Privacy Policy

1. Controller

Company

Leaplytics GmbH

Managing Directors

Stefan Preusler & Dominik Galsheimer

Address

Teutonenweg 18, 63128 Dietzenbach, Germany

Email

info@leaplytics.de

VAT ID

DE344747402

2. General

The protection of your personal data is important to us. We process your data exclusively on the basis of statutory provisions, in particular the General Data Protection Regulation (GDPR). In principle, our website can be used without providing personal data. Where personal data is collected on our pages, this is done voluntarily or on a legal basis.

3. Collection and processing of personal data

We collect and process personal data only where this is necessary to provide our website and services:

• Contact by email: name, email address, company, message. This data is used exclusively to handle your request (for example to arrange a demo).
• Server log files: each time our website is accessed, technical data (IP address, date and time of access, browser type, operating system, referrer URL) is stored temporarily in server log files. This data is required for the security and stability of the website.
• Visitor statistics (only with consent): usage data (for example pages visited, time on page, approximate location, referrer and clicks on individual buttons) is collected exclusively with your consent via Google Analytics 4 (measurement ID G-DPLZMD824W). Without your consent the analytics script is not loaded and no usage data is transmitted to Google.

4. Legal bases

Your data is processed on the following legal bases:

• Art. 6 (1) (b) GDPR for pre-contractual measures and contracts.
• Art. 6 (1) (f) GDPR for our legitimate interest in the security and functionality of the website.
• Art. 6 (1) (a) GDPR where you have given us your consent.

5. Disclosure of data

Your personal data is only passed on to third parties where this is necessary to provide our services or where we are legally obliged to do so. Service providers we use are bound by data processing agreements pursuant to Art. 28 GDPR. In the MVP we provide contact via a direct email link; no data is transmitted to third-party form services.

The recipients are Cloudflare, Inc. (hosting, section 6) and, only where you have consented to visitor statistics, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics 4, section 7). No data is transferred for advertising purposes.

6. Hosting

Our website is hosted at Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes data (in particular IP addresses as part of delivering the website and its security features) as a processor on the basis of an agreement pursuant to Art. 28 GDPR.

Personal data is transferred to the USA on the basis of the EU-US Data Privacy Framework (Cloudflare, Inc. is certified under the DPF; current status available at dataprivacyframework.gov). Otherwise, data is only transferred to third countries where this is necessary to provide our services and is safeguarded by appropriate guarantees (EU standard contractual clauses or an adequacy decision).

7. Cookies and tracking

Our website does not use cookies for advertising purposes. To store your consent we use your browser's localStorage; where this is not available, we set the technically necessary cookie leapfacto_consent with a lifetime of twelve months. This storage is permitted without consent under Section 25 (2) TDDDG (German Act on Data Protection in Telecommunications and Digital Services). For all other storage we obtain your consent under Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

For pseudonymised visitor statistics we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); the measurement ID of the property is G-DPLZMD824W. Google Analytics is loaded exclusively with your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG; without consent the analytics script is not embedded in the page and no data is collected. After consent, Google sets the cookies _ga and _ga_DPLZMD824W (lifetime up to two years in Google's default configuration), which assign returning visits. The data collected comprises, among other things, pages visited, time on page, approximate location, referrer, browser and device information and clicks on individual buttons; Google's default measurement additionally records scroll depth and clicks on outbound links. According to Google, Google Analytics 4 does not store complete IP addresses; the identifier is pseudonymous. Signals for personalised advertising are disabled for this website (Google Signals and ad personalisation are switched off); the statistics data is not used for advertising purposes. Google processes the data as a processor on the basis of Google's data processing terms (Art. 28 GDPR). Data is transferred to the USA on the basis of the EU-US Data Privacy Framework (Google LLC is certified under the DPF). We keep the retention period for usage data at Google's default of 14 months. You can withdraw your consent at any time via the "Cookie settings" link in the footer or by email to info@leaplytics.de; when you decline or withdraw, we delete the analytics cookies set in your browser and reload the page without the Google tag. Without a new consent, no further usage data is transmitted.

8. Storage period

We store personal data only for as long as is necessary for the purposes for which it was collected, or as long as statutory retention obligations apply (under German commercial and tax law, generally 6 to 10 years). After that, the data is deleted or anonymised.

9. Your rights

As a data subject, you have the right to:

• access to your stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent with effect for the future

To exercise your rights, you can contact us at any time at info@leaplytics.de.

10. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority at any time. The competent authority for Hesse is:

Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
https://datenschutz.hessen.de

11. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

12. Changes to this privacy policy

We reserve the right to adapt this privacy policy where necessary in order to reflect changes in the legal framework or in our services. The current version is always available on this page.

Last updated: 15 September 2026