Privacy Policy
Introduction
We appreciate your interest in our website. The protection of your personal data is very important to us. The entity responsible for data processing on this website is Lola Stories, c/o HdM Stuttgart Sandbox, Nobelstraße 10, 70569 Stuttgart, Germany. Below we inform you about how we handle your personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Hosting
Our website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit our website, Vercel automatically collects technical access data (server log files), including your IP address, browser type, operating system, referrer URL, and time of access. This data is technically necessary to reliably deliver the website and is processed based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. We have concluded a Data Processing Agreement (DPA) with Vercel to ensure the protection of your data in compliance with the GDPR.
Data Collection
We collect the following personal data: • Server log files: IP address, browser type, operating system, referrer URL, time of access. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). • Waitlist / newsletter signup: Email address that you voluntarily provide to be notified about the launch of Lola Stories. Legal basis: Consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. • Contact inquiries: Data you share with us via email or contact forms (e.g., name, email address, message content). Legal basis: Pre-contractual measures or legitimate interest (Art. 6(1)(b), (f) GDPR).
Cookies & Analytics
Our website uses technically necessary cookies that are required for the operation of the site (e.g., language settings, cookie consent preference). These are stored based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free delivery of our website. In addition, we use the following analytics tools, which are only activated after you have given your explicit consent via our cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by clearing your browser cookies or clicking "Decline" in the cookie banner. • Google Analytics 4 (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage. We have enabled IP anonymization, so your IP address is truncated before transmission. We have concluded a Data Processing Agreement with Google. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. You can also use the Google Analytics opt-out browser add-on. • Lumitra Analytics, our self-hosted analytics platform operated by Lola Stories on our own servers within Germany. It collects pageview data, click interactions (for heatmaps), scroll depth, browser and device information, and referrer URLs. Your IP address is anonymized using a one-way cryptographic hash with a daily rotating salt — the raw IP address is never stored. All data remains on our own infrastructure and is not shared with third parties. No Data Processing Agreement with external parties is required. • Session Replay (part of Lumitra Analytics): With your consent, we record anonymized replays of your browsing session to understand how visitors interact with our website. All form inputs (including passwords, email addresses, and phone numbers) are automatically masked and never recorded. The replay captures only the visual structure of the page, not the content you type. Session replay data is stored on our own servers and automatically deleted after 12 months. You can prevent all analytics data collection by declining cookies in our cookie banner.
Your Rights
Under the GDPR, you have the following rights: • Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data stored by us. • Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data. • Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided no statutory retention obligations apply. • Right to restriction of processing (Art. 18 GDPR): You may request the restriction of the processing of your data. • Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format. • Right to object (Art. 21 GDPR): You may object to the processing of your data at any time. • Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
Contact
If you have any questions about data protection or wish to exercise your rights, you can reach us at any time: Lola Stories c/o HdM Stuttgart Sandbox Nobelstraße 10 70569 Stuttgart Germany Email: hello@lolastories.com
Changes
We reserve the right to update this privacy policy to reflect changes in the legal situation or changes to our service or data processing. The current version published on our website shall always apply. Last updated: March 2026