Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Lüders & Partner GmbH
Rothenbaumchaussee 52
20148 Hamburg
Germany

Phone: +49 40 469666-70
Email: info@lueders-partner.com

2. Data Protection Officer

The Data Protection Officer of Lüders & Partner GmbH is:

Max Manuel Lüders
Lüders & Partner GmbH
Rothenbaumchaussee 52
20148 Hamburg
Germany

Phone: +49 40 469666-70
Email: info@lueders-partner.com

If you have any questions regarding data protection, you may contact our Data Protection Officer at any time.

3. General Information on Data Processing

We process personal data only insofar as this is necessary to provide our website and services, we are subject to a legal obligation, the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, we have a legitimate interest in the processing, or you have given us your consent.

Personal data means any information relating to an identified or identifiable natural person.

We take appropriate technical and organisational measures to protect personal data. However, completely risk-free transmission of data over the internet cannot be guaranteed.

4. Server Log Files

When you access our website, the web server processes technical information required for the operation of the website. This may include in particular:

  • IP address of the accessing device
  • date and time of access
  • page or file accessed
  • referrer URL
  • browser type and browser version
  • operating system
  • internet service provider and technical connection data

The processing serves to provide the website securely and reliably, to analyse errors and to protect our systems against misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of our website.

The data is deleted as soon as it is no longer required for these purposes, unless statutory obligations or legitimate reasons require longer storage.

5. Cookies and Privacy Preferences

Our website uses technically necessary cookies as well as – subject to your consent – cookies and comparable technologies for statistical purposes.

We use Borlabs Cookie to manage your consent choices. Borlabs Cookie stores your selected privacy preferences in the technically necessary borlabs-cookie. In particular, this cookie records the consent choices you have made.

You may change or withdraw your consent at any time with effect for the future. To do so, use the “Privacy Preferences” link in the footer of our website.

Technically necessary cookies and technologies are used insofar as they are required for the operation of the website or for storing your privacy preferences. Where consent is required for other services, these services are activated only after you have made the corresponding choice.

6. Google Analytics

We use Google Analytics 4, a web analytics service provided by Google. Google Analytics helps us understand how our website is used, for example which pages are visited, how visitors reach our website and how they navigate within it.

Google Analytics is activated on our website only if you have consented to the “Statistics” category via our Privacy Preferences. Google Analytics is not loaded without this consent.

In particular, the following information may be processed:

  • pages and content accessed
  • time and duration of page views
  • source of the visit or referrer
  • information about browser, device and operating system
  • approximate geographical information
  • interactions with our website

Google states that individual IP addresses of users from the European Union, Switzerland and the United Kingdom are not logged or stored in Google Analytics. IP addresses are processed to derive approximate location information and are subsequently discarded.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your terminal device, this is also based on your consent pursuant to Section 25(1) TDDDG.

You may change or withdraw your consent at any time via “Privacy Preferences” in the footer of our website. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

The service is provided by Google. In connection with the use of Google services, data may be processed outside the European Union or the European Economic Area. Google provides the applicable data protection safeguards for such processing.

7. Adobe Fonts

We use Adobe Fonts to ensure a consistent and attractive presentation of our website. When you access our website, your browser connects to Adobe servers to load the required fonts.

Technical information may be processed in this context, including the fonts used, the web project ID, technical information relating to the integration, the hostname of the website being accessed and the IP address required to deliver the font files.

According to Adobe, no cookies are placed or used for the delivery of fonts when Adobe Fonts is used on websites. Adobe also states that it does not store the IP address received for the purpose of delivering the fonts.

Adobe Fonts is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the consistent, reliable and visually coherent presentation of our website.

8. Contact and Contact Form

If you contact us by email, telephone or via our contact form, we process the data you provide in order to handle your enquiry and communicate with you.

This may include, in particular, your name, company, contact details, the content of your message and any other information you provide voluntarily.

The legal basis depends on the purpose of your enquiry. If your enquiry relates to an existing or potential contractual relationship, the processing is carried out in particular on the basis of Art. 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in handling business and other enquiries pursuant to Art. 6(1)(f) GDPR.

The data is deleted when it is no longer required to handle your enquiry or any subsequent business relationship and no statutory retention obligations or other legitimate reasons require further storage.

9. Protection of the Contact Form with Cloudflare Turnstile

We use Cloudflare Turnstile to protect our contact form against automated access, spam and misuse.

Turnstile uses technical signals to assess whether a request is likely to originate from a human user or an automated system. Information processed in this context may include the IP address, browser or user-agent information, technical connection characteristics and information about the website being accessed.

The processing is used exclusively to protect our website and contact form against misuse and to ensure the functionality of our systems.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to protect our website and communication systems against spam, bots and other forms of misuse.

Turnstile is provided by Cloudflare, Inc. Cloudflare processes the signals required to provide Turnstile as part of the service on behalf of the website operator and, according to Cloudflare, also uses certain signals to improve bot detection.

