Data Protection

Lastaar is responsible for processing personal data collected through this website and our digital services, unless another controller is named in a separate project agreement.

You can contact us about privacy or data protection requests using the contact details published on this website.

We only collect data that is necessary to operate the website, respond to requests, provide services, improve performance, and comply with legal obligations.

• Contact details such as name, company, email address, phone number, and message content
• Project information, briefs, files, links, access details, and communication history
• Technical data such as IP address, browser, device, pages visited, referrer, date, and time
• Newsletter subscription data and cookie consent preferences

We process personal data to communicate with users and clients, prepare offers, deliver projects, manage support, improve the website, send requested updates, and protect our systems.

We do not sell personal data.

Our website uses necessary cookies for basic functionality. Optional cookies for preferences, analytics, or marketing are only used according to the choices saved in the cookie settings.

You can change your cookie choices at any time using the cookie settings button on the website.

If analytics or marketing tools are enabled, they may help us understand website usage, measure campaigns, and improve content. These tools are only loaded when the relevant consent category is allowed.

Analytics and marketing providers may process data according to their own privacy terms.

Depending on the situation, processing may be based on consent, performance of a contract, pre-contractual communication, legitimate interest, or legal obligation.

Where processing is based on consent, you can withdraw consent at any time without affecting processing that happened before withdrawal.

We may share data with trusted service providers such as hosting, email, analytics, CRM, payment, project management, or technical support providers when this is necessary to operate our services.

We require service providers to handle data securely and only for the agreed purpose.

We keep personal data only as long as needed for the purpose it was collected, for contract performance, legitimate business needs, or legal retention obligations.

When data is no longer needed, it is deleted or anonymized where reasonably possible.

Depending on applicable law, you may have the right to access, correct, delete, restrict, object to processing, request portability, or withdraw consent.

To exercise these rights, contact us with enough information to identify your request.

We use technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

No online service can be guaranteed completely secure, so users should also protect their own devices, passwords, and access credentials.

Some service providers may process data outside your country. Where required, we use appropriate safeguards or rely on legally recognized transfer mechanisms.

We may update this Data Protection page when our services, tools, laws, or internal processes change. The latest version is always available on this page.