Data protection

We care about your privacy

The protection of your privacy in the processing of personal data is important to us. When visiting our website, our web servers will save by default the IP of your Internet Service Provider, the website from which you linked to us, the web pages you visit as well as the date and the length of your visit. This information is necessary for the technical transmission of the websites and the reliable server operation. A personalised evaluation of these data does not take place.

If you send us data via a contact form, these data will be saved on our servers as part of the data backup.  We will use your data exclusively for the processing of your request. Your data will be treated as strictly confidential. It will not be disclosed to a third party.


Lacuna GmbH
Ziegetsdorfer Straße 109
93051 Regensburg
Tel.: +49 (0) 941/992088-0

Personal data

Personal data are data about your person. They include your name, your address and your e-mail address. You also do not need to disclose any personal data in order to be able to visit our website. In some cases, we will require your name and address as well as other information so we are able to offer you the requested service.

The same applies in case that you want to receive information material or if we answer your requests. In these cases, we will always point this out. We will only save those data that you have automatically or voluntarily sent to us.

If you use of our services, we will usually only collect the data required to offer you our service. We might ask you for additional information, which are, however, of a voluntary nature. Whenever we process personal data, we do this to be able to offer you our service or to pursue our commercial goals.

Automatically saved non-personal data

When you visit our websites, we save certain information for administrative and technical reasons. These are the following: Type and version of the browser used, data and time of day of the visit as well as the IP address.

These data will be anonymised and used only for statistical purposes or to improve our Internet and online services.

These anonymised data will be - separately from the personal data - saved on secure systems and can not be assigned to individual persons. This means that your personal data are protected at all times.


Whenever you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from a web server to your browser and stored on the device's hard disk. The legal basis for the use of cookies is Art. 6 (1) (f) GDPR. Only the Internet Protocol address is stored here - no other personal data. This information, which is stored in the cookies, allows our website to automatically recognize you the next time you visit our website, which will facilitate your use.

Of course, you can also visit our website without accepting cookies. If you do not want your computer to be recognized the next time you visit, you may decline to use cookies by changing the settings in your browser to "decline cookies". The respective procedure can be found in the operating instructions of your respective browser. If you refuse the use of cookies, however, it may result in restrictions on the use of some areas of our websites.

Google Tag Manager

This website uses Google Tag Manager. The Tag Manager does not collect personal information. The tool triggers other tags, which may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. The privacy policy of Google for this tool can be found here: Google Tag Manager

Use of Google-Analytics with anonymisation function

On our website, we use Google-Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google“. Google-Analytics uses so-called "cookies“; these are text files that are saved on your computer allowing for an analysis of your visit on the website.

The information provided by these cookies, for example, time, place and frequency of your website visit including your IP address will be sent to Google in the USA and saved at this location.

On our website, we use Google-Analytics with the suffix "_gat._anonymizeIp". In this case, Google will shorten and thus anonymise your IP address already within the member states of the European Union or other signatories of the Agreement on the Economic Area.

Google uses this information to evaluate your visit on our website, to create reports for us about the website activities and to render additional services associated with the use of the website and Internet. Where appropriate, Google will also disclose this information to third parties if legally required or if a third party processes these data on behalf of Google.

Google will never - by its own account - link your IP address with other data from Google. You can prevent the installation of cookies with the corresponding settings in your Browser software; however, we would like to point out that in this case you won't be able to make full use of all the functions on our website.

In addition, Google provides a deactivation add-on for the most common Browsers, which will give you more control over the data Google will collect from the websites you visit. The add-on tells the JavaScript (ga.js) from Google-Analytics that no information on the website visit may be sent to Google-Analytics. However, the deactivation add-on from Google-Analytics for Browsers does not prevent information from being sent to us or others from web analysis services possibly used by us. Click on the following link to receive more information on the installation of the Browser add-on: Google OptOut Add-On

If you visit our site via a mobile device (smartphone or tablet), you will need to click the following link instead to prevent tracking by Google Analytics within this website in the future: Disable Google Analytics. This link also serves as an alternative to the browser add-on mentioned above. Clicking on the link places an opt-out cookie in your browser that is valid only for that browser and this domain. If you delete the cookies in this browser, the opt-out cookie will be deleted as well, thus you will have to click the link again.

If you've consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize your ads, Google will use your data with Google Analytics data to provide audience lists to create cross-device remarketing. To do this, Google Analytics will initially track your Google-authenticated ID associated with your Google Account (that is, personally identifiable information) on our website. Afterwards, Google Analytics will temporarily link your ID with your Google Analytics data to optimize our audiences.

If you do not agree, you can opt-out of this through the "My Account" section of your Google Account.


