[ Hier klicken, um die deutsche Version anzuzeigen ]
This privacy policy outlines how we (Leapsome GmbH) record and use the personal data we collect from you or that your employer provides to use through your use of our website and our platform.
This Privacy Policy applies to Leapsome’s online platform (the “Service”), Leapsome.com (the “Website”) and other interactions (e.g., customer service requests, etc.) you may have with Leapsome. If you do not agree with the terms, please do not access or use the Service, Website or any other aspect of Leapsome business.
In addition, a separate agreement governs delivery, access and use of the Service (the “Service Agreement”), including the processing of any personal data, messages or other content submitted through Service accounts (collectively, “Customer Data”). The organization that entered into the Service Agreement (“Customer”) controls their instance of the Service (their “Customer Account”) and any associated Customer Data.
Leapsome may collect and receive Customer Data and other information and data (“Other Information”) in several ways in accordance to the General Data Protection Regulation (GDPR) of the EU:
Generally, no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (collectively, “Information”). However, certain Information is collected automatically and, if some Information, such as Customer Account setup details, is not provided, we may be unable to provide the Service.
Customer Data will be used by Leapsome in accordance with Customer’s instructions, including any applicable terms in the Service Agreement and Customer’s use of Service functionality, and as required by applicable law. Leapsome is a processor of Customer Data and Customer is the controller. A Customer may, for example, use the Service to grant and remove access to a Customer Account, assign roles and configure settings, access, modify, export, share and remove Customer Data and otherwise apply its policies to the Service.
Leapsome uses Other Information to pursue its legitimate interests in operating our Service, Website and business, according to Art. 6 Abs. 1 S. 1 lit. f GDPR. More specifically, Leapsome uses Other Information:
If Information is aggregated or de-identified so it is no longer reasonably associated with an identified or identifiable natural person, Leapsome may use it for any business purpose. To the extent Information is associated with an identified or identifiable natural person and is protected as personal data under applicable data protection law, it is referred to in this Privacy Policy as “Personal Data.”
This section describes how Leapsome may share and disclose Information. Customers determine their own policies and practices for the sharing and disclosure of Information, and Leapsome does not control how they or any other third parties choose to share or disclose Information.
Leapsome uses a technology called “cookies” to store session information. We use persistent cookies in order to ensure system security and to continuously improve our Service. A cookie is a small amount of data, which includes an anonymous unique identifier that is sent to your browser from our website’s computers and stored on your computer’s hard drive. Leapsome will set and access Leapsome’s cookies on your computer. Persistent cookies will be deleted automatically from your computer after a predetermined period which can differ based on the cookie type. Cookies are required for the Service to function fully and reliably are stored on the basis of our legitimate interests in operating our Service, Website and business, according to Art. 6 (1) (f) GDPR.
Right of objection: You can decide yourself via your browser settings whether you want to allow cookies or object to the use of cookies. Please note that disabling cookies may result in restricted or completely disabled website functionality.
Leapsome uses Google Analytics to collect information about its visitors. Google Analytics, a web analysis service of Google Inc., (“Google”, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics stores cookies on your computer which allows to analyze the surfing patterns of visitors to a website. The information generated by the cookie about your use of this website (including your anonymized IP address) will be sent to a Google server in the United States and stored there. Google is Privacy Shield certified and thus ensures the European data protection law.
Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to report other website activity and internet-related services. If required by law, Google will pass along this information to third parties. Google will also pass along data to third parties for processing, provided this processing is done on behalf of Google. Under no circumstances shall Google connect your IP address with any other data held by Google. If you wish, you can adjust your browser settings so as to refuse cookies. Please keep in mind, however, that if you refuse all cookies, you will not necessarily have access to all functions of this website. By using this site, you consent to the processing of your data by Google as described above, for the aforementioned purpose.
