When you communicate with us via WhatsApp, your personal data will be processed. In accordance with Art. 12, 13 GDPR, we are obliged to inform you transparently about this data processing at the time of the first contact as follows. 

We, Leela Lab UG (limited liability company), Moos 6, 86983 Lechbruck am See, Germany, are responsible for data processing. Represented by the managing director: Philipp Samor von Holtzendorff-Fehling. We are not obliged to appoint a data protection officer.

An existing messaging account is required to use this service.

If you communicate with us via WhatsApp, we process the personal data you provide or have provided (e.g. name, telephone number, email address, messenger ID, profile picture, messages) for communication regarding the preparation and execution of any orders as well as for sending promotional information (e.g. offers, newsletters) using the instant messaging service “WhatsApp” provided by WhatsApp Ireland Limited, WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. 

The use of WhatsApp is based on your consent to use the service. We would like to point out that you can revoke communication with us via WhatsApp at any time without giving reasons for the future by informing us of your revocation via WhatsApp or by e-mail to datenschutz@leelaq.de.

If you have not given us explicit consent for the use of WhatsApp, we base the use on a legitimate interest. As a company, we have an interest in the use of modern and user-friendly means of communication.

We would like to point out that WhatsApp Ireland Limited may also pass on personal data (in particular communication metadata) to WhatsApp Inc. which is also processed on servers in countries outside the EU (e.g. USA) where there is no adequate level of data protection. WhatsApp may share the data with other companies within and outside the Meta group of companies. 

To ensure that personal data from the European Union is adequately protected when transferred outside the EU, the General Data Protection Regulation (GDPR) requires that such transfers take place using certain legal instruments: WhatsApp uses standard contractual clauses approved by the European Commission. 

WhatsApp also has active certification in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Companies in the USA can undertake to comply with these data protection standards and can obtain certification. The certificate can be viewed in the Data Privacy Framework list.     

Further information can be found in the privacy policy of WhatsApp Business (https://www.whatsapp.com/legal/business-policy/) and WhatsApp (https://www.whatsapp.com/legal/#privacy-policy). 

The above-mentioned data will be deleted in accordance with the legal requirements as soon as the consents permitted for processing are revoked or if the purpose of processing this data no longer applies or if it is not required for the purpose.

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person.

You have a right to information about the data stored about you and, if applicable, a right to rectification, erasure, data portability or restriction of processing. You also have the right to lodge a complaint about the processing of your personal data with the data protection supervisory authority.