Privacy

1. Controller

LeoClean Premium Textilpflege - Berlin
Fritz-Reuter-Allee 175
12359 Berlin
Germany

Email: info@leoclean.de
Phone: 030 6014953

2. Processing, purposes, and legal bases

Technical website operation

When the website is opened, hosting and security systems may process technically necessary request data, including IP address, time, requested URL, browser information, and referrer. The purposes are delivery, stability, error analysis, and misuse prevention. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation.

Contact and service requests

When you use a form, email, phone, or WhatsApp, we process the information you provide to handle the request and reply. Depending on context, Article 6(1)(b) GDPR applies to pre-contractual or contractual matters; otherwise Article 6(1)(f) GDPR applies to responding properly.

Online orders and LeoKarte

The online-order flow processes branch, items, contact details, and optional notes; no online payment takes place there. LeoKarte processes registration and account data for enrolment and management. The usual legal basis is Article 6(1)(b) GDPR; any separately requested consent is based on Article 6(1)(a) GDPR.

LeoAI

When you use LeoAI, we process your input, language, technical session identifier, and necessary operational metadata to answer the request, protect the service, and perform requested service workflows. Binding acceptance, price, or contract decisions remain with LeoClean.

3. Customer portal, LeoPOS, and LeoBridge

The customer portal processes the login and verification details you enter and the information required for the requested status or account function. LeoPOS is the operational core. LeoBridge is the controlled, purpose-limited interface. LeoAI is the customer-facing service layer.

Customer data is not copied unnecessarily into a public web application. LeoBridge provides only the information approved for the relevant purpose. Technically required purpose-limited session or intermediate data remains possible.

4. Analytics consent and local storage

Optional internal measurement records pseudonymous page views and clicks only after your explicit approval. Until then, the website blocks the measurement endpoints. The legal basis is consent under Article 6(1)(a) GDPR; any required access to the device also occurs only after consent.

The website stores the choice granted or denied locally in your browser. A pseudonymous analytics session identifier is created only after approval. Necessary local storage may also be used for branch selection, forms, customer-portal sessions, and security functions.

You can change your decision for the future at any time: Open analytics setting

5. Recipients, processors, and external services

Internally, data is available only to people who need it for the relevant process. Technical hosting/cloud infrastructure is used for website delivery and the service endpoints under leobot-v2.hemawaz.workers.dev. Google Maps, Google Forms, and WhatsApp open only when you deliberately use them; the providers' own privacy terms then apply.

5a. Gift cards, payment providers and delivery

For purchases, invoicing, protected card retrieval and misuse prevention, we process order and billing details, buyer and where applicable recipient email, card/payment identifiers and status information. Legal bases are Article 6(1)(b) GDPR (contract), (c) (statutory retention) and (f) (security and evidence).

When PayPal is selected, the payment provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Our payment order transmits the order reference, amount payable, currency, merchant identifier, and return/cancellation address. Card codes, QR access, gift messages and the gift recipient’s email are not part of that PayPal payment order. On opening its service, PayPal collects its own account, payment and technical data and processes them as an independent controller under its privacy statement; international transfers may occur. We receive the payment identifiers and status information required to verify and match the payment.

For SumUp, see the information on its payment page; for bank transfers, participating banks receive the required transfer details. Cloudflare provides hosting and security including Turnstile. Resend sends requested one-time codes, cards and invoices to their intended email addresses. Invoices and confidential company packages go to the purchaser or business, not automatically to every gift recipient. Access and status keys are used only for protected order and card functions.

PayPal privacy · SumUp privacy · Cloudflare privacy · Resend privacy

6. Retention and deletion

Personal data is retained only as long as required for the request, contract, security, and evidence. It is then deleted or restricted unless statutory retention duties — for example for business and tax records — or the establishment, exercise, or defence of claims require otherwise.

The local analytics choice remains until you change it or clear local website data.

7. Your rights

Subject to legal requirements, you have rights of access, correction, deletion, restriction, portability, and objection. You may withdraw consent for the future at any time; processing before withdrawal remains lawful.

Send requests to info@leoclean.de. You also have the right to complain to a data protection supervisory authority.

8. Supervisory authority

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Complaint information

9. Version of this privacy notice

Version: 15 October 2026. We update this notice when the services used, processing workflows, or legal requirements change.