Data Protection

Data Protection Declaration

Last updated: November 8, 2024

Controller

Martin Spieß Prinz-Eugen Straße 13/1 D-74388 Talheim Email address: ms(at)leopard-ki.com Imprint: https://leopard-ki.com/impressum.html

Contact Data Protection Officer

Email: ms(at)leopard-ki.com

Overview of Processing Activities

This data protection declaration provides information about the types of data processed, the purposes of their processing, and the categories of affected individuals.

Types of Processed Data

• Inventory data
• Contact data
• Content data
• Contract data
• Usage data
• Meta, communication, and procedural data

Categories of Affected Individuals

• Service recipients and clients
• Prospects
• Communication partners
• Users
• Business and contractual partners

Purposes of Processing

• Provision of contractual services and fulfillment of contractual obligations.
• Communication.
• Office and organizational procedures.
• Organization and administration.
• Feedback.
• Provision of our online services and user-friendliness.
• Public relations.
• Business processes and operational procedures.

Relevant Legal Bases

The relevant legal bases under the GDPR are:

• Consent (Art. 6(1)(a) GDPR): The affected person has given consent to the processing of their personal data for a specific purpose.
• Contract fulfillment and pre-contractual inquiries (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract to which the affected person is a party.
• Legal obligation (Art. 6(1)(c) GDPR): Processing is necessary to comply with a legal obligation.
• Legitimate interests (Art. 6(1)(f) GDPR): Processing is necessary to safeguard the legitimate interests of the controller or a third party, provided that the interests, fundamental rights, and freedoms of the affected person requiring the protection of personal data do not outweigh them.

National data protection regulations in Germany, particularly the Federal Data Protection Act (BDSG), apply in addition to the GDPR.

General Information on Data Storage and Deletion

We delete personal data in accordance with legal provisions as soon as the underlying consents are revoked or no further legal bases for processing exist. Exceptions apply if statutory obligations require longer retention.

Retention and Deletion

Retention periods for personal data are governed by German legal requirements.

Rights of Affected Individuals

Under the GDPR, you have the following rights:

• Right to object
• Right to withdraw consent
• Right to information
• Right to rectification
• Right to erasure and restriction of processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

Processing by OpenAI

Our products (leo.1, leo.2, leo.3, and leo.page) use the LLM of ChatGPT via an interface to OpenAI. During the use of these services, data entered and generated by us is processed, which may include personal data.

Data Processing by OpenAI

• Type of data: Data transmitted to OpenAI may include text inputs, questions, and other interactions with the LLM.
• Purposes of processing: The data is processed to generate improved responses, provide functionalities, and optimize the user experience.
• Legal bases: The basis for this data processing is the consent of the users and our legitimate interests in improving our services.
• Data transfer to third parties: Data may be transmitted to OpenAI, which acts as a third-party provider. We ensure that this is done in compliance with applicable data protection regulations.

Security Measures

We have implemented technical and organizational measures to ensure the security of data during transmission to OpenAI. However, we point out that absolute security during data transmission over the internet cannot be guaranteed.

Use of Cookies

We use cookies to enhance the user experience. A detailed description of cookies can be found in the relevant sections of this data protection declaration.

Contact and Inquiry Management

When contact is made through various channels, we process the transmitted personal data to handle the inquiries.

Presence in Social Networks (Social Media)

We maintain presences on social networks, and the processing of personal data may occur in this context.

Final Provisions

We reserve the right to update this data protection declaration at any time. Please regularly review our data protection declaration to stay informed about changes.