We use Google Fonts on our website. This allows us to display fonts there. Google Fonts is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, California, 94043). Integration of these web fonts into our website is done by accessing a server, usually a Google server in the United States. This may result in the following being transferred to that server and stored by Google:
For more information, see Google’s Privacy Policy, which you may access here.
The use of Google Fonts is intended to make it easier to read and view our website and achieve more pleasing graphic design, and is thus based on our legitimate interests under Art. 6 (1) (f) GDPR.
We use Google AdWords on our website, an online advertising program from Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). As part of Google Adwords, we also use the conversion tracking feature. With this tool, Google AdWords sets a cookie on your client device when you visit our website via a Google ad. The cookie will expire after 30 days. The cookie does not create any personal traceability. If you visit our website as a user and the cookie is still working, we and Google will recognise that you clicked on the ad and were redirected to our site. Each Google AdWords customer is assigned a different cookie. Cookies are thus not traceable via the websites of the advertisers. The data obtained using conversion cookies is used to generate conversion statistics for AdWords customers. From these statistics, as an AdWords customer, we can see the total number of users who reacted to our ad and were redirected to a website with a conversion tracking tag. We do not receive any information by this process which could be used to personally identify you as a user. If you wish to decline the tracking process, you can disable the Google conversion tracking cookie via your internet browser. You can use the browser’s help function for more information. More details of Google’s Privacy Policy are available at http://www.google.de/policies/privacy/.
On this website we use the service "Google Audiences". The purpose of this service is the interest-based presentation of advertisements for users. This requires an analysis of the website's use, which is based on cookies. The cookies store anonymous or pseudonymised data in relation to the use of the website. There is no storage of personal data. If you visit other websites that also use these services, you will be presented with ads that match your previous interests. It is not excluded that your data will be transmitted to the United States. Google is Privacy Shield Certified.
The legal basis for the use of the service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to target the users of the website purposefully with advertising. For more information, visit https://www.google.com/privacy/ads/
If you want to stop this tracking, then you can use the following link.
This website uses the YouTube service to embed videos in the site. The operator of the necessary software for the necessary plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a YouTube Embedded Videos page on the YouTube plug-in, you'll be connected to YouTube's servers. It tells YouTube which pages you visit, even if you don’t have a Youtube account. If you start a video, then the operator uses cookies, which collect data about the user behavior.
For more information on the privacy of "YouTube", see the privacy policy of the operator at: https://www.google.com/intl/en/policies/privacy/
This website uses the service “Microsoft Advertising”. Microsoft Advertising is a conversion and tracking service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft places cookies in the users’ devices that analyze the user behavior on our website. This presupposes that the user has reached our website through a Microsoft Advertising advertisement. This only serves to provide use with information on the total number of users who have clicked on this type of advertisement. In this process, no IP addresses are stored, and no personal information on our users’ identity is shared.
The legal basis for the use of this service is article 6 (1) f) GDPR – justified interest. Our justified interest in the use of this service derives from the fact that we must be able to analyze and optimize the use of our website. You can find further information in Microsoft’s data privacy statement in: https://privacy.microsoft.com/de-de/privacystatement.
Microsoft is Privacy-Shield-certified: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active
On this website we use HubSpot for our online marketing activities. HubSpot is a US based software company with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
This is an integrated software solution that covers various aspects of our online marketing. These include:
E-mail marketing (newsletters and automated mailings, eg for the provision of downloads), social media publishing & reporting, reporting (eg traffic sources, access, etc. ...), contact management (eg user segmentation & CRM), landing pages and contact forms.
Our sign-in service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information and the contents of our website are stored on servers of our software partner HubSpot. They can be used by us to connect with visitors to our website and to determine what services our company is interested in. All information we collect is subject to this Privacy Policy. We use all information collected solely to optimize our marketing activities.
The legal basis for the use of the services of Hubspot is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in using this service is the optimization of our marketing efforts and the improvement of our service quality on the website.
