferred, previously visited page (referrer), and browser and operating system (user agent).

The purpose is the secure and stable operation of the website, in particular defending against and investigating attacks and analysing errors. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in these purposes. The logs are deleted automatically after 14 days.

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties (no external fonts, scripts or embeds).

Hosting

Website and e-mail run on a server I operate myself (software: Cloudron) in the data centre of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. netcup processes the data as a processor under Art. 28 GDPR; a corresponding agreement is in place. Processing takes place in Germany.

Contact by e-mail or phone

If you contact me by e-mail or phone, I process your details (name, contact details, content of your enquiry) to answer the enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry aims at a contract, otherwise Art. 6(1)(f) GDPR (answering enquiries). E-mails are processed by my own mail server (see Hosting). Telephony is provided by sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf, Germany, as a processor.

Contact via Signal

This website links to my Signal account. The link is a plain link: your device connects to Signal only when you follow it. What Signal processes then is governed by Signal’s privacy policy.

If you write to me on Signal, I process your message like an e-mail (see above). The service is operated by the Signal Technology Foundation in the USA. Messages are end-to-end encrypted; Signal cannot read their content.

Clients and business partners

To carry out assignments I process contact, contract and billing data under Art. 6(1)(b) GDPR, and under Art. 6(1)(c) GDPR for statutory retention obligations under tax law. I use sevdesk (sevdesk GmbH, Offenburg, Germany) as a processor for invoicing and bookkeeping. Invoices and accounting records are kept for six to ten years in accordance with § 147 AO (German Fiscal Code) and deleted afterwards.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on Art. 6(1)(f) GDPR, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

No automated decision-making, including profiling, takes place.

Last updated: October 2026