Privacy Policy
Last updated: March 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
LeCoCa Investment Management GmbH
(operating under the brand Arveum)
Jägerberg 23, 82335 Berg
Germany
Managing Director: Albrecht Senden
Email: datenschutz@arveum.com
Contact person pursuant to the German Telemedia Act (TMG):
Philipp Montgelas
Email: datenschutz@arveum.com
2. General Information on Data Processing
We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing takes place only with the user's consent or where a legal basis exists.
3. Hosting and Server Log Files
This website is hosted on our own server. Each time the website is accessed, the server automatically records the following data in log files:
– IP address of the requesting device
– Date and time of the request
– Name and URL of the file accessed
– Referrer URL (previously visited page)
– Browser used and operating system
– HTTP status code
This data is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in website security and operation).
Retention period: maximum 7 days.
4. Contact Form
If you send us an inquiry via the contact form, the following data will be processed: name, company, email address, phone number, EBIT figure, and your message. This data is used solely to process your inquiry and for any follow-up questions, and will not be shared with third parties without your consent.
Data is transmitted by email via a secure SMTP server (TLS encryption). Form data is not stored permanently in a database.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interests).
Retention period: Until your inquiry has been fully processed, no longer than 3 years.
5. Cookies and Consent
We use strictly necessary cookies required for the operation of this website, and – subject to your consent – analytics cookies from Google Analytics 4 (GA4).
Strictly Necessary Cookies:
These cookies are required for the basic functions of the website and cannot be disabled. They store your cookie preferences, chosen language, and display setting. No personal data is transferred to third parties.
– arveum-theme: Display setting (light or dark mode). Duration: 1 year.
– arveum-locale: Preferred language following a manual language switch. Duration: 1 year.
– arveum-consent: Cookie consent (version, timestamp, preferences). Duration: 12 months.
Local Browser Storage (LocalStorage):
– arveum-theme: Mirror of the display preference stored as a fallback.
Legal basis for necessary cookies: Art. 6(1)(f) GDPR (legitimate interest) and Art. 6(1)(a) GDPR (for arveum-consent).
Analytics Cookies (with your consent only):
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow St, Dublin 4, Ireland. GA4 uses cookies (_ga, _gid, _ga_*) to collect anonymised information about how this website is used (pages visited, time on site, approximate geographic location). IP addresses are anonymised before storage (IP anonymisation is enabled by default in GA4).
Legal basis: Art. 6(1)(a) GDPR (consent).
International transfer: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU–U.S. Data Privacy Framework; Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR additionally apply.
Retention period: up to 26 months.
Right to withdraw: You may withdraw your consent at any time with effect for the future by clicking "Cookie Settings" in the footer of this website.
You can delete cookies and local storage at any time via your browser settings.
6. Bot Protection (Cloudflare Turnstile)
On our contact and newsletter form pages, we use the bot protection service Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Cloudflare Turnstile analyses user behaviour based on various signals (e.g. browser environment, interaction patterns) to distinguish automated requests (bots) from human users. Data may be transferred to Cloudflare servers in the USA. Cloudflare is certified under the EU–U.S. Data Privacy Framework (DPF), ensuring an adequate level of data protection.
Further information: https://www.cloudflare.com/privacypolicy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interests in security and abuse prevention).
7. Fonts
This website uses exclusively self-hosted fonts (Space Grotesk, Inter). No requests are made to external servers. Third parties therefore receive no information about your visit to this website.
8. Data Security
This website uses TLS/SSL encryption. You can identify an encrypted connection by the https:// prefix in your browser’s address bar.
9. Your Rights as a Data Subject
As a data subject, you have the following rights:
– Right of access (Art. 15 GDPR)
– Right to rectification (Art. 16 GDPR)
– Right to erasure (Art. 17 GDPR)
– Right to restriction of processing (Art. 18 GDPR)
– Right to data portability (Art. 20 GDPR)
– Right to object (Art. 21 GDPR)
– Right to withdraw consent (Art. 7(3) GDPR) – at any time with effect for the future
To exercise your rights, please contact: datenschutz@arveum.com
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de
11. Updates to this Policy
We reserve the right to update this privacy policy to comply with changes in legal requirements or our data processing activities. The version current at the time of your visit applies.