For sending our newsletter, we use the so-called double opt-in procedure, which means that we will only send you a newsletter by e-mail if you have previously explicitly confirmed to us that we should activate the newsletter service. We will then send you a notification e-mail asking you to confirm that you wish to receive our newsletter by clicking on a link in said e-mail. When you sign up for our newsletter, we store your IP address and the date of registration. This storage serves solely to prevent a third party from misusing your e-mail address to sign you up for the newsletter without your knowledge or your authorization.If you no longer wish to receive newsletters from us later, you can unsubscribe at any time without incurring any costs other than the transmission costs according to the basic rates.

Newsletter2Go is used as newsletter distribution software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling and using your data for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: Newsletter2Go

The granted consent to the storage of the data, the e-mail address and their use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter.

The data protection measures are always subject to technical renewal for this reason, we ask you to inform yourself about our data protection measures at regular intervals by viewing our privacy policy.


We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are obliged to the valid data protection laws. Whenever we collect and process personal information, it will be encrypted before being transferred. This means that your data can not be misused by third parties. Our security is subject to a constant process of improvement and our privacy policy is constantly being revised. Please make sure you have access to the latest version of said policy.

Twitter Widget

Our website also uses functions of the Twitter service. The functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. During this data forwarding, data is also transferred to Twitter. We, as the service provider, would like to point out that we, as the website provider, have no knowledge of the content of the transmitted data or its use by Twitter. Therefore, we refer to the following link to obtain further information regarding Twitter's privacy policy: Twitter privacy policy
If you wish to change your privacy settings on Twitter, you can do so under this link: Twitter privacy settings

Google Fonts

We use "Google Web Fonts" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Web Fonts enables us to use external fonts, so-called Google Fonts. For this purpose, the required Google Font is loaded into the browser cache by your web browser when you call up our website. This is necessary so that your browser can display a visually improved representation of our texts. If your browser does not support this function, a standard font will be used by your computer for display. The integration of these web fonts takes place via a server call, usually at a Google server in the USA. This transmits to the server which of our Internet pages you have visited. The IP address of your browser is also stored by Google. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Web Fonts. We use Google Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.
Further information on data protection can be found in Google's privacy policy: Google Privacy Policy
Further information on Google Web Fonts can be found under Information Google Fonts and Google Fonts

Affected rights

Please contact us at any time if you would like to find out which personal data we store about you or if you want us to delete or correct them. In addition, you may at any time withdraw your permission to us to collect and process your personal information. You also have the right to restrict processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR) and the right of data transferability (Art. 20 GDPR).In both cases, please contact us directly.

Changes to our privacy policy

We reserve the right to change our privacy policies if necessary due to new technology. Please make sure you have the latest version.
If any fundamental changes are made to this privacy policy, we will post those changes on our website.

All interested parties and visitors of our website reach us in privacy issues at:

Gerald Lill
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Phone: 0941 29 86 93 0
Fax: 0941 29 86 93 16

If our data protection officer can not answer your request to your satisfaction, you will in any case have your right to complain to the data protection supervisory authority responsible for your state.

Information obligations acc. to Art. 13 GDPR

The protection of your personal data is very important to us.
Privacy Policy as PDF to download or print
Privacy Policy as accessible text

We therefore process your personal data ("data" for short) solely on the basis of the legal provisions. With this privacy policy we want to inform you about the processing of your data in our company and the data protection claims and rights to which you are entitled in the sense of Art. 13 of the European General Data Protection Regulation (EU GDPR). 1. Who is responsible for data processing and to whom can you contact?

Responsibility lies at
Lacuna GmbH
Ziegetsdorfer Str. 109
93051 Regensburg
0941/99 20 88 0

The company data protection officer is
Gerald Lill
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg

2. Which data is processed and from what sources does this data come from?

We process the data that we have received from you within the framework of contract initiation or settlement, on the basis of consents or as part of your application with us or within the framework of your workforce. Personal data includes:

  • Customer data (first and last name, address, contact details, email address, telephone number, fax, bank details)
  • Applicants and employee data (first and last name, address, contact details, email address, telephone number, fax, bank details, dates of birth, CV data, employment certificates, religious affiliation)
  • Business partner data (name of legal representative, company, commercial register number, VAT number, company number, address, contact person details, email address, telephone number, fax, bank details)

In addition, we also process the following other personal data:

  • Information about the type and content of contract data, order data, sales and receipt data, customer and supplier history as well as consulting documents, advertising and sales data,
  • Information from your electronic traffic with us (e.g., IP address, log-in data), other data that we receive from you as part of our business relationship (for example, in customer meetings),
  • Data that we generate ourselves from master / contact data as well as other data, such as by means of customer demand and customer potential analysis, the documentation of your consent for the receipt of e.g. Newsletters.