HubSpot is sold under the terms of the "EU - US. Privacy Shield Frameworks "is certified and governed by the TRUSTe's Privacy Seal and" U.S. - Swiss Safe Harbor "Framework.
This website uses the "Facebook Custom Audiences" service. Facebook Custom Audiences is a service of Facebook Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA, hereinafter "Facebook"). This service allows us to engage users with interest-based advertising on the social network - Facebook.
To make this possible, we have implemented the Facebook remarketing tag on our website. This tag makes a direct connection to the Facebook servers when visiting the website. Facebook receives information about the pages that you have visited with us. Through Facebook, it then comes to a comparison with your Facebook user account. Next time you visit Facebook, you'll see personalized, interest-based ads - Facebook Ads.
The legal basis for the use of the service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to target the users of the website purposefully with advertising. If you want to stop this tracking, then you can use the following link.
Further information can be found in the privacy policy of Facebook: https://www.facebook.com/about/privacy/. Facebook is Privacy Shield certified: https://m.facebook.com/about/privacyshield
On this website, we use the Customer Relationship Management (CRM) service of Zendesk Inc., 989 Market Street # 300, San Francisco, CA 94102, USA.
The legal basis for the use of this service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to be able to answer user requests quickly and efficiently. Zendesk uses your data only to forward your inquiries to us. There is no disclosure to third parties.
To use Zendesk, you must provide at least one correct e-mail address. The service can also be used pseudonymized. During the processing of service requests it may be necessary to collect further data (eg first name, last name, address, etc.). The use of Zendesk is optional. If you do not agree with Zendesk collecting your information, we will provide you with alternate contact options for submitting service requests by telephone or post.
For more information, see Zendesk's Privacy Policy.
We use Retargeting Tool and LinkedIn Ireland Conversion Tracking, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, our website integrates the LinkedIn Insight Tag, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website, and to provide us with aggregated statistics on this basis. As a rule, the following information is recorded, among other things:
In addition, this information is used to show you specific and relevant offers and recommendations, after you have informed yourself on the website about certain services, information and offers. The relevant information is stored in a cookie.
If you want to stop this tracking, then you can use the following link. For more information about data processing, see the LinkedIn privacy statement.
On this website we use Capterra for our online marketing activities. Capterra is operated by the company Capterra Inc., a software company with headquarters at Capterra Inc., 1201 Wilson Blvd, 9th Floor, Arlington, VA 22209, USA.
If you initiate a so-called conversion event on a Leapsome website (e.g. requesting a product demo), then Capterra will place cookies that will be required for purposes of marketing and analysis and will send the information to the servers of Capterra Inc. that a conversion event has taken place. No personal data is transferred to the company Capterra Inc.
The legal basis for the use of this service is article 6 (1) f) GDPR – justified interest. Our justified interest in the use of this service derives from the fact that we must be able to assess the profitability of our Capterra marketing campaigns and also to optimize the use of our website.
You can find further information in Capterra’s data privacy policy: https://www.capterra.com/legal/privacy-policy
We use Hotjar in order to better understand our users’ needs and to optimize this website (and only the website, not the Service). Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our website with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
If you subscribe to our newsletter, we will save your e-mail address and use it to send you the newsletter (single opt-in). Your e-mail address will not be published or disclosed to third parties. To generate anonymized usage statistics, newsletters may include a tracking pixel.
If you request an appointment for a web demo, we will use your information to contact you and to coordinate and arrange an appointment with you.
In order to make our downloadable content available to you, we collect personal data from you. In the following we clarify about this data.
If you follow the links to our careers / job page via the different navigation menus, you will be redirected to JOIN, an independent applicant tracking system which will process your data based on their privacy policy..
Other Information that we collect from you may be transferred to, processed and stored at, a destination outside the European Economic Area ("EEA") where required to support certain features of the Service and/or to fulfil obligations in the Service Agreement. We will only transfer your personal data outside the EEA in compliance with the GDPR (Art. 44). We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this privacy policy.
