Privacy policy

Data controller

Levara GmbH
Glossery is a brand of Levara GmbH.
Herrenlandstraße 31–35
78315 Radolfzell am Bodensee
Represented by Managing Director Sasa Matic.info@glossery.de
07732 9572795

Our management team is your point of contact for privacy matters. No separate data protection officer has been appointed.

Website and hosting

This website uses Odoo on the Odoo.sh platform. The provider is Odoo S.A. in Belgium. Technical connection data is processed to provide and secure the website, including IP address, time and destination of access, and information about your browser and operating system.

This processing supports the reliable and secure provision of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure operation of our website.

The Odoo.sh project is set to the Europe hosting region. Odoo currently lists Saint-Ghislain in Belgium for this region. Odoo processes data on our behalf under the agreed data processing provisions. Its infrastructure providers include Google Cloud and OVHCloud. You can find the current list in the Odoo privacy policy.

Odoo states that server and security logs are retained for no more than twelve months, unless security incidents or legal obligations require longer retention. Regular Odoo.sh backups are retained for up to three months; under Odoo’s security provisions, deleted data may remain in immutable backups for up to twelve months. This data is not used for ongoing processing.

According to the provider, backups for the European hosting region are located in the EU; during the ongoing transition, existing projects may also have a backup in Canada. Limited support access from other countries is possible. Such transfers are covered by Odoo’s EU Standard Contractual Clauses or applicable adequacy decisions. Further information is available in the linked provider privacy policy.

Contact and quote enquiries

When you contact us by form, email or telephone, we process your contact details and information about your enquiry. The form requires your name, email address, subject and message. Telephone number and company are optional. Without the required information, we cannot process your form enquiry.

We use your information to respond to your enquiry and discuss a quote. For enquiries relating to a contract, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries under Article 6(1)(f) GDPR; our legitimate interest is responding to messages addressed to us.

Form enquiries are processed through Odoo and forwarded to our contact address. Access is given to the people or departments needed to handle them. Information is retained only as long as necessary to process the enquiry and, where applicable, carry out the contract. Statutory retention obligations and the protection of legal claims may require longer retention.

We use Microsoft 365 with Exchange Online for business email. The provider is Microsoft Ireland Operations Limited. Microsoft processes messages, contact details and, where applicable, attachments on our behalf. The applicable data processing terms are set out in the Microsoft Data Protection Addendum (DPA). Necessary transfers to third countries are subject to the safeguards described there, in particular EU Standard Contractual Clauses or applicable adequacy decisions. The deletion and retention rules below also apply to our business emails.

We generally delete completed enquiries that did not result in an order six months after processing has finished. Exceptions apply where statutory retention obligations, ongoing proceedings or the establishment, exercise or defence of legal claims require longer storage. Order-related documents are subject to the applicable statutory retention periods.

Job applications

You can apply to us by email. Your contact details, CV and other documents you provide are used to decide whether to establish an employment relationship. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG). Access is intended to be limited to those involved in the recruitment process.

The Stepstone link leads to an external website. The relevant provider’s privacy notice also applies there. No Stepstone application form is embedded on our careers page.

For unsuccessful applications, we generally delete application documents six months after the recruitment process ends, unless ongoing proceedings or legitimate retention grounds require otherwise. If you are hired, necessary information is transferred to personnel administration. Inclusion in a candidate pool requires separate consent.

Cookies and your choices

Odoo uses cookies for sessions, technical security, language settings and storing cookie preferences. Technically necessary access to your device is governed by Section 25(2) TDDDG. Where personal data is processed, this is based on Article 6(1)(f) GDPR and our interest in a functional, secure website.

The cookie banner lets you choose between necessary and optional cookies. Blocking embedded third-party services until consent is enabled. Optional cookies and services requiring consent may only be used after you consent; the legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Details are available in our cookie policy. It lists the cookie types, purposes and lifetimes and lets you change your preferences.

Analytics and external links

Google Analytics and Plausible Analytics are currently not connected. Any future analytics feature will only be set up once the provider, scope of data and legal basis are established and this policy has been updated accordingly.

Instagram and Stepstone are external links. You leave our website only when you open them; the respective provider is responsible for processing on the destination website. Our home and contact pages offer a Google Maps map that loads only with your separate consent. Videos and social media feeds are not currently embedded.

Glossery Studio

The 3D configurator processes your selections and interactions in your browser to display the vehicle. All required models and environment images are provided by our website; no external 3D service is embedded. If you select “Enquire about this look”, your chosen settings are passed to the contact page through the destination URL and inserted into the subject and message. Your enquiry is only sent when you submit the form. The information in Section 3 applies.

Photo mode temporarily keeps approximately the last twelve seconds of animation in your browser’s memory. This record contains scene settings and movement values. It is not automatically sent to us and is discarded when you leave or reload the page. A photo showing your selected colour and finish is generated locally and downloaded only when you click the download button. Where supported, Share opens your device’s sharing function. The image is passed to another service only after you choose a recipient or app and confirm sharing there; that service’s privacy terms also apply. The optional synthesised engine sound is generated on your device as well.

Secure transmission

The website is accessible via HTTPS. Data is encrypted during transmission between your browser and the website. Ordinary email communication may have different security conditions; please do not send particularly sensitive information that is unnecessary for your enquiry.

Your rights

Subject to the legal requirements, you may request access, rectification, erasure, restriction of processing and data portability. You may withdraw consent for the future; the lawfulness of processing before withdrawal remains unaffected.

Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

For questions about your data, contact us at info@glossery.de. You may also lodge a complaint with a data protection supervisory authority, particularly the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Last updated: 11 October 2026.