Privacy policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Who is the controller?
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Ludaciti GmbH
Leopoldstraße 8-10
80802 Munich

Phone: 089 127 39 200

Managing Director with power of representation:
Dr. Christina Eibl

Our Data Protection Officer
Data Protection Officer of Ludaciti GmbH
c/o activemind.AG
Kurfürstendamm 56
10707 Berlin
Tel.: +49 (0)30 / 770 19 10 70

What processing activities are carried out?

Data collection and processing when you visit our website
Purpose and legal basis: During the mere informative use of our website, i.e. if you do not register or transmit information to us in any other way, we collect the following data that your browser transmits to our server (so-called "server log files")

We also reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use. The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients of the data: We use technical service providers for the operation and maintenance of our website who act as our processors.

Elgendorfer Str. 57
56410 Montabaur

Mail Boxes Etc. AT0051
Gumpendorfer Straße 142/PF 266
1060 Vienna

Storage period: The collected data is deleted after the end of your session.

Provision prescribed or required: The provision of the aforementioned personal data is neither prescribed by law nor by contract. However, without the IP address, the service and functionality of our website is not guaranteed.

Contact form:
Purpose and legal basis: The data you enter is stored for the purpose of individual communication with you. The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 (1) (f) GDPR). If we have entered into a contractual relationship with you or are in pre-contractual negotiations, the legal basis is Art. 6 (1) (b) GDPR.

Storage period: By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. Your data will be deleted after processing your enquiry, provided the pre-contractual phase ends and no contractual relationship arises. Legal retention periods and legitimate interests remain unaffected.

Provision mandatory or required: The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Customer and prospect data: How we process data in the context of a business relationship
Purpose and legal basis: In the context of pre-contractual negotiations or an existing customer relationship, we process various personal data.
For the performance of contractual obligations (Art. 6 (1) (b) GDPR). The processing is necessary for the performance of a contract with you. This includes, but is not limited to, login data when you log in to experience our solution and information about the use of our products and services (customer preferences, usage results of our solution, etc.). Where you enquire with us about a quote, the data processing is in response to your enquiry and is necessary for the performance of pre-contractual measures.
Due to legal requirements (Art. 6 (1) (c) GDPR). We are subject to various legal obligations that entail data processing. These include, for example, tax laws, as well as statutory accounting, the fulfilment of requests and requirements of supervisory or law enforcement authorities, as well as the fulfilment of control and reporting obligations under tax law. In addition, the disclosure of personal data may become necessary in the context of official/court measures for the purpose of collecting evidence, criminal prosecution or the enforcement of civil law claims.
Within the framework of the balancing of interests (Art. 6 (1) (f) GDPR). Where necessary, we process your data beyond the actual performance of the contract to protect our legitimate interests or those of third parties. Examples of such cases are: If you contact us by e-mail or telephone, the data you enter will be stored for the purpose of individual communication with you.
Assertion of legal claims and defence in legal disputes. Storage of further contact persons in the CRM system for communication (name, company, address, telephone number, e-mail address, etc.)

Data recipients: Within our company, employees receive your data for contact with you.
Your data will only be passed on to service providers (order processors) if it is necessary for the fulfilment of our contractual tasks (e.g. support/maintenance of EDP/IT applications, accounting, data destruction). With regard to the transfer of data to recipients outside our company, it should first be noted that we only transfer necessary personal data in compliance with the applicable data protection regulations.
Under these conditions, recipients of personal data may be, for example:

•    public bodies and institutions (e.g. tax authorities, law enforcement        agencies) in the event of a legal or official obligation,
•    Credit and financial services institutions (processing of payment transactions)
•    Tax advisor, business and payroll tax auditor (statutory audit mandate)

Storage period: We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted.
Exceptions to the above deletion criteria arise for data that is required for the fulfilment of statutory retention obligations, e.g. the German Commercial Code (HGB) and the German Fiscal Code (AO) (the periods specified there for retention or documentation are generally six to ten years) and for the preservation of evidence within the framework of statutory limitation provisions. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years. If the data processing is carried out in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists. The aforementioned exceptions apply here.

Provision mandatory or required: The provision of your data is always voluntary. Within the framework of the contractual relationship, you may provide those personal data that are required for the commencement, implementation and termination of the contractual relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will not be able to contact you, conclude the contract with you or perform it.

Purpose and legal basis: Your data will only be used to send you the newsletter you have subscribed to by e-mail.
For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation email and the receipt of the response requested herewith.
The processing is based on your explicit consent (Art. 6 (1) (a) GDPR).

Recipients of the data: We use service providers who act as our order processors for the dispatch and any evaluations that may take place.
All service providers are contractually obliged to treat your data confidentially.

Storage period: The data is only processed in this context as long as the corresponding consent is given. Afterwards they will be deleted.

Provision mandatory or required: The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Revocation of consent: You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in each newsletter.

Purpose and legal basis: We will only process the data you provide as part of an application to assess your professional suitability and to contact you.
The processing is carried out for the purpose of establishing an employment relationship, i.e. in the context of carrying out pre-contractual measures in response to your request. Any desired consideration of your application for other relevant vacant positions is based on your consent.

Recipients of the data: Within the company, those departments receive access to your data that need it to fulfil (pre-) contractual, legal and supervisory obligations. We have concluded order processing agreements
with any technical service providers who
 may receive access.

Storage period: In the event that your ¬application is rejected, it will be deleted six months after notification of the decision.
If an employment relationship is established, the application documents will be stored by us for at least the duration of the employment.
In the event of consent for further use for other relevant vacant positions, storage takes place until revocation or for a maximum of two years.

Provision mandatory or required: The provision of personal data is neither legally nor contractually required. However, it is not possible to process the application without the provision.


We are aware of our data protection obligation and take it very seriously. We have therefore voluntarily committed ourselves not to set any cookies on our website.

Data subject rights, complaint and objection

Data subject rights
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.
With regard to the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply.
You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). A list of the supervisory authorities (for the non-public sector) with address can be found at:

Individual right of objection
You have the right to object at any time, on grounds relating to
your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1) (f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Recipient of an objection
The objection can be made informally with the subject "Objection", stating your name, address and date of birth, and should be addressed to:

Ludaciti GmbH
Leopoldstraße 8-10
80802 Munich

Phone: 089 127 39 200

Changes to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as contact requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties according to the current state of technology.