Privacy policy
This policy applies to the website and customer portal at www.levara-group.com.
1. Controller and contact
Levara GmbH, Herrenlandstraße 31–35, 78315 Radolfzell am Bodensee, Germany. Managing director: Sascha Matic. For privacy enquiries, contact info@levara-group.com or call +49 7732 8902990.
2. Hosting and technical security
When you visit the website, technically necessary connection data is processed, including your IP address, time of access, requested page and browser/device information. This supports delivery, security and troubleshooting. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in operating a secure website.
The website and portal are hosted through Odoo.sh by Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, under the agreed data-processing terms. Details of service providers, possible international transfers and safeguards are available in Odoo’s privacy information.
3. Quotations, orders and customer accounts
We process contact and address details, contractual and billing information, and documents and messages you provide for your transaction. We use this information to prepare quotations, perform contracts, communicate and provide portal access under Article 6(1)(b) GDPR, and to meet legal obligations under Article 6(1)(c) GDPR.
Access is available through an established customer account or a personal document link. Such a link may grant access without signing in. Keep it confidential and only share it with authorised people. Accounts are created by invitation.
4. Email and telephone enquiries
We process the information you provide to respond to your enquiry. Contract-related enquiries are handled under Article 6(1)(b) GDPR; other enquiries under Article 6(1)(f) GDPR and our legitimate interest in responding. Email is processed through Microsoft 365 under the applicable privacy and data-processing terms. See the Microsoft Data Protection Addendum. Domain services are supplied through GoDaddy.
5. Cookies and external services
The portal uses technically necessary cookies for functions such as sign-in, sessions, security and language. Necessary access to your device is based on section 25(2) TDDDG. Related personal-data processing is based on Article 6(1)(b) or (f) GDPR, depending on the purpose.
No Google Analytics or Plausible analytics is configured for this website. Our contact page does not embed a map or social feeds. External links, including links to Glossery, lead to other websites governed by their respective privacy information.
6. Retention and recipients
Access is limited to staff responsible for handling the matter and the processors we use. Data is retained only as long as needed for its purpose or as required by statutory retention duties, ongoing proceedings or the establishment, exercise or defence of legal claims. Closed enquiries that do not lead to an order are generally deleted after six months unless one of those reasons requires longer retention. Contract and invoice records are retained for the applicable statutory periods.
7. Your rights
Subject to the legal requirements, you may request access, rectification, erasure, restriction of processing and data portability. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Any consent may be withdrawn with future effect.
You may complain to a data-protection supervisory authority, including the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
Last updated: 15 October 2026.