Privacy policy

Leatherman Europe GmbH

18. September 2026

Thank you for visiting our website. Below, we explain how we handle your data in accordance with Art. 19 of the Swiss Federal Act on Data Protection (FADP) and Art. 13 of the EU General Data Protection Regulation (GDPR). For consistency, we use the terms "personal data" and "processing" as defined in the FADP. They have the same meaning as the corresponding terms in the GDPR.

If you are a data subject in Switzerland, the FADP, the Swiss Data Protection Ordinance and the Swiss Telecommunications Act (TCA) apply. If you are a data subject in the EU or the EEA, the GDPR applies, and the legal basis for processing is determined by the GDPR.

1. Controller

The controller responsible for data processing on this website under Art. 5(j) FADP and Art. 4(7) GDPR is Leatherman Europe GmbH (hereinafter "Leatherman"). Our contact details are:

Leatherman Europe GmbH
Holterkamp 16
40880 Ratingen, Germany
E-mail: info-europe@leatherman.com

2. Usage data

When you visit our web pages, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our web pages. This data record consists of:

• the name and address of the requested content,
• the date and time of the query,
• the amount of data transferred,
• the access status (content transferred, content not found),
• the description of the web browser and operating system used,
• the referral link, which indicates from which page you have reached ours,
• the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.

In addition, we store the full IP address transmitted by your web browser for a strictly specific purpose for a period of seven days, in the interest of being able to detect, limit and eliminate attacks on our websites. After this period, we delete or anonymize the IP address.

The legal bases for processing this usage data are Art. 45c(b) TCA and Art. 6 and 31(1) FADP (overriding interest), or § 25(2) no. 2 TTDSG in conjunction with Art. 6(1)(f) GDPR (legitimate interest).

3. Contact us / TALK TO US

When you contact us by e-mail, telephone or post, we process the personal data you provide, e.g. your e-mail address, your name if applicable and your telephone number, in order to process your request. The processing is based on Art. 6 and 31(2)(a) FADP or Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, we process your data on the basis of your consent under Art. 6 and 31(1) FADP and/or on the basis of our overriding or legitimate interest under Art. 6 and 31(1) FADP or Art. 6(1)(f) GDPR. Our overriding or legitimate interest lies in particular in handling your request effectively. The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

4. Online shop

You have the possibility to buy our products in our online shop. You have the possibility to order as a guest (without registration) as well as via a customer account.

4.1 Order process as a guest

We store and use the personal data you transmit to us in the course of an order on the basis of Art. 6 and 31(2)(a) FADP if you yourself are our contractual partner, or on the basis of Art. 6 and 31(1) and (2) FADP if, for example, you place an order for a company, in order to process your orders or carry out pre-contractual measures. The processed data will be kept as long as necessary for the respective purpose. Afterwards, the data will be deleted unless further retention obligations apply, such as retention obligations under commercial or tax law for a period of 10 years. Under Art. 958f of the Swiss Code of Obligations, accounting records must be kept for ten years. The retention period begins at the end of the financial year.

4.2 Customer account

In order to provide you with the greatest possible convenience, we offer you the permanent storage of your personal data in a password-protected customer account. The creation of the customer account is voluntary. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time. The processed data will be kept as long as necessary for the respective purpose. Afterwards, the data will be deleted unless further retention obligations apply, such as retention obligations under commercial or tax law for a period of 10 years. You also have the option of deleting your customer account at any time. To do so, please contact either us or our data protection officer. You can find the respective contact details in this privacy notice under point 1 and point 7.

The legal basis for processing in connection with your use of the customer account is Art. 6 and 31(1) FADP or Art. 6(1)(f) GDPR. Our overriding or legitimate interest is being able to provide customers with the extended functions of the customer account they have asked for.

4.3 Payment process

We process your order details, the invoice amount, the invoice due date and the description of the item(s) to check whether we have received your payment from one of the payment providers. Depending on your choice of payment method, you will be redirected to another platform where the payment process takes place. You can currently pay in our online shop with VISA, Mastercard or Klarna. The providers and credit card companies process your data as their own data controllers, independent of us.

The scope of personal data processed in connection with your payment data differs for each of the payment providers. If you would like more information about the categories of personal data processed and the process in general, please visit the relevant privacy statements of the providers.

We process your payment information under Art. 6 and 31(2)(a) FADP or Art. 6(1)(b) GDPR to perform the contract if you are a natural person, or on the basis of our overriding or legitimate interest (receiving our payment) if you are a company (Art. 6 and 31(1) FADP or Art. 6(1)(f) GDPR). You choose the payment method, and with it the transfer of data to one of the payment providers, voluntarily.

4.4 Service form

With our service form on our website, our customers have the possibility to request online the repair/replacement of the tools purchased from us. We process your data under Art. 6 and 31(2)(a) FADP or Art. 6(1)(b) GDPR to perform the contract if you are a natural person, or on the basis of our overriding interest if you are a company (Art. 6 and 31(1) FADP or Art. 6(1)(f) GDPR).

The data you send to us by form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

5. Website technologies

Our website uses cookies and similar technologies in order to be able to design the website optimally. In the following, we provide you with detailed information on the individual technologies.  For more specific information on the cookies used, you can access our cookie policy at any time.

5.1 YouTube

We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode". A data transfer to YouTube then only takes place if you consent to the data transfer to YouTube and play the video accordingly.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, metadata is transmitted to the service provider, which may be personal. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, log out before activating the function. YouTube stores your data as usage profiles and uses them for the purpose of advertising, market research and / or tailored design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you should preferably contact YouTube to exercise this right.

The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.2 Google reCaptcha

This website uses the service reCAPTCHA to determine whether certain inputs are carried out by humans or computers (so-called bots). For this purpose, actions of website users are analyzed (e.g. mouse movements or queries). Google recognizes the type of input based on the IP address of the end device used, the website visited with CAPTCHA function, the date and duration of the visit and the data of the browser and operating system used.

The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.3 Google Analytics

This website uses Google Analytics. Google Analytics uses so-called "cookies", which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the case of activation of IP anonymization (AnonymizeIP) on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google servers in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. This website uses Google Analytics with the extension "Anonymize IP". This means that IP addresses are processed in a shortened form, making it virtually impossible to link them to a specific person. If the data collected about you has a personal reference, it will be deleted immediately.

The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.4 Google Tag Manager

We have integrated the Google Tag Manager on our website, a utility service that itself processes personal data (IP address) only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data, e.g. Google Analytics.

The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.5 Google Fonts

We use "Google Fonts" on our website, a service of Google Ireland Limited, (hereinafter referred to as "Google"). The service gives us the option to use external fonts, so-called Google Fonts. The Google Fonts are installed locally on our server. A connection to Google servers does not take place. We use "Google Fonts" on our website, a service of Google Ireland Limited, (hereinafter referred to as "Google"). The service gives us the opportunity to use external fonts, so-called Google Fonts. For this purpose, the required Google Font is loaded into the browser cache by your browser when you call up our website. This is necessary so that your browser can display a visually improved representation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. The integration of these web fonts is done by a server call, usually at a Google server in the USA. This transmits to the server which of our Internet pages you have visited. The IP address of the browser of your terminal device is also stored by Google. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Web Fonts.

We use Google Web Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal bases are Art. 45c(b) TCA and Art. 6 and 31(1) FADP (overriding interest), or § 25(2) no. 2 TTDSG in conjunction with Art. 6(1)(f) GDPR (legitimate interest).

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.6 Facebook pixel

Our website uses "Facebook Pixel", a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook"). Facebook Pixel enables Facebook to display our ads on Facebook, so-called "Facebook Ads", only to those Facebook users who have been visitors to our website, in particular those who have shown interest in our offer or in certain topics or products. Facebook Pixel also serves to verify whether a user was redirected to our website after clicking on our Facebook Ads. Among other things, Facebook Pixel uses cookies that are stored locally in the web browser's cache on your end device. If you are logged in to Facebook with your user account, the visit to our online offer is noted in your user account. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about your identity. However, this data can be assigned by Facebook to your user account there. We have no influence on the scope and further use of data processed by Facebook through the use of Facebook Pixel. Even if you are not registered with Facebook or are not logged in, there is a possibility that Facebook will learn and store your IP address and possibly other identifying features.

We use Facebook Pixel for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus to improve our offer, to make it more interesting for you as a user and to avoid annoying ads. The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third Party Provider Information: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Facebook (service provider: Meta Platforms Inc.), processing may also take place outside the EU or the EEA. For Meta Platforms Inc. and any processing in the USA, an adequate level of data protection can be assumed because Meta Platforms Inc. is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.7 Facebook Conversion API

"Facebook Conversion API" is used on this website. We use Facebook Conversion API for marketing and optimization purposes, in particular to serve relevant and interesting ads to you on Facebook and thus improve our offer. In connection with the Conversion API, we use the following data: Email; Address; Phone Number; Gender; Date of Birth; First and Last Name; City, State and Country; Postal Code; User IDs; IP Address; Client User Agent (the browser you are using and your operating system); Click IDs; Browser ID; Product IDs; Advertising ID; Facebook Login ID.

The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third Party Provider Information: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Facebook (service provider: Meta Platforms Inc.), processing may also take place outside the EU or the EEA. For Meta Platforms Inc. and any processing in the USA, an adequate level of data protection can be assumed because Meta Platforms Inc. is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.8 Google Ads

"Google Ads" is used on this website. Google Ads offers the possibility to draw attention to attractive offers of already visited websites with the help of advertising media on external websites. This determines how successful individual advertising measures are. These advertising media are delivered by Google via so-called "AdServers". For this purpose, so-called AdServer cookies are used, through which certain parameters for measuring success, such as display of the ads or clicks by the users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your end device. Cookies do not serve to identify you personally. With this cookie, the following information is usually stored as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies allow Google to recognize your web browser. If a user visits certain content or pages of a Google Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked via the website of Google Ads customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive anonymised statistical evaluations from Google. Based on these evaluations, we can see the effectiveness of advertising measures used. We do not receive any further data from the use of the advertising tools, in particular we cannot identify the users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google servers. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or not logged in, there is a possibility that Google will find out your IP address, store it and process it for other purposes.

We use Google Ads for marketing and optimization purposes, in particular to provide you with relevant and interesting advertisements, to improve evaluations of campaign performance and to achieve a fair calculation of advertising costs. The processing is based on your consent under Art. 6 and 31(1) FADP or § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent to the use of personal data at any time in our Consent Banner for the future.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. Under Annex 1 of the Swiss Data Protection Ordinance, Ireland is recognised as providing an adequate level of data protection.

With regard to Google, processing may also take place outside the EU or the EEA. For Google LLC and any processing in the USA, an adequate level of data protection can be assumed because Google is certified under the EU-U.S. or Swiss-U.S. Data Privacy Framework. This adequate level of protection also applies under Annex 1 of the Swiss Data Protection Ordinance. Even so, there may be a risk that authorities access the data for security and surveillance purposes without you being informed or being able to take legal action. The transfer to a third country is therefore also based on Art. 17(1)(a) FADP or Art. 49(1)(a) GDPR.

5.9 Third Party Services

• We use a third-party service, Alert Me! Restock Alerts by Dibble Development, to power our “Notify me when back in stock” feature. If you sign up to receive a restock alert, your email address will be used solely for that purpose. This data is not used for marketing, is automatically deleted when the product is removed, and is processed on the basis of your consent under Art. 6 and 31(1) FADP or Art. 6(1)(a) GDPR.
  
  

• Revize – Order Editing App
  We use the Revize Shopify app to enable enhanced order editing functionality, including the ability for customers to modify order details (e.g., shipping address edits, item adjustments, variant changes, and partial cancellations) as part of our order management process.

  Revize may access limited order and customer information necessary to provide this service, such as:

  • Order identifiers and metadata

  • Customer contact information (e.g., name, email)

  • Shipping and billing details

  • Product and variant identifiers

  Revize acts as a data processor on our behalf and does not use customer data for independent marketing, analytics, advertising, or any purposes beyond providing the order editing features. Data accessed by Revize is stored in encrypted systems and transmitted securely, and it will only be retained while the service is active or as required under their data retention and deletion policy.

  You may request information about what data Revize processes and how it is used by contacting us or visiting Revize’s data processing documentation. Revize adheres to industry‑standard security practices and applicable data protection requirements.

  The legal basis is Art. 6 and 31(1) FADP or Art. 6(1)(f) GDPR. Our overriding or legitimate interest is processing orders quickly and letting customers change their order details.

  International data transfers
  Where applicable, personal data processed through Revize may be transferred to and processed in countries outside the European Economic Area, including the United States and India. Such transfers are based on standard data protection clauses under Art. 16(2)(d) FADP.

• Treet Resale Platform Integration
  We partner with Treet, a third-party resale platform, to enable peer-to-peer resale of Leatherman products. When you use the resale platform, you are interacting with Treet directly, and any personal data provided through the resale site will be handled in accordance with Treet’s Privacy Notice. Leatherman is not a party to these transactions.

  Treet accesses certain Shopify data from our store via a private app. This includes read and write access to:

  • Order history (to enable listing of previously purchased products)

  • Customer contact information (name, email, tags)

  • Inventory and product data

  • Discounts and gift card management (used to process resale payouts)

  Treet shares limited customer and order data with Leatherman for performance tracking, including:

  • Customer name, email, account creation date, and purchase history

  • Order-level data such as transaction value, zip code, and seller ID

  This information is shared to help us understand resale activity, improve sustainability efforts, and evaluate program performance. Treet does not store customer orders permanently and retrieves only the necessary data in real time during the listing process.

  This program is currently only available in selected European markets.

5.10 Bloomreach Pixel and Engagement

We use Bloomreach (Engagement & Discovery) as our marketing and personalization partner. Bloomreach processes user behavior and technical data via tracking pixels and cookies to deliver tailored content, product recommendations, email/SMS campaigns, and analytics.

Data collected may include:

• Behavioral data: visited URLs, clicks, page views, conversion events (e.g. Order IDs).
• Technical data: HTTP headers, device type, geolocation (city-level), anonymized IP, user-agent.
• Optional CRM-linked user ID if provided (pseudonymized).

FADP compliance:

Bloomreach acts as a data processor and supports all data subject rights under the FADP, including the rights of access, deletion, and data disclosure or portability. Bloomreach is only activated after you have given your consent via our cookie banner. You can withdraw your consent at any time via our cookie banner.

User controls:

You can request access to or deletion of data processed by Bloomreach by contacting us. Consent can be withdrawn at any time via our cookie banner or by contacting our Data Protection Officer.

• Bloomreach Website Privacy https://www.bloomreach.com/en/legal/privacy
• Bloomreach GDPR Resources https://www.bloomreach.com/en/legal/commitment-to-gdpr-compliance

5.11 Shopify Hosting and Data Processing

Our online store is hosted on Shopify Inc. ("Shopify"), which provides the e-commerce platform enabling us to sell our products to you. When you interact with our website (e.g., place orders or create an account), your data is stored and processed through Shopify's secure infrastructure.

Shopify implements robust safeguards to ensure FADP and GDPR compliance, including standard data protection clauses and other protective legal mechanisms for any international data transfers.

For more information, please see Shopify’s Privacy Policy.

6. Your data subject rights

When we process your personal data, the FADP and the GDPR grant you certain rights:

Right of access (Art. 25 FADP / Art. 15 GDPR):

You have the right to request confirmation as to whether personal data concerning you is being processed. If it is, you have a right of access to that personal data and to the information listed in Art. 25 FADP or Art. 15 GDPR.

Right to rectification and erasure (Art. 32 FADP / Art. 16 and 17 GDPR):

You have the right to request without delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.

You also have the right to request that personal data concerning you be deleted without delay, provided that one of the grounds set out in Art. 32 FADP or Art. 17 GDPR applies.

Right to restriction of processing (Art. 32(3) FADP / Art. 18 GDPR):

You have the right to request the restriction of processing if one of the conditions set out in Art. 32(3) FADP or Art. 18 GDPR is met.

Right to data disclosure or portability (Art. 28 and 29 FADP / Art. 20 GDPR):

In certain cases, set out in Art. 28 and 29 FADP or Art. 20 GDPR, you have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of such data to a third party.

Right to object: If your data is processed against your expressly stated wishes, or on the basis of a legitimate interest under Art. 6(1)(f) GDPR, you have the right to object under the conditions of Art. 30(2)(b) FADP or Art. 21 GDPR.

Revocation of your consent

You have the right to revoke your consent to the processing of your data, which you have given to us, at any time. The easiest way to revoke consent you have given is to send an email to the contact details above. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.

Automatic decision in individual cases including profiling

Under Art. 21 FADP or Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to lodge a complaint with a supervisory authority

Under Art. 49 FADP or Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection law. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, this is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW).

Contact details for people in Switzerland: see here.

Contact details for people in the EU: see here.

If you wish to exercise any of these rights, you can complete a request form at any time. Alternatively, you can send us your request by post to Leatherman Europe GmbH, Holterkamp 16, 40880 Ratingen or by email to info-europe@leatherman.com.

7. Our data protection officer

You can reach Leatherman's external data protection officer at:

datenschutz süd GmbH

Wörthstraße 15

97082 Würzburg

Email: office@datenschutz-sued.de

Last updated: 18.09.2026

Note: We may update our privacy notice to provide occasional clarification or notification of changes to our business practices. If we make changes, we will revise the "Last Updated" legend accordingly.