# Privacy policy

This is an English translation of our privacy policy. The German version, the [Datenschutzerklärung](https://leotoni.de/datenschutz.html), is legally binding.

## Controller

Laura Klein, Leo & Toni, Zeppelinstr. 4, 85764 Oberschleißheim, Germany  
Email: [info@leotoni.de](mailto:info@leotoni.de)

## In short

- This website sets no cookies and uses no analytics or advertising services.
- We serve fonts and images ourselves; no content is loaded from third parties.
- Orders are placed via Etsy. Etsy’s privacy notice applies only once you open an Etsy link.

## Hosting and server log files

The website is delivered via Cloudflare, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data: IP address, date and time, the page requested, the amount of data transferred, the referrer and your browser and operating system. This is necessary to deliver the website securely and reliably and to protect it from attacks (Art. 6(1)(f) GDPR). Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). We have a data processing agreement with Cloudflare (Art. 28 GDPR).

## Contact by email

If you send us an email, we use your details only to answer your enquiry (Art. 6(1)(b) or (f) GDPR). We delete them as soon as they are no longer needed for that purpose and no statutory retention periods apply.

## Links to Etsy and social networks

Our links to Etsy, Instagram, Facebook, Pinterest and TikTok are simple links. As long as you do not open one, no data is transferred to these services. The respective provider is responsible for any processing there. If you order via Etsy, we receive your name and delivery address from Etsy and use them only to send your order (Art. 6(1)(b) GDPR).

## Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Just write to us at [info@leotoni.de](mailto:info@leotoni.de).

You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Last updated: November 2026