Privacy Policy

1. Joint controllers

LeanSignal is operated jointly by Datomatics GmbH and codemakers GmbH (addresses in the Impressum). For the processing described in this policy, the two companies are joint controllers within the meaning of Art. 26 GDPR. As a single point of contact for any data-protection request, you can reach us at info@datomatics.com.

2. What we process, and why

Hosting & server logs. When you visit, our hosting provider automatically processes technical data (IP address, browser and operating system, date and time, the page requested, referrer URL) to deliver and secure the site. Legal basis: our legitimate interest in secure, reliable operation (Art. 6(1)(f) GDPR). Hosting is provided by Amazon Web Services (AWS Amplify).

Account sign-up. Creating a LeanSignal account happens in our product app at cc.leansignal.io, under its own terms; this marketing site does not process account data.

Demo & contact forms. When you submit the demo form (first name, last name, email) or the contact form (name, email, message), we process the data to respond to you. Legal basis: steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding (Art. 6(1)(f) GDPR). These forms are processed by our own function on AWS (Lambda) and protected from spam by Google reCAPTCHA.

Analytics (Google Analytics). With your consent, we use Google Analytics to understand how the site is used (pages viewed, approximate location, device and browser). This sets cookies and transfers data to Google; IP anonymization is enabled. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via “Cookie preferences” in the footer.

3. Cookies & consent

Essential storage (for example, remembering your cookie choice) is always active and is necessary for the site to function. Analytics cookies are set only after you click “Accept” in the cookie banner. You can change or withdraw your choice at any time using the Cookie preferences link in the footer.

4. Processors & recipients

• Google Analytics (Google Ireland Ltd / Google LLC) — usage analytics, loaded only with consent. Privacy.
• Google reCAPTCHA — spam and abuse protection on the contact form (legitimate interest, Art. 6(1)(f) GDPR). Privacy.
• Amazon Web Services (AWS) — website hosting, content delivery, and contact-form processing (AWS Lambda).

These providers act as our processors under data-processing agreements where applicable.

5. International transfers

Some providers (Google, and AWS depending on region) may process data in the United States. Such transfers are safeguarded by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

6. Retention

We keep signup and demo data until you unsubscribe or ask us to delete it. Server logs are retained only briefly for security and troubleshooting. Analytics data is retained according to our Google Analytics configuration.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object, as well as to withdraw consent at any time (Art. 15–21 GDPR). To exercise any of these, contact info@datomatics.com. You also have the right to lodge a complaint with a supervisory authority — for us, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

8. Contact

Questions about this policy or your data: info@datomatics.com.