Privacy policy

Thank you for your interest in our company and our websites. We take the protection of your personal data and the safeguarding of your privacy very seriously. We want you to know when we store which data and how we use it. Below, we would like to inform you about how we handle your data. This Privacy Policy applies to our websites and to our other online presences (YouTube, Instagram, Facebook, Pinterest and TikTok).

The party responsible for this website is ipuro GmbH

Lindleystraße 8d
60314 Frankfurt
Email: info@ipuro.com

When you use our services, we process your personal data. We process your data in strict confidence and only for the purpose communicated to you when your data was collected. The standards governing our processing of your data are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and any other applicable data protection provisions.

1. Processing of your personal data when accessing the website

1.1. Scope of data processing

Whenever our online services are accessed and whenever a file is retrieved, data, including personal data that may allow identification, is collected by our systems and temporarily stored in a log file.

The following personal data relating to you is processed:

IP address (where applicable in anonymised, truncated form) / hostname of the accessing computer
Date and time of access (timestamp)
Access details and destination address (protocol version, HTTP method, referrer, user-agent string), name of the file retrieved and volume of data transferred (requested URL including query string, size in bytes
Notification as to whether retrieval was successful (HTTP status code)
Website from which our website was accessed and websites accessed via our website
Page visited on our website
Volume of data transferred[pbf1]
Browser type or app used
Operating system and its interface
Language and version of the browser software

1.2. Purposes of data processing

1.2.1 Temporary storage of the data is necessary for the course of a website visit in order to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in processing the data.[pbf2] We use the personal data collected when you visit our websites to protect our IT systems against attacks and other unlawful acts and to provide you with the most pleasant possible browsing experience on our websites. When processing this data in this way, we do not draw any conclusions about you as an individual. We do not conduct any personal evaluation, evaluate the data for marketing purposes or create profiles. Your data will be deleted after no more than 60 days.

1.2.2. If you provide us with personal data, for example when registering or for the performance of a contract, we use this data for the purposes communicated to you. We also use this data for customer administration and, where applicable, for the settlement of any business transactions, in each case only to the extent necessary for the respective purpose.

1.2.3. Where you have given us your consent through our Consent Management Tool, we and potentially third parties use your personal data to display personalised content or advertising to you based on your usage behaviour. Analysis methods such as profiling or scoring may be used for this purpose. Further information and configuration options can be found in our Consent Management Tool, which you can access by clicking the grey bracket located at the bottom left of each of our websites. There you can change your settings and obtain further information.

1.2.4. We also process your data where we are legally required to do so, for example due to retention obligations under commercial or tax law.

1.2.5. We use your data to adapt the functionality of our websites based on your usage behaviour.

1.3. Disclosure of your personal data

To optimise and secure our websites and improve our business operations, we may use external service providers, such as data centres or IT service providers. We select these service providers carefully and impose corresponding contractual obligations on them. The provision of their services may require these service providers to process your personal data. However, we disclose your data only where this is necessary to provide our websites, comply with our legal obligations or protect our legitimate interests, or where you have given your consent.

1.4. Transfer of data to recipients in third countries

As a general rule, your personal data is processed in Germany, within the European Union ("EU") or within the European Economic Area ("EEA"). The use of external service providers or your consent may result in your personal data being transferred to and processed outside the EU or EEA.

Please note that the recipient country concerned may provide a lower level of data protection than the EU. For example, there may be no comparably effective legal remedies against access to data by public authorities. However, your personal data is transferred to a third country only where the requirements of Art. 44 et seq. GDPR are met. This ensures that the level of protection required by the GDPR is not undermined, in particular by incorporating the EU Standard Contractual Clauses (SCCs) into the contractual relationship with the recipient.

1.5. Legal bases for data processing

If you have consented to the processing of your personal data, Art. 6(1)(a) GDPR is the legal basis for processing your data. Where you access information from terminal equipment (e.g. mobile phones or desktop computers) and we store information on it, this is carried out on the basis of Section 25(1) TDDDG[pbf3] . However, where storage or access is necessary to provide our websites (e.g. to display the shopping basket), consent is not required; see Section 25(2) no. 2 TDDGG.

Where we process your personal data for the purpose of initiating or performing a contract with you, Art. 6(1)(b) GDPR is the legal basis.

Where we process your personal data to comply with our legal obligations, Art. 6(1)(c) GDPR is the legal basis.

Where we process your personal data to protect our legitimate interests or those of a third party, Art. 6(1)(f) GDPR constitutes the relevant legal basis. As part of a balancing of interests, we take into account the type of personal data, the purpose and circumstances of processing and the interest in maintaining the confidentiality of the personal data.

1.6. Duration of storage of your personal data

We delete your personal data as soon as the purpose of processing stated in this Privacy Policy no longer applies. Where applicable, data may be stored beyond this point if we are legally required to do so or if this is necessary for the defence of legal claims. If deletion is not possible in an individual case, we will block the data concerned from further processing.

1.7 Right to object under Art. 21 GDPR

You have the right to object to the processing of your personal data at any time with effect for the future, for example by emailing kundenservice@ipuro.com.

