This English translation is provided for informational purposes only. In the event of any discrepancy between the English translation and the legally binding German original, the German version shall prevail.

Privacy Policy

Table of Contents
1. Access Data and Hosting Hosting
2. Data Processing for Contract Performance and Contact
2.1 Data Processing for Contract Performance
2.2 Customer Account Contact
3. Data Processing for Delivery
4. Data Processing for Payment Processing
4.1 Data Processing for Transaction Processing
4.2 Data Processing for Fraud Prevention and the Optimisation of Our Payment Processes
5. Advertising by Email, Post and Telephone
5.1 Email Newsletter with Registration; Newsletter Tracking with Separate Consent
5.2 Postal Advertising and Your Right to Object
5.3 Telephone Advertising
6. Cookies and Other Technologies General Information
7. Use of Cookies and Other Technologies Use of Google Services
8. Social Media Instagram Social Buttons (by Meta) Our Online Presence on Instagram (by Meta) and LinkedIn
9. Contact Options and Your Rights
9.1 Your Rights
9.2 Contact Options The controller responsible for data processing is: Leo Schulze Bischof-Ketteler-Ring 27 48599 Gronau Germany Email: info@leore.de Telephone: 0160 6880086 We are pleased that you are interested in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting You may visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores only a so-called server log file. This file may contain, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and it documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the website and improving our offering. This serves to safeguard our overriding legitimate interests, following a balancing of interests, in the correct presentation of our offering pursuant to Art. 6(1), first sentence, point (f) GDPR. All access data will be deleted no later than after the end of your visit to the website. All access data will be processed only for as long as is necessary to achieve the processing purposes stated above. Hosting The services for hosting and displaying the website are partly provided by our service providers as part of processing carried out on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through the forms provided for this purpose on this website are processed on their servers. If you have questions about our service providers or the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

2. Data Processing for Contract Performance and Contact

2.1 Data Processing for Contract Performance For the purpose of performing the contract, including enquiries about and the handling of any existing claims arising from warranty rights, defective performance, the right of withdrawal and any statutory updating obligations, pursuant to Art. 6(1), first sentence, point (b) GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract and cannot dispatch the order without it. The data collected can be seen in the respective input forms. Further information about the processing of your data, in particular the transfer of data to our service providers for order, payment and delivery processing, can be found in the following sections of this Privacy Policy. Once the contract has been fully performed, further processing of your data will be restricted and the data will be deleted after the expiry of the retention periods prescribed by tax and commercial law pursuant to Art. 6(1), first sentence, point (c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy.

2.2 Customer Account We collect personal data when you voluntarily provide it to us when opening a customer account. Mandatory fields are marked as such because, in these cases, we require the data to open the customer account and you cannot complete the account-opening process without providing it. The data collected can be seen in the respective input forms. We use the data you provide for contract performance and to process your enquiries pursuant to Art. 6(1), first sentence, point (b) GDPR. You may delete your customer account at any time, either by sending a message using the contact option described in this Privacy Policy or by using a function provided for this purpose in the customer account. Once your customer account has been deleted, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy. Contact As part of customer communications, we collect personal data for the purpose of processing your enquiries pursuant to Art. 6(1), first sentence, point (b) GDPR when you voluntarily provide it to us when contacting us, for example via a contact form, live chat tool or email. Mandatory fields are marked as such because, in these cases, we require the data to process your contact request. The data collected can be seen in the respective input forms. Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy.

3. Data Processing for Delivery For the purpose of performing the contract pursuant to Art. 6(1), first sentence, point (b) GDPR, we transfer your data to the delivery service provider commissioned with delivery insofar as this is necessary for the delivery of ordered goods. If you have questions about our service providers or the basis of our cooperation with them, please use the contact option described in this Privacy Policy.

4. Data Processing for Payment Processing When processing payments in our online shop, we work with the following partners: technical service providers, financial institutions and payment service providers.

4.1 Data Processing for Transaction Processing Depending on the selected payment method, we transfer the data necessary for processing the payment transaction to our technical service providers, the commissioned financial institutions or the selected payment service provider, insofar as this is necessary for processing the payment. This serves to perform the contract pursuant to Art. 6(1), first sentence, point (b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, for example on their own website or through a technical integration in the ordering process. In this respect, the Privacy Policy of the respective payment service provider applies. Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined by decision that an adequate level of data protection exists. Where data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted an adequacy decision, our cooperation is based on the European Commission’s Standard Contractual Clauses. If you have questions about our payment-processing partners or the basis of our cooperation with them, please use the contact option specified in this Privacy Policy.

