In addition, a separate agreement governs delivery, access and use of the Service (the “Service Agreement”), including the processing of any personal data, messages or other content submitted through Service accounts (collectively, “Customer Data”). The organization that entered into the Service Agreement (“Customer”) controls their instance of the Service (their “Customer Account”) and any associated Customer Data.
Leapsome may collect and receive Customer Data and other information and data (“Other Information”) in several ways in accordance to the General Data Protection Regulation (GDPR) of the EU:
Generally, no one is under a statutory or contractual obligation to provide any Customer Data or Other Information (collectively, “Information”). However, certain Information is collected automatically and, if some Information, such as Customer Account setup details, is not provided, we may be unable to provide the Service.
Customer Data will be used by Leapsome in accordance with Customer’s instructions, including any applicable terms in the Service Agreement and Customer’s use of Service functionality, and as required by applicable law. Leapsome is a processor of Customer Data and Customer is the controller. A Customer may, for example, use the Service to grant and remove access to a Customer Account, assign roles and configure settings, access, modify, export, share and remove Customer Data and otherwise apply its policies to the Service.
Leapsome uses Other Information to pursue its legitimate interests in operating our Service, Website and business, according to Art. 6 Abs. 1 S. 1 lit. f GDPR. More specifically, Leapsome uses Other Information:
This section describes how Leapsome may share and disclose Information. Customers determine their own policies and practices for the sharing and disclosure of Information, and Leapsome does not control how they or any other third parties choose to share or disclose Information.
Leapsome uses a technology called “cookies” to store session information. We use persistent cookies in order to ensure system security and to continuously improve our Service. A cookie is a small amount of data, which includes an anonymous unique identifier that is sent to your browser from our website’s computers and stored on your computer’s hard drive. Leapsome will set and access Leapsome’s cookies on your computer. Persistent cookies will be deleted automatically from your computer after a predetermined period which can differ based on the cookie type. Cookies are required for the Service to function fully and reliably are stored on the basis of our legitimate interests in operating our Service, Website and business, according to Art. 6 (1) (f) GDPR.
Leapsome uses Google Analytics to collect information about its visitors. Google Analytics, a web analysis service of Google Inc., (“Google”, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics stores cookies on your computer which allows to analyze the surfing patterns of visitors to a website. The information generated by the cookie about your use of this website (including your anonymized IP address) will be sent to a Google server in the United States and stored there. Google is Privacy Shield certified and thus ensures the European data protection law.
We use Google Fonts on our website. This allows us to display fonts there. Google Fonts is a service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, California, 94043). Integration of these web fonts into our website is done by accessing a server, usually a Google server in the United States. This may result in the following being transferred to that server and stored by Google:
The use of Google Fonts is intended to make it easier to read and view our website and achieve more pleasing graphic design, and is thus based on our legitimate interests under Art. 6 (1) (f) GDPR.
On this website we use the service "Google Audiences". The purpose of this service is the interest-based presentation of advertisements for users. This requires an analysis of the website's use, which is based on cookies. The cookies store anonymous or pseudonymised data in relation to the use of the website. There is no storage of personal data. If you visit other websites that also use these services, you will be presented with ads that match your previous interests. It is not excluded that your data will be transmitted to the United States. Google is Privacy Shield Certified.
The legal basis for the use of the service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to target the users of the website purposefully with advertising. For more information, visit https://www.google.com/privacy/ads/
If you want to stop this tracking, then you can use the following link.
This website uses the service “Microsoft Advertising”. Microsoft Advertising is a conversion and tracking service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft places cookies in the users’ devices that analyze the user behavior on our website. This presupposes that the user has reached our website through a Microsoft Advertising advertisement. This only serves to provide use with information on the total number of users who have clicked on this type of advertisement. In this process, no IP addresses are stored, and no personal information on our users’ identity is shared.
The legal basis for the use of this service is article 6 (1) f) GDPR – justified interest. Our justified interest in the use of this service derives from the fact that we must be able to analyze and optimize the use of our website. You can find further information in Microsoft’s data privacy statement in: https://privacy.microsoft.com/de-de/privacystatement.
Microsoft is Privacy-Shield-certified: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active
On this website we use HubSpot for our online marketing activities. HubSpot is a US based software company with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
This is an integrated software solution that covers various aspects of our online marketing. These include:
E-mail marketing (newsletters and automated mailings, eg for the provision of downloads), social media publishing & reporting, reporting (eg traffic sources, access, etc. ...), contact management (eg user segmentation & CRM), landing pages and contact forms.
The legal basis for the use of the services of Hubspot is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in using this service is the optimization of our marketing efforts and the improvement of our service quality on the website.
HubSpot is sold under the terms of the "EU - US. Privacy Shield Frameworks "is certified and governed by the TRUSTe's Privacy Seal and" U.S. - Swiss Safe Harbor "Framework.
This website uses the "Facebook Custom Audiences" service. Facebook Custom Audiences is a service of Facebook Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA, hereinafter "Facebook"). This service allows us to engage users with interest-based advertising on the social network - Facebook.
To make this possible, we have implemented the Facebook remarketing tag on our website. This tag makes a direct connection to the Facebook servers when visiting the website. Facebook receives information about the pages that you have visited with us. Through Facebook, it then comes to a comparison with your Facebook user account. Next time you visit Facebook, you'll see personalized, interest-based ads - Facebook Ads.
The legal basis for the use of the service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to target the users of the website purposefully with advertising. If you want to stop this tracking, then you can use the following link.
On this website, we use the Customer Relationship Management (CRM) service of Zendesk Inc., 989 Market Street # 300, San Francisco, CA 94102, USA.
The legal basis for the use of this service is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in the use of this service is to be able to answer user requests quickly and efficiently. Zendesk uses your data only to forward your inquiries to us. There is no disclosure to third parties.
To use Zendesk, you must provide at least one correct e-mail address. The service can also be used pseudonymized. During the processing of service requests it may be necessary to collect further data (eg first name, last name, address, etc.). The use of Zendesk is optional. If you do not agree with Zendesk collecting your information, we will provide you with alternate contact options for submitting service requests by telephone or post.
We use Retargeting Tool and LinkedIn Ireland Conversion Tracking, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, our website integrates the LinkedIn Insight Tag, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website, and to provide us with aggregated statistics on this basis. As a rule, the following information is recorded, among other things:
In addition, this information is used to show you specific and relevant offers and recommendations, after you have informed yourself on the website about certain services, information and offers. The relevant information is stored in a cookie.
If you subscribe to our newsletter, we will save your e-mail address and use it to send you the newsletter (single opt-in). Your e-mail address will not be published or disclosed to third parties. To generate anonymized usage statistics, newsletters may include a tracking pixel.
If you request an appointment for a web demo, we will use your information to contact you and to coordinate and arrange an appointment with you.
In order to make our downloadable content available to you, we collect personal data from you. In the following we clarify about this data.
Where we have given you a username, password and/or security information which enables you to access particular features of the Service, you are responsible for keeping these access credentials confidential. You must not share these details with anyone, or store them in a way that may allow a third party to access them.
Leapsome takes all appropriate technical and administrative security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment, which is not publicly accessible. Your personal data is encrypted when transferred using Secure Socket Layer (SSL) technology. This means that communication between your computer and our servers uses a recognized encryption method, provided your browser supports SSL. You can read more about our security measures at https://www.leapsome.com/security.
To the extent prohibited by applicable law, Leapsome does not allow use of our Service and Website by anyone younger than 16 years old. If you learn that anyone younger than 16 has unlawfully provided us with personal data, please contact us and we will takes steps to delete such information.
You shall have the following rights with regards to your personal information:
Right of access
In accordance with Art. 15 GDPR, you shall have the right to request information about your personal data being processed by us. This right of access includes the following information:
Right to rectification
In accordance with Art. 16 GDPR, you shall have the right to request the prompt rectification of inaccurate or incomplete personal data stored by us.
Right to erasure
In accordance with Art. 17 GDPR, you shall have the right to request prompt erasure of your personal data stored by us, unless further processing is required for one of the following reasons:
Right to restriction of processing
In accordance with Art. 18 GDPR, you shall have the right to obtain the restriction of processing where one of the following applies:
In accordance with Art. 19 GDPR, we will notify all recipients to whom your personal data have been disclosed, if you have requested rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, Art. 17 (1) and Art. 18 GDPR, unless this proves impossible or involves disproportionate effort. You may request that we inform you about those recipients.
Right to data portability
In accordance with Art. 20 GDPR, you shall have the right to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format.
You shall also have the right to request the transfer of these data to a third party, provided that processing was carried out by automated means and based on your consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) or for the performance of a contract pursuant to Art. 6 (1) (b) GDPR.
Right to withdraw consent
In accordance with Art. 7 (3) GDPR, you shall have the right at any time to withdraw consent previously granted to us by you. The withdrawal of consent shall not affect the lawfulness of processing carried out based on that consent before its withdrawal.
We may carry out no further processing based on the withdrawal of your consent.
Right to lodge a complaint
In accordance with Art. 77 GDPR, you shall have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.
Right to object
In accordance with Art. 21 GDPR, you shall have the right to object at any time object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes. In the latter case, you shall have a general right of objection which we shall implement without the need for your particular situation to be specified. You may exercise your right to object or to withdraw consent simply by sending an e-mail to email@example.com .
Automatic individual decision-making, including profiling
In accordance with Art. 22 GDPR, you shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right shall not apply if the decision:
In the cases referred to in A. and C., we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
However, such decisions shall not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Your rights detailed above can be exercised free of charge in accordance with applicable data protection laws. Please contact the Customer directly if you would like to exercise any of these rights (other than a change to your marketing preferences, which should be notified directly to us via email to firstname.lastname@example.org or by clicking the corresponding link in any communication you receive).