Data protection

Privacy Policy

This privacy policy explains how personal data is processed when you visit the public LISA website or contact us about the LISA project.

Last updated: September 2026

1. Controller

The controller responsible for processing personal data on this website is:

Maria Souto Robles

LISA GRC

Berliner Str. 77

25421 Pinneberg

Germany

Email: [email protected]

2. Contact enquiries

If you use the contact or demo request form, we process the information you provide in order to receive and respond to your enquiry. The form collects your name, email address, an optional company name and your message.

Contact enquiries submitted through the website are transmitted through the LISA backend and sent by email using Resend. They are delivered to [email protected]. LISA does not intentionally write these contact submissions to its application database as part of this contact flow.

Legal basis

Where your enquiry concerns a possible pilot, future service or other steps requested by you before entering into a contract, processing may be based on Article 6(1)(b) GDPR. For other general enquiries, processing is based on our legitimate interest in communicating with people and organizations interested in LISA pursuant to Article 6(1)(f) GDPR.

3. Website hosting and technical data

When you access the website, technical information necessary to deliver and secure the service may be processed by the hosting infrastructure. This can include information such as IP address, date and time of access, requested resource, browser information and technical log data. This processing is used to operate, secure and troubleshoot the website.

The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in providing a secure and reliable website.

4. Google Analytics

The public website includes Google Analytics to help understand how visitors use the website. Google Analytics is disabled unless you explicitly consent to analytics through the cookie preferences.

If you give consent, analytics technologies may store or access information on your device and usage information may be processed by Google. You can withdraw your consent at any time through Cookie settings on the website.

Analytics processing is based on your consent under Article 6(1)(a) GDPR. Storage of or access to information on your device for optional analytics is also performed only after your consent.

5. Cookies and local storage

The website uses necessary browser storage for functions such as saving your privacy choice and language preference. The language preference may be stored in a NEXT_LOCALE cookie. Your analytics consent choice is stored locally in your browser.

Optional analytics storage is not activated unless you consent. You can reopen Cookie settings from the website footer and change your analytics preference.

6. Service providers and recipients

Personal data may be processed by service providers used to operate this website and its communication functions. In particular, Resend is used to transmit contact enquiries by email and Google processes analytics data when you have consented to Google Analytics. Hosting and infrastructure providers may process technical data required to provide the website.

7. International data transfers

Some service providers may process data outside Germany or the European Economic Area. Where this occurs, data transfers are handled using the safeguards required under applicable data protection law.

8. Retention

Personal data is retained only for as long as necessary for the purpose for which it was processed and for any applicable legal obligations. Contact correspondence may be retained for as long as needed to handle and document the enquiry. Browser storage remains according to its technical lifetime or until it is removed or changed by you.

9. Your rights

Subject to the conditions of the GDPR, you may have rights including access, rectification, erasure, restriction of processing, data portability and objection to processing. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

10. Right to lodge a complaint

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

11. Changes to this privacy policy

This privacy policy may be updated when the website, its services or the applicable data-processing activities change.