Privacy Policy
Last updated: 1 September 2026
Important Notice Regarding the Authoritative Version
This English translation is provided solely for information and convenience.
The German version of this Privacy Policy is the sole legally authoritative version. In the event of any discrepancy, ambiguity or conflict between this English translation and the German version, the German version shall prevail.
1. Overview and Scope
The protection of personal data is an essential part of Léoré’s commitment to responsible and trustworthy communication.
This Privacy Policy explains which personal data are processed when you visit www.leore.de or use the contact, newsletter and editorial communication options provided on the website. It also explains the purposes for which the data are processed, the legal bases on which we rely and the rights available to data subjects.
Personal data are any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data, including the collection, storage, use, disclosure, transmission or deletion of such data.
This Privacy Policy applies to the English-language version of the website. The original German version is the sole legally authoritative version. Additional privacy notices or consent declarations may apply to individual projects, contracts, editorial publications or partnerships.
2. Controller
The controller responsible for the processing of personal data on this website is:
Léoré
Leo Schulze
Bischof-Ketteler-Ring 27
48599 Gronau
Germany
Telephone: +49 160 6880086
Email: info@leore.de
You may contact us at any time using the above contact details if you have questions or concerns regarding data protection.
3. Legal Bases for Processing
We process personal data only where a valid legal basis exists. Depending on the specific processing activity, the following legal bases may apply:
Consent pursuant to Article 6(1)(a) GDPR: where you voluntarily consent to a particular processing activity, for example receiving a newsletter or enabling optional analytics functions.
Performance of a contract and pre-contractual measures pursuant to Article 6(1)(b) GDPR: where processing is necessary to respond to a specific service enquiry, prepare a contract or perform an existing contract.
Compliance with a legal obligation pursuant to Article 6(1)(c) GDPR: where we are required to process data in order to comply with statutory obligations, particularly commercial, tax or regulatory requirements.
Legitimate interests pursuant to Article 6(1)(f) GDPR: where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that these interests are not overridden by the interests, fundamental rights or freedoms of the data subject. Such interests include maintaining a secure and functional website, responding to general enquiries, preventing misuse and ensuring appropriate editorial and business communication.
The storage of information on your device or access to information already stored on your device is additionally governed by Section 25(1) and (2) of the German Telecommunications-Digital-Services Data Protection Act (TDDDG).
We use non-essential cookies or comparable technologies only after receiving your prior consent.
4. Provision and Hosting of the Website
4.1 Hostinger Website Builder
The website is operated using the Hostinger Website Builder and is provided through Hostinger’s infrastructure.
The service provider and processor is:
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca
Cyprus
Cyprus is a Member State of the European Union.
Hostinger processes data on our behalf that are necessary for hosting, technical delivery, security, website administration and the operation of forms.
The data processed may include:
IP address,
date and time of access,
requested URL or page,
amount of data transferred,
response or status code,
referrer URL,
browser type and version,
operating system,
device information and
technical error and security information.
Processing is carried out for the purpose of providing the website securely, reliably and efficiently, analysing technical errors and detecting or preventing attacks and misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure provision of our online services.
Log and security data are deleted or anonymised once they are no longer required for the stated purposes. Data may be retained for a longer period where a specific security incident must be investigated, evidence must be preserved or statutory obligations require continued storage.
Additional retention periods described in this Privacy Policy apply to data submitted through website forms.
Hostinger may engage subprocessors. Where personal data are processed outside the European Economic Area and no adequacy decision exists for the relevant country, the applicable data processing agreement with Hostinger provides for appropriate safeguards, including the European Commission’s Standard Contractual Clauses.
Further information:
4.2 Technical Files and Embedded Fonts
The website loads technical files required for its layout, functionality, images and fonts through the Hostinger and Zyro infrastructure, particularly through cdn.zyrosite.com and assets.zyrosite.com.
Under the current configuration, the Google fonts used on the website are delivered through this infrastructure. Merely visiting the website therefore does not establish a direct connection to Google Fonts servers.
Any connection data generated in this context are processed as described in Section 4.1.
The legal basis is Article 6(1)(f) GDPR.
5. Consent Management, Cookies and Similar Technologies
When you first visit the website, the consent banner allows you to decide whether optional categories may be activated in addition to technically essential functions.
Your selection is recorded in a consent record. This record may include:
the categories you selected,
the date and time of your selection,
the language setting and
a technical identifier.
