Data protection

The data protection officer is:

Prof. Dr.-Ing. Fabian Hemmert
Hemmert UG (haftungsbeschränkt)
Auf dem Kämpchen 17
D-40764 Langenfeld
Germany

Phone: +49 (0)176 - 88 4 999 33
Email: support@leash.ax

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Hemmert UG (haftungsbeschränkt). The use of the Internet pages of the Hemmert UG (haftungsbeschränkt) and the use of the Leash app are possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website or app, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Hemmert UG (haftungsbeschränkt). By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

As the controller, the Hemmert UG (haftungsbeschränkt) has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website and the Leash app. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.

Definitions

The data protection declaration of the Hemmert UG (haftungsbeschränkt) is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners.

In this data protection declaration, we use, inter alia, the following terms:

• Personal data means any information relating to an identified or identifiable natural person ("data subject").
• Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
• Processing is any operation or set of operations which is performed on personal data or on sets of personal data.
• Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
• Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects.
• Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without additional information.
• Controller is the natural or legal person, public authority, agency or other body which determines the purposes and means of processing personal data.
• Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
• Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed.
• Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and authorized processing persons.
• Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she agrees to the processing of personal data.

Name and Address of the controller

Controller for the purposes of the GDPR and other applicable data protection provisions is:

Prof. Dr.-Ing. Fabian Hemmert
Hemmert UG (haftungsbeschränkt)
Auf dem Kämpchen 17
D-40764 Langenfeld
Germany

Phone: +49 (0)176 - 88 4 999 33
Email: support@leash.ax

Name and Address of the Data Protection Officer

The Data Protection Officer is:

Prof. Dr.-Ing. Fabian Hemmert
Hemmert UG (haftungsbeschränkt)
Auf dem Kämpchen 17
D-40764 Langenfeld
Germany

Phone: +49 (0)176 - 88 4 999 33
Email: support@leash.ax

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

Cookies

The Internet pages of the Hemmert UG (haftungsbeschränkt) use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Through the use of cookies, the Hemmert UG (haftungsbeschränkt) can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This applies to this website only; the Leash app does not set analytics cookies.

Leash app

The Leash app for iPhone and Android is separate from this website. The app does not include analytics tracking, does not operate a backend for your browsing activity, and does not sell user data. Browsing in the app stays on your device; data is transmitted only to the websites you choose to visit.

Web analytics on this website

This website (leash.ax) uses Matomo, a privacy-oriented web analytics service, to collect usage statistics such as pages visited, referrer, browser type, and approximate location derived from the IP address. Matomo is operated by the controller and hosted at analytics.fabianhemmert.com; data is processed on our infrastructure, not passed to third-party advertising networks. We use these statistics solely to understand how the website is used and to improve it. The Leash app is not affected by this tracking.

The legal basis for this processing is Art. 6(1) lit. f GDPR (legitimate interest in measuring and improving our website). You may object to this processing at any time by contacting us or by using browser settings and extensions that block analytics scripts and cookies.

Collection of general data and information

The website of the Hemmert UG (haftungsbeschränkt) collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files and, where applicable, processed via Matomo as described above. The Leash app does not collect this website data.

Collected may be:

• browser types and versions used
• operating system used by the accessing system
• website from which an accessing system reaches our website (referrer)
• sub-websites
• date and time of access
• Internet protocol address (IP address)
• Internet service provider of the accessing system
• other similar data and information that may be used in case of attacks on our IT systems

This information is needed to deliver website content correctly, optimize website content, ensure long-term viability of IT systems and website technology, and provide law enforcement authorities with necessary information in case of cyber-attacks.

Contact possibility via the website

The website of the Hemmert UG (haftungsbeschränkt) contains information that enables quick electronic contact to our enterprise, as well as direct communication with us. If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored for processing or contacting the data subject. There is no transfer of this personal data to third parties.

Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by applicable laws and regulations.

If the storage purpose is not applicable, or if a storage period prescribed by law expires, the personal data are routinely blocked or erased in accordance with legal requirements.

Rights of the data subject

Each data subject has the rights granted by the GDPR, including:

• right of confirmation
• right of access
• right to rectification
• right to erasure (right to be forgotten)
• right of restriction of processing
• right to data portability
• right to object
• rights related to automated individual decision-making, including profiling
• right to withdraw data protection consent at any time

To exercise these rights, the data subject may at any time contact any employee of the Hemmert UG (haftungsbeschränkt).

Legal basis for the processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If processing of personal data is necessary for the performance of a contract to which the data subject is party, processing is based on Art. 6(1) lit. b GDPR. The same applies for processing operations necessary for pre-contractual measures.

If our company is subject to a legal obligation by which processing of personal data is required, processing is based on Art. 6(1) lit. c GDPR.

In rare cases, processing may be necessary to protect vital interests of the data subject or another natural person; then processing would be based on Art. 6(1) lit. d GDPR.

Finally, processing operations could be based on Art. 6(1) lit. f GDPR if processing is necessary for the purposes of legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Legitimate interests pursued by the controller or by a third party

Where processing of personal data is based on Art. 6(1) lit. f GDPR, our legitimate interest is to carry out our business in favor of the well-being of all our employees and shareholders.

Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, corresponding data is routinely deleted as long as it is no longer necessary for fulfillment or initiation of a contract.

Provision of personal data as statutory or contractual requirement

We clarify that provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us.

Before personal data is provided by the data subject, the data subject may contact any employee. The employee clarifies whether the provision of personal data is required by law or contract, whether there is an obligation to provide personal data, and the consequences of non-provision.