This is an English translation provided for convenience. In case of any discrepancy, the German version at https://www.leanam.com/datenschutz.html is authoritative.
The controller within the meaning of the GDPR is:
URBANMAKER UG (haftungsbeschränkt)
Geringhoffstraße 48
48163 Münster
Germany
Phone: +49 (0) 250 222 941 80
Email: hq@leanAM.com
This website is hosted via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the website is accessed, technical connection data (IP address, browser, operating system, date/time) is automatically recorded in server log files.
Cloudflare processes this data on the basis of appropriate safeguards pursuant to Art. 46 GDPR (EU Standard Contractual Clauses). Cloudflare is also certified under the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/), which recognizes an adequate level of data protection for transfers to the USA. For further information, please refer to Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable and secure provision of the website).
To send our forms, we use the service Formcarry as a processor, operated by:
Teijal, Inc. (d/b/a Formcarry)
3 Germay Dr, Unit 4 #1278
Wilmington, DE 19804, USA
Privacy / DPA: https://formcarry.com/legal/data-processing-agreement
This concerns the following forms and data:
The data is transmitted to Formcarry for processing and forwarded to our email address hq@leanAM.com. Formcarry stores form data on servers in the European Union (Frankfurt am Main). As Formcarry is a US company, access from the USA (e.g. for support and maintenance) cannot be ruled out; Formcarry also uses sub-processors based in the USA (including Amazon Web Services and Automattic/Akismet for spam checks). These transfers are safeguarded by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) in the data processing agreement, in some cases additionally by the EU-US Data Privacy Framework.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) and Art. 6(1)(f) GDPR (our legitimate interest in efficient handling of inquiries). A data processing agreement pursuant to Art. 28 GDPR is in place with Formcarry. We do not use your details for advertising emails or newsletters; for the checklist, we only contact you if you explicitly indicate this in the form. To protect against automated spam submissions we use a hidden form field ("honeypot"); no external captcha services are embedded.
The data is deleted as soon as it is no longer required for processing the inquiry, but at the latest upon expiry of statutory retention periods.
For booking demo appointments and initial consultations, we link to the service Calendly, operated by:
Calendly LLC
115 E Main St, Ste A1B
Buford, GA 30518, USA
EU representative (Art. 27 GDPR): DPO Centre Europe, Friedrichstraße 88, 10117 Berlin, Germany
Privacy: https://calendly.com/legal/privacy-notice
Calendly is not embedded on our website — no data is transmitted to Calendly when you merely visit our pages. Only when you click a booking link do you leave our website and reach Calendly's booking page. There, Calendly processes the data you enter (name, email address, chosen appointment, and any voluntary information) as well as technical connection data on servers in the USA.
The legal basis for the processing is Art. 6(1)(b) GDPR (performance of pre-contractual measures at your request — arranging an appointment). The transfer to the USA is based on the adequacy decision for the EU-US Data Privacy Framework, under which Calendly is certified (https://www.dataprivacyframework.gov/), and additionally on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Calendly.
Booking an appointment via Calendly is voluntary — alternatively, you can arrange appointments with us at any time by email or telephone.
On our “About us” page we show our location as a static map image hosted on our own server (map data © OpenStreetMap contributors, ODbL licence). No data is transmitted to OpenStreetMap or any other third party when the page is loaded.
Only if you click on the map does the OpenStreetMap website open in a new tab. The OpenStreetMap Foundation privacy policy applies there (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom).
This website does not use cookies and does not store any information in your browser (including local storage and session storage). No third-party analytics or advertising services (such as Google Analytics, Meta Pixel or similar) are used. No content is loaded from third-party servers when you visit our pages.
This website loads fonts (Inter, JetBrains Mono) from its own servers — no connection is made to external font provider servers (e.g. the Google Fonts CDN).
You have the following rights with respect to your personal data:
To exercise your rights, please contact: hq@leanAM.com
You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent supervisory authority for URBANMAKER UG (haftungsbeschränkt) is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen (LDI NRW)
(North Rhine-Westphalia data protection authority)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 (0) 211 38424-0
Email: poststelle@ldi.nrw.de
Web: https://www.ldi.nrw.de
Last updated: September 2026
