Back to homepage

Privacy Policy

General Information

This privacy policy provides detailed information on what happens to your personal data when you visit our website www.lehsys.de. Personal data refers to all data with which you can be personally identified. When processing your data, we strictly adhere to legal provisions, especially the General Data Protection Regulation ("GDPR"), and place great importance on ensuring that your visit to our website is absolutely secure.

Data Controller

The entity responsible for the collection and processing of personal data on this website under data protection law is:

Patrick Lehmann
Karen-Fredersdorf-Str. 10
39120 Magdeburg
Germany
Email: ed.syshel@elp
Phone: +49 155 672 48272

Cookies

To make visiting our website attractive and to enable the use of specific functions, we use so-called cookies. These are small text files that are stored on your end device. Cookies cannot run programs or transmit viruses to your computer system.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. Insofar as other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Contact Form

If you contact us via email or via a contact form, the transmitted data including your contact details will be stored to process your inquiry or to be available for follow-up questions. This data will not be passed on without your consent.

The processing of the data entered into the contact form occurs exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. An informal message by email is sufficient for the revocation. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent for storage, or there is no longer a need to store the data. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Use and Disclosure of Data

We will neither sell to third parties nor otherwise market the personal data that you communicate to us, e.g., by email (such as your name and address or your email address). Your personal data will only be processed for correspondence with you and only for the purpose for which you provided us with the data. To process payments, we pass your payment data on to the credit institution commissioned with the payment.

The use of data automatically collected during your visit to our website takes place only for the stated purposes. No other use of the data occurs.
We assure you that we will not otherwise disclose your personal data to third parties unless we are legally obliged to do so or you have given us prior consent.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Storage Period

Personal data communicated to us via our website will only be stored until the purpose for which they were entrusted to us has been fulfilled. Insofar as commercial and tax retention periods must be observed, the storage period for certain data can be up to 10 years.

Data Subject Rights

With regard to personal data concerning you, as a data subject, you have the following rights against the controller in accordance with legal provisions:

Right of Withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke consent given for the processing of data in accordance with Art. 7 para. 3 GDPR at any time with effect for the future. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. The storage of data for billing and accounting purposes is not affected by a revocation.

Right to Information

You have the right, pursuant to Art. 15 GDPR, to request confirmation from us as to whether we process personal data concerning you. If such processing takes place, you have the right to be informed about the personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of what guarantees exist in accordance with Art. 46 GDPR when your data is transferred to third countries.

Right to Rectification

You have the right, pursuant to Art. 16 GDPR, to demand the immediate correction of inaccurate personal data concerning you and/or the completion of incomplete data at any time.

Right to Erasure

You have the right, under Art. 17 GDPR, to demand the deletion of your personal data if one of the following reasons applies:

  • Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing is based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing.
  • You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
  • The personal data have been unlawfully processed.
  • The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

This right does not exist, however, to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i, as well as Art. 9 para. 3 GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89 para. 1 GDPR, in so far as the right referred to is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defense of legal claims.

If we have made your personal data public and we are obliged to erase the personal data as detailed above, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Right to Restriction of Processing

You have the right, pursuant to Art. 18 GDPR, to demand the restriction of processing (blocking) of your personal data. You can contact us at any time at the address given in the imprint for this purpose. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to demand the restriction of the processing of your personal data.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to demand the restriction of processing of your personal data instead of erasure.
  • If you have filed an objection pursuant to Art. 21 para. 1 GDPR, a consideration must be made between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State.

Right to Notification

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right under Art. 19 GDPR to be informed about those recipients upon request.

Right not to be subject to a decision based solely on automated processing – including profiling

You have the right, under Art. 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:

  • is necessary for entering into, or performance of, a contract between you and us;
  • is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • is based on your explicit consent.

However, the decisions in the cases referred to in (a) to (c) shall not be based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (a) and (c), we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Right to Data Portability

If the processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and is carried out by automated means, you have the right under Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller or to request the transmission to another controller, where technically feasible.

Right to Object

If we base the processing of your personal data on the balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on this provision. The respective legal basis on which processing relies can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).
If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Right to lodge a complaint with the competent supervisory authority under Art. 77 GDPR

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
Postfach 19 47
39009 Magdeburg
Leiterstraße 9
39104 Magdeburg
Telephone: 03 91/818 03-0
Email: poststelle@lfd.sachsen-anhalt.de
Internet: https://datenschutz.sachsen-anhalt.de/

Validity and Amendment of this Privacy Policy

This privacy policy is valid as of January 24, 2026. We reserve the right to amend this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to take into account changes to our website or new services on our website. The version accessible at the time of your visit applies.

Should this privacy policy be changed, we intend to announce changes to our privacy policy on this page, so that you are fully informed about which personal data we collect, how we process it, and under what circumstances it may be disclosed.