Imprint

Information pursuant to § 5 DDG

Lean Shift UG (haftungsbeschränkt)
Im Kleff 29
58762 Altena

Represented by the Managing Director: Matthias Sperling
Register court: Amtsgericht Iserlohn
Commercial register number: HRB 11699

Contact

E-Mail: contact@lean-shift.com
Tel: 0163 515 9518

Responsible per § 18 (2) MStV

Matthias Sperling
Im Kleff 29
58762 Altena

VAT

VAT identification number pursuant to Section 27a of the German VAT Act:
DE463612734

Privacy

This website uses Cloudflare Web Analytics for anonymous traffic measurement. Only aggregated data is collected (page views, country of origin, browser type). No cookies are set, no IP addresses are stored, and no personal data is processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymous reach measurement). In addition, we run our own cookieless measurement on our own infrastructure that records which pages are opened and which buttons are used. It stores only the page, the language, the country of origin and the type of event, no IP addresses, no identifiers and no personal data. This also records the campaign label contained in the link you followed and, if you arrived from another website, its bare name without the full address. Nothing is stored on your device for this.

Storage on your device: This website sets no cookies. In your browser’s local storage we remember your language choice, your display preference and, if you use the standards checklists, your progress. This information stays on your device, is not transmitted to us and serves only to keep your own settings. You can delete it at any time in your browser settings. No consent is required for this because it is what makes the service you asked for possible (Section 25(2)(2) TDDDG).

The LeanShift App stores all data exclusively on your device (IndexedDB). The app transmits no data to servers.

Contact and enquiry form: When you write to us via the contact form or the enquiry form, we process the details you provide solely in order to handle your enquiry. Name, e-mail address and your message are required; every other field in the enquiry form (company, industry, number of employees, revenue, sick leave rate, staff turnover, phone number, among others) is optional and may be left blank. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, where no contractual relationship is involved, Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Transmission is encrypted via an endpoint operated at Cloudflare; from there the enquiry reaches us by e-mail. We delete the enquiry once it has been dealt with and no statutory retention periods apply, as a rule after six months. Your rights as a data subject are listed below.

Payments: purchases are processed via Stripe Payments Europe Limited, Ireland. Stripe processes the payment and billing data under its own responsibility; a transfer to Stripe Inc. in the USA is possible and is based on standard contractual clauses. Payment data such as card numbers never reaches us, we receive the payment status and the details required for the invoice. The legal basis is Article 6(1)(b) GDPR.

Record of consent before a purchase: Before a paid purchase you confirm two points, the immediate commencement of performance and your awareness of losing the right of withdrawal. We record this confirmation as evidence, together with the time, IP address, country code, browser identifier, product and language version. Your email address is expressly not part of it; the link to the payment runs via a transaction number. The legal basis is Article 6(1)(c) GDPR, because without this record the right of withdrawal does not expire under Section 356(5) BGB. We delete the entry after four years.

Contract data and accounting: where a contract is concluded, we process the customer master data, the details of the service, and the invoice and payment data in our own accounting. The legal bases are performance of the contract under Article 6(1)(b) GDPR and the commercial and tax retention obligations under Article 6(1)(c) GDPR. Disclosure takes place only to our tax advisers and to public authorities where a statutory obligation applies.

Cancellation: If you cancel via the cancellation page, we process your name, email address and, where you provide them, your license key or order number and an optional reason. We need these details to find your subscription and to send you the confirmation required by law. The legal basis is Article 6(1)(b) GDPR. We retain the record as evidence of the cancellation.

License activation: when a purchased license is activated and during the recurring check, the software transmits the license key and a device identifier to our license server. The device identifier is a randomly generated string and contains no device or usage data. The content recorded in the application is not transmitted. The purpose is performance of the contract and protection against multiple use, the legal basis is Article 6(1)(b) GDPR.

Retention: enquiries from the forms are deleted no later than six months after the last processing step if no contract is concluded. Where a contract is concluded, the commercial and tax retention periods of six and ten years apply. License data is stored for the term of the license and thereafter until those periods expire.

Your rights under GDPR: You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), objection (Art. 21), and data portability (Art. 20). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). For Germany, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf. EU residents may contact the supervisory authority of their country of residence. Requests: contact@lean-shift.com.

Processors and third-country transfers: The website is hosted on Cloudflare Pages (Cloudflare Inc., USA); analytics via Cloudflare Web Analytics is cookieless and IP-anonymous. Payments are processed via Stripe Inc. (USA). Both providers are covered by Standard Contractual Clauses (SCCs) under Art. 46 (2) (c) GDPR or certified under the EU-US Data Privacy Framework. Cloudflare Analytics retention: max. 6 months aggregated. Stripe payment data: per statutory retention periods (generally 10 years under German tax/commercial law). Our contract, license and confirmation emails are sent by Brevo (Sendinblue SAS, France). The email address and the content of the message are processed; the servers are located in the EU.

Disclaimer

We created the contents of this website with the utmost care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content.