3. For what purposes and on what legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act 2018, as amended

  • for the fulfillment of (pre-) contractual obligations (Art. 6 para. 1lit.b DS-GVO): The processing of your data takes place for the contract settlement online or in one of our branches, for the contract processing of your staff in our company. The data is processed in particular when the business is initiated and when the contracts are executed with you.
  • for the fulfillment of legal obligations (Art. 6 para. 1 lit.c DS-GVO): For the purpose of fulfilling various legal obligations, processing of your data is required, for example. required by the Commercial Code or the Tax Code.
  • for the protection of legitimate interests (Art. 6 (1) lit.f DS-GVO): Due to a balancing of interests, data processing may take place beyond the actual performance of the contract in order to safeguard legitimate interests of us or third parties. Data processing for the protection of legitimate interests takes place, for example, in the following cases:
    • Advertising or marketing (see point 4),
    • business management and development of services and products;
    • Lead a group-wide customer database to improve customer service
    • in the context of legal action.
  • in the context of your consent (Art. 6 para. 1 lit. DSGVO): If you have given us consent to the processing of your data, e.g. to send our newsletter.

4. Processing of personal data for advertising purposes

You may object to the use of your personal data for advertising purposes at all times or for individual measures without incurring other than the transmission costs according to the basic rates.

Under the legal requirements of § 7 (3) UWG, we are entitled to use the e-mail address you provided when signing the contract for direct advertising for your own similar goods or services. These product recommendations are provided by us, regardless of whether you have subscribed to a newsletter. If you do not wish to receive such recommendations by e-mail from us, you may object to the use of your address for this purpose at any time without incurring any costs other than the base rate transmission costs. A communication in text form is sufficient. Of course, every e-mail always includes an unsubscribe link.

5. Who receives my data?

If we use a service provider for order processing, we will still be responsible for protecting your data. All processors are contractually obliged to treat your data confidentially and to process it only as part of the provision of services. The processors commissioned by us will receive your data if they need the data to fulfill their respective performance. These are e.g. IT service providers we need for the operation and security of our IT system as well as advertising and address publishers for our own promotions.

Your data will be processed in our customer database. The customer database supports the enhancement of data quality of existing customer data (doublet cleanup, warped / deceased flag, address correction), and allows enrichment with data from public sources.

These data are provided to the Group companies if necessary for the execution of the contract. The storage of customer data is company-related and separate, whereby our parent company acts as a service provider for the individual participating companies.
In the event of a legal obligation and in the context of legal action, authorities and courts as well as external auditors may be the recipients of your data.
In addition, insurance, banks, credit bureaus, and service providers may be recipients of your information for the purpose of contract initiation and fulfillment.

6. How long will my data be stored?

We process your data until the end of the business relationship or until the expiry of the applicable statutory retention periods (for example from the Commercial Code, the Tax Code, Home Act or Working Time Act); in addition, until the termination of any legal disputes in which the data is required as proof.

7. Are personal data transmitted to a third country?

Basically, we do not transmit any data to a third country. Transmission in individual cases will only take place on the basis of an adequacy decision of the European Commission, standard contractual clauses, appropriate guarantees or your express consent.

8. What privacy rights do I have?

You have the right to information, correction, deletion or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data portability and to a complaint in accordance with the requirements of data protection law.

Right to information:
You can ask us for information as to whether and to what extent we process your data.
Right to rectification: If we process your data that is incomplete or incorrect, you may at any time request its correction or its completion by us.
Right to delete: You may request the deletion of your data from us if we process it unlawfully or the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons opposing an immediate deletion, e.g. in the case of legally regulated storage requirements. Regardless of your right to cancellation, we will immediately and completely erase your data, unless there is a legal or legal duty of retention in this regard.
Right to restriction of processing: You may require us to restrict the processing of your data if

  • You deny the accuracyy of the data for a period of time that allows us to verify the accuracy of the data.
  • the processing of the data is unlawful, but you reject a deletion and instead require a restriction of data usage,
  • we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
  • You have lodged an objection to the processing of the data.

Right to Data Portability: You may require us to provide you with the information you have provided to us in a structured, common and machine-readable format, and that you may transfer that information to another person without hindrance, provided that

  • we process such data on the basis of a consent given or revocable by you or for the performance of a contract between us, and
  • this processing is done using automated methods.

If technically feasible, you may require us to transfer your data directly to another person in charge.
Right to objection:
If we process your data for legitimate interest, you can object to this data processing at any time; this would also apply to a profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. You can object to the processing of your data for the purpose of direct mail at any time without stating reasons.
Right to appeal:
If you believe that we violate German or European data protection laws when processing your data, we ask you to contact us to clarify questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective State Office for Data Protection Supervision. If you want to assert one of the mentioned rights against us, please contact our data protection officer. If in doubt, we may request additional information to confirm your identity.

9. Am I committed to providing data?

The processing of your data is required to conclude or fulfill your contract with us. If you do not provide us with this data, we will generally have to refuse to conclude the contract or be unable to complete an existing contract and consequently terminate it. However, you are not obliged to give your consent to the processing of data that is not relevant or legally required for the fulfillment of the contract.

to top