Privacy policy

We use cookies, other web technologies, and third-party vendors to maintain our website. Please read our privacy statement carefully first. You can then accept or decline the handling of your data according to this statement. You can revise this decision at any time.

Privacy Policy

I. Consent to data processing

We use cookies and other web technologies on our website. This allows both us and third-party providers commissioned by us to use these tools to access your terminal device, process your data and also determine personal data and profiles. The third-party providers also process your data in countries outside the European Union (Art. 49 GDPR). In doing so, we cannot always ensure that the German and European level of data protection is applied.

For more detailed information on data protection and our imprint, please refer to the privacy policy on the following pages. You must agree or reject the procedures described there regarding the use, processing, transfer and storage of your data by us and by third-party providers commissioned by us.

Therefore, please read this Privacy Policy carefully first. You can then accept by clicking "Accept All" in the banner. If you do not agree, then click on "Reject All".

This consent or opt-out applies across the board to all consent requirements relevant under the GDPR (General Data Protection Regulation) or other relevant data protection regulations for the use of our website.

You can revoke your decisions at any time via the email address (privacy@leap-ahead.io) provided in the privacy policy.

II. Privacy Policy

1. Data protection at a glance

General notes

The following information provides an overview of what happens to your personal data when you visit our website (https://www.leap-ahead.io). Personal data is any information relating to an identified or identifiable natural person. For detailed information on the subject of data protection, please refer to our data protection declaration, which is set out in the further text.

Data collection on our website

Who is responsible for data processing?

Data processing on this website is carried out by the website operator. You can find his contact details in the imprint in the section "Notice about the responsible party" in this privacy policy.

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form.

Other data is collected, stored and processed by our IT systems automatically as soon as you visit our website. This is mainly technical data (see also "Service log files").

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to improve our service offering and to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction, blocking or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Third-party analytics and tools

When visiting our website, your usage behavior can be statistically evaluated. This is done primarily with cookies and with analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can prevent these analyses either by refusing to consent to data processing (see Chapter I) or by not using certain tools. You can find detailed information on this in the following privacy policy.

2. General notes and mandatory information

Privacy

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified or are identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the Internet (e.g. communication by e-mail) may have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible entity

The responsible body in terms of the General Data Protection Regulation (GDPR) and other data protection regulations regarding this website is:

Alexander Rothkopf

Bahnhofstraße 2

D-48282 Emsdetten (Germany)

E-mail: privacy@leap-ahead.io

The responsible body is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

General information on the legal basis for data processing on this website

The prerequisite for data processing is your consent to it. We ask for this consent in the chapter "I. Consent to data processing" explicitly. This consent or refusal applies across the board to all consent requirements relevant under the provisions of the GDPR or other relevant data protection regulations for the use of our website.
We process your personal data on the basis of Art. 6 (1) a GDPR or Art. 9 (2) a GDPR, if special categories of data are processed according to Art. 9 (1) GDPR. In the case of transfer of personal data to third countries, the data processing is also based on Art. 49 (1) a GDPR. In case of the storage of cookies or the access to information in your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of Section 25 (1) TTDSG.

If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) b GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6 (1) c GDPR.
Furthermore, data processing may be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) f GDPR. Information about the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Note on data transfer to the USA and other third countries

We or the companies commissioned by us use, among other things, tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these countries and processed there. We have no influence over this. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

Revoking your consent to data processing

Many data processing operations are only possible with your consent according to Chapter I.
You can revoke an already granted consent at any time by notifying us by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 (1) f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned.

Unless we can demonstrate compelling legitimate grounds for processing that override your rights, interests and freedoms, or the processing serves the assertion, exercise or defense of legal claims (objection under Article 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of data protection law against the GDPR, the data subject has a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done insofar as it is technically feasible.

Storage duration

We have contracted a cloud-based data processing company (WIX) to host our website, which also uses cloud storage from third-party sub-processors. For detailed information on this, see Chapter 4.

Unless a more specific storage period has been mentioned within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to apply. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law). In the latter case, the deletion will take place after these reasons cease to apply.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion, correction

Within the framework of the applicable legal provisions (Art. 15 – 17 GDPR), you have the right at any time to free information about your stored personal data, its origin and recipient, the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Right to restriction of processing

According to Art. 18 GDPR you have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time.

The right to restrict processing exists in the following cases:
You may dispute the accuracy of your personal data stored by us. We usually need time to verify this. For the duration of the verification, you have the right to request
the restriction of the processing of your personal data.

If the processing of your personal data has been or is being carried out unlawfully, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request the restriction of the processing of your personal data instead of the erasure.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Objection to advertising e-mails

The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is hereby prohibited. The operator of the pages expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. Data collection on our website

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are small text files that are stored on your computer and saved by your browser. Cookies have different functions and serve to make our website more user-friendly, more effective and safer.

Cookies that are required to carry out the electronic communication process or to provide certain desired functions (e.g. display of videos) are stored on the basis of Art. 6 (1) f GDPR, unless another legal basis is specified.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other (permanent) cookies remain stored on your terminal device until you either delete them yourself or until they are automatically deleted by your web browser.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Sometimes, cookies from third-party companies may also be stored on your terminal device when you enter our website (third-party cookies). These enable us or you to use certain services (e.g. to process payment services).

You agree to the use of cookies by third-party companies or for analysis purposes with the consent given in Chapter I. Furthermore, we refer to the data protection declarations of the third-party providers listed in Chapter 4 (Hosting).

The operator of the website has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. You agree to the storage of cookies and comparable recognition techniques with the consent from Chapter I. The processing is based on this consent (Art. 6 (1) a GDPR and § 25 (1) TTDSG). The consent can be revoked at any time.

Server log files

When you visit one of our websites, the provider of the pages automatically stores access information in so-called server log files, which your browser automatically transmits to us. These can be:

Browser type and version
Operating system used
Referrer URL
Host name and IP address of the requesting computer
Date and time of the request

This data is not merged with other data sources.

The basis for this data processing is Art. 6 (1) f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

If your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, the processing of this data is based on Art. 6 (1) b GDPR. In all other cases, the processing is based on our legitimate interests in the effective processing of requests addressed to us (Art. 6 (1) f GDPR) or on the basis of your consent pursuant to Chapter I (Art. 6 (1) a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Inquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) f GDPR) or on the basis of your consent pursuant to Chapter I (Art. 6 (1) a GDPR). This consent can be revoked at any time by e-mail to us.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed).

Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Application documents by e-mail or contact form or fax

We process your application documents (names, addresses, cover letters, professional experience, CV, information on training, details of previous employers) and related data (testimonials, certificates, CVs, cover letters, assessments (e.g. from previous employers)) that you provide to us in the course of an application via the aforementioned contact options.
We use the personal data just mentioned exclusively for the processing of your application procedure (pursuant to Art. 6 (1) b GDPR). In the course of processing the application process, we will inform you regarding the progress and a possible invitation to a personal interview.
After completion of the application process, your personal data will normally be deleted within 6 months. Unless you have agreed that we may continue to store your personal data in
order to provide you with further job offers, if necessary (Art. 6 (1) a GDPR).

In the event that you accept a job offer from our side and join our company, we will add your above-mentioned application documents and data to your personnel records.

4. Analysis tools

Hosting

We host our website at Wix.com Ltd, 40 Namal Tel Aviv St, Tel Aviv 6350671, Israel (hereinafter "WIX").

We have concluded an order data processing contract with WIX and fully implement the strict requirements of the German data protection authorities when using WIX.

WIX is a cloud-based tool for creating and hosting websites. When you visit our website, WIX is used to analyze user behavior, visitor sources, the region of website visitors and visitor numbers. WIX stores cookies on your browser that are necessary for the display of the website and to ensure security (necessary cookies).
The data collected through WIX may be stored on various servers around the world. The servers of WIX are located in the USA, among other places.
For details, please refer to the data protection declaration of WIX:
https://de.wix.com/about/privacy.

According to WIX, data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees according to Art. 46 GDPR. Basic information and details about the terms of use and the privacy policy of WIX can be found here:
https://de.wix.com/about/privacy-dpa-users.

The use of WIX is based on Art. 6 (1) f GDPR. As the operator, we have a legitimate interest in the most reliable presentation of our website. The processing is carried out subject to your consent in accordance with chapter I exclusively on the basis of Art. 6 (1) a GDPR and § 25 (1) TTDSG.

Your consent can be revoked at any time.

Sub-processors and third-party providers of WIX

Wix.com, as the host of our website, works with various sub-processors and third parties selected by WIX for the purpose of supplementing, facilitating and improving its services and performance.

WIX is responsible for personal data that it discloses to sub-processors or third party vendors.

Personal data of users processed through WIX's services is initially processed by Wix.com Ltd (Israel) and may then be transferred to other WIX companies for storage and, if necessary, for the provision of services. Transfers to WIX companies are covered by a WIX corporate data processing agreement that provides appropriate safeguards to ensure that cross-border transfers are made in compliance with applicable data protection laws, such as the GDPR.

Further information on this and a list of the sub-processors used by WIX can be viewed at: https://support.wix.com/de/article/liste-der-unterauftragsverarbeiter-von-wix

WIX also uses selected third-party vendors to provide its services.

A third-party sub-processor is a data processor engaged by WIX that agrees to receive personal data of WIX users' end users and customers for the purpose of performing processing activities that are (1) on behalf of WIX users and (2) in accordance with instructions communicated by WIX to WIX users.

Prior to engaging a third-party sub-processor, WIX will conduct appropriate due diligence, including security and legal analysis. Each sub-processor enters into a written contract with WIX that ensures compliance with applicable data protection laws. Cross-border transfers will be made under applicable approved mechanisms (along with additional measures as necessary) to ensure compliance with applicable data protection laws. More details are described by WIX in a "Data Processing Addendum - Users": https://en.wix.com/about/privacy-dpa-users

Information on this and a current list of third-party providers commissioned by WIX are available at https://support.wix.com/de/article/liste-der-unterauftragsverarbeiter-von-wix-third-party-sub-processors.

Objection to the data collection

You can object to the collection, processing and storage of your data by WIX by rejecting the generally valid declaration of consent in Chapter I of this website. You can revoke an already granted consent at any time by notifying us by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

5. Plugins and tools

Browser plugins

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

We use YouTube in extended privacy mode. According to YouTube, this causes YouTube not to store information about visitors to this website before they view the video. The disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube establishes a connection to the Google DoubleClick network - regardless of whether you watch the video.

If necessary, after the start of a YouTube video, further data processing operations may be triggered over which we have no control.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our information offers. This represents a legitimate interest within the meaning of Art. 6 (1) f GDPR. Further processing is carried out exclusively on the basis of Art. 6 (1) a GDPR and § 25 (1) TTDSG. The consent requested in Chapter I includes the necessary consent to store cookies or to access information in the user's terminal device within the meaning of the TTDSG. The consent can be revoked at any time.

For more information on the handling of user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

6. Updating of this Privacy Policy

We update this Privacy Policy in the event of changes to our website or other occasions that make this necessary. The current version can always be found on this page. Current status: 15.11.2022.

7. About us

Leap Ahead GmbH is a management consultancy specializing in the healthcare and pharmaceutical and medical device sectors.

Contact

Dr. Alexander Rothkopf