Legal

Privacy Policy

Last updated: April 2026

This privacy policy explains how Lean Maritime GmbH (“we”, “us”) processes personal data when you visit embarkly.app. We take data protection seriously: we do not use tracking cookies, we do not sell your data, and we work only with processors that meet GDPR requirements.

1. Data controller

The data controller responsible for processing your personal data on this website is Lean Maritime GmbH, Alter Wall 32, 20457 Hamburg, Germany.

For any privacy-related inquiries, please contact us at info@lean-maritime.com or by post at the address above.

2. Data we process

Contact via email. This website does not run a contact form. The only direct contact route is the hello@embarkly.app link. When you send us an email, we receive the data you include in it (your email address, name if given, message content). This is processed solely to respond to your inquiry.

Server access logs. When you visit any page on this site, your browser automatically transmits technical information that our hosting provider briefly records in access logs (date and time, page requested, referring URL, user agent, IP address). These logs are used solely to detect and prevent attacks and are kept for a short period.

Aggregate analytics. We use our self-hosted Plausible Analytics instance to understand aggregate site usage. Plausible does not set cookies, does not track users across sites, and does not store personal data. It records anonymised metrics such as page views, referrer, country (derived from IP and discarded immediately), and browser/OS family.

3. Purpose and legal basis

Email inquiries are processed to respond to your request and, where applicable, to prepare a business engagement. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

Technical access logs are processed to secure the website and prevent abuse. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

Plausible Analytics data is processed to analyse aggregate usage and improve the site. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest). No personal data is processed.

4. Processors and infrastructure

We use the following service providers. Where GDPR requires it, appropriate data processing agreements and technical safeguards are in place.

  • Hetzner Online GmbH (Germany) — hosting provider for this website. Servers are located in Germany (EU). Hetzner may briefly process IP addresses for security and operational purposes.
  • Plausible Analytics (self-hosted) — privacy-friendly website analytics, operated by us on our own infrastructure at plausible.apx.ai. No cookies, no cross-site tracking, no personal data stored.
  • Email. Email correspondence with us is delivered through our business email provider and stored in our mailboxes. Contents are handled in accordance with this policy and applicable business-correspondence retention requirements.

5. Retention

Email correspondence is retained for as long as necessary to process your inquiry, plus any legal retention obligations that may apply (German tax and commercial law requires retention of certain business correspondence for up to 10 years). You may request earlier deletion at any time.

Analytics and technical access data are aggregated or deleted within a short period and contain no personal identifiers.

6. Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

7. Cookies

This website does not use tracking cookies. Our analytics provider Plausible operates entirely without cookies. The only storage your browser may use is session-local, never persistent for tracking.

8. Changes to this policy

We may update this privacy policy to reflect changes in our practices, the services we use, or legal requirements. The “last updated” date at the top of this page always reflects the current version.

Supervisory authority

If you believe your data protection rights have been violated, you may file a complaint with the competent supervisory authority:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany
https://datenschutz-hamburg.de

← Back to home