4.2 Data Processing for Fraud Prevention and the Optimisation of Our Payment Processes Where applicable, we provide the service providers mentioned above with additional data which they use together with the data necessary for payment processing for the purposes of fraud prevention and the optimisation of our payment processes, for example invoicing, processing disputed payments and supporting accounting. Pursuant to Art. 6(1), first sentence, point (f) GDPR, this serves to safeguard our overriding legitimate interests, following a balancing of interests, in protecting ourselves against fraud and ensuring efficient payment management.

5. Advertising by Email, Post and Telephone

5.1 Email Newsletter with Registration; Newsletter Tracking with Separate Consent If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1), first sentence, point (a) GDPR. You may unsubscribe from the newsletter at any time, either by sending a message using the contact option described below or by using the unsubscribe link provided in the newsletter. After you unsubscribe, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy. If you have also given us your consent pursuant to Art. 6(1), first sentence, point (a) GDPR to analyse our newsletters, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening rates and click-through rates for the purpose of designing future newsletter campaigns (“newsletter tracking”). For this analysis, the emails sent contain one-pixel technologies, such as web beacons or tracking pixels, which are stored on our website. For the analysis, we link in particular the following “newsletter data”: the page from which the page was requested, known as the referrer URL; the date and time of access; a description of the type of web browser used; the IP address of the requesting computer; the email address; the date and time of registration and confirmation; and the one-pixel technologies with your email address or IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID. You may unsubscribe from newsletter tracking at any time, either by sending a message using the contact option described or by using the link provided for this purpose in the newsletter. The information is stored for as long as you remain subscribed to the newsletter.

5.2 Postal Advertising and Your Right to Object We also reserve the right to use your first and last name and your postal address for our own advertising purposes, for example to send you interesting offers and information about our products by post. This serves to safeguard our overriding legitimate interests, following a balancing of interests, in advertising to our customers pursuant to Art. 6(1), first sentence, point (f) GDPR. You may object at any time to the storage and use of your data for these purposes by sending a message using the contact option described in this Privacy Policy. After you withdraw your consent, we will delete your address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), first sentence, point (a) GDPR, or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy. 5.3 Telephone Advertising Where you have given your consent pursuant to Art. 6(1), first sentence, point (a) GDPR, we use the data required for this purpose or separately provided by you for our own advertising purposes, for example to provide information about interesting offers and our products. You may withdraw your consent at any time, either by sending a message using the contact option described in this Privacy Policy or by giving verbal notice during any telephone call. After withdrawal, we will delete your telephone number unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where such use is permitted by law and about which we inform you in this Policy.

6. Cookies and Other Technologies General Information To make your visit to our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, meaning when you close your browser; these are known as session cookies. Other cookies remain on your terminal device and allow us to recognise your browser when you next visit; these are known as persistent cookies. You can find the duration of storage in the overview within your web browser’s cookie settings. Protection of Privacy on Terminal Devices When you use our online offering, we use technologies that are strictly necessary to provide the digital service expressly requested by you. In this respect, storing information on your terminal device or accessing information already stored on your terminal device does not require consent. For functions that are not strictly necessary, storing information on your terminal device or accessing information already stored on your terminal device requires your consent. Please note that, if consent is not given, parts of the website may not be fully usable. Any consent you have given remains in place until you adjust or reset the relevant settings on your terminal device. Any Subsequent Data Processing by Cookies and Other Technologies We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process the IP address, time of visit, device and browser information, and information about your use of our website. This serves to safeguard our overriding legitimate interests, following a balancing of interests, in the optimised presentation of our offering pursuant to Art. 6(1), first sentence, point (f) GDPR. We also use technologies to fulfil the legal obligations to which we are subject, for example to demonstrate consent to the processing of your personal data, as well as for web analysis and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy. Cookie Settings You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™ Where you have consented to the use of technologies pursuant to Art. 6(1), first sentence, point (a) GDPR, you may withdraw your consent at any time by sending a message using the contact option described in this Privacy Policy.