10. Newsletter and Mailchimp

We regularly send newsletters containing information about auctions, private treaty sales, projects, machinery and industrial assets as well as other services and offers from Lüders & Partner GmbH.

We use Mailchimp, a service provided by Intuit, to send and technically manage our newsletters.

In particular, the following data may be processed:

  • email address
  • where applicable, name, company or other contact information available to us
  • sending and delivery information
  • information about undeliverable messages
  • unsubscribes
  • newsletter opens
  • clicks on links contained in newsletters
  • where applicable, replies and other communication data associated with newsletter distribution

Mailchimp enables us in particular to send newsletters, manage recipients and statistically analyse our newsletters.

Open and Click Tracking

Our newsletters sent via Mailchimp contain functions for measuring opens and clicks.

To measure opens, Mailchimp may embed a small invisible image in HTML emails. When this image is loaded when an email is opened, this may be recorded as an open.

For click tracking, links contained in newsletters are routed through Mailchimp. This makes it possible to record whether and which links have been clicked. This information may be associated with the respective newsletter recipient.

We use this information for statistical analysis and to improve our newsletters and their content. Open and click rates may be inaccurate due to technical factors, for example functions of email applications or automated security systems.

Legal Basis

Newsletters are sent and the associated personal data is processed only where there is a sufficient basis under data protection and competition law. Depending on the existing relationship and the individual circumstances, processing may in particular be based on consent or on a legitimate interest in informing customers and business partners about our services.

Where processing is based on consent, consent may be withdrawn at any time with effect for the future. Where processing for direct marketing purposes is based on Art. 6(1)(f) GDPR, you may object to such processing at any time.

Every newsletter contains an unsubscribe option. Once you have unsubscribed, you will no longer receive newsletters via the relevant mailing list.

Unsubscribing from the newsletter does not necessarily result in the complete deletion of all data relating to you. Data may continue to be stored, in particular where it is required due to an existing or previous business relationship, statutory retention obligations, for documenting an unsubscribe request or for other lawful purposes. Irrespective of unsubscribing from the newsletter, you may request the complete deletion of your data insofar as no statutory or other lawful grounds prevent deletion.

Processing by Mailchimp

Mailchimp is operated by companies within the Intuit group. Mailchimp is based in and also uses technical infrastructure in the United States. Personal data may therefore be transferred to and processed in the United States.

According to Mailchimp, appropriate data protection safeguards are provided for transfers of data from Europe. Mailchimp’s Data Processing Addendum includes, in particular, the European Commission’s Standard Contractual Clauses.

11. Applications

If you apply for a position with us, we process the personal data you provide exclusively for the purpose of carrying out the application process.

This may include, in particular, contact and identification details, your CV, certificates, qualifications and other application documents you provide.

The processing is carried out in particular on the basis of Section 26 BDSG and, where applicable, Art. 6(1)(b) GDPR.

If an employment relationship is established, the data may be further processed for the purposes of that employment relationship. If no employment relationship is established, we generally delete application data after expiry of the period required for the defence of potential legal claims, unless you have consented to longer storage or other legal grounds justify longer retention.

12. Recipients of Personal Data

We disclose personal data only where this is necessary for the respective purposes, required by law or otherwise permitted on an appropriate legal basis.

Recipients may include, in particular, IT, hosting, communication, analytics and mailing service providers engaged by us. Where service providers process personal data on our behalf, they are engaged in accordance with the applicable legal requirements.

13. Transfers of Data to Third Countries

For some of the services we use, personal data may be processed outside the European Union or the European Economic Area.

Where required, such transfers are based on an adequacy decision by the European Commission, appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or another basis permitted under the GDPR.

14. Storage Period

We generally store personal data only for as long as it is required for the respective purpose of processing.

Data may also be stored where statutory retention periods apply or continued storage is necessary for the establishment, exercise or defence of legal claims.

Once the respective purpose no longer applies and any applicable retention periods have expired, the data is deleted or, where necessary, its processing is restricted.

15. Your Rights

Subject to the applicable statutory requirements, you have the right to:

  • obtain information about the personal data we process about you;
  • have inaccurate data corrected;
  • request the deletion of your personal data;
  • request restriction of processing;
  • receive data you have provided in a structured, commonly used and machine-readable format where the statutory requirements for data portability are met;
  • object to processing based on legitimate interests;
  • object at any time to the processing of your personal data for direct marketing purposes; and
  • withdraw consent you have given at any time with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, you may contact us or our Data Protection Officer.

You also have the right to lodge a complaint with a competent data protection supervisory authority concerning the processing of your personal data.

16. Automated Decision-Making

We do not use solely automated decision-making processes, including profiling, on this website that produce legal effects concerning you or similarly significantly affect you.

17. Changes to this Privacy Policy

We update this Privacy Policy when our website, the services we use or the applicable legal framework changes.

Last updated: September 2026