Privacy Notice

1. Who is responsible for this website

This website is a project of:
Leapsome GmbH
Brunnenstraße 153, 10115 Berlin, Germany
Email: privacy@leapsome.com

("Leapsome", "we", "us")

Leapsome GmbH is the controller within the meaning of the EU General Data Protection Regulation (GDPR) for the processing described in this notice.

You can reach our Data Protection Officer at: privacy@leapsome.com

2. The short version

The strategy assessment on this site runs in your browser. Your answers are stored locally on your device and are not transmitted to us. We do not use analytics or tracking tools on this site. Personal data is only processed (a) technically, when your browser requests the site from our hosting provider, and (b) if you choose to follow a link to one of our content or download forms, which are covered by Leapsome's general privacy statement. Links to third-party content lead away from this site; the respective provider's privacy notice applies there.

3. Your assessment answers (local storage)

Your inputs in the assessment (e.g. how you spend your week, your priorities, company parameters) are stored exclusively in your browser's local storage on your device so that your progress is saved. This data is not transmitted to Leapsome or any third party. You can delete it at any time by clearing your browser's site data for this website.

The storage of this information on your device is necessary to provide the functionality you have expressly requested (saving your progress) and is therefore permitted without consent under Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

4. Hosting and server logs

This website is hosted by Lovable Labs Incorporated's platform ("Lovable"); static assets are delivered via a content delivery network (Cloudflare). When you visit the site, your browser technically transmits certain data to the hosting infrastructure, in particular your IP address, date and time of the request, browser type and operating system, and the referring URL. This data is processed to deliver the website to your device, to ensure its stability and security, and to detect and prevent misuse.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log data is not merged with other data sources and is retained only as long as required for these purposes.

We have entered into a data processing agreement with our hosting provider in accordance with Art. 28 GDPR. Where infrastructure providers process data outside the EU/EEA, transfers are safeguarded by the EU Standard Contractual Clauses and/or an adequacy decision (including the EU-U.S. Data Privacy Framework, where applicable). You can request a copy of the safeguards in place by contacting us at the address in Section 1.

The technical transmission of this data is required to visit the website; without it, the site cannot be delivered to your device. You are not otherwise required to provide any personal data to use this website.

5. Linked forms, content downloads and external links

This site links to content, downloads and forms operated by Leapsome (processed via our CRM provider, HubSpot). If you follow such a link and submit a form, the data you provide (e.g. name, business email address, company) is processed by Leapsome for the purposes and on the legal bases described in Leapsome's general privacy statement, available at www.leapsome.com/legal/privacy. No form data is collected on this website itself.

This site also links to content and websites operated by third parties. These links are redirects: no data is transferred to the third party until you follow the link. Once you leave this site, the privacy notice of the respective provider applies. Leapsome has no control over, and accepts no responsibility for, the processing of personal data by third-party providers.

6. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority; the authority responsible for Leapsome is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Right to object (Art. 21 GDPR): Where we process your personal data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR on this website.

To exercise your rights, contact us at: privacy@leapsome.com.

7. Changes to this notice

We may update this notice if the functionality of this website changes, in particular if forms or additional tools are integrated directly into the site. The current version is always available here.