Privacy Policy

Information on the processing of personal data pursuant to GDPR (General Data Protection Regulation)

1. Controller

2. General Information on Data Processing

This website provides information about the Lead-Enrich product. We collect and process personal data only to the extent necessary. Processing is carried out in accordance with the General Data Protection Regulation (GDPR — Datenschutz-Grundverordnung, DSGVO) and the German Federal Data Protection Act (BDSG — Bundesdatenschutzgesetz).

The marketing website uses no tracking, no analytics cookies and no social media pixels. The product application sets technically necessary session cookies for login (Art. 6(1)(f) GDPR); no tracking cookies are used.

3. Legal Basis for Processing

Personal data is processed on the following legal grounds:

• Art. 6(1)(a) GDPR — Consent (e.g. when booking an appointment)
• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR — Legitimate interests (technical operation of the website)

4. Hosting and Technical Provision

Web Hosting

The website and application are delivered by Vercel Inc. (USA); any associated transfers are safeguarded by EU standard contractual clauses. Data processing and the product database run on servers of Hetzner Online GmbH (Nuremberg, Germany) and Supabase (Frankfurt am Main, Germany) — all stored product data remains within the EU. Each time this website is accessed, the following data is automatically processed in server log files:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Amount of data transferred
• Notification of whether the retrieval was successful
• Browser type and browser version
• Operating system of the user

Legal basis: Art. 6(1)(f) GDPR. Storage is for security purposes and to ensure technical operation.

5. Third-Party Services

Calendly (Appointment Booking)

We use the Calendly service (Calendly LLC, USA) for scheduling appointments. When you book an appointment, your submitted data (name, email address) is transmitted to Calendly. Processing is based on your consent (Art. 6(1)(a) GDPR). Further information: Calendly Privacy Policy.

Google Fonts

This website uses typefaces from Google Fonts (Google Ireland Limited). When the page loads, a connection is made to Google servers to load the "Plus Jakarta Sans" typeface. Your IP address is transmitted to Google. Legal basis: Art. 6(1)(f) GDPR. Further information: Google Privacy Policy.

6. Processing of Public Company Data

The Lead-Enrich product processes exclusively publicly available company data from the following sources:

• Handelsregister / Trade register (pursuant to HGB § 9 — public)
• Bundesanzeiger / Federal Gazette (legally required publications)
• Company websites
• Public review platforms (Google, Kununu, Trustpilot, etc.)
• Implisense (company information)
• Publicly visible LinkedIn company pages and posts
• Public job advertisements

Lead-Enrich primarily analyzes companies. In doing so, it also processes personal data of company representatives that is publicly available — in particular names and roles of directors from the trade register, persons named on company websites, and publicly visible LinkedIn company activity. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analyzing publicly available business information). This privacy policy also serves as the information for company representatives whose publicly available data we process (Art. 14 GDPR); individual notification is dispensed with where it would involve disproportionate effort (Art. 14(5)(b) GDPR).

6a. B2B Contact Enrichment on Request

At the explicit request of our customers, Lead-Enrich can retrieve verified business contact data (work email address and a phone number used in a business context) for individual company representatives shown in a dossier. We obtain this data from BetterContact (BetterContact SAS), which processes our queries on our behalf and acts as an independent controller for its own contact database. BetterContact may involve sub-providers outside the EU for individual queries; such transfers are safeguarded by EU standard contractual clauses.

Retrieved contact details are stored solely within the requesting customer's dossier and are never pooled, made available to other customers, or resold. Bonanza Design GmbH is the controller for this processing. Legal basis: Art. 6(1)(f) GDPR (legitimate interest of our customers in establishing business contact with company representatives in a B2B context). Contact data is stored for as long as the dossier exists in the customer's account and is deleted upon request; data subjects can request access or erasure at any time via the contact below.

7. Your Rights

Under GDPR, you have the following rights:

• Access (Art. 15 GDPR) — to the data we process about you
• Rectification (Art. 16 GDPR) — of inaccurate personal data
• Erasure (Art. 17 GDPR) — of your personal data
• Restriction (Art. 18 GDPR) — of processing
• Data portability (Art. 20 GDPR) — in a common format
• Objection (Art. 21 GDPR) — to processing
• Withdrawal of consent granted, with effect for the future

To exercise your rights, contact: moritz@lead-enrich.com

8. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://".

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to ensure it always reflects current legal requirements or to implement changes to our services.

As of: April 2026