Leapsome will retain Customer Data in accordance with a Customer’s instructions, including any applicable terms in the Service Agreement and Customer’s use of Service functionality, and as required by applicable law. Leapsome may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy. This may include keeping your Other Information after you have deactivated your account for the period of time needed for Leapsome to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes and enforce our agreements.
Where we have given you a username, password and/or security information which enables you to access particular features of the Service, you are responsible for keeping these access credentials confidential. You must not share these details with anyone, or store them in a way that may allow a third party to access them.
Leapsome takes all appropriate technical and administrative security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment, which is not publicly accessible. Your personal data is encrypted when transferred using Secure Socket Layer (SSL) technology. This means that communication between your computer and our servers uses a recognized encryption method, provided your browser supports SSL. You can read more about our security measures at https://www.leapsome.com/security.
To the extent prohibited by applicable law, Leapsome does not allow use of our Service and Website by anyone younger than 16 years old. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us and we will takes steps to delete such information.
You shall have the following rights with regards to your personal information:
Right of access
In accordance with Art. 15 GDPR, you shall have the right to request information about your personal data being processed by us. This right of access includes the following information:
Right to rectification
In accordance with Art. 16 GDPR, you shall have the right to request the prompt rectification of inaccurate or incomplete personal data stored by us.
Right to erasure
In accordance with Art. 17 GDPR, you shall have the right to request prompt erasure of your personal data stored by us, unless further processing is required for one of the following reasons:
Right to restriction of processing
In accordance with Art. 18 GDPR, you shall have the right to obtain the restriction of processing where one of the following applies:
Notification obligation
In accordance with Art. 19 GDPR, we will notify all recipients to whom your personal data have been disclosed, if you have requested rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, Art. 17 (1) and Art. 18 GDPR, unless this proves impossible or involves disproportionate effort. You may request that we inform you about those recipients.
Right to data portability
In accordance with Art. 20 GDPR, you shall have the right to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format.
You shall also have the right to request the transfer of these data to a third party, provided that processing was carried out by automated means and based on your consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) or for the performance of a contract pursuant to Art. 6 (1) (b) GDPR.
Right to withdraw consent
In accordance with Art. 7 (3) GDPR, you shall have the right at any time to withdraw consent previously granted to us by you. The withdrawal of consent shall not affect the lawfulness of processing carried out based on that consent before its withdrawal.
We may carry out no further processing based on the withdrawal of your consent.
Right to lodge a complaint
In accordance with Art. 77 GDPR, you shall have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.
Right to object
In accordance with Art. 21 GDPR, you shall have the right to object at any time object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes. In the latter case, you shall have a general right of objection which we shall implement without the need for your particular situation to be specified. You may exercise your right to object or to withdraw consent simply by sending an e-mail to support@leapsome.com .
Automatic individual decision-making, including profiling
In accordance with Art. 22 GDPR, you shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right shall not apply if the decision:
In the cases referred to in A. and C., we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
However, such decisions shall not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Your rights detailed above can be exercised free of charge in accordance with applicable data protection laws. Please contact the Customer directly if you would like to exercise any of these rights (other than a change to your marketing preferences, which should be notified directly to us via email to support@leapsome.com or by clicking the corresponding link in any communication you receive).
Please also feel free to contact Leapsome if you have any questions about this Privacy Policy or Leapsome practices, or if you are seeking to exercise any of your statutory rights. Please contact the data protection responsible at via privacy@leapsome.com. Please note that we will save your contact information if you get in touch with us to be able to answer your request. This data will be deleted automatically 60 days after the last contact. Contact the Customer if you wish to request the removal of Personal Data under their control.
Leapsome may update this Privacy Policy and will notify Customers and Registered Users regarding any significant changes in the way we treat Personal Data via email. If you disagree with the changes to this Privacy Policy, you should deactivate your Service account.