We will subsequently no longer process your personal data unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

1.8 Right to withdraw consent under Art. 7(3) GDPR

You have the right to withdraw your consent to the processing of personal data at any time, for example by emailing kundenservice@ipuro.com. Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of that consent before its withdrawal.

2. Cookies and analytics and marketing technologies

We use cookies and comparable analytics and marketing technologies ("cookies") on our websites. Cookies are stored on your computer and transmitted from it to our websites. A cookie contains a distinctive character string that allows your web browser to be uniquely identified when you visit our websites again.

We distinguish between necessary cookies (section 2.2), functional (preference) cookies, analytics and statistical cookies (statistics) (section 2.3) and marketing cookies (section 2.4).

We use analytics or statistical cookies and marketing cookies exclusively with your consent pursuant to Art. 6(1)(a) GDPR. Please note our information regarding data transfers to third countries (section 1.4). Information is stored on or accessed from terminal equipment only with your consent pursuant to Section 25(1) TDDDG. However, where such storage or access is necessary to provide our websites (e.g. to display the shopping basket), consent is not required; see Section 25(2) no. 2 TDDGG.

On our websites, we use the Consent Management Tool provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, (https://usercentrics.com/de/) to manage consent and objections. You may withdraw the consent you have given at any time or configure your cookie settings yourself by clicking the grey bracket located at the bottom left of each of our websites. Further information can be found in section 8, "Consent management by Usercentrics".

You can also configure how cookies are handled in your browser. By changing your browser settings, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been stored at any time. This can also be done automatically. If cookies are disabled for our websites, you may no longer be able to use all functions of the websites in full.

Further information can be found on the websites of your respective browser provider:

Google Chrome	Enable or disable cookies – Computer – Google Account Help
Mozilla Firefox	Clear cookies and website data in Firefox \| Firefox Help (mozilla.org)
Microsoft Edge	Delete cookies in Microsoft Edge – Microsoft Support
Opera	Web preferences – Opera Help
Safari	Clear cookies in Safari on Mac – Apple Support (DE)

2.1 General information on the integration of Google services

To continuously improve our website and provide you with the best possible user experience on our websites, we use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In connection with these services, Google may process your personal data. It cannot be ruled out that Google may also transfer your data to a server outside the EU, possibly in the USA or another third country. Further information is available at https://policies.google.com/privacy/frameworks?gl=de.

We have no influence over how and which of your personal data Google processes. According to Google's Privacy Policy, depending on the Google service concerned, the following personal data may be processed (see https://policies.google.com/privacy?gl=de#infocollect):

Data relating to the apps, browsers and devices you use when accessing Google services
Unique identifiers, the type and settings of your browser, the type and settings of your device, the operating system and information about the mobile network (name of your mobile network operator, telephone number and app version number)
Data relating to the interaction of your apps, browsers and devices with Google services (e.g. IP address, crash reports, system activity and the date, time and referrer URL of your request).
Activity data (e.g. terms you search for, videos you watch, and content and advertisements you view and interact with).

Further information about how Google uses data from websites on which Google services are integrated is available at https://policies.google.com/technologies/partner-sites?hl=de.

For information about the purpose and scope of data processing by Google, your rights in this regard and the configuration options available to protect your privacy, please refer to Google's Privacy Policy at https://policies.google.com/privacy?hl=de. Information about your privacy settings is available at https://safety.google/privacy/privacy-controls/.

2.2 Necessary cookies

These cookies are technically necessary for the proper operation of our websites. Among other things, they ensure the technical stability of our websites and enable security-related functionality. Certain functions, such as our shopping basket or contact form, can also be used only if necessary cookies are enabled. It is not possible to use our websites without such data processing, meaning that you have no option to object.

We use this type of cookie to improve the security and functionality of our websites and the web applications offered.

Personal data is processed using necessary cookies on the basis of Art. 6(1)(f) GDPR. We use technically necessary cookies to make our websites easier for you to use. Some functions of our websites cannot be offered without the use of cookies. These functions require the browser to be recognised again after you change pages. These purposes also constitute our legitimate interest. We do not use the user data collected through technically necessary cookies to create user profiles.

An overview of necessary cookies can be found here. You can access it by clicking the grey bracket located at the bottom left of each of our websites, where you can change your settings and obtain further information.

2.3 Analytics, statistics and preference (functional) cookies

These cookies allow us to obtain anonymous statistical information about the use of our websites and understand how visitors interact with them. For example, these cookies allow us to determine the number of visitors to our websites and optimise our website content.

You are not obliged to provide your personal data. Its provision is neither required by law or contract nor necessary for entering into a contract. However, failure to provide it may mean that you cannot use our websites, or cannot use them in full.

The legal basis for processing personal data using analytics and statistics cookies is your consent pursuant to Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

You can manage your consent to data processing yourself here using our Consent Management Tool. You can access it via the grey bracket located at the bottom left of each of our websites. By clicking it, you can change your settings and obtain further information.

2.3.1 Google Tag Manager

On our websites, we use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager implements tags and triggers other tags. When a tag is triggered, Google may process personal data relating to you. It cannot be ruled out that Google may also transfer your data to a server outside the EU, possibly in the USA or another third country. In particular, Google Tag Manager processes the following personal data:

Online identifiers (including cookie identifiers),
IP address.

The purpose of using Google Tag Manager is to simplify and clearly organise the integration of various code snippets and services and to optimise the loading times of various services. If you have disabled individual tracking services, the deactivation remains in place for all affected tracking tags integrated through Google Tag Manager.

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR. You can manage your consent to data processing yourself using our Consent Management Tool by clicking the grey bracket located at the bottom left of each of our websites and changing your settings.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of our websites, you can disable Google Tag Manager in your browser settings (see section 2 above). In this case, you may no longer be able to use all functions of our websites in full.

Information and further details regarding data processing by Google in connection with the use of Google services can be found in section 2.1, "General integration of Google services", of this Privacy Policy.

2.3.2 Google DoubleClick

Our websites use Google DoubleClick provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google DoubleClick to optimise our marketing and our websites. Google DoubleClick records conversions connected with advertising requests, for example if you see a DoubleClick advertisement and later visit our websites using the same web browser and make a purchase there. Google DoubleClick uses cookies to prevent advertisements from being displayed more than once. The information generated by the cookies is transferred to a Google server, possibly in the USA or another third country, and stored there.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of our websites, you can disable Google DoubleClick in your browser settings (see section 2 above). You can also object to interest-based advertising by Google by selecting your preferred settings at www.google.de/settings/ads. In this case, you may no longer be able to use all functions of our websites in full.

2.3.3 Microsoft Bing Ads

Our websites use Microsoft Bing Ads, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Bing Ads allows us to track your activities on our websites where you have reached our websites through Microsoft Bing Ads advertisements. When you click an advertisement placed by us using Microsoft Bing Ads, a cookie is stored on your device. This allows us and Microsoft to identify that you clicked a Microsoft Bing Ads advertisement and were directed to our websites through it. The information generated by the cookie about your use of our websites (including your IP address) may be transferred to a Microsoft server, possibly in the USA or another third country, and stored there. Further information about data protection at Microsoft is available at https://privacy.microsoft.com/de-de/privacystatement.

We use Microsoft Bing Ads to evaluate the effectiveness of our advertising measures. We ourselves do not collect or process any personal data as part of the advertising measures described. Microsoft merely provides us with statistical analyses. These analyses allow us to identify which of the advertising measures used are particularly effective. It is not possible to identify you from this information.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Microsoft in connection with the use of our websites, you can completely disable Microsoft Bing Ads in your browser settings (see section 2 above). Data processing can also be prevented using the following link: http://choice.microsoft.com/de-DE/opt-out. If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

2.4 Cookies for usage analysis/marketing and other services

Cookies for usage analysis allow us to analyse how you use our websites. These cookies enable us to test the effectiveness of our websites and identify errors. They also provide insights for optimising our services and conducting web analyses. They may also enable us to show you usage-based content and personalised advertising.

The legal basis for processing personal data using cookies for usage analysis is your consent pursuant to Art. 6(1)(a) GDPR. You can manage your consent to data processing yourself using our Consent Management Tool by clicking the grey bracket located at the bottom left of each of our websites and changing your settings.

An overview of our marketing cookies can also be found here.

2.4.1 Google Analytics (4.0)

Our website(s) use Google Analytics 4.0 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4.0 uses cookies that enable an analysis of your use of our websites (including your IP address). This serves to analyse your usage behaviour and the success of our advertising campaigns .

We also use a pseudonymous user identification number (known as a user ID). The user ID does not contain any of your personal data (e.g. name, email address, etc.). This Google Analytics 4.0 function enables us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and analyse user behaviour across devices. The analytical information includes your usage behaviour, for example usage processes (time, duration and number of accesses), search terms used, sources referring to our online services, and technical aspects of your terminal devices and browsers.

We also use Google Signals, which allows Google Analytics 4.0 to collect additional information about you if you have enabled personalised ads (interests and demographic data). This allows advertisements to be delivered to you in cross-device remarketing campaigns.

To evaluate usage behaviour, Google Analytics 4 also uses artificial intelligence, such as machine learning, for automated analysis and data enrichment. Further information on how Google analyses data using artificial intelligence can be found in the relevant Google documentation at [GA4] Analytics Insights – Google Analytics Help.

In Google Analytics 4.0, IP address anonymisation is enabled by default and is performed on EU servers. IP addresses are neither logged nor stored. Precise location data is also not processed. For access originating in the EU or EEA, the truncated IP address data is used only to derive location data and is then deleted immediately. It is not logged, is not accessible and is not used for any other purposes. According to Google, data collected from users in the EU or EEA is processed exclusively on servers within the EU, and sensitive data is deleted before collection. We expressly point out, however, that we cannot rule out processing by Google outside the EU or EEA.

Possible data processing by Google Analytics 4.0

IP address (truncated form);
User ID and device ID;
Referrer URL (previously visited page);
Pages accessed (date, time, URL, title and length of stay);
Downloaded files;
Links clicked to other websites;
Achievement of specific goals (conversions);
Technical information (operating system; browser type, version and language; device type, brand, model and resolution);
Approximate location (country, region and, where applicable, city, derived from the anonymised IP address).

Our data protection settings when using Google Analytics 4.0

IP address anonymisation;
User ID;
Advertising function;
Personalised advertising;
Remarketing;
Retention period of 14 months (with no reset of the retention period upon new activity);
Cross-device and cross-page tracking (Google Signals);
Data sharing (in particular Google products and services, benchmarking, technical support and account specialists).

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of our websites, you can completely disable Google Analytics 4.0 in your browser settings (see section 2 above). Data processing by Google can also be prevented by using a browser add-on to disable Google Analytics 4.0. Further information and the add-on are available at https://tools.google.com/dlpage/gaoptout?hl=de. In this case, you may no longer be able to use all functions of our websites in full.

More detailed information on the terms of use of Google Analytics 4.0 and product-specific data protection (data processing agreement, etc.) is available at:

2.4.2 Google Ads / AdWords / Conversion Tracking

Our websites use Google Ads and, as part of Google AdWords, conversion tracking, an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information generated by the cookies is transferred to a Google server, possibly in the USA or another third country, and stored there. We ourselves do not collect or process any personal data as part of the advertising measures described. Google merely provides us with statistical analyses. These analyses allow us to identify which of our advertising measures are particularly effective. We do not receive any further data from the use of the advertising materials; in particular, we cannot identify you from this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of our websites, you can disable Google Ads in your browser settings (see section 2 above). You can also object to interest-based advertising by Google by selecting your preferred settings at www.google.de/settings/ads. In this case, you may no longer be able to use all functions of our websites in full.

2.4.3 Google Remarketing

Our websites use Google Remarketing provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google Remarketing for marketing and optimisation purposes, in particular to display advertisements that are relevant and interesting to you and to improve campaign performance reports. Google Remarketing allows us to display our advertisements to you during your subsequent use of the internet after you have visited our websites. This is carried out using cookies stored in your browser, through which Google records and evaluates your usage behaviour when you visit various websites. This enables Google to identify your previous visit to our websites. According to Google, data collected as part of remarketing is not combined with your personal data that may be stored by Google. In particular, Google states that pseudonymisation is used for remarketing. The information generated by the cookies is transferred to a Google server, possibly in the USA or another third country, and stored there.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of our websites, you can completely disable Google Remarketing in your browser settings (see section 2 above). You can also object to interest-based advertising by Google by selecting your preferred settings at ww.google.de/settings/ads. In this case, you may no longer be able to use all functions of our websites in full.

2.4.4 Microsoft Advertising

Our websites use Microsoft Advertising, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Advertising allows us to track your activities on our websites where you have reached our websites through Microsoft Advertising advertisements. When you click an advertisement placed by us using Microsoft Advertising, a cookie is stored on your device. This allows us and Microsoft to identify that you clicked a Microsoft Advertising advertisement and were directed to our websites through it. The information generated by the cookie about your use of our websites (including your IP address) may be transferred to a Microsoft server, possibly in the USA or another third country, and stored there.

We use Microsoft Advertising to evaluate the effectiveness of our advertising measures. We ourselves do not collect or process any personal data as part of the advertising measures described. Microsoft merely provides us with statistical analyses. These analyses allow us to identify which of the advertising measures used are particularly effective. It is not possible to identify you from this information.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Microsoft in connection with the use of our websites, you can completely disable Microsoft Advertising in your browser settings (see section 2 above). Data processing can also be prevented using the following link: http://choice.microsoft.com/de-DE/opt-out. If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

Further information about data protection at Microsoft is available at https://privacy.microsoft.com/de-de/privacystatement.

2.4.5 Facebook Pixel

Our websites use Facebook Pixel, a service provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter referred to as "Facebook"). Facebook Pixel allows Facebook to display our advertisements on Facebook, known as "Facebook Ads", only to Facebook users who have visited our website, particularly those who have shown an interest in our online services. Facebook Pixel also makes it possible to check whether you were directed to our website after clicking one of our Facebook Ads. Facebook Pixel uses cookies that are stored locally in your web browser's cache on your terminal device. If you are logged into Facebook using your user account, your visit to our online services is recorded in your user account. The data collected about you is anonymous to us and therefore does not enable us to draw any conclusions about your identity. However, Facebook may link this data to your user account there; that is, if you have a registered Facebook user account, Facebook may associate the visit with your user account.

The information generated by Facebook Pixel about your use of our websites (including your IP address) may be transferred to a Facebook server, possibly in the USA or another third country, and stored there. Further information about data protection at Facebook is available at https://www.facebook.com/about/privacy.

We use Facebook Pixel to optimise our marketing measures, in particular to display advertisements relevant to you.

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR.

You can manage your consent to data processing yourself using our Consent Management Tool by clicking the grey bracket located at the bottom left of each of our websites and changing your settings.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Facebook in connection with the use of our websites, you can completely disable Facebook Pixel in your browser settings (see section 2 above). Data processing can also be prevented using the following link: https://www.facebook.com/help/443357099140264?helpref=about_content. If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

2.4.6 YouTube

We have integrated content from the YouTube video platform service into our websites. YouTube is a service provided by YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. We integrate YouTube content into our websites to make various videos available to you directly on our websites without requiring you to access the content separately on YouTube. This allows us to optimise our services and make your user experience more engaging.

YouTube is integrated by embedding the service on our websites using an "iFrame". When this iFrame is loaded, it cannot be ruled out that YouTube or Google may process your personal data and transfer it to a server possibly located in the USA or another third country.

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR.

You can manage your consent to data processing yourself using our Consent Management Tool by clicking the grey bracket located at the bottom left of each of our websites and changing your settings.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Google in connection with the use of YouTube, you can disable YouTube in your browser settings. In this case, however, you will no longer be able to use YouTube.

2.4.7 Pinterest Pixel

On our websites, we use Pinterest Pixel, the online advertising programme of the Pinterest social network (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). This enables us to analyse your usage behaviour so that we can also place relevant advertising and offers for Pinterest members on Pinterest.

Pinterest Pixel automatically causes your browser to establish a direct connection with Pinterest's server as soon as you have consented to the use of cookies requiring consent. By integrating Pinterest Pixel, Pinterest receives information that you have accessed the relevant pages of our website or clicked one of our advertisements. If you are registered with Pinterest, Pinterest may associate the visit with your account.

In addition to the IP address and marketing identifier, Pinterest also receives information about the terminal device you use, the website visited and the time of the visit, and may associate this data with your Pinterest account. Pinterest processes this data under its own responsibility. We have no influence over the collection and further processing of data by Pinterest.

The use of Pinterest Pixel may result in transfers to third countries. In this context, the transfer is carried out pursuant to Art. 44 et seq. GDPR. Further information and Pinterest's Privacy Policy are available at https://policy.pinterest.com/de/privacy-policy.

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR.

You can manage your consent to data processing yourself using our Consent Management Tool by clicking the grey bracket located at the bottom left of each of our websites and changing your settings.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future.

If you do not consent to the future transfer of your data to Pinterest in connection with the use of our websites, you can completely disable Pinterest Pixel in your browser settings (see section 2 above). If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

3. Contacting us

You have various options for contacting us.

3.1 Scope of data processing

3.1.1 Contact forms

Our websites contain contact forms that you can use to contact us. We store the personal data that you submit using the form. The data processed can be seen in the respective input forms. Only fields that are essential to use the respective service are marked as mandatory in the forms.

3.1.2 Other contact options

You can contact us using the contact channels provided on our websites (email, post or telephone). In this case, we process the personal data you provide to us when contacting us (e.g. email address, postal address, telephone number and data arising from the content of your enquiry).

3.2 Legal basis

If your enquiry relates to a contract or is made prior to entering into a contract, Art. 6(1)(b) GDPR is the legal basis. In all other cases, the legal basis for processing your data is Art. 6(1)(f) GDPR. It is in our legitimate interest to process your contact enquiries.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time with effect for the future, for example by emailing kundenservice@ipuro.com.

3.3 Purpose of data processing

The purpose of data processing is to handle your contact enquiry. The data is processed exclusively for this purpose. Your data is not disclosed to third parties in this context.

3.4 Duration of storage of your personal data

Once your contact enquiry has been fully handled, we restrict your data from further processing. Your data is deleted upon expiry of the retention periods under tax and commercial law. Pursuant to Section 147(3) of the German Fiscal Code (AO), these periods amount to a full ten years for accounting documents and, pursuant to Section 257(4) of the German Commercial Code (HGB), a full six years for business records.

4. Prize draws

4.1 Scope of data processing

From time to time, we offer prize draws on our websites. If you choose to participate in our prize draws, the data you enter in the respective input form will be stored.

4.2 Legal basis

In this context, data is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future, for example by emailing kundenservice@ipuro.com. If you withdraw your consent, you will no longer be able to participate in the respective prize draw.

4.3 Purpose of data processing

We process your personal data to administer the prize draw, including to determine whether you are eligible to participate and to select and notify the winners.

Your data is not disclosed to third parties in this context.

4.4 Duration of storage of your personal data

As soon as the business purpose of administering the prize draw has been fulfilled and you have not been selected as a winner, we delete your data. If you have been selected as a winner, we delete your personal data upon expiry of the retention periods under tax and commercial law. Pursuant to Section 147(3) of the German Fiscal Code (AO), these periods amount to a full ten years for accounting documents and, pursuant to Section 257(4) of the German Commercial Code (HGB), a full six years for business records.

You are not obliged to provide your personal data. Its provision is neither required by law or contract nor necessary for entering into a contract. However, if you do not provide the specified data, you will not be able to participate in the prize draw or be contacted regarding notification of a prize.

5. Online presences on social media

We operate online presences on social networks and platforms (known as "fan pages"). We regularly publish and share content, offers and product recommendations on our social media presences.

5.1 Scope of processing

Whenever you interact with our fan pages, the operator of the respective social network automatically collects and stores your personal data for market research and advertising purposes. It cannot be ruled out that the data collected may also be processed outside the European Union. Among other things, this may make it more difficult to enforce your rights as a data subject. When you visit fan pages, the operators of the social networks use cookies and similar technologies to record your usage behaviour. For each of your interactions, the operators may view general statistics concerning your interests and demographic characteristics (e.g. age, gender and region). The operators use pseudonyms to create usage profiles from the data collected. These profiles may be used, for example, to display advertisements within and outside the social networks that are presumed to correspond to your interests.

We operate fan pages on the following social media platforms:

Operator	Registered office	Privacy Policy	Opt-out option
Facebook	Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland	https://www.facebook.com/about/privacy/	https://www.facebook.com/settings?tab=ads http://www.youronlinechoices.com
Google/ YouTube	Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA	https://policies.google.com/privacy	https://adssettings.google.com/authenticated
Instagram	Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland	https://help.instagram.com/519522125107875?helpref=page_content	Instagram does not offer its own opt-out function but refers to the functions of individual advertising partner organisations, such as the Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp), Digital Advertising Alliance (http://www.aboutads.info/) or European Digital Advertising Alliance (http://youronlinechoices.eu/http://instagram.com/about/legal/privacy/).
LinkedIn	LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland	https://www.linkedin.com/legal/privacy-policy	LinkedIn Privacy Policy Manage Advertising Preferences \| LinkedIn Help
Pinterest	Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland	Privacy \| Pinterest Policy	Do Not Track \| Pinterest Help
TikTok	TikTok Pte. Ltd, 10351 Santa Monica Blvd #310, Los Angeles, CA 90025, USA	https://www.tiktok.com/de/privacy-policy	Account and privacy settings \| TikTok Help Centre

Where you communicate directly with us through our fan pages or share personal content with us, we are responsible for processing your data. An exception applies to the processing of data for usage analysis (Page Insights) described below, for which we are jointly responsible with Facebook.

As a general rule, we collect all messages, content and other information that you provide to us when visiting our social media presences, for example when you post something on one of our social media presences or send us private messages. If you have an account with the respective social network, we may also see your public information, such as your username, information in your public profile and content that you share with a public audience. The nature, scope and purposes of processing your personal data on social networks are primarily determined by the operators of the social networks.

5.2 Usage analysis (Facebook and Instagram Page Insights)

Whenever you interact with fan pages, the respective operators use cookies and similar technologies to record your usage behaviour. Against this background, the operators provide us with "Page Insights". These are anonymised statistics that may provide us with information about your interactions with our posts or other content. It is not possible to associate this information with you. We have no access to the personal data processed by the operator to create Page Insights ("Page Insights Data"). Page Insights Data is selected and prepared exclusively by the respective operator.

Page Insights provide us with information about how you use our fan pages, your interests in our fan pages and which topics and content are particularly popular. This enables us to optimise our fan page activities, for example by better taking account of the interests and usage habits of our target groups when planning and selecting our content. We and the operator are jointly responsible for processing your data in connection with Page Insights. For this purpose, we have entered into an agreement specifying which company fulfils which data protection obligations under the GDPR with regard to the processing of Page Insights Data.

The agreement with Facebook can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum.

A summary of the key content of this agreement (including a list of Page Insights Data) can be found here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

For further information about data processing by the respective operator, your rights in this regard and the configuration options available to protect your privacy, please refer to the respective operator's privacy information.

5.3 Legal basis for processing

Where the operator of the respective social network asks you to consent to data processing, the legal basis for data processing is Art. 6(1)(a) GDPR. Otherwise, the legal basis is Art. 6(1)(f) GDPR. We have an overriding legitimate interest in optimising the presentation of our services and communicating effectively with our customers and prospective customers.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future. If you do not consent to the future transfer of your data in connection with the use of our social media presences, you can object to the data processing. The corresponding links for exercising your rights are listed in section 5.1.

If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time with effect for the future, for example by emailing kundenservice@ipuro.com. We will subsequently no longer process your personal data unless we can demonstrate compelling legitimate grounds for our processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. With regard to the joint processing of your Page Insights Data with Meta Platforms Ireland Limited (hereinafter "Meta Ltd."), we have agreed with Meta Ltd. that it bears primary responsibility for providing you with information about the processing of your Page Insights Data and enabling you to exercise your data protection rights under the GDPR (e.g. the right to object).

You may also exercise your rights in connection with processing activities for which we are jointly responsible with Meta Ltd. by contacting us, for example by emailing kundenservice@ipuro.com. In this case, we will forward your request to Meta Ltd. without delay.

5.4 Purpose of data processing

Our online presences are intended to enable effective communication with our customers and prospective customers and to optimise the presentation of our services.

6. Data processing when using our online shop

6.1 Registration

6.1.1 Scope of data processing

On our websites, you can register for a user account in our shop system. We process the personal data you submit in this context. The data processed can be seen in the respective input form. Only fields that are essential to use the respective service are marked as mandatory in the form. After entering your details, you will receive a registration email at the email address provided. The email contains a link that you can use to confirm your registration and complete the registration process. Once registered, you can access your user account at any time by entering your email address and password and can shop in our online shop.

6.1.2 Legal basis

The legal basis for processing the data is your consent pursuant to Art. 6(1)(a) GDPR.

Right to withdraw consent

You have the right to withdraw your consent at any time, without giving reasons, with effect for the future, for example by deactivating your user account. In this case, however, you will no longer be able to access the internal area of our websites.

6.1.3 Purpose of data processing

We use the data to administer your user account.

6.1.4 Duration of storage of your personal data

We store the data for as long as your user account remains active.

6.2 Ordering process

6.2.1 Scope of data processing

On our websites, we offer you the option of placing orders in our online shop as a customer with or without a user account (known as a guest account). To process the order, we process the personal data you provide during the ordering process (including your name, billing and delivery address, email address and payment data). We use the data to process your order and, where applicable, to communicate with you. If you have registered for a user account, please refer to section 6.1.

6.2.2 Legal basis

Data is processed in connection with the ordering process on the basis of Art. 6(1)(b) GDPR, meaning that processing your data is necessary to process the order.

6.2.3 Purpose of data processing

The purpose of data processing is to fulfil purchase contracts entered into through our online shop and to provide customer service and customer advice. Where applicable, we also use your personal data to assert rights arising from contracts entered into or initiated with you.

6.2.4 Duration of storage of your personal data

We process your data for the duration of our contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship). Your data is deleted upon expiry of the retention periods under tax and commercial law. Pursuant to Section 147(3) of the German Fiscal Code (AO), these periods amount to a full ten years for accounting documents and, pursuant to Section 257(4) of the German Commercial Code (HGB), a full six years for business records.

The provision of your personal data is necessary for entering into a contract.

6.3 Payment processing

When paying in our online shop, you can choose between various payment methods to complete the payment process. In addition to purchase on account, for which we send an invoice to the contact address you provide, we offer other payment methods (credit card, Apple Pay, Google Pay[pbf4] and Klarna) to make shopping in our online shop as convenient as possible.

6.3.1 Credit card

You can make payments by credit card. When you pay by credit card, the following data submitted by you is processed:

Card type
Name of cardholder
Credit card number
Card verification code
Expiry date

We check the data entered together with your order data so that we can identify misuse of the credit card or credit-card payment option at an early stage. Following successful verification, we use the data to process the agreed credit-card payment.

The legal basis is Art. 6(1)(b) GDPR, meaning that processing your data is necessary to fulfil the agreement regarding payment for your purchase by credit card. Your data is deleted upon expiry of the retention periods under tax and commercial law. Pursuant to Section 147(3) of the German Fiscal Code (AO), these periods amount to a full ten years for accounting documents and, pursuant to Section 257(4) of the German Commercial Code (HGB), a full six years for business records.

The provision of your personal data is necessary for payment by credit card.

6.3.2 Identity and credit checks when selecting Klarna payment services

If you choose Klarna's payment services, we transfer to Klarna the data required to process the payment and carry out identity and credit checks. The legal basis for the credit check is Art. 6(1)(f) GDPR. We have a legitimate interest in preventing payment defaults. Where personal data is processed in connection with the transfers described, it is processed exclusively for payment processing pursuant to Art. 6(1)(b) GDPR. For this purpose, Klarna processes the following personal data relating to you: first and last name, delivery address, telephone number and date of birth. The relevant data is sent to the credit agencies used by Klarna for identity and credit checks.

In Germany, the credit agencies specified in Klarna's Privacy Policy (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy) may be used for identity and credit checks. You may object to Klarna's use of personal data at any time. Further information about Klarna's data processing for payment processing can also be found there.

The provision of your personal data is necessary for payment through Klarna.

6.3.3 Apple Pay

If you choose the "Apple Pay" payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the Apple Pay function of your terminal device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. Authorising a payment therefore requires you to enter a code previously defined by you and verify the payment using your terminal device's Face ID or Touch ID function.

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transferred to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transferred to the payment service provider of the payment card stored in Apple Pay to execute the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Where personal data is processed in connection with the transfers described, it is processed exclusively for payment processing pursuant to Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymisation completely excludes any association with an individual. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on a Mac, the Mac and the authorising device communicate through an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to Wallet & Apple Pay and disable Allow Payments on Mac.

Further information about data protection when using Apple Pay is available at: https://support.apple.com/de-de/HT203027

The provision of your personal data is necessary for payment through Apple Pay.

6.3.4 Google Pay

If you choose the "Google Pay" payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment is processed through the Google Pay application on your NFC-enabled mobile terminal device running at least Android 4.4 ("KitKat") by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment of more than EUR 25 through Google Pay, you must first unlock your mobile terminal device using the configured verification measure (such as facial recognition, password, fingerprint or pattern).

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transferred to Google. Google then transfers your payment information stored in Google Pay to the originating website in the form of a unique transaction number that verifies the payment. This transaction number does not contain any information about the actual payment details of your payment methods stored in Google Pay; instead, it is created and transferred as a single-use numerical token. In all transactions made through Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is executed exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed in connection with the transfers described, it is processed exclusively for payment processing pursuant to Art. 6(1)(b) GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made through Google Pay. This includes the date, time and amount of the transaction; the merchant's location and description; a description of the goods or services purchased provided by the merchant; photographs you have attached to the transaction; the name and email address of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, where applicable, the offer connected with the transaction.
According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimisation and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with further information collected and stored by Google when other Google services are used.
The Google Pay terms of use are available here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information about data protection when using Google Pay is available at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

The provision of your personal data is necessary for payment through Google Pay.

7. Consent management by Usercentrics

These websites use the consent management service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, https://usercentrics.com/de/, software used to comply with our legal obligations and store consent to data processing. Data is processed in this context on the basis of Art. 6(1)(f) GDPR. The data collected and used in this context is always stored only under a pseudonym (e.g. a random identification number) and is not combined with personal data relating to you (e.g. name, address, etc.). Where external service providers obtain access to the data, this takes place exclusively on our behalf and under our control. Technically, the software uses cookies and local storage in particular to collect the following information: when the website was visited, which device and browser were used, which IP address was used (anonymised) and which consents were given.

The record of withdrawal of previously granted consent is retained for three years. This retention is based, on the one hand, on our accountability obligation under Art. 5(2) GDPR, which requires compliance with the processing of personal data under the General Data Protection Regulation. On the other hand, the regular limitation period pursuant to Section 195 BGB is three years. This limitation period begins at the end of the year in which the claim arose and in which you, as the creditor, became aware, or should have become aware without gross negligence, of the circumstances giving rise to the claim and the identity of the debtor (Section 199(1) BGB). The three-year limitation period therefore begins at the end of 31 December and ends three years later on 31 December at 24:00.

8. Customer relationship management (CRM) through Klaviyo

As part of our customer relationship management, we work with Klaviyo.

Klaviyo is a US technology company that provides a marketing automation platform used primarily for email and SMS marketing, such as newsletters. The data collected and used in this context is always combined with personal data relating to you (e.g. surname, first name, date of birth, address, email address, gender, etc.). Where Klaviyo obtains access to the data, this takes place exclusively on our behalf and under our control. Klaviyo enables us to analyse our newsletter campaigns and tailor newsletters more effectively to the respective target groups. For example, we can see whether a newsletter message has been opened, which links may have been clicked and which actions were taken after clicking links. The data entered by users for the purpose of receiving the newsletter is managed and stored exclusively within the European Union.

Where you are asked to consent to data processing for customer relationship management purposes, the legal basis for data processing is Art. 6(1)(a) GDPR.

If you have questions or concerns about how Klaviyo uses your personal data, you can also contact Klaviyo directly: Klaviyo, EDPO, Ground Floor, 71 Lower Baggot Street, Dublin D02 P593, Ireland, https://edpo.com/gdpr-data-request/, or obtain information at https://www.klaviyo.com/legal/privacy/privacy-notice. We are, of course, also available to assist you.

Right to withdraw consent (Art. 7(3) GDPR)

You have the right to withdraw the consent you have given in this regard at any time, without giving reasons, with effect for the future. Consent may be withdrawn using the relevant link included in every newsletter or by emailing kundenservice@ipuro.com. If you withdraw your consent, you may no longer be able to use all functions of our websites in full.

9. Rights of the data subject

Where we process your personal data, you are a data subject within the meaning of Art. 4 no. 1 GDPR and have the following rights against us:

Right of access (Art. 15 GDPR): Under Art. 15 GDPR, you can request information about your personal data processed by us.
Right to rectification (Art. 16 GDPR): If information relating to you is no longer accurate, you may request rectification pursuant to Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
Right to erasure (Art. 17 GDPR): Under Art. 17 GDPR, you may request the erasure of your personal data.
Right to restriction of processing (Art. 18 GDPR): Under Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.
Notification obligation (Art. 19 GDPR): We communicate any rectification or erasure of personal data or restriction of processing pursuant to Art. 16, Art. 17(1) and Art. 18 to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. As the controller, we will inform you, as the data subject, about those recipients if you request it.
Right to data portability (Art. 20 GDPR): Where the requirements of Art. 20(1) GDPR are met, you have the right to have data that we process by automated means on the basis of your consent or in performance of a contract provided to you or a third party. However, collecting data to provide the website and storing log files are strictly necessary for operation of the website. They are therefore not based on consent under Art. 6(1)(a) GDPR or on a contract under Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The requirements of Art. 20(1) GDPR are therefore not met in this respect.
Right to object (Art. 21 GDPR): You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR. You may submit your objection to any of our stated contact addresses, for example to kundenservice@ipuro.com. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. Collecting data to provide the website and storing log files are strictly necessary for operation of the website.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that the processing of your personal data infringes data protection law, you have the right under Art. 77(1) GDPR to lodge a complaint with a data protection authority of your choice. This includes the data protection supervisory authority responsible for the controller: Bavarian State Office for Data Protection Supervision, https://www.lda.bayern.de/de/beschwerde.html
Right to withdraw your declaration of consent under data protection law (Art. 7(3) GDPR) You have the right to withdraw your consent at any time, for example by emailing kundenservice@ipuro.com. Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of that consent before its withdrawal.

If you wish to exercise a right, please contact our Data Protection Officer. The contact details can be found at the beginning of this Privacy Policy.

Please note that in certain cases we may request additional information from you in order to establish your identity. This allows us, for example, to ensure when responding to a request for access that information is not disclosed to unauthorised persons.

No automated decision-making takes place on our websites.

10. Security

We use technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We continuously improve our security measures in line with technological developments.

11. Responsibility for external content

Our websites contain links to websites operated by external providers. We have no influence over, and