Privacy Policy

Last updated: March 27, 2026

1. Controller

The controller responsible for data processing on this website is:

LeapLytics GmbH
Stefan Preusler & Dominik Galsheimer
Teutonenweg 18
63128 Dietzenbach, Germany

VAT ID: DE344747402

2. Data Collection on This Website

What data do we collect?

We collect personal data when you submit inquiries through our contact form, use our services, or become a customer. This includes:

• First and last name
• Business email address
• Company name and job title
• IP address, access timestamps, and browser information

What do we use your data for?

• Providing requested services
• Maintaining system security and integrity
• Preventing misuse and detecting fraud
• Analyzing user interest for business development
• Complying with legal obligations

Legal basis

Your data is processed on the following legal grounds:

• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR — Legitimate interests (security, analytics)
• Art. 6(1)(c) GDPR — Compliance with legal obligations

3. Data Retention

Your data is deleted as soon as it is no longer required for the stated purposes, unless statutory retention periods apply. Under the German Commercial Code (HGB) and Tax Code (AO), retention periods are typically 6–10 years. For the defense of legal claims, data may be retained for up to 30 years.

4. Recipients and International Transfers

Personal data may be disclosed to the following recipients:

• Authorized personnel
• IT service providers and hosting providers
• Other operational support providers

Service providers are bound by data processing agreements pursuant to Art. 28 GDPR. Transfers outside the European Economic Area only occur with appropriate safeguards under Art. 44 ff. GDPR.

5. Your Rights

Under the GDPR, you have the following rights:

• Access — Confirmation of processing and obtaining copies (Art. 15)
• Rectification — Correction of inaccurate data (Art. 16)
• Erasure — Right to be forgotten (Art. 17)
• Restriction — Restriction of processing (Art. 18)
• Data portability — Receive data in a structured, machine-readable format (Art. 20)
• Objection — Object to processing based on legitimate interests (Art. 21)
• Withdraw consent — At any time, without affecting the lawfulness of prior processing
• Lodge a complaint — With a supervisory authority

6. Cookies and Tracking

This website uses cookies and similar technologies. On your first visit, you will be asked for your consent via a cookie banner. You can withdraw your consent at any time using the "Cookie settings" link in the footer.

6.1 Essential Cookies

These cookies are technically necessary and cannot be declined. They ensure basic functions such as storing your cookie preference.

• aversight_consent — Stores your cookie consent (Duration: 1 year, Technology: localStorage / Cookie fallback)

6.2 Analytics Cookies

These cookies are only set when you select "Accept all". We currently use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

• Purpose: Statistical analysis of website usage (visitor numbers, page views, time spent)
• Legal basis: Art. 6(1)(a) GDPR (your consent)
• Technical details: IP anonymization enabled, no ad personalization, no data sharing with third parties
• Data transfer: USA (under guarantees per Google Analytics Data Processing Amendment)

If you select "Essential only" or "Reject", Google Analytics will not be loaded and the gtag script is blocked.

6.3 Legal Basis

Processing based on cookies is carried out under Art. 6(1)(a) GDPR (consent) for non-essential cookies. Essential cookies are based on Art. 6(1)(f) GDPR (legitimate interest in functionality).

6.4 Withdrawal

You can withdraw your consent at any time with effect for the future by clicking "Cookie settings" in the footer and reopening the banner. You can delete already stored cookies through your browser settings.

7. Contact Form

When you use our contact form, your information is forwarded to us exclusively by email. No data is stored in a database. Communication is encrypted via HTTPS.

8. Automated Decision-Making

As a responsible company, we do not use automated decision-making or profiling.

9. Supervisory Authority

Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany