Privacy Policy

We appreciate your interest in our company and our websites. We take the protection of your personal data and maintaining your privacy very seriously. We want you to know when we store which data and how we use it. Below we would like to inform you about how we handle your data. This data protection declaration applies to our websites and our other appearances (YouTube, Instagram, Facebook, Pinterest and TikTok).

 

Responsible for this website is the ipuro GmbH

Lindleystrasse 8d
60314 Frankfurt
Email: info@ipuro.com

 

If you use our offers, we process your personal data. We process your data in strict confidence and only for the purpose that we communicated to you when we collected your data. Our benchmark when processing your data is the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the other applicable data protection regulations.

 

1. Processing of your personal data when you access the website

1.1. Scope of data processing

Every time our website is accessed and every time a file is retrieved, data, including personal data that may allow identification, is recorded by our systems and temporarily stored in a log file.

The following of your personal data will be processed:

  • IP address (possibly in anonymized, shortened form) / host name of the accessing computer
  • Date and time of access (time stamp)
  • Access details and destination address (protocol version, HTTP method, referrer, UserAgent string) Name of the file accessed and amount of data transferred (requested URL including query string, size in bytes
  • Message as to whether the retrieval was successful (HTTP status code)
  • Website from which our website was accessed and websites that are accessed via our website
  • Page visited on our website
  • Amount of data transferred[pbf1] 
  • Browser type or app used
  • Operating system and its interface
  • Language and version of the browser software

1.2. Purposes of data processing

1.2.1 The temporary storage of the data is necessary for the course of a website visit in order to enable delivery of the website. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies for this purpose.[pbf2]  We use the personal data collected when you visit our websites to protect our IT systems from attacks and other illegal activities and to enable you to surf our websites as pleasantly as possible. When we process this data in this way, we do not draw any conclusions about you personally. We do not carry out any personal evaluation, nor do we evaluate the data for marketing purposes or create a profile. Your data will be deleted after 60 days at the latest.

1.2.2. If you provide us with personal data, for example as part of registration or to execute a contract, we will use this data for the purposes specified to you. We also use this data for customer management purposes and, if necessary, for billing purposes for any business transactions, in each case to the extent necessary.

1.2.3. If you have given us your consent as part of our consent management tool, we and possibly third parties will use your personal data to show you personalized content or advertising based on your usage behavior. Analysis methods such as profiling or scoring can be used here. Further information and setting options can be found in our Consent Management Tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and find further information.

1.2.4. In addition, we process your data if we have a legal obligation to do so, e.g. in the case of commercial or tax retention obligations.

1.2.5. We use your data to adjust the functionality of our websites based on your usage behavior.

 

1.3. Sharing your personal information

In order to optimize and secure our websites and to improve our business operations, we may use external service providers, e.g. data centers or IT service providers. These service providers are carefully selected by us and contractually obliged accordingly. As part of their service provision, it may be necessary for these service providers to process your personal data. However, we only pass on your data to the extent that this is necessary to provide our websites, to comply with our legal obligations or to protect our legitimate interests, or if you have given your consent.

 

1.4. Data transfer to recipients in third countries

In principle, your personal data is processed in Germany or within the European Union (“EU”) or within the European Economic Area (“EEA”). Through the use of external service providers or based on your consent, your personal data may be transferred and processed outside the EU or EEA.

Please note that the respective recipient country may have a lower level of data protection than in the EU. For example, there can be no comparably effective legal remedies against data access by government authorities. However, your personal data will only be transferred to a third country if the requirements of Art. 44 ff. GDPR are met. This ensures that the level of protection required by the GDPR is not undermined for you, in particular by including so-called EU standard data protection clauses (SCCs) in the contractual relationship with the recipient.

 

1.5. Legal basis for data processing

If you have consented to the processing of your personal data, Article 6 (1) (a) GDPR is the legal basis for the processing of your dataIf you access information from end devices (e.g. mobile phones, desktop) and we store information there, this is done on the basis of Section 25 Paragraph 1 TDDDG[pbf3] . However, if saving or retrieving is necessary to provide the offerings on our websites (e.g. displaying the shopping cart), no consent is necessary, see Section 25 Paragraph 2 No. 2 TDDGG.

If we process your personal data for the purpose of initiating or fulfilling a contract with you, Art. 6 Para. 1 lit. b GDPR is the legal basis.

If we process your personal data to fulfill our legal obligations, Art. 6 Para. 1 lit. c GDPR is the legal basis.

If we process your personal data to protect our legitimate interests or those of a third party, Art. 6 Para. 1 lit. f GDPR represents the corresponding legal basis. We take into account the type of personal data, the purpose of processing, the processing circumstances and the interest in the confidentiality of the personal data as part of a balancing of interests.

 

1.6. Duration of storage of your personal data

We will delete your personal data as soon as the purpose of processing stated in this data protection declaration no longer applies. If necessary, storage will take place beyond this point in time if we are legally obliged to do so or if it is necessary to defend legal claims. If deletion is not possible in individual cases, we will block the relevant data for further processing.

 

1.7 Right to object according to Art. 21 GDPR

You have the right to object to the processing of your personal data at any time with future effect, for example by email customer service@ipuro.com

We will not subsequently process your personal data unless we can demonstrate compelling legitimate grounds for our processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

1.8 Right of withdrawal according to Art. 7 Para. 3 GDPR

You have the right to revoke your consent to us processing personal data at any time, for example by sending an email to customer service@ipuro.com. Revoking your consent does not affect the lawfulness of data processing based on your consent before its revocation.

 

2. Cookies and analytics and marketing technologies

We use cookies and similar analysis and marketing technologies (“cookies”) on our websites. Cookies are stored on your computer and transmitted from it to our websites. A cookie contains a characteristic string that allows your web browser to be uniquely identified when you visit our websites again.

We differentiate between necessary cookies (section 2.2.), functional cookies (preference), analytical and statistical cookies (statistics) (section 2.3.) and marketing cookies (section 2.4.).

We only use analytical, statistical and marketing cookies with your consent in accordance with Article 6 (1) (a) GDPR. Please note our information on data transfers to third countries (Section 1.4.). The storage or retrieval of information in the end device only takes place with your consent in accordance with Section 25 Paragraph 1 TDDDG. However, if saving or retrieving is necessary to provide the offerings on our websites (e.g. displaying the shopping cart), no consent is necessary, see Section 25 Paragraph 2 No. 2 TDDGG.

 

We use the consent management tool Usercentrics GmbH Sendlinger Straße 7 in 80331 Munich on our websites(https://usercentrics.com/de/) to manage consents and objections. You can revoke your consent at any time or configure your settings for handling cookies yourself by clicking on the gray bracket (located at the bottom left of each of our websites). For further information, see Section 8 “Consent management by Usercentrics”.

 

You can also configure how cookies are handled in your browser yourself. By changing the settings in your browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all functions to their full extent.

 

Further information can be found on the websites of your respective browser providers:

Google Chrome

Enable or disable cookies - Computer - Google Account Help

Mozilla Firefox

Clear cookies and website data in Firefox | Firefox Help (mozilla.org)

Microsoft Edge

Delete cookies in Microsoft Edge - Microsoft Support

Opera

Web Settings - Opera Help

Safari

Clear cookies in Safari on Mac - Apple Support (UK)

 

2.1 General information about the integration of Google services

In order to continually improve our website and give you the best possible user experience on our website, we use the services of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). As part of the services, Google may process your personal data. It cannot be ruled out that Google will also transmit your data to a server outside the EU, possibly in the USA or another third country. For more information, seehttps://policies.google.com/privacy/frameworks?gl=de.

We have no influence on how and which of your personal data Google processes. According to Google's data protection declaration, the following personal data can be processed, depending on the respective Google service (cf.https://policies.google.com/privacy?gl=de#infocollect):

  • Data about the apps, browsers and devices you use to access Google services
  • unique identifiers, your browser type and settings, your device type and settings, operating system, mobile network information (your mobile provider name, phone number, app version number)
  • Data about how your apps, browsers and devices interact with Google services (e.g. IP address, crash reports, system activity and the date, time and referral URL of your request).
  • Activity data (e.g. terms you search for, videos you watch, content and advertisements you view and interact with).

Further information on how Google uses data from websites that integrate Google services can be found athttps://policies.google.com/technologies/partner-sites?hl=de.

The purpose and scope of data processing by Google as well as your related rights and setting options to protect your privacy can be found in Google's data protection information athttps://policies.google.com/privacy?hl=de. Information about your privacy settings can be found athttps://safety.google/privacy/privacy-controls/.

2.2 Necessary cookies

These cookies are technically necessary for the proper operation of our websites. Among other things, they ensure the technical stability of our websites and enable security-relevant functionalities. The use of certain functions, such as our shopping cart or our contact form, is only made possible by necessary cookies. There is no possibility of using our websites without such data processing, i.e. you have no option to object.

 

We use these types of cookies to increase the security and functionality of our websites and web applications offered.

 

The processing of personal data using necessary cookies is based on Art. 6 Para. 1 lit. f GDPR. By using technically necessary cookies, we aim to simplify the use of our websites for you. Some functions of our websites cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. Our legitimate interest also lies in these purposes. We do not use your user data collected through technically necessary cookies to create user profiles.

 

Here you will find an overview of the necessary cookies. You can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and find further information.

 

2.3 Analysis, statistics, preference (functional) cookies

These cookies allow us to obtain anonymous statistical information about the use of our websites and to understand how visitors interact with our websites. With the help of these cookies, we can, for example, determine the number of visitors to our websites and optimize our website content.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, failure to provide this could result in you not being able to use our websites or not being able to use them to their full extent.

The legal basis for the processing of personal data using analysis and statistics cookies is your consent in accordance with Article 6 (1) (a) GDPR. You have the right to revoke your consent at any time without giving reasons with future effect.

 

You can manage your consent to data processing yourself using our consent management tool here. You can find this via the gray bracket (located at the bottom left of each of our websites). By clicking you can make settings changes and find further information.

 

2.3.1 Google Tag Manager

On our websites we use Google Tag Manager from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager implements tags and triggers other tags. When a tag is triggered, Google may process personal data about you. It cannot be ruled out that Google will also transmit your data to a server outside the EU, possibly in the USA or another third country. In particular, the following personal data is processed by Google Tag Manager:

  • Online identifiers (including cookie identifiers),
  • IP address.

The purpose of using Google Tag Manager is to simplify and clearly integrate various codes and services as well as to optimize the loading times of various services. If you have deactivated individual tracking services, the deactivation remains in effect for all affected tracking tags that are integrated by Google Tag Manager.

The legal basis for processing the data is your consent, in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Tag Manager in your browser settings (see section 2 above). In this case, all functions of our websites may no longer be fully available to you.

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under section 2.1. “General integration of Google services”.

 

2.3.2 Google DoubleClick

Our websites use Google Double Click from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By using Google Double Click, we aim to optimize our marketing and our websites. Google DoubleClick records so-called conversions that are related to ad requests, for example if you see a DoubleClick ad and later access our websites using the same web browser and buy something there. Google DoubleClick uses cookies to prevent ads from being shown multiple times. The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there.

The legal basis for processing the data is your consent, in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Double Clicks in your browser settings (see point 2 above). You also have the option to object to interest-based advertising by Google by clicking herewww.google.de/settings/adsmake the settings you want. In this case, all functions of our websites may no longer be fully available to you.

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under section 2.1. “General integration of Google services”.

 

2.3.3 Microsoft Bing Ads

Our websites use Microsoft Bing Ads, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Bing Ads allows us to track your activities on our websites to the extent that you have reached our websites via advertisements from Microsoft Bing Ads. When you click on an ad we place using Microsoft Bing Ads, a cookie is placed on your device. This enables us and Microsoft to understand that you have clicked on a Microsoft Bing Ads ad and were redirected to our websites. The information generated by the cookie about your use of our websites (including your IP address) may be transmitted to a Microsoft server, possibly in the USA or in another third country, and stored there. Further information about data protection at Microsoft can be found athttps://privacy.microsoft.com/de-de/privacystatement.

 

By using Microsoft Bing Ads, we aim to evaluate the effectiveness of our advertising measures. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Microsoft. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. It is not possible to identify you personally using this information.

The legal basis for processing the data is your consent, in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Microsoft when using our websites, you have the option of completely deactivating Microsoft Bing Ads in your browser settings (see point 2 above). Data processing can also be carried out using the following linkhttp://choice.microsoft.com/de-DE/opt-outbe prevented. If you revoke your consent, you may no longer have full access to all of the functions of our website.

 

2.4 Cookies for usage analysis/marketing and other services

Usage analysis cookies enable us to analyze how you use our websites. With the help of these cookies we can test the effectiveness of our websites and discover errors. These cookies also provide insights to optimize our services and for web analysis. We can also use it to show you usage-based content and personalized advertising.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, failure to provide this could result in you not being able to use our websites or not being able to use them to their full extent.

The legal basis for the processing of personal data using cookies for usage analysis is your consent in accordance with Article 6 (1) (a) GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

Here you will also find an overview of our marketing cookies.

 

2.4.1 Google Analytics (4.0)

Our website(s) use Google Analytics 4.0 from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4.0 uses cookies that enable an evaluation of your use of our websites (including your IP address). This is used to monitor your usage behavior and the success of our advertising campaigns to analyze.

In addition, we use a pseudonymous user identification number (so-called user ID). The user ID does not contain any personal data (e.g. name, email address, etc.) about you. This Google Analytics 4.0 feature allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyze user behavior across devices. The analysis information contains your usage behavior (e.g. usage processes (time, duration and number of accesses), search terms used, sources that refer to our online offering, technical aspects of your devices and browsers.

We also use Google Signals, which collects additional information about you in Google Analytics 4.0 if you have activated personalized ads (interests and demographic data). This allows ads to be delivered to you in cross-device remarketing campaigns.

To evaluate usage behavior, Google Analytics 4 also uses artificial intelligence such as machine learning for automated analysis and data enrichment. Further information on how data is analyzed by Google using artificial intelligence can be found in the relevant Google documentation[GA4] Analytics stats - Google Analytics Help.

With Google Analytics 4.0, the anonymization of IP addresses is activated by default, which takes place on EU servers. IP addresses are neither logged nor stored. No precise location data is processed either. For access from the EU or EEA, the shortened IP address data is only used to derive location data and is then deleted immediately. They are not logged, are not accessible and are not used for other use cases. According to Google, in order to increase user data collected in the EU or EEA, this will only be processed on servers within the EU and sensitive data will be deleted before collection. We would particularly like to point out that we cannot exclude data processing outside the EU or EEA by Google.

Possible data processing by Google Analytics 4.0

  • IP address (shortened form);
  • User ID and device ID;
  • Referrer URL (previously visited page);
  • Pages viewed (date, time, URL, title, length of stay);
  • downloaded files;
  • links clicked to other websites;
  • Achievement of specific goals (conversions);
  • technical information (operating system; browser type, version and language; device type, brand, model and resolution);
  • approximate location (country, region and possibly city, based on anonymized IP address).

Our data protection settings when using Google Analytics 4.0

  • Anonymization of the IP address;
  • user ID;
  • advertising function;
  • Personalized advertising;
  • remarketing;
  • Retention period of 14 months (and no retention period reset upon new activity);
  • Cross-device and cross-site tracking (Google Signals);
  • Data sharing (in particular Google products and services, benchmarking, technical support, account specialist).

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of completely deactivating Google Analytics 4.0 in your browser settings (see point 2 above). Data processing by Google can also be prevented by using a browser add-on to deactivate Google Analytics 4.0. Further information and the add-on can be found athttps://tools.google.com/dlpage/gaoptout?hl=de. In this case, all functions of our websites may no longer be fully available to you.

Further information on the terms of use of Google Analytics 4.0 and product-specific data protection (order processing agreement, etc.) can be found at:

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under Section 2.1. “General integration of Google services”.

2.4.2 Google Ads / Adwords / Conversion Tracking

Our websites use Google Ads and, as part of Google AdWords, conversion tracking, an analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures we use are particularly effective. We do not receive any further data from the use of advertising materials; in particular, we cannot identify you based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server.

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Ads in your browser settings (see Section 2 above). You also have the option to object to interest-based advertising by Google by clicking herewww.google.de/settings/adsmake the settings you want. In this case, all functions of our websites may no longer be fully available to you.

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under section 2.1. “General integration of Google services”.

2.4.3 Google Remarketing

Our websites use Google Remarketing from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We use Google Remarketing for marketing and optimization purposes, in particular to show ads that are relevant and interesting to you and to improve campaign performance reporting. Google Remarketing enables us to show you our advertisements when you continue to use the Internet after you have visited our websites. This is done using cookies stored in your browser, through which your usage behavior when you visit various websites is recorded and evaluated by Google. This allows Google to determine your previous visit to our websites. According to Google, the data collected as part of remarketing will not be combined with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing. The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there.

 

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Remarketing completely in your browser settings (see Section 2 above). You also have the option to object to interest-based advertising by Google by clicking herewww.google.de/settings/adsmake the settings you want. In this case, all functions of our websites may no longer be fully available to you.

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under section 2.1. “General integration of Google services”.

 

2.4.4 Microsoft Advertising

Our websites use Microsoft Advertising, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Advertising allows us to track your activities on our websites to the extent that you have reached our websites via advertisements from Microsoft Advertising. When you click on an ad we place using Microsoft Advertising, a cookie is placed on your device. This enables us and Microsoft to understand that you have clicked on a Microsoft Advertising ad and were redirected to our websites. The information generated by the cookie about your use of our websites (including your IP address) may be transmitted to a Microsoft server, possibly in the USA or in another third country, and stored there.

 

By using Microsoft Advertising, we aim to evaluate the effectiveness of our advertising measures. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Microsoft. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. It is not possible to identify you personally using this information.

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR. You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Microsoft when using our websites, you have the option of completely deactivating Microsoft Advertising in your browser settings (see point 2 above). Data processing can also be carried out using the following linkhttp://choice.microsoft.com/de-DE/opt-out be prevented. If you revoke your consent, you may no longer have full access to all of the functions of our website.

Further information about data protection at Microsoft can be found athttps://privacy.microsoft.com/de-de/privacystatement.

 

2.4.5 Facebook Pixel

Our websites use Facebook Pixel, a service provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter referred to as: “Facebook”). Facebook Pixel enables Facebook to show our advertisements on Facebook, so-called “Facebook Ads”, only to those Facebook users who were visitors to our website, in particular who have shown interest in our online offering. Facebook Pixel also allows you to check whether you were redirected to our website after clicking on our Facebook ads. Facebook Pixel uses cookies that are stored locally in the cache of your web browser on your device. If you are logged into your Facebook user account, your visit to our online offering will be noted in your user account. The data collected about you is anonymous to us and does not allow us to draw any conclusions about your identity. However, this data can be linked by Facebook to your user account there, i.e. if you have a user account with Facebook and are registered, Facebook can assign the visit to your user account.

 

The information generated by Facebook Pixel about your use of our websites (including your IP address) may be transmitted to a Facebook server, possibly in the USA or in another third country, and stored there. Further information about data protection on Facebook can be found athttps://www.facebook.com/about/privacy.

 

By using Facebook Pixel, we aim to optimize our marketing measures, in particular the placement of advertisements that are relevant to you.

 

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR.

 

You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Facebook when using our websites, you have the option of completely deactivating Facebook Pixel in your browser settings (see Section 2 above). Data processing can also be carried out using the following linkhttps://www.facebook.com/help/443357099140264?helpref=about_content be prevented. If you revoke your consent, you may no longer have full access to all of the functions of our website.

 

2.4.6 YouTube

We have integrated content on our websites via the video platform service YouTube. YouTube is a service of YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA and is provided by them. YouTube LLC is a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We integrate content from YouTube on our websites in order to make various videos available to you directly on our websites without you having to access the content separately on YouTube. This allows us to optimize our offering and make your user experience more interesting.

 

YouTube is integrated by embedding the service on our websites using a so-called “iFrame”. When loading this iFrame, it cannot be ruled out that YouTube or Google may process your personal data and transmit it to a server, possibly in the USA or in a third country.

 

The legal basis for processing the data is your consent. Art. 6 Paragraph 1 Letter a GDPR.

 

You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Google when using YouTube, you have the option of deactivating YouTube in your browser settings. In this case, however, you will no longer be able to use YouTube.

Information and further information on data processing by Google when using Google services can be found in this data protection declaration under section 2.1. “General integration of Google services”.

 

2.4.7 Pinterest Pixels

On our websites we use the Pinterest Pixel, the online advertising program of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). This enables us to analyze your usage behavior in order to be able to place relevant advertising and offers on Pinterest for Pinterest members.

 

Through the Pinterest pixel, your browser automatically establishes a direct connection with the Pinterest server as soon as you have agreed to the use of cookies that require consent. By integrating the Pinterest pixel, Pinterest receives the information that you have accessed the relevant websites on our website or clicked on one of our advertisements. If you are registered with Pinterest, Pinterest can assign the visit to your account.

In addition to the IP address and the marketing identifier, Pinterest also receives information about the device used, the website visited and the time and can assign this data to your Pinterest account. Pinterest processes this data under its own responsibility. We have no influence on data collection and further processing by Pinterest.

By using the Pinterest Pixel, it cannot be ruled out that transfers will take place in third countries. In this context, the transfer takes place in accordance with Art. 44 ff. GDPR. You can find further information and Pinterest’s privacy policy athttps://policy.pinterest.com/de/privacy-policy.

 

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR.

 

You can give your consent to data processing using our consent management tool, which you can click on the gray bracket (located at the bottom left of each of our websites) and make settings changes and manage it yourself.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect.

If you do not agree to the future transmission of your data to Pinterest when using our websites, you have the option of completely deactivating Pinterest Pixel in your browser settings (see point 2 above). If you revoke your consent, you may no longer have full access to all of the functions of our website.

 

3. Contact us

You have various options to get in touch with us.

 

3.1 Scope of data processing

3.1.1 Contact forms

There are contact forms on our websites that you can use to contact us. Your personal data submitted using the form will be stored by us. Which data is processed can be seen from the respective input forms. Only those fields that are absolutely necessary to use the respective offer are specified as mandatory in the forms.

 

3.1.2 Other contact options

You have the option of contacting us using the contact channels provided on our websites (e-mail, post, telephone). In this case, we process the personal data transmitted to us when you contact us (e.g. email address, postal address, telephone number, data resulting from the content).

 

3.2 Legal basis

If your contact relates to a contract or is a pre-contractual contact, Art. 6 Para. 1 lit. b GDPR is the legal basis. In all other cases, the legal basis for processing your data is Article 6 Paragraph 1 Letter f of the GDPR. It is our legitimate interest to process your contact requests.

 

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time with future effect, for example by email customer service@ipuro.com.

We will not subsequently process your personal data unless we can demonstrate compelling legitimate grounds for our processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

3.3 Purpose of data processing

The purpose of data processing is to process your contact request. The data is processed exclusively for this purpose. In this context, your data will not be passed on to third parties.

 

3.4 Duration of storage of your personal data

After the contact request has been completely processed, we will restrict your data for further processing. Your data will be deleted after the tax and commercial law retention periods have expired. In accordance with Section 147 Paragraph 3 of the Tax Code (AO) these are a full 10 years for accounting documents and in accordance with Section 257 Paragraph 4 of the Commercial Code (HGB) for a full 6 years for business documents.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, failure to provide it could result in you not being able to use our contact form or to its full extent, or being unable to get in touch with us.

 

4. Competitions

4.1 Scope of data processing

From time to time we offer competitions on our websites. If you take advantage of the opportunity to take part in our competitions, the data you enter in the respective input mask will be saved.

 

4.2 Legal basis

In this context, data processing is based on your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect, for example by email customer service@ipuro.com. In the event of cancellation, you can no longer take part in the respective competition.

 

4.3 Purpose of data processing

We process your personal data to carry out the competition, among other things. to determine your eligibility and to determine and notify winners.

In this context, your data will not be passed on to third parties.

 

4.4 Duration of storage of your personal data

As soon as the business purpose of conducting the competition has been fulfilled and you have not been determined as a winner, we will delete your data. If you have been chosen as a winner, we will delete your personal data after the tax and commercial law retention periods have expired. In accordance with Section 147 Paragraph 3 of the Tax Code (AO) these are a full 10 years for accounting documents and in accordance with Section 257 Paragraph 4 of the Commercial Code (HGB) for a full 6 years for business documents.

 

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, if you do not provide us with the above-mentioned data, you will not be able to participate in the competition or contact us to notify you of your winner.

 

5. Online presence on social media

We operate online presences on social networks and platforms (so-called “fan pages”). We regularly publish and share content, offers and product recommendations on our social media presence.

 

5.1 Scope of processing

Every time you interact on our fan pages, your personal data is automatically collected and stored by the operators of the respective social network for market research and advertising purposes. It cannot be ruled out that the data collected will also be processed outside the European Union. This can, among other things, make it more difficult to enforce your data subject rights. When you visit fan pages, the operators of the social networks record your usage behavior using cookies and similar technologies. With each of your interactions, the operators may view general statistics about your interests and demographic characteristics (e.g. age, gender, region). The operators create usage profiles from the data collected using pseudonyms. These can be used, for example, to place advertisements within and outside of social networks that presumably match your interests.

 

We operate fan pages on the following social media platforms:

Operator

Company headquarters

Privacy Policy

Possibility of revocation

Facebook

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

https://www.facebook.com/about/privacy/

https://www.facebook.com/settings?tab=ads

http://www.youronlinechoices.com

Google/

YouTube

Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

https://policies.google.com/privacy

https://adssettings.google.com/authenticated

Instagram

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

https://help.instagram.com/519522125107875?helpref=page_content

Instagram does not offer its own opt-out function, but refers to the functions of individual advertising partner agencies (e.g. Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp), Digital Advertising Alliance (http://www.aboutads.info/) or European Digital Advertising Alliance (http://youronlinechoices.eu/http://instagram.com/about/legal/privacy/)

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland

https://www.linkedin.com/legal/privacy-policy

LinkedIn Privacy Policy

Manage Advertising Preferences | LinkedIn Help

Pinterest

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Data protection | Pinterest Policy

Do Not Track | Pinterest help

TikTok

TikTok Pte. Ltd, 10351 Santa Monica Blvd #310, Los Angeles, CA 90025, USA

https://www.tiktok.com/de/privacy-policy

Account and privacy settings | TikTok Help Center

If you communicate directly with us via our fan pages or share personal content with us, we are responsible for the processing of your data. An exception applies to the data processing described below for usage analysis (page insights); We and Facebook are jointly responsible for this.

 

We generally collect all communications, content and other information that you provide to us when you visit our social media presences, for example when you post something on one of our social media presences or send us private messages. If you have an account with the applicable social network, we may also see your public information, such as your username, information in your public profile, and content that you share with a public audience. The type, scope and purposes of processing your personal data in social networks are primarily determined by the operators of the social networks.

 

5.2 Usage analysis (page insights Facebook and Instagram)

Every time you interact with fan pages, the respective operators record your usage behavior using cookies and similar technologies. Against this background, the operators provide us with so-called “page insights”. These are anonymized statistics that can provide us with information about your interactions with our posts or other content. An assignment to you personally is not possible. We have no access to the personal data processed by the operator to create page insights (“page insights data”). The selection and processing of page insights data is carried out exclusively by the respective operator.

With the help of page insights, we obtain information about how you use our fan pages, what interests you have in our fan pages and which topics and content are particularly popular. This allows us to optimize our fan page activities, for example by being able to better respond to the interests and usage habits of our target groups when planning and selecting our content. We and the operator are jointly responsible for processing your data in connection with page insights. For this purpose, we have defined in an agreement which company fulfills which data protection obligations in accordance with the GDPR with regard to the processing of Page Insights data.

 

You can view the agreement with Facebook here:https://www.facebook.com/legal/terms/page_controller_addendum.

A summary of the essential contents of this Agreement (including a list of Page Insights Data can be found here:https://www.facebook.com/legal/terms/information_about_page_insights_data.

Further information on data processing by the respective operator as well as your related rights and setting options to protect your privacy can be found in the data protection information of the respective operator.

 

5.3 Legal basis for processing

If you are asked by the respective social network operator for your consent to data processing, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR. Otherwise, the legal basis is Article 6 Paragraph 1 Letter f GDPR. We have an overriding legitimate interest in an optimized presentation of our offers and effective communication with our customers and interested parties.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect. If you do not agree to the future transmission of your data when using our social media presence, you have the option to object to data processing. In Section 5.1 we have put together the relevant links for you to exercise your rights.

If you revoke your consent, you may no longer have full access to all of the functions of our website.

 

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time with future effect, for example by email customer service@ipuro.com. We will not subsequently process your personal data unless we can demonstrate compelling legitimate grounds for our processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. To process your Page Insights data together with Meta Platforms Ireland Limited (hereinafter Meta Ltd.) we have agreed with them that Meta Ltd. is primarily responsible for providing you with information about the processing of your Page Insights data and for enabling you to exercise your data protection rights under the GDPR (e.g. right to object).

 

You can exercise your rights in connection with processing activities that our shared responsibility with Meta Ltd. You can also contact us, e.g. by email customer service@ipuro.com. In this case, we will immediately forward your request to Meta Ltd. forward...

 

5.4 Purpose of data processing

With our online presence we aim to communicate effectively with our customers and interested parties as well as an optimized presentation of our offers.

 

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, failure to provide this could result in you not being able to use our websites or not being able to use them to their full extent.

 

6. Data processing when using our online shop

6.1 Registration

6.1.1 Scope of data processing

On our websites you have the option of registering with a user account in our shop system. Your personal data transmitted in this context will be processed by us. Which data is processed can be seen in the respective input form. Only those fields that are absolutely necessary to use the respective offer are specified as mandatory fields in the form. Once you have entered your details, you will receive a registration email to the email address you provided, which contains a link that you can use to confirm your registration and complete the regulatory process. Once you have registered, you can access your user account at any time by entering your email address and password and shop in our online shop.

 

6.1.2 Legal basis

The legal basis for the processing of the data is your consent in accordance with Article 6 (1) (a) GDPR.

 

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with future effect, for example by deactivating your user account. In this case, however, you will no longer be able to access our internal website area.

 

6.1.3  Purpose of data processing

We use the data to manage your user account.

 

6.1.4 Duration of storage of your personal data

We will store the data as long as your user account is activated. 

You are not obliged to provide your personal data. The provision is neither required by law or contract nor is it necessary for the conclusion of a contract. However, if you do not provide us with the data mentioned, registration will not be possible.

 

6.2 Ordering process

6.2.1 Scope of data processing

On our websites we offer you the opportunity to place orders in our online shop as a customer with or without a user account (so-called guest account). In order to process the order, we process the personal data you provide during the ordering process (including name, billing and delivery address, email address, payment details). We use the data for order processing and, if necessary, for communication with you. If you have registered for a user account, please see Section 6.1.

 

6.2.2 Legal basis

Data processing in connection with the ordering process is based on Article 6 Paragraph 1 Letter b of the GDPR, i.e. the processing of your data is necessary for order processing.

 

6.2.3 Purpose of data processing

The purpose of data processing is to process sales contracts concluded via our online shop and to provide customer service and customer advisory services. In addition, we may also use your personal data to assert rights arising from the contracts concluded or initiated with you.

 

6.2.4 Duration of storage of your personal data

We process your data for the duration of our contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship). Your data will be deleted after the tax and commercial law retention periods have expired. In accordance with Section 147 Paragraph 3 of the Tax Code (AO) these are a full 10 years for accounting documents and in accordance with Section 257 Paragraph 4 of the Commercial Code (HGB) for a full 6 years for business documents.

The provision of your personal data is necessary to conclude a contract.

 

6.3 Payment processing

When paying in our online shop, you have the option to choose between different payment methods to process the payment process. In addition to purchasing on account, where we send an invoice to your specified contact address, we also offer other payment methods (credit card, Apple Pay, Google Pay[pbf4] , Klarna) to make shopping in our online shop as convenient as possible for you.

 

6.3.1 Credit card

You have the option of making payments by credit card. When paying by credit card, the data you provide will be processed:

  • Card type
  • Cardholder name
  • Credit card number
  • Check digit
  • Validity period

We check the data entered together with the data of your order in order to be able to detect misuse of the credit card or the payment option with credit card at an early stage and, after successful checking, use the data to process the agreed payment by credit card.

 

The legal basis is Article 6 Paragraph 1 Letter b of the GDPR, i.e. the processing of your data is necessary to fulfill the agreement regarding payment for your purchase by credit card. Your data will be deleted after the tax and commercial law retention periods have expired. In accordance with Section 147 Paragraph 3 of the Tax Code (AO) these are a full 10 years for accounting documents and in accordance with Section 257 Paragraph 4 of the Commercial Code (HGB) for a full 6 years for business documents.

 

Providing your personal data is required for payment by credit card.

 

6.3.2 Identity and creditworthiness check when selecting Klarna payment services

If you decide to use Klarna's payment services, we will transmit the data necessary to process the payment and carry out an identity and credit check to Klarna. The legal basis for the credit check is Article 6 Paragraph 1 Letter f of the GDPR. We have a legitimate interest in avoiding payment defaults. If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR. For this purpose, Klarna processes the following personal data from you: first and last name, delivery address, telephone number and date of birth. The following are sent to the credit agencies used by Klarna for identity and creditworthiness checks.

In Germany, the information in Klarna's data protection declaration (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy)  mentioned business information can be used. You can object to this use of personal data to Klarna at any time. There you will also find further information about Klarna’s data processing for payment processing.

 

Providing your personal data is required for payment via Klarna.

 

6.3.3 Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the “Apple Pay” function of your iOS, watchOS or macOS-operated device by charging a payment card stored with “Apple Pay”. Apple Pay uses security features built into your device's hardware and software to protect your transactions. In order to approve a payment, you must enter a code previously specified by you and verify it using the “Face ID” or “Touch ID” function of your device.

For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. Encryption ensures that only the website through which the purchase was made can access the payment details. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment success.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.

Apple retains anonymized transaction information, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Go to Wallet & Apple Pay and turn off Allow Payments on Mac.

Further information on data protection with Apple Pay can be found at the following internet address:https://support.apple.com/de-de/HT203027

 

Providing your personal data is required for payment via Apple Pay.

 

6.3.4 Google Pay

If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing is carried out via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and with an NFC function by debiting a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). In order to approve a payment via Google Pay in the amount of more than €25, you must first unlock your mobile device using the verification measure that has been set up (e.g. facial recognition, password, fingerprint or pattern).


For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which is used to verify a payment made. This transaction number does not contain any information about the real payment details of your payment methods stored with Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment process. The transaction is carried out exclusively between the user and the source website by debiting the payment method stored with Google Pay.


If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.
Google reserves the right to collect, store and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description provided by the merchant of the goods or services purchased, photographs you included with the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of process data and the optimization and functionality of the Google Pay service.
Google also reserves the right to combine the processed process data with other information that is collected and stored by Google when you use other Google services.
The Google Pay terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection with Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

 

Providing your personal data is required for payment via Google Pay.

 

7. Consent management by Usercentrics

This website uses the consent management service of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munichhttps://usercentrics.com/de/, a software designed to comply with our legal obligations and to store consent to data processing. In this context, data processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR. The data collected and used in this context is always stored under a pseudonym (e.g. a random identification number) and is not combined with personal data about you (e.g. name, address, etc.). To the extent that external service providers gain access to the data, this occurs exclusively on our behalf and under our control. Technically, the software uses so-called “cookies” and “local storages” in particular to collect the following information: when the website was visited, with which device and with which browser, which IP address (anonymized) and which consents were given.

 

The certificate of revocation of previously given consent will be kept for three years. On the one hand, storage is based on our accountability in accordance with Art. 5 Para. 2 GDPR. This requires compliance with the processing of personal data in accordance with the General Data Protection Regulation. In contrast, the retention period in the regular limitation period according to Section 195 of the German Civil Code (BGB) is three years. This limitation period begins at the end of the year in which the claim arose and you as a creditor became aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence (Section 199 Para. 1 BGB). The three-year limitation period therefore begins at the end of December 31st. and ends three years later on December 31st, midnight.

 

8. Customer care (CRM) by Klaviyo

As part of our customer care we work with the company Klaviyo.

Klaviyo is an American technology company that provides a marketing automation platform primarily used for email marketing and SMS marketing such as newsletters. The data collected and used in this context is always combined with personal data about you (e.g. last name, first name, date of birth, address, email address, gender, etc.). To the extent that Klaviyo receives access to the data, this occurs exclusively on our behalf and under our control. With the help of Klaviyo, we are able to analyze our newsletter campaigns and better adapt the newsletters to the respective target groups. For example, we can see whether a newsletter message was opened and which links, if any, were clicked or which actions were carried out (after clicking on links). The data entered by the user for the purpose of subscribing to the newsletter is managed and stored exclusively within the European Union.

If you are asked to consent to data processing for the purpose of customer care, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.

If you have any questions or concerns about how Klaviyo uses your personal data, you can also contact Klaviyo directly: Klaviyo, EDPO, Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland, https://edpo.com/gdpr-data-request/ or under https://www.klaviyo.com/legal/privacy/privacy-notice inform. Of course, we are also available to you for this purpose.

Right of withdrawal (Art. 7 Para. 3 GDPR)

You have the right to revoke your consent in this regard at any time without giving reasons with future effect. Consent can be obtained by clicking on the corresponding link contained in each newsletter or at customer service@ipuro.com be revoked. If you revoke your consent, you may no longer have full access to all of the functions of our website.

The certificate of revocation of previously given consent will be kept for three years. On the one hand, storage is based on our accountability in accordance with Art. 5 Para. 2 GDPR. This requires compliance with the processing of personal data in accordance with the General Data Protection Regulation. In contrast, the retention period in the regular limitation period according to Section 195 of the German Civil Code (BGB) is three years. This limitation period begins at the end of the year in which the claim arose and you as a creditor became aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence (Section 199 Para. 1 BGB). The three-year limitation period therefore begins at the end of December 31st. and ends three years later on December 31st, midnight.

 

9. Rights of the data subject

If we process your personal data, you are the data subject in accordance with Article 4 No. 1 GDPR with the following rights towards us:

  • Right to information (Article 15 GDPR): You can request information in accordance with Article 15 GDPR about your personal data that we process.
  • Right to rectification (Article 16 GDPR): If the information concerning you is no longer accurate, you can request a correction in accordance with Article 16 GDPR. If your data is incomplete, you can request that it be completed.
  • Right to deletion (Article 17 GDPR): You can request the deletion of your personal data in accordance with Article 17 GDPR.
  • Right to restriction of processing (Article 18 GDPR): According to Article 18 GDPR, you have the right to request a restriction on the processing of your personal data.
  • Right to information (Article 19 GDPR): We will inform all recipients to whom personal data has been disclosed of any correction or deletion of personal data or a restriction of processing in accordance with Articles 16, 17 paragraph 1 and Article 18, unless this proves impossible or involves disproportionate effort. As the person responsible, we will inform you as the data subject about these recipients if you request this.
  • Right to data portability (Article 20 GDPR): If the requirements of Article 20 Paragraph 1 GDPR are met, you have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. However, the collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent according to Art. 6 Para. 1 lit.a GDPR or on a contract according to Art. 6 Para. 1 lit. b GDPR, but are justified according to Art. 6 Para. 1 lit.f GDPR. The requirements of Article 20 Para. 1 GDPR are therefore not met in this respect.
  • Right to object (Article 21 GDPR): You have the right to object at any time to the processing of your personal data based on Article 6 Paragraph 1 Letter e or f of the GDPR for reasons arising from your particular situation. You can send your objection to one of our contact addresses, for example customer service@ipuro.com. The person responsible will then no longer process the personal data unless he can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website.
  • Right to complain to a supervisory authority (Article 77 GDPR): If you believe that the processing of your personal data violates data protection law, you have the right to complain to a data protection authority of your choice in accordance with Article 77 Paragraph 1 GDPR. This also includes the data protection supervisory authority responsible for the person responsible: Bavarian State Office for Data Protection Supervision, https://www.lda.bayern.de/de/beschwerde.html
  • Right to revoke your data protection declaration of consent (Art. 7 Para. 3 GDPR)You have the right to revoke your consent to us at any time, for example by sending an email to customer service@ipuro.com. Revoking your consent does not affect the lawfulness of data processing based on your consent before its revocation.

 

If you would like to exercise a right, please contact our data protection officer. You can find the contact details at the beginning of this data protection declaration.

 

We would like to point out that in certain cases we may request additional information from you to verify your identity. So we can e.g. B. when exercising the right to information, ensure that information is not passed on to unauthorized persons.

Automated decision-making does not take place on our websites.

 

10. Security

We use technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. We continually improve our security measures in line with technological developments.

 

11. Responsibility for external content

Our websites contain links to websites of external providers. We have no influence and do not control whether other providers comply with applicable data protection regulations. If you believe that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your notice and remove the external link if necessary. We are not responsible for the content and availability of linked external websites.

 

12. Validity of the data protection declaration

Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this data protection declaration. We reserve the right to change this privacy policy at any time with future effect. The version available at the time of your website visit always applies.

 

 

As of: February 2026