Privacy policy (GDPR) – Crane Baby / Leovanza GmbH

Leovanza GmbH (hereinafter: “we”, “Seller”, or “Crane Baby”) respects your privacy and protects the personal data of its users, business partners, and other persons with whom we work. This privacy policy explains what data we collect, how we use it, and what rights you have.

This policy is in line with the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), and other applicable law in the Federal Republic of Germany. For data protection questions, contact us at info@crane-baby.de or by post at the address below.

1. Controller

Leovanza GmbH
Fasanenweg 5
65451 Kelsterbach
Germany
E-mail: info@crane-baby.de
VAT identification number (USt-IdNr.): DE458457245

2. Data we collect

2.1. When you visit the website and online shop

You can use our website and shop without providing personal information. We collect technical access data that your browser automatically transmits (date and time of access, page requested, content of the request, browser and operating system information, IP address, session ID, error messages, last page visited before referral). Access data is anonymised after collection where possible. We also collect data you actively provide (e.g. product searches).

2.2. Cookies

Our website and shop use cookies to make use easier (e.g. language settings, shopping cart, session identifiers). On your first visit you can choose cookie settings. You can manage and delete cookies in your browser settings. By using the website you agree – where required – to cookie use in accordance with our cookie notice.

2.3. When you place an order

We only collect data necessary to process your order and run our business:

– First and last name
– Delivery address
– E-mail address
– Phone number
– Order data (products, quantities, variants)
– Payment data (we do not store full card numbers; payment is processed by payment service providers)
– Data relating to returns and complaints, order and tracking numbers
– For B2B invoices: company name, contact person, address, VAT ID or tax number

We may also collect: communication by e-mail or message and website usage data (cookies).

2.4. Contacting us

If you contact us via contact form, e-mail, phone, or social networks, we process the data you provide. Phone calls are not recorded.

2.5. Newsletter and abandoned-cart reminders

With your consent we store your e-mail address for the newsletter; you can unsubscribe at any time via the link in each e-mail. An e-mail address entered at checkout may be used for automatic reminders about an open shopping cart; you can object to this at any time.

3. Purposes of processing

We use your data to:

– Process and deliver orders
– Communicate with you and provide customer service
– Handle complaints
– Keep business records and meet legal obligations (accounting, retention)
– Ensure technical availability and security of the website
– Internal analysis and improvement of our offer (anonymised where possible)

We do not use your data for other purposes without your consent.

4. Legal bases

Processing is based on:

– Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)
– Legal obligations (Art. 6(1)(c) GDPR)
– Legitimate interests (communication, IT security, analysis of website use) (Art. 6(1)(f) GDPR)
– Consent where required (e.g. marketing, newsletter) (Art. 6(1)(a) GDPR)

5. Sharing data

Data is shared with third parties only where necessary:

– Shipping carriers (e.g. DHL, DPD, GLS) for delivery
– Payment service providers (we do not have access to full card data and do not store it)
– Tax advisors/accounting and other processors under Art. 28 GDPR

Sharing may also occur to assert legal claims or where required by law. We do not sell your data or share it for advertising without consent.

6. Web analytics

6.1. Google Analytics

Where used, Google Analytics (Google Ireland Limited / Google LLC) may analyse use of the site. Cookies are used; the IP address may be truncated. Opt-out: https://tools.google.com/dlpage/gaoptout/.

6.2. Facebook / Meta and Google Ads

Where used, Facebook pixels and Google Ads (conversions, remarketing) may measure ad performance and serve personalised ads. Data may be transferred to the USA. You can adjust settings with Meta and Google; see their privacy notices for details.

7. Retention

We keep data for as long as needed to perform the contract and meet statutory retention periods. We then delete or anonymise it. Commercial and tax retention periods (often up to 10 years) remain unaffected. Processing may be restricted where the law provides.

8. Data security

We implement appropriate technical and organisational measures to protect against unauthorised access, loss, and misuse. Transmission of personal data is encrypted (SSL/TLS) where offered.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, objection to processing (in particular to direct marketing), and data portability, where the legal requirements are met. To exercise these rights, contact us at info@crane-baby.de.

You have the right to lodge a complaint with a supervisory authority. The authority responsible for our registered office is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, www.datenschutz.hessen.de. You may also contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI): www.bfdi.bund.de.

10. Withdrawal of consent and objection

You may withdraw consent at any time with effect for the future; lawfulness of processing before withdrawal remains unaffected. Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object on grounds relating to your particular situation; you may object at any time to processing for direct marketing purposes. Contact: info@crane-baby.de.

11. Changes to this policy

We may update this privacy policy. We will publish material changes on this page and, where required, obtain new consent.

12. Data protection contact

Questions about data protection: info@crane-baby.de

Last updated: 18 March 2026