Privacy Policy

Last updated: March 2026

1. Controller

The controller responsible for data processing on this website is:

Leadux GmbH
Friedrichstraße 95
10117 Berlin, Germany
Email: data-protection@leadux.com

2. Overview of Data Processing

We take the protection of your personal data seriously. We process personal data in compliance with the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications-Telemedia Data Protection Act (TDDDG).

3. Data Collected When Visiting Our Website

3.1 Server Log Files

When you access our website, our hosting provider automatically collects and stores information transmitted by your browser in server log files:

  • IP address (anonymized)
  • Date and time of the request
  • Browser type and version
  • Operating system
  • Referring URL
  • Pages accessed

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the stable and secure operation of our website.

3.2 Cookies

Our website uses cookies. Some cookies are technically necessary for the website to function; others are used for analytics and marketing purposes and require your consent. You can manage your cookie preferences at any time through our cookie consent tool.

The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. The legal basis for analytics and marketing cookies is your consent pursuant to Art. 6(1)(a) GDPR.

4. Leadux Chat Widget & AI Processing

Leadux provides an AI-powered chat widget that may be embedded on our website and on the websites of our business clients. This section describes how data is processed when you interact with the Leadux chat widget.

4.1 Consent

Before you can send messages through the chat widget, you will be asked to acknowledge that the chat is AI-powered and that your messages will be processed. No messages are sent or processed until you provide this acknowledgment. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

4.2 Data Processed During Conversations

When you use the chat widget, the following data may be processed:

  • Messages you type: Your messages are sent to our servers and processed by an AI language model to generate relevant responses.
  • Page context: The title, headings, and content of the page you are browsing are used to provide context-aware responses.
  • Contact information: If you voluntarily provide your name, email address, or phone number during the conversation, this information is stored as a lead record and forwarded to the website operator.
  • Technical data: Device type, browser, referral source, and approximate location (derived from IP address, which is not stored).

4.3 AI Processing

Conversation messages are processed using third-party AI language model APIs (currently Anthropic's Claude API) to generate responses. These API calls are stateless — the AI provider does not store or retain your conversation data and does not use it for training purposes. We have a Data Processing Agreement (DPA) in place with our AI provider.

4.4 Data Retention

Conversation logs are retained for a maximum of 90 days and are then automatically deleted. Lead records (name, email, phone) are retained until the website operator requests deletion or you exercise your right to erasure.

5. Analytics

We use analytics tools to understand how visitors interact with our website. Analytics cookies are only set with your explicit consent via our cookie consent tool, in compliance with Google Consent Mode v2.

6. Hosting

Our website and services are hosted on servers located in Germany (Hetzner Online GmbH). All data is stored and processed within the European Union.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) — request information about your stored data
  • Right to rectification (Art. 16 GDPR) — correct inaccurate data
  • Right to erasure (Art. 17 GDPR) — request deletion of your data
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
  • Right to withdraw consent (Art. 7(3) GDPR) — withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at data-protection@leadux.com.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent supervisory authority for Leadux GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin
www.datenschutz-berlin.de

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. The current version is always available on this page. We encourage you to review it periodically.