7. Use of Cookies and Other Technologies We use the following cookies and other third-party technologies on our website. Unless otherwise stated for an individual technology, this use is based on your consent pursuant to Art. 6(1), first sentence, point (a) GDPR. Once the relevant purpose no longer applies and we have stopped using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. Further information about your options for withdrawal can be found in the section “Cookies and Other Technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have questions about the providers or the basis of our cooperation with them, please use the contact option described in this Privacy Policy. Use of Google Services We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) described below. The information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement concluded for the relevant technology between joint controllers pursuant to Art. 26 GDPR. Further information about data processing by Google can be found in Google’s Privacy Policy. Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined by decision that an adequate level of data protection exists. Our service providers are located and/or use servers in countries outside the EU and the EEA. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses. Google Analytics For the purpose of website analysis, Google Analytics automatically collects and stores data, including the IP address, time of visit, device and browser information, and information about your use of our website. Pseudonymous user profiles are created from this data. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU in order to derive location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data-processing agreement with Google. For web analysis, the Google Analytics extension Google Signals enables so-called cross-device tracking. Where your internet-enabled devices are linked to your Google account and you have enabled the “personalised advertising” setting in your Google account, Google may create reports about your usage behaviour, in particular cross-device user numbers, even if you change your terminal device. We do not process personal data in this context; we receive only statistics created on the basis of Google Signals. If you do not give us consent pursuant to Art. 6(1), first sentence, point (a) GDPR to use Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To close gaps in web analysis through behavioural and conversion modelling, pings containing data, including the user agent, information about your consent behaviour, screen resolution and IP address, are sent to Google. Google Ads For advertising purposes in Google search results and on third-party websites, a so-called Google remarketing cookie is set when you visit our website. By automatically collecting and processing data, including the IP address, time of visit, device and browser information, and information about your use of our website, and by using a pseudonymous cookie ID based on the pages you have visited, this cookie enables interest-based advertising. Further data processing takes place only if you have enabled the “personalised advertising” setting in your Google account. If you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. Google Maps For the visual presentation of geographical information, Google Maps collects data about your use of the Maps functions, in particular your IP address and location data, transfers it to Google and then processes it. We have no influence over this subsequent data processing. YouTube Video Plugin To embed third-party content, the YouTube Video Plugin, which we use in enhanced privacy mode, collects data including the IP address, time of visit, and device and browser information, transfers it to Google and then processes it, but only if you play a video.

8. Social Media Instagram Social Buttons (by Meta) Our website uses social buttons from social networks. These are integrated into the website solely as HTML links, meaning that accessing our website does not yet establish a connection to the servers of the respective provider. If you click one of the buttons, the website of the respective social network opens in a new browser window. There, for example, you can use the Like or Share button. Our Online Presence on Instagram (by Meta) and LinkedIn Where you have given the respective social media operator your consent pursuant to Art. 6(1), first sentence, point (a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above. Pseudonymous user profiles are created from this data. These profiles may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose. Detailed information about the processing and use of data by the respective social media operator, as well as contact options and your related rights and settings options for protecting your privacy, can be found in the providers’ privacy notices linked below. If you still require assistance in this regard, you may contact us. Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visiting an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information, including information about Insights data, can be found here. Our service providers are located and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina. The adequacy decision for the USA serves as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place. Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Our service providers are located and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: USA. The adequacy decision for the USA serves as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.
9. Contact Options and Your Rights 9.1 Your Rights As a data subject, you have the following rights: pursuant to Art. 15 GDPR, the right to request access, to the extent specified therein, to the personal data concerning you that we process; pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data concerning you or the completion of personal data concerning you that we store; pursuant to Art. 17 GDPR, the right to request the erasure of personal data concerning you that we store, unless further processing is necessary: to exercise the right to freedom of expression and information; to comply with a legal obligation; for reasons of public interest; or for the establishment, exercise or defence of legal claims; pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data where: you contest the accuracy of the data; the processing is unlawful, but you oppose its erasure; we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or you have objected to processing pursuant to Art. 21 GDPR; pursuant to Art. 20 GDPR, the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your habitual residence, your place of work or our registered office. Right to Object Where we process personal data as explained above in order to safeguard our overriding legitimate interests following a balancing of interests, you may object to this processing with effect for the future. Where processing is carried out for direct-marketing purposes, you may exercise this right at any time as described above. Where processing is carried out for other purposes, you have a right to object only where grounds arise from your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims. This does not apply where processing is carried out for direct-marketing purposes. In that case, we will no longer process your personal data for that purpose.

9.2 Contact Options If you have questions about the collection, processing or use of your personal data, or if you wish to request access, rectification, restriction or erasure of data, withdraw consent you have given, or object to a particular use of data, please contact us directly using the contact details in our Legal Notice.