Privacy Policy

This privacy policy was last updated in October 2024.

We, LC by vBoxx GmbH, operate the website leitz-cloud.com and the website leitzcloud.eu and collect certain data from our visitors and customers, to the extent necessary. In the following privacy policy, you will learn what we do with your data, so-called personal data, and why we do it. We also inform you how we protect your data, when the data will be deleted, and what rights you have thanks to data protection.

We use your personal data exclusively for the purpose of business processing, in particular for providing our online services, your user account, and for payment processing in connection with leitzcloud.

If you have provided us with personal data, we generally do not pass it on to third parties. Disclosure to companies outside LC by vBoxx GmbH only occurs within the scope of your consent, in the context of processing your inquiries, your use of our services, and to commissioned subcontractors who receive the necessary data for processing an order. Furthermore, we transmit personal data to the authorized bodies within the scope of fulfilling legal obligations.

Whom Can I Contact?

What are My Rights?

You can contact us at any time if you have questions about this privacy policy, your data protection rights, or if you wish to assert your following rights:

  • Right of withdrawal according to Art. 7 para. 3 GDPR (e.g., you can contact us if you wish to revoke a previously given consent for a newsletter)
  • Right of access according to Art. 15 GDPR (e.g., you can contact us if you want to know what data we have stored about you)
  • Rectification according to Art. 16 GDPR (e.g., you can contact us if your email address has changed and we should replace the old email address)
  • Erasure according to Art. 17 GDPR (e.g., you can contact us if we should delete certain data we have stored about you)
  • Restriction of processing according to Art. 18 GDPR (e.g., you can contact us if you want us not to delete your email address, but only to use it for sending absolutely necessary emails)
  • Data portability according to Art. 20 GDPR (e.g., you can contact us to receive your data stored with us in a compressed format, e.g., because you want to make the data available to another website)
  • Right to object according to Art. 21 GDPR (e.g., you can contact us if you do not agree with one of the advertising or analysis procedures specified here)
  • Right to lodge a complaint with the competent supervisory authority according to Art. 77 para. 1 GDPR (e.g., in case of complaints, you can also contact the data protection supervisory authority in your federal state directly)

Competent supervisory authority:

The Hessian Commissioner for Data Protection and Freedom of Information

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Deletion of Data and Storage Period

Unless otherwise specified, we delete your data as soon as it is no longer required, for example, your email address after unsubscribing from our newsletter. Your data will also be blocked or deleted if a storage period prescribed by law expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract. Certain data may need to be retained longer for legal reasons. You can, of course, request information about the stored data at any time.

Website Visit

If you merely wish to browse our website, we do not collect any personal data, with the exception of the data transmitted by your browser to enable the website visit, primarily:

  • IP address (e.g., 95.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
  • Approximate location based on IP range (e.g., Berlin & surrounding area)
  • Date and time (e.g., 11:45 AM on 2018-05-25)
  • Last visited website (e.g., google.de)
  • Browser (e.g., Chrome or Safari)
  • Operating system (e.g., Mac OS)

As a protective measure in favor of your privacy, we delete or anonymize the IP address after your visit to our website. Thus, the other technical data can no longer be traced back to you and serve only anonymous, statistical purposes for optimizing our website. The purpose of the temporary storage of data is, on the one hand, the technical necessity for establishing a connection and the correct, error-free display of our website. The IP address and the technical data already mentioned are necessary to display the website, avoid display problems for visitors, and resolve error messages. The legal basis is the so-called legitimate interest, which has been examined within the framework of the aforementioned protective measures and in accordance with the European data protection requirements from Art. 6 para. 1 lit. f GDPR.

Contact Form

You have the option to contact us via our contact form. You can provide us with the following data:

  • First/Last Name
  • Email Address
  • Your message

As a protective measure, contact is made – just like the visit to the rest of the website – via an encrypted connection. After successful contact and completion of the contact request, your data will be immediately deleted. The purpose of the requested data is solely to establish contact or communication with you, which is why the data is only used for this purpose. The legal basis is the so-called legitimate interest, which has been examined for the pursuit of the purpose and within the framework of the aforementioned protective measures, as well as in accordance with the European data protection requirements from Art. 6 para. 1 lit. f GDPR.

hCaptcha

We use the hCaptcha service from Intuition Machines Inc. (350 Alabama St., San Francisco, CA 94110, USA; “Intuition”) on our website.

This serves the purpose of distinguishing input by a human or by automated, machine processing. In the background, Intuition collects and analyzes usage data, which is used by hCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Intuition and may be further used there. Additionally, the IP address and, if applicable, other data required by Intuition for the hCaptcha service are transferred to Intuition. This data is processed by Intuition within the European Union and, if applicable, also in the USA.

For data processing in the USA, Intuition complies with the requirements of the US data protection agreement “California Consumer Privacy Act (CCPA)” and is also ISO/IEC 27001 and SOC 2 Type II certified. Furthermore, Intuition complies with the requirements of the GDPR. Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from the legitimate interest to protect our website from automated espionage, misuse, and SPAM.

Further information on hCaptcha and the associated privacy policy can be found at: https://www.hcaptcha.com/gdpr and https://www.hcaptcha.com/privacy

Registration

You also have the option to register on our website and then log in at any time with a user account. To register with us, the following data is required:

  • First/Last Name
  • Email Address
  • Address
  • Phone number
  • Password
  • Company

As a protective measure, the transmission of the data you enter – just like the visit to the rest of the website – takes place via an encrypted connection. After successful confirmation, your data will be stored until you decide to delete individual data or the entire user account. The purpose of the requested data is the creation of a user account for using extended functions on the website. Registration is voluntary and can be revoked or user data deleted at any time. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 lit. a GDPR.

File Upload and Cloud Usage

When using our services, we offer the possibility to upload and store text files, documents, images, videos, and other digital content via an encrypted SSL/TLS connection to our servers. Strict internal data protection processes and security regulations govern and ensure that this digital content is not made accessible to anyone else. At no time will we pass on this content to third parties, unless a valid German court order requires us to do so.

Payment

We offer the option to pay the usage fees via PayPal, credit card, or SEPA direct debit. If you choose PayPal, SEPA direct debit, or credit card, you authorize us to debit the monthly fees for the selected product from you at any time. The cancellation of all recurring payment methods can be done within the payment method itself, in the dashboard (customer portal), or by deleting your user account.

Newsletter

If you are interested in news about our company or our products, you can subscribe to our newsletter. You will then receive an email in which you must click a link to confirm receipt of the newsletter. By clicking a link, you confirm that you wish to receive our newsletter. We will then store your email address until you unsubscribe from the newsletter. For this purpose, each email of our newsletter contains a corresponding unsubscribe link. The newsletter is delivered by a specialized service provider.

As a protective measure, we request the so-called “double opt-in” to ensure that the registered email address actually belongs to you. Furthermore, we have concluded a data processing agreement (order processing) with the commissioned service provider. You also have the option to unsubscribe from the newsletter at any time and thus delete your email address from the service provider’s database. The purpose of data collection is the delivery of the newsletter to your personal email address to fulfill your wish for news about our company or our products. The legal basis is your consent in accordance with the European data protection requirements from Art. 6 para. 1 lit. a GDPR.