This is an English translation provided for convenience. In case of any discrepancy, the German version at https://www.leanam.com/datenschutz.html is authoritative.
The controller within the meaning of the GDPR is:
URBANMAKER UG (haftungsbeschränkt)
Geringhoffstraße 48
48163 Münster
Germany
Phone: +49 (0) 250 222 941 80
Email: hq@leanAM.com
This website is hosted via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the website is accessed, technical connection data (IP address, browser, operating system, date/time) is automatically recorded in server log files.
Cloudflare processes this data on the basis of appropriate safeguards pursuant to Art. 46 GDPR (EU Standard Contractual Clauses). Cloudflare is also certified under the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/), which recognizes an adequate level of data protection for transfers to the USA. For further information, please refer to Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable and secure provision of the website).
To send our contact form, we use the service Formcarry as a processor. The submitted form data is processed and stored exclusively in a data center within the European Union (Frankfurt am Main).
Formcarry
Web: https://formcarry.com
Privacy / DPA: https://formcarry.com/legal/data-processing-agreement
When you submit the contact form, the data you enter (name, company, email address, optional phone number and role, topic and message content) is transmitted to Formcarry for processing and forwarding to our email address hq@leanAM.com. No transfer to a third country outside the EU takes place.
The legal basis for the processing is Art. 6(1)(b) GDPR (initiation and performance of a contractual relationship) as well as Art. 6(1)(f) GDPR (our legitimate interest in efficient handling of inquiries). A data processing agreement pursuant to Art. 28 GDPR is in place with Formcarry. To protect against automated spam submissions we use a hidden form field ("honeypot"); no external captcha services are embedded.
The data is deleted as soon as it is no longer required for processing the inquiry, but at the latest upon expiry of statutory retention periods.
For booking demo appointments and initial consultations, we link to the service Calendly, operated by:
Calendly LLC
271 17th St NW, Suite 1000
Atlanta, GA 30363, USA
Privacy: https://calendly.com/privacy
Calendly is not embedded on our website — no data is transmitted to Calendly when you merely visit our pages. Only when you click a booking link do you leave our website and reach Calendly's booking page. There, Calendly processes the data you enter (name, email address, chosen appointment, and any voluntary information) as well as technical connection data on servers in the USA.
The legal basis for the processing is Art. 6(1)(b) GDPR (performance of pre-contractual measures at your request — arranging an appointment). The transfer to the USA is based on the adequacy decision for the EU-US Data Privacy Framework, under which Calendly is certified (https://www.dataprivacyframework.gov/), and additionally on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Booking an appointment via Calendly is voluntary — alternatively, you can arrange appointments with us at any time by email or telephone.
On our “About us” page we embed a map from the service OpenStreetMap, provided by the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When the map loads, your IP address is transmitted to the OpenStreetMap Foundation's servers so that the map tiles can be delivered to your browser. No tracking cookies are set in this process.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of our location). The United Kingdom is recognised as a safe third country on the basis of an adequacy decision by the EU Commission (Art. 45 GDPR). For more information, see the OpenStreetMap Foundation privacy policy.
This website does not use any marketing or tracking cookies. No third-party analytics or advertising services (such as Google Analytics, Meta Pixel or similar) are used. Technically necessary cookies may be set by Cloudflare Pages as part of the hosting.
This website loads fonts (Inter, JetBrains Mono) from its own servers — no connection is made to external font provider servers (e.g. the Google Fonts CDN).
You have the following rights with respect to your personal data:
To exercise your rights, please contact: hq@leanAM.com
You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent supervisory authority for URBANMAKER UG (haftungsbeschränkt) is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen (LDI NRW)
(North Rhine-Westphalia data protection authority)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 (0) 211 38424-0
Email: poststelle@ldi.nrw.de
Web: https://www.ldi.nrw.de
Last updated: June 2026
