Privacy Policy

Controller

LENO Innovations Ltd
Innovation One, Level 3, Office IH-00-01-03-OF-05
Dubai International Financial Centre (DIFC)
Dubai, United Arab Emirates
Email: mail@leno-innovations.com

Representative in the Union (Art. 27 GDPR)

The controller has no establishment in the European Union but directs its services to customers in Germany. The General Data Protection Regulation therefore applies pursuant to Art. 3(2) GDPR.

A representative in the Union under Art. 27 GDPR is currently not designated. For all data protection matters, you can reach us directly at the address stated above.

Principle: data minimisation

This website uses no cookies, no analytics or tracking services, and loads no content from third-party servers. Fonts, images, and all other files are provided by our own domain. Therefore, no consent banner is required for the website functions described here.

Hosting and server log files

The servers are located with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The website runs in German data centers; encrypted backups are stored in Germany and Finland. Both locations are within the European Union.

We do not keep access logs for viewing these pages. Your IP address is required technically for delivery but is not recorded in a log file. This short-term processing is based on our legitimate interest in providing the website (Art. 6(1)(f) GDPR). You are not obliged to visit this website; however, without processing your IP address, the pages cannot be delivered. Access logs are recorded exclusively for the protected administrative areas, each with timestamp, IP address, hostname, method, and status code. These entries are automatically deleted from the server after eleven days; they remain in the encrypted backups until the respective backup is deleted on schedule. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The provision of this data is neither legally nor contractually required; access to the administrative areas is not possible without it.

Contact via email

When you write to us, we process your information to answer your inquiry and create an offer. If your inquiry concerns a possible contract with you, the legal basis is Art. 6(1)(b) GDPR; for other inquiries and communication with contacts at companies, Art. 6(1)(f) GDPR. Our legitimate interest is to respond to inquiries directed at us. You are neither legally nor contractually obliged to provide us with data; however, without contact details and the content of your inquiry, we cannot respond to you or create an offer. We store your inquiry for the duration of its processing and delete it once it has been fully answered and no contract has been concluded or the contract has been fully executed, unless any statutory retention obligations applicable to us preclude this. We have not set a fixed period. For regular follow-ups, we check whether the inquiry has been fully answered, whether any follow-up questions or pre-contractual steps remain outstanding, and whether a contractual relationship has arisen. Emails sent to us are received and stored by Microsoft 365 (Exchange Online) from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Transfer to a third country

The controller is headquartered in the Dubai International Financial Centre (United Arab Emirates). There is no adequacy decision from the European Commission for the United Arab Emirates; the Commission has not recognized the data protection level there as equivalent. Regulatory access and enforcement of your rights may follow different rules there.

Hetzner Online GmbH stores the logs of the administrative areas in Germany; emails sent to us are received and stored by Microsoft 365 (Exchange Online). We access this data from the United Arab Emirates. This access constitutes a transfer to a third country. Where your email, in the individual case, concerns the conclusion or performance of a contract with you or pre-contractual measures requested by you, we base the transfer on Art. 49(1)(b) GDPR. Neither standard contractual clauses nor other appropriate safeguards under Art. 46 GDPR are currently in place.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20, insofar as processing is based on a contract), and objection (Art. 21 GDPR; see the separate section below). Please contact the address mentioned above. You may also lodge a complaint with any data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR).

We have not appointed a data protection officer. Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.

Your right to object under Art. 21 GDPR

Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or processing is necessary for the establishment, exercise, or defense of legal claims. A simple email to the address mentioned above is sufficient.