Technically essential storage operations or access to information on your device are permitted under Section 25(2) no. 2 TDDDG, provided that they are strictly necessary to provide the website or a function expressly requested by you.
Depending on the purpose, the subsequent processing of personal data is based on Article 6(1)(c) or Article 6(1)(f) GDPR.
Optional analytics or marketing functions are activated only with your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may change or withdraw your selection at any time with effect for the future by using the permanently accessible “Cookie Settings” link in the website footer.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The duration of individual cookies and comparable identifiers can be found in the cookie settings. You may also delete or block cookies through your browser. Doing so may restrict certain website functions.
6. Hostinger Platform Analytics and Amplitude
Hostinger provides platform analytics within the Website Builder through the analytics service Amplitude.
The service provider is:
Amplitude, Inc.
201 Third Street, Suite 200
San Francisco, California 94103
USA
If you have consented to analytics, the following data may be processed:
a pseudonymous device identifier,
the website identifier,
technical device and browser information,
IP address,
date and time,
language setting and
information about interactions with the website.
According to the information published for the Hostinger service, an Amplitude-related device identifier with a lifetime of up to twelve months may be used.
Processing is carried out to understand the technical use of the website and to improve our online services.
The legal bases are Section 25(1) TDDDG for storing or accessing information on your device and Article 6(1)(a) GDPR for the subsequent processing of personal data.
Consent is voluntary and may be withdrawn at any time through the cookie settings.
Where data are transferred to the United States or another country outside the European Economic Area, the transfer will take place only on a basis permitted under Chapter V GDPR. This may include an adequacy decision applicable to a properly certified recipient or the use of the European Commission’s Standard Contractual Clauses together with any required supplementary safeguards.
Further information:
7. Externally Loaded Media and Resources
7.1 Flag Icons Provided Through jsDelivr
Flag icons used to display the website’s language selection are loaded through the jsDelivr content delivery network.
The service is operated by Prospect One using globally distributed technical infrastructure.
When an icon is retrieved, a connection to jsDelivr is established. The technical data processed may include:
IP address,
date and time of the request,
requested file,
browser and device information and
the referrer URL, where applicable.
The service is used to provide a fast, reliable and consistent display of the language selection.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a functional and internationally understandable website navigation.
Where this results in a transfer of data to a third country, the requirements described in Section 13 apply.
Further information is available in the jsDelivr Privacy Policy.
7.2 Images Provided by Unsplash
Certain images are delivered directly through images.unsplash.com.
The provider is:
Unsplash, Inc.
400 McGill Street, 5th Floor
Montreal, Québec H2Y 2G1
Canada
When an image is loaded, Unsplash receives the connection data technically required to deliver the image. These data may include:
your IP address,
browser and device information,
date and time,
the requested file and
the referrer URL, where applicable.
The images are embedded to provide an appealing and technically efficient presentation of editorial content.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in presenting our services and editorial content in a high-quality, image-supported format.
Where Unsplash or its service providers process data outside the European Economic Area, the requirements described in Section 13 apply.
Further information is available in the Unsplash Privacy Policy.
7.3 Background Video and Preview Image Provided by Pexels
A background video and preview image may be loaded on the homepage through videos.pexels.com and images.pexels.com.
Pexels is a service provided by:
Canva Germany GmbH
Oranienburger Straße 66
10117 Berlin
Germany
Additional infrastructure and security providers, particularly content delivery and bot-protection services, may be used for the technical delivery of the media.
When the media are retrieved, the following data may be transmitted:
IP address,
browser and device information,
date and time,
requested file and
the referrer URL, where applicable.
Security service providers may also use technically required security identifiers.
Where information is stored on or accessed from your device, this will take place only after you have provided your prior consent pursuant to Section 25(1) TDDDG.
The subsequent processing of personal data is based on Article 6(1)(a) GDPR.
Without your consent, the external media will not be loaded. A static replacement image may be displayed instead.
You may withdraw your consent at any time through the cookie settings.
Further information is available in the Pexels Privacy Policy.
8. Contacting Us
8.1 Contact Form
If you use the contact form, we process the information you enter.
Under the current configuration, this includes:
first name,
optional surname,
email address and
message.
The date and time, form assignment and technical transmission data may also be processed.
The transmission and temporary storage of the form content are handled through the Hostinger infrastructure.
We use these data exclusively to review and respond to your enquiry and to conduct any subsequent communication.
Where your enquiry relates to a specific service, project or potential collaboration, processing is based on Article 6(1)(b) GDPR.
General enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring appropriate communication and maintaining business, editorial and social contacts.
Mandatory fields are required so that we can assign and respond to your enquiry. Any additional information is provided voluntarily.
Please do not submit confidential information or special categories of personal data through the general contact form unless this is necessary for your enquiry and has been agreed with us in advance.
8.2 Email and Telephone
If you contact us by email or telephone, we process your contact details, the content of your communication and any accompanying information required to respond to your enquiry.
This also applies to enquiries sent to:
The applicable legal basis depends on the subject of the enquiry.
Article 6(1)(b) GDPR applies to contractual or pre-contractual matters. Other enquiries are processed on the basis of Article 6(1)(f) GDPR.
Statutory documentation or retention obligations may additionally provide a legal basis under Article 6(1)(c) GDPR.
8.3 Retention Period for Enquiries
Enquiries that do not result in a contract, collaboration or publication are generally deleted no later than twelve months after they have been fully processed.
Data will be deleted earlier where they are no longer required and there are no legitimate reasons for their limited continued retention.
Where an enquiry results in a contract, collaboration or publication, the required data will be stored for the duration of the relevant relationship and subsequently for the applicable statutory retention and limitation periods.
Data may also be retained for a longer period where this is necessary for the establishment, exercise or defence of legal claims.
9. Léoré Media Newsletter
You may subscribe on the website using your email address to receive news and information from Léoré Media.
We use your email address exclusively for the newsletter purpose expressly described at the time of registration.
The following additional information may be processed to provide evidence of your consent:
date and time of registration,
version of the registration form,
wording of the consent declaration and
technical verification data.
The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 7(2) no. 2 of the German Act Against Unfair Competition (UWG).
The processing of consent records may be based on Article 6(1)(c) and Article 6(1)(f) GDPR. Our legitimate interest lies in maintaining legally reliable evidence of the consent provided.
You may withdraw your consent at any time with effect for the future. You may do so by using the unsubscribe link included in each newsletter email or by contacting info@leore.de.
Following withdrawal, your email address will be removed from the active mailing list.
Limited storage on a suppression list may be necessary to ensure that your withdrawal is permanently respected and that no further newsletters are sent to you.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Registrations are currently received through the Hostinger infrastructure.
We do not currently use personalised email-opening or link-click tracking.
If a separate newsletter delivery service or corresponding tracking technology is introduced in the future, this Privacy Policy will be updated in advance. Where required, separate consent will be obtained.
10. Project, Studio, CSI and Partnership Enquiries
Léoré combines several areas of activity, particularly Léoré Studio, Léoré Media, Capital Social Investment and long-term partnerships.
If you contact us regarding a service, project, funding opportunity, partnership or investment opportunity, we process the contact, organisational, project and communication data you provide.
These data are used to:
assess the proposed project,
respond to questions,
request additional information,
prepare an offer and
carry out a potential collaboration.
Processing is based on Article 6(1)(b) GDPR where it relates to pre-contractual measures or the performance of a contract with you.
If you act on behalf of an organisation or the enquiry concerns a non-binding partnership, processing may additionally be based on Article 6(1)(f) GDPR.
Our legitimate interest lies in reviewing and maintaining credible business and social partnerships.
If a collaboration is established, master data, service information, billing details and payment information may also be processed for the purpose of performing the contract.
Where necessary, such data may be disclosed to banks, tax advisers, legal advisers or other service providers involved in performing the contract.
The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.
The website currently does not provide an online shopping basket, checkout or direct online payment process.
11. Editorial Enquiries, Contributions and Publications
If you submit topic suggestions, guest contributions, interview enquiries, quotations, images or other editorial content to Léoré Media, we process the contact, professional, organisational and content-related data contained in your submission.
These data are processed for the following purposes:
editorial review,
communication and coordination,
verification of rights and permissions and
potential publication.
Please submit only content that you are authorised to provide and allow us to use.
Depending on the individual circumstances, processing may be based on:
Article 6(1)(b) GDPR,
your consent pursuant to Article 6(1)(a) GDPR or
our legitimate interests pursuant to Article 6(1)(f) GDPR.
Our legitimate interest lies in conducting careful and responsible editorial work, documenting permissions and maintaining relationships with sources and partners.
The required usage rights and data protection grounds for publishing names, quotations, photographs, audio recordings or video material will be clarified for each individual project.
Published content may remain available online and in editorial archives for as long as a legitimate journalistic, documentary or evidentiary interest exists.
When assessing such matters, data protection rights will be balanced against the freedoms of expression, information and the press.
Statutory restrictions on the right to erasure, particularly Article 17(3)(a) GDPR, remain unaffected.
Submissions that are not accepted, together with the related correspondence, are generally deleted no later than twelve months after the editorial review has been completed.
This does not apply where you have consented to longer-term contact, a legal obligation requires continued storage or an overriding legitimate interest justifies limited further retention.
12. External Links and LinkedIn
The website contains links to external services, including Léoré’s LinkedIn profile.
Merely displaying such a link does not transmit data to the respective external provider.
Data may be transmitted only after you actively click the link and leave our website. The external provider then processes personal data under its own responsibility and in accordance with its own privacy policy.
There is currently no embedded LinkedIn plugin on leore.de.
13. Recipients and International Data Transfers
Within Léoré, access to personal data is limited to persons who require the data to process the relevant matter.
External recipients may include:
hosting and IT service providers,
communication and newsletter delivery providers expressly commissioned by us,
banks,
tax advisers,
legal advisers,
public authorities,
project-related service providers and
cooperation partners.
Personal data are disclosed only where this is necessary for the relevant purpose and legally permissible.
Service providers processing personal data on our behalf are engaged under a data processing agreement pursuant to Article 28 GDPR.
Where a recipient processes data for its own purposes, that recipient is independently responsible for the relevant processing.
Personal data are processed outside the European Union or European Economic Area only where the requirements of Articles 44 et seq. GDPR have been met.
An international transfer may be based, in particular, on:
an adequacy decision adopted by the European Commission,
a valid certification under a recognised data protection framework or
the European Commission’s Standard Contractual Clauses together with any required supplementary safeguards.
Despite such safeguards, transferring personal data to a third country may involve the risk that public authorities gain access to the data and that European data protection rights cannot be enforced to the same extent.
14. General Retention Periods
We store personal data only for as long as they are required for the relevant purpose.
The data are subsequently deleted or anonymised unless continued storage is required because of:
statutory retention obligations,
valid consent to longer storage or
legitimate interests justifying limited further retention.
The relevant retention criteria include:
the duration of an enquiry or contractual relationship,
statutory retention periods,
applicable limitation periods,
the need to establish, exercise or defend legal claims,
security requirements and
documented deletion periods within the systems used.
More specific retention information is provided in the relevant sections of this Privacy Policy.
15. Requirement to Provide Personal Data
You are generally not required to provide us with personal data.
Certain information is, however, required so that we can respond to an enquiry, provide a requested function or enter into and perform a contract.
Without the information identified as mandatory, the relevant form cannot be submitted or the enquiry may not be processed appropriately.
16. Automated Decision-Making
We do not use solely automated decision-making, including profiling, within the meaning of Article 22 GDPR on this website.
17. Your Rights
Where the applicable legal requirements are met, you have the following rights:
the right of access to personal data processed by us pursuant to Article 15 GDPR,
the right to rectification of inaccurate data and completion of incomplete data pursuant to Article 16 GDPR,
the right to erasure pursuant to Article 17 GDPR,
the right to restriction of processing pursuant to Article 18 GDPR,
the right to data portability pursuant to Article 20 GDPR,
the right to object to certain processing pursuant to Article 21 GDPR and
the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.
You may withdraw consent at any time with effect for the future pursuant to Article 7(3) GDPR.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
18. Specific Right to Object
Where we process your personal data on the basis of Article 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.
Following your objection, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless processing is required for the establishment, exercise or defence of legal claims.
You may object to the processing of personal data for direct marketing purposes at any time without providing grounds relating to your particular situation.
19. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for Léoré is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Your right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Further information is available on the website of the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
20. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful alteration.
The website is transmitted using encrypted HTTPS connections.
However, email communication without additional encryption is generally not a completely confidential means of communication.
A suitable secure transmission method should therefore be agreed in advance for particularly sensitive information.
21. Updates and Amendments
This Privacy Policy was last updated on 1 September 2026.
We may update this Privacy Policy if the website, the services used, the purposes of processing or the applicable legal requirements change.
The current version is available at www.leore.de/datenschutz.
The German version of this Privacy Policy is the sole legally authoritative version. This English translation is provided for information and convenience only.
Company
The Léoré Group brings together media work, studio services and social engagement.
Contact
© 2026 Léoré. All rights reserved.
Publications
Léoré Media publishes interviews, analyses and articles about people, companies and projects with genuine substance.
➔ Go to Léoré Media
