LME GERMANY Liebl Motorsport Engineering

Privacy policy

Version: October 2026

In short: This website is static. It sets no cookies, measures nothing, loads nothing from third-party servers and therefore shows no consent banner. The only data processed are the access data any web server technically needs — and whatever you send me by email yourself.

1. Controller

The controller within the meaning of Art. 4 (7) GDPR for data processing on this website is:

Dominic Liebl Motorsport Engineering Germany
Owner: Dominic Liebl
Schützenheimweg 17
93173 Wenzenbach
Germany
info@lme-germany.de
+49 170 7751237

No data protection officer has been appointed; the conditions of Art. 37 GDPR and § 38 BDSG are not met.

2. Principle: as little data as possible

This website consists of static pages. It sets no cookies, uses no analytics, audience measurement or tracking tools, no profiling, no advertising networks, no social media components, no tracking pixels and no embedded third-party content — no external maps, videos, fonts or scripts. Fonts, images, stylesheets and scripts are served exclusively from my own server; no content delivery network is used. Visiting this website therefore establishes no connection to third-party servers.

The site stores a single piece of information locally in your browser: your language choice (German or English). It never leaves your device, is not transmitted and is not visible to me. Its sole purpose is to keep the language you selected on your next visit, which makes it strictly necessary for the service you explicitly requested within the meaning of § 25 (2) no. 2 TDDDG. You can delete it at any time through your browser's site data.

Since no further information is stored on or retrieved from your device, consent under § 25 (1) TDDDG is not required. For the same reason, this website has no consent or cookie banner.

3. Accessing the website and server logs

Each time a page is accessed, your browser necessarily transmits data to the web server. These are logged:

Pages are delivered through an upstream reverse proxy and the web server behind it. Both services keep their own logs containing the data listed above; the same purposes and the same deletion period apply to both.

Purposes: delivering the website, ensuring trouble-free operation, error analysis, and detecting and defending against attacks and misuse.

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically sound and secure operation of this website.

Retention: logs are deleted automatically after 30 days at the latest. Where there are concrete indications of unlawful access, the entries concerned are retained until the incident has been resolved.

These data are not merged with other data sources and are not evaluated for analytics, profiling or marketing purposes.

4. Encrypted transmission

This website is served exclusively over a TLS-encrypted connection (HTTPS); unencrypted requests are redirected to the encrypted connection. The certificate used is issued by the certification authority Let's Encrypt (Internet Security Research Group). Certificate issuance involves no transmission of visitors' personal data.

5. Protection against automated attacks

To defend against automated attacks, the server's access logs are analysed automatically for conspicuous patterns, such as a large number of failed requests in a short period. Conspicuous IP addresses are temporarily blocked. The data processed are the IP address together with the time and type of request.

The software used for this is CrowdSec, supplied by CrowdSec SAS, Paris, France. Depending on its configuration, this system reports detected attack signals — essentially the conspicuous IP address, the time and the type of attack — to the provider's shared reporting and exchange service within the European Union. No content of your page request is transmitted. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in defending the availability and integrity of the systems. Block lists are deleted once the respective block period expires.

6. Contact by email

You can reach me by email. The data processed are your email address, the content of your message, any details you provide voluntarily — such as name, company or telephone number — and the technical headers of the message.

Purposes: handling and answering your enquiry, taking pre-contractual steps and performing any resulting contract.

Legal basis: Art. 6 (1) (b) GDPR for enquiries relating to a contract, otherwise Art. 6 (1) (f) GDPR based on the legitimate interest in answering enquiries addressed to me.

Retention: your message is deleted once the enquiry has been dealt with conclusively and no statutory retention obligations stand in the way. Where the contact leads to a contract, or the correspondence contains information relevant under tax or commercial law, the statutory retention periods apply — under § 147 (3) of the German Fiscal Code ten years for books and records, eight years for accounting vouchers and six years for other documents, supplemented by § 257 of the German Commercial Code.

Note on confidentiality: an unencrypted email can be read or altered without authorisation in transit. Please do not send particularly sensitive information unencrypted by email; agree a secure channel with me beforehand instead.

7. Recipients of the data

Your data are not passed on to third parties, with the exception of the following technical service providers, who act as processors under Art. 28 GDPR on the basis of a data processing agreement:

Beyond this, data are only passed on where I am legally obliged to do so or where it is necessary to assert or defend legal claims. No external analytics, advertising, newsletter or payment service providers are used.

8. Transfers to third countries

No personal data are transferred to recipients outside the European Union or the European Economic Area.

9. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10. Your rights

You have the right to obtain information about the data processed about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Right to object: where processing is based on Art. 6 (1) (f) GDPR, you have the right to object to it at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, a message to the contact details given in section 1 is sufficient.

Right to lodge a complaint: under Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority. The competent authority is the Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach, Germany. You may also contact the supervisory authority of your place of residence or work.

11. Obligation to provide data

This website can be used without providing personal data. The access data listed in section 3 are technically necessary for your browser to retrieve the page. To be contacted by email I need the details required to reply; providing them is voluntary, but without them I cannot answer your enquiry.

12. External links

Where this website links to third-party websites, this privacy policy does not cover the processing that takes place there. Please consult the respective provider's privacy information.

13. Changes to this policy

This policy describes the actual state of this website. Should the site be extended technically — for instance with a contact form, a map view, embedded videos, a newsletter or statistics — this policy will be updated before the extension goes live.

← Back to the home page