Privacy Policy

LeadSoc GmbH • Data Protection Notice • GDPR & BDSG
We would like to inform you about how we handle your personal data and what rights you have under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The organization LeadSoc (hereinafter referred to as “we” or “us”) is responsible for data processing.

Responsibilities

The entity responsible for processing your personal data is:
LeadSoc
Somiali Shaik

Contact details of the data protection officer

You can reach our data protection officer using the following contact details:
PRIOLAN GmbH
Luka Jozanovic

General information on the legal basis for data processing

“Personal data” is any information relating to an identified or identifiable natural person. We process this data in accordance with applicable data protection laws, in particular the GDPR and the German Federal Data Protection Act (BDSG). We may only process personal data if we have a legal basis for doing so.

We only process personal data with your consent, in order to enter into a contract with you or to respond to your request in connection with a potential business relationship, to comply with legal obligations or to protect our legitimate interests, provided that this does not infringe upon your interests or fundamental rights and freedoms which require the protection of personal data.

Storage period of personal data

We only store your data for as long as necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations, unless otherwise stated in the following information. Legal retention obligations may arise from commercial or tax law regulations. After the end of the calendar year in which we collected the data, we will retain personal data contained in our accounting records for ten years and personal data contained in business letters and contracts for six years. Furthermore, we will retain data relating to verifiable consents, as well as complaints and claims, for the duration of the statutory limitation periods. Data stored

Processing when exercising your rights

If you wish to exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data you provide in order to implement these rights and to be able to provide proof thereof. We will process the data stored for providing information and preparation purposes exclusively for this purpose and for data protection control purposes, and otherwise restrict processing in accordance with Article 18 of the GDPR.

These processing operations are based on the legal basis of Article 6 paragraph 1 letter c of the GDPR in conjunction with Articles 15 to 22 of the GDPR and Section 34 paragraph 2 of the BDSG.

Rights of the data subject

The General Data Protection Regulation (GDPR) guarantees every data subject certain rights with regard to their personal data. These include:

  • The right to information: Every data subject has the right to obtain from us confirmation as to whether personal data concerning him or her are being processed, and to access this data as well as further information and copies of this data.
  • The right to rectification: Every data subject has the right to request the immediate rectification of inaccurate personal data.
  • The right to erasure (“right to be forgotten”): Every data subject has the right to request the immediate erasure of their personal data.
  • The right to restriction of processing: Every data subject has the right to request the restriction of the processing of their personal data.
  • The right to data portability: Every data subject has the right to receive the personal data concerning him or her that he or she has provided to us in a structured, commonly used and machine-readable format.
  • The right to object: Every data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) of the GDPR. Where personal data concerning the data subject are processed by us for direct marketing purposes, the data subject may object to such processing pursuant to Article 21(2) and (3) of the GDPR.
The data subject also has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data infringes the GDPR.
The supervisory authority responsible for us is: Bavarian State Office for Data Protection Supervision.

Server log files

The website provider automatically collects information in server log files, which your browser automatically transmits. This data includes information such as browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This information is not combined with other data sources.

This data processing serves the purpose of ensuring the technically flawless presentation and security of the website. The stored information is deleted after seven days, unless there is a legitimate suspicion of unlawful use, which necessitates further investigation. It is not possible for us to identify you based on the stored information. Therefore, Articles 15 to 22 of the GDPR do not apply pursuant to Article 11(2) of the GDPR, unless you provide further information that allows your identification.

Using the signing function

When using this service, we may ask for your name, your company name, your email address, and your phone numbers. As part of a signature process, we process the signature you provide. Your name and email address may also have been provided to us by someone who sent you a signature request.

Using these services requires the exchange of certain personal data between users sharing a signed document. Upon completion of a signing process, we send a signing log to the user who initiated the process, as well as to all users who signed the document or were otherwise involved in the signing process. This signing log may contain the names, email addresses, IP addresses, browser type and version, and timestamps of all participating users. All user-initiated changes to the document, such as text, dates, and signatures, are recorded in the signing log.

During the signing process, we can provide participating users with information about the status of the signing process, such as whether a signature request has been delivered, viewed, downloaded, and/or resulted in a signature. These events can also be recorded in the signing log.

The criteria used to determine the retention period for personal data are the statutory retention periods. After this period expires, the corresponding data is deleted unless it is still necessary for the performance of the contract or the commencement of a new contract.

Furthermore, we take measures to ensure that unauthorized access to personal data is prohibited.

Use of the audit platform

If you participate in one of our audits, your personal data will be stored for the purpose of conducting and documenting the audit. This includes the following data:

  • First and Last Name
  • Browser and system data
  • IP Address
  • Language and time zone
  • Other data entered by you

This data is stored for a specific purpose and deleted once that purpose has been fulfilled. The legal basis for this processing is Article 6(1)(c) GDPR (compliance with a legal obligation) and our legitimate interest in the professional execution of our audits (Article 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; this consent can be withdrawn at any time.

Using the training platform

When you participate in one of our training courses, your personal data will be stored for the purposes of conducting and documenting the course. This includes the following data:
  • Identification and contact details (first and last name, email address)
  • Organizational and assignment data (company affiliation and, if applicable, department or role)
  • Participation and usage data (processing progress of individual learning modules, duration of participation, status of the training, timestamps of individual actions such as start or completion of modules)
  • Performance and verification data (answers to training and exam questions, evaluation results or training results, number of failed attempts and repetitions, date of training completion, certificate number or training ID)
  • Technical protocol and system data (IP address, browser and system information, language and time zone, technical error messages or system logs related to usage)
  • Other information provided by you

This data is stored for a specific purpose and deleted once that purpose has been fulfilled. The legal basis for this processing is Article 6(1)(c) GDPR (compliance with a legal obligation) and our legitimate interest in the professional execution of our training courses (Article 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; this consent can be withdrawn at any time.

The training may include content provided via the video services YouTube or Vimeo. Further information can be found in the following sections.

Use of the digital visitor book / visitor registration

When you register in our digital visitor book, your personal data will be stored for the purpose of documenting and managing your visit. This data includes:
  • First and Last Name
  • Date and time of visit
  • Contact information (e.g., email address, phone number)
  • Purpose of the visit
  • Other data you provided

This data is stored for a specific purpose and deleted once that purpose has been achieved or in accordance with legal requirements.

The legal basis for processing your data is Article 6(1)(c) GDPR (compliance with a legal obligation) and our legitimate interest in the administration and security of our company (Article 6(1)(f) GDPR). If consent is required, processing is based on Article 6(1)(a) GDPR; you can withdraw your consent at any time.

Use of the intranet

When you use our intranet, we process personal data to provide certain functions, for internal communication, and to document legally relevant processes. This processing is carried out exclusively for specific purposes and within the framework of legal requirements. The data processed includes the following:
  • First and Last Name
  • Email Address
  • (if applicable) employee number
  • Time of login
  • Content and timestamps of interactions (e.g., acceptance of documents)
  • (If applicable) Content of contact requests via the contact form

The processing of this data serves to identify users, document processes, and secure information flows within the organization.

The processing is based on Article 6(1)(f) GDPR (legitimate interest in the secure and traceable use of the intranet) and – where necessary – on Article 6(1)(c) GDPR (compliance with legal obligations, e.g., documentation requirements). If consent is required, the processing is based on Article 6(1)(a) GDPR; this consent can be withdrawn at any time with effect for the future.

The data will only be stored for as long as is necessary for the respective purposes or as required by statutory retention periods.

YouTube with active privacy mode

Our website integrates videos from YouTube. The operator of YouTube is Google Ireland Limited (“Google”), located at Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube with privacy mode enabled. This mode is designed to ensure that YouTube does not store any information about visitors to our website before they watch a video. However, privacy mode does not preclude the possibility that data may be transferred to YouTube partners. Regardless of whether you watch a video or not, a connection to the Google marketing network will be established.

When you play a YouTube video on our website, a connection is established to YouTube’s servers. Our website then informs YouTube which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing activity with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after a video is started, YouTube may store various cookies on your device or use similar technologies for recognition (such as device fingerprinting). In this way, YouTube can obtain information about visitors to our website. This information is used, among other things, to generate video statistics, improve user-friendliness, and prevent fraud.

It is possible that further data processing operations may be triggered after a YouTube video is started, over which we have no control.

The use of YouTube is in our legitimate interest in presenting our online content in an appealing way. This constitutes a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; this consent can be withdrawn at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de

Vimeo ohne Tracking (Do-Not-Track)

Our website uses plugins from the video portal Vimeo. Vimeo is provided by Vimeo Inc., located at 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages that includes Vimeo videos, a connection is established to Vimeo’s servers. In doing so, we inform the Vimeo server which of our pages you have visited, and Vimeo also receives your IP address. However, we have configured Vimeo so that your user activity is not tracked and no cookies are set.

The use of Vimeo serves the purpose of presenting our online content in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If we request corresponding consent, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; this consent can be revoked at any time.

Further information on how Vimeo handles user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy