leadtributor, partner sales automation

Privacy Policy

Information pursuant to Art. 13 GDPR

This privacy policy describes how leadtributor GmbH (“we”) processes personal data when you visit next.leadtributor.com.

This site is a static marketing site. We do not require an account and set no tracking cookies. For audience measurement we use the self- hosted open-source software Umami on our own subdomain insights.leadtributor.com (see section 4). Umami runs cookie-free, without cross-site tracking, and without building user profiles.

1. Controller

leadtributor GmbH
Ludwigstraße 8
D-80539 Munich
Germany
Phone: +49 (0)89 / 716 77 59 40
Email: dialog(at)leadtributor.com

2. Data Protection Officer

Dr. Bernd Schmidt, Attorney at Law
PLANIT//LEGAL
Neuer Wall 54
20354 Hamburg
Germany

3. Server Logs

The site is hosted on Amazon CloudFront and Amazon S3, operated by Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg). When you access the site, technical data is recorded in access logs:

  • IP address
  • Date and time of the request
  • Requested URL and HTTP method
  • HTTP status code and response size
  • Referrer URL and user-agent string

We process this data on the basis of Art. 6 (1) (f) GDPR (legitimate interest) to ensure availability, security, and abuse prevention. Logs are retained for up to 30 days and then automatically deleted.

4. Cookies, Local Storage, and Audience Measurement

Cookies and local storage. This site sets no cookies and uses no local storage beyond what the browser itself caches for static assets.

Audience measurement with Umami. We measure audience traffic with the self-hosted open-source analytics software Umami, operated on our own subdomain insights.leadtributor.com (hosted on AWS in the EU, see section 3). Umami runs cookie-free, without cross-site tracking, and without building personal profiles.

  • Data collected: requested path, referrer, user-agent string, browser language, screen size, approximate geolocation (country/region, derived from the IP address), and a daily-rotating salted hash used to distinguish anonymous visitors within a 24-hour window.
  • What we do NOT collect: cookies, persistent device identifiers, device fingerprints, the raw IP address, individual user profiles, cross-site tracking.
  • Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in lightweight, anonymous audience measurement to improve the site). § 25 (1) TDDDG does not apply because Umami neither stores information on nor reads information from the user’s device.
  • Storage location: Our own AWS infrastructure in the EU (eu-central-1). No data is transferred to third countries.
  • Retention: Raw events are deleted no later than 12 months after collection; aggregated analytics may be retained longer as they no longer relate to identifiable individuals.
  • Right to object: You can object to this processing at any time under Art. 21 GDPR by emailing us at dialog(at)leadtributor.com. Browser-side you can disable the measurement via the “Do Not Track” setting or a content blocker (e.g. uBlock Origin) without losing any site functionality.

If the scope changes. As soon as we deploy cookies, cross-site tracking pixels, or other tools that store information on or read it from the user’s device or build personal profiles, we will obtain your consent in accordance with § 25 (1) TDDDG before activation and update this policy accordingly.

5. Third-Party Content

On the initial page load, this site embeds no third-party scripts, fonts, or analytics. All assets (including the Mulish font) are served from the same origin (next.leadtributor.com). The only additional load is our self-hosted audience measurement Umami on its own subdomain insights.leadtributor.com (see section 4); it runs on our own AWS infrastructure in the EU and is not a third party in the sense of the GDPR. No connections leave the leadtributor domain when the page loads.

Exceptions, both triggered by active user action:

  • The interactive product tour on the Product Tour page is loaded from Storylane, but only after you explicitly click the tour-start button. See section 6.
  • The meeting-booking link on the Product Tour and Contact pages navigates on click to our HubSpot Meetings booking page on the subdomain success.leadtributor.com. No HubSpot script or iframe is loaded on next.leadtributor.com itself. See section 7.

6. Product Tour (Storylane)

On the Product Tour page we offer a guided, interactive demo of our product, provided through Storylane, Inc. (548 Market St PMB 12345, San Francisco, CA 94104, USA).

  • Click-to-load: When the page is loaded, no Storylane script is loaded. Only when you click “Start the product tour” do we load the script https://js.storylane.io/js/v2/storylane.js and embed the demo iframe (https://app.storylane.io/...).
  • Data collected: With the click, connection data is transmitted to Storylane: IP address, user-agent, referrer, interaction events with the demo (click paths, scroll depth, dwell time). Storylane sets cookies and local-storage items needed for the demo experience.
  • Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TDDDG. Your click on “Start the product tour” constitutes active consent. Before that click, no data is sent to Storylane.
  • Transfer to the USA: Storylane processes data in the USA. Storylane is certified under the EU-US Data Privacy Framework, which establishes an adequate level of protection under Art. 45 GDPR. Standard contractual clauses under Art. 46 GDPR apply as a complementary safeguard.
  • Withdrawal: Simply do not start the tour. If you have already started it, close it by leaving or reloading the page. Data already transmitted to Storylane can be deleted via their privacy contact at storylane.io/legal/privacy.

7. Meeting Booking (HubSpot Meetings)

On the Product Tour and Contact pages we offer a link to book a consultation appointment directly with our team. This link leads to our booking page at success.leadtributor.com/meetings/krus, which we provide technically through the meeting-booking tool HubSpot Meetings by HubSpot Germany GmbH (Am Postbahnhof 17, 10243 Berlin) on our own subdomain.

  • Nothing is loaded on this site. On next.leadtributor.com itself no HubSpot script and no HubSpot iframe is loaded. The booking button is a plain link that opens a new page in a separate browser tab on click.
  • When is data sent to HubSpot? Only when you actively select an appointment on the booking page and enter your contact details:
    • Name, email address, optionally phone and company
    • Selected appointment slot, optional message
    • Technical connection data: IP address, user-agent, referrer
  • Storage location: HubSpot Germany GmbH (Am Postbahnhof 17, 10243 Berlin) is the contractual party. The actual data processing takes place in the HubSpot na1 (US) data centre operated by HubSpot, Inc. (25 First Street, Cambridge, MA 02141, USA). HubSpot, Inc. is certified under the EU-US Data Privacy Framework, which establishes an adequate level of protection under Art. 45 GDPR for the transfer to the US. Standard contractual clauses under Art. 46 GDPR apply with HubSpot as a complementary safeguard.
  • Cookies: HubSpot sets cookies and local-storage items on the booking subdomain (success.leadtributor.com) that are technically required for the booking functionality. These cookies are scoped to the subdomain and have no connection to your visit on next.leadtributor.com.
  • Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures; you actively contact us to arrange a consultation). For non-strictly- necessary cookies on the booking subdomain, Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG applies; HubSpot provides notice on the booking page itself.
  • Retention: Appointment and contact data are stored in our HubSpot CRM and processed in accordance with statutory retention periods (typically 6-10 years under HGB / AO).
  • Data processing agreement: A data processing agreement under Art. 28 GDPR is in place with HubSpot.
  • Withdrawal: Simply do not click the booking link. If you have already booked an appointment, you can cancel it at any time by email to dialog(at)leadtributor.com or request deletion of your data.

8. Contact Form

On the Contact page we offer a form for you to send us an inquiry or demo request.

  • Data collected: the fields you actively fill in: first name, last name, business email, company, optional phone number, message. We also capture the URL of the page from which you submitted the form and the selected language (de / en); both help us route and respond appropriately.
  • Transmission path: on submit, your inquiry travels as a JSON request to our own API endpoint at api.next.leadtributor.com (hosted on AWS in Frankfurt, see Section 3). The endpoint runs anti-spam checks (hidden honeypot field, time-trap plausibility) and forwards the verified data on to HubSpot.
  • Data processor: the contractual party for our CRM is HubSpot Germany GmbH (Am Postbahnhof 17, 10243 Berlin). The actual data processing takes place in the HubSpot na1 (US) data centre operated by HubSpot, Inc. (25 First Street, Cambridge, MA 02141, USA). HubSpot, Inc. is certified under the EU-US Data Privacy Framework, which establishes an adequate level of protection under Art. 45 GDPR for the transfer to the US. Standard contractual clauses under Art. 46 GDPR apply with HubSpot as a complementary safeguard.
  • Confirmation email: on successful submission, HubSpot sends an automatic confirmation email to the address you provided. This is a transactional message tied directly to your inquiry; no newsletter subscription is involved.
  • Purpose: processing your inquiry, pre-contractual communication, and potentially the subsequent customer relationship.
  • Legal basis: Art. 6 (1) (a) GDPR (consent; you confirm processing via the checkbox in the form) and Art. 6 (1) (b) GDPR (pre-contractual measures).
  • Cookies: submitting the form sets no cookies. The API call to api.next.leadtributor.com does not set cookies either. No cookie banner is therefore required.
  • Retention: as long as your inquiry is in active processing; in case of contract initiation or conclusion, according to statutory retention periods (typically 6-10 years under HGB / AO).
  • Withdrawal: you can withdraw your consent for the future at any time by sending an informal email to dialog(at)leadtributor.com.
  • Data processing agreement: a data processing agreement under Art. 28 GDPR is in place with HubSpot.

9. Recipients of Personal Data

We do not share your personal data with third parties except:

  • the hosting provider in section 3 (AWS),
  • the tour provider in section 6 (Storylane), after your explicit click on the tour-start button,
  • the meeting-booking provider in section 7 (HubSpot Meetings), after your click on the booking button and entry of your data on the booking page,
  • the CRM provider in section 8 (HubSpot) for incoming contact and appointment inquiries,
  • where applicable, a newsletter delivery service after explicit subscription, with separate notice and double opt-in.

Those providers act under a data processing agreement. AWS and HubSpot operate on EU-based servers. Storylane processes data in the USA, safeguarded by the EU-US Data Privacy Framework and complementary standard contractual clauses (see section 6).

10. Your Rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise these rights, contact us at dialog(at)leadtributor.com or write to our Data Protection Officer (section 2).

The competent supervisory authority for our company is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach, Germany.

11. Changes to this Policy

We will update this policy when third-party integrations change or when we add features that involve personal data, particularly when we enable tracking tools, a contact form, or external embeds. The current version is always available at this URL.