Legal

Legal notice (Impressum)

The following mandatory legal notice is provided in German as required by German law.

Privacy policy

Controller within the meaning of the GDPR: Constantin Selzer, Altöttinger Str. 8, 81673 München, email: kontakt@weleanon.com.

What this website processes, and what it does not

This website uses no tracking: no cookies, no analytics, no embedded third-party scripts. It also processes no patient data: the LeanOn platform runs inside the clinics themselves, on their own hardware, and is technically separate from this website.

Hosting (Cloudflare)

The website is delivered via Cloudflare Pages (Cloudflare, Inc., USA); Cloudflare acts as our processor. When a page is retrieved, connection data arises for technical reasons (e.g. IP address, time of retrieval) and is processed to deliver the page and to defend against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). For the website infrastructure, a transfer to the USA takes place, safeguarded by EU Standard Contractual Clauses (SCCs).

Demo request

When you submit the "Request a demo" form, we process the details from the form: name, clinic, role, email address, optionally your message, plus language and time of sending. The request is received by a Cloudflare Worker, stored in Cloudflare KV storage and delivered to us by email. Email delivery runs via Cloudflare Email Routing, the same processor, with no additional third party. The sole purpose is contacting you to arrange a demo appointment (Art. 6(1)(b) GDPR, pre-contractual measures taken at your request).

Your IP address is not stored with the request; it is only used briefly (for at most two hours) to limit the request rate. In addition, the country of origin derived from the connection is stored.

Retention: until your request has been handled. After that, we delete the data.

Cookies, and why there is no banner

This website sets no cookies: no analytics, no marketing, no functional cookies, no local storage. It also loads no third-party content (fonts, scripts, embeds) that could transmit data, in particular, nothing to Google. A consent banner is therefore not required under Section 25 TTDSG; we show none because there is nothing to consent to.

The only possible exception: Cloudflare may in individual cases set technically necessary security cookies (e.g. for bot protection). These are exempt from consent under Section 25(2) TTDSG; the legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). A check on 2026-08-27 found no cookies set on a normal page load.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise these rights, contact kontakt@weleanon.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).