Privacy Policy

LOUTON® (registered trademark)
Maximilian Schaum (sole proprietorship)
Torstr. 21
06108 Halle
Germany
Email: info@louton.com

This entity is the legally and operationally responsible party for the collection, processing, and utilization of personal data pursuant to Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), and the ePrivacy Directive (Directive 2002/58/EC).

1. Scope and Applicability

This Privacy Policy (hereinafter “Policy”) governs the collection, processing, storage, transmission, profiling, and any other operational utilization of personal data of data subjects (“Users”) in connection with the digital presence of LOUTON®, including the website www.louton.com, newsletter functionalities, analytics tools, and social media integrations. The provisions herein apply to all Users, irrespective of territorial or national location, and shall be construed in accordance with all applicable EU and German data protection laws.

2. Categories of Personal Data

The categories of personal data collected include, inter alia: voluntarily provided data (e.g., email addresses submitted through newsletter subscription forms); technical and usage information (IP addresses, device characteristics, operating system, browser type and version, language settings, visited pages, referrer URLs, interaction timestamps, session durations); and cookies or tracking data, deployed only after explicit, prior, and informed consent, including third-party analytics and marketing technologies such as Google Analytics, Facebook Pixel, and TikTok Pixel, which may generate pseudonymous identifiers and user profiles. All third-party processors operate under Data Processing Agreements (AVV / DPA) and are contractually bound to comply with GDPR and implement appropriate technical and organizational safeguards.

3. Purpose and Legal Basis of Processing

Personal data are processed for the following purposes and legal bases: provision, operation, maintenance, and technical administration of the Website and ancillary services (Art. 6(1)(b) GDPR); communication with Users, including responses to inquiries and notifications, based on explicit consent where applicable (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR); fulfillment of statutory obligations, including accounting, taxation, and recordkeeping (Art. 6(1)(c) GDPR); marketing, profiling, and analytics, contingent on explicit opt-in consent (Art. 6(1)(a) GDPR); automated processing or profiling does not produce legally binding effects absent prior User consent (Art. 22 GDPR).

4. Cookies, Tracking, and Consent

All cookies and analogous technologies that are not strictly necessary for the Website’s functionality (marketing, social media pixels, analytics) shall be set only after prior, explicit, informed, and revocable consent via the consent management interface. Users may withdraw or modify consent at any time via the interface or their browser settings. Technically necessary cookies (e.g., session management) may be set without consent. Google Analytics collects anonymized and pseudonymized traffic and interaction data; Facebook Pixel collects pseudonymous identifiers, interactions, and conversion metrics; TikTok Pixel collects behavioral and interaction data. All international transfers are protected by Standard Contractual Clauses (SCC) plus Supplementary Measures. Consent for each service is logged and stored to demonstrate compliance with GDPR.

5. Newsletter

Newsletter subscriptions require explicit prior consent (Double Opt-In) according to Articles 6(1)(a) and 7 GDPR. Users may withdraw consent at any time using the unsubscribe link or by contacting info@louton.com. Data collected for newsletters is used solely to send newsletter content and will not be repurposed without separate consent. Consent records are stored to document compliance.

6. Data Recipients and International Transfers

Personal data may be disclosed exclusively to hosting and technical service providers (e.g., Framer Inc.), marketing, analytics, and technical service providers under DPAs, and competent authorities where required by law. Data transfers outside the EEA, including the United States, are safeguarded by Standard Contractual Clauses with Supplementary Measures, ensuring adequate protection despite the invalidity of Privacy Shield.

7. Data Retention and Deletion

Personal data is retained only as long as necessary to fulfill the purposes described herein or comply with statutory obligations. Specific retention criteria: newsletter data is retained until the user unsubscribes or withdraws consent; analytics and tracking data are retained for a maximum of 26 months unless anonymized earlier; consent logs are retained for as long as necessary to demonstrate compliance with legal obligations. Upon expiration, data is securely deleted, anonymized, or pseudonymized.

8. Rights of Users

Users are entitled to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection to processing for legitimate interests or direct marketing (Art. 21 GDPR), and lodging complaints with supervisory authorities (Art. 77 GDPR). Requests may be submitted via info@louton.com.

9. Changes to the Privacy Policy

LOUTON® reserves the right to amend, supplement, or revise this Policy at any time to reflect changes in services, statutory obligations, processing practices, or operational structures. Users will be notified of material changes via a prominent notice on the Website, and the most current version is continuously accessible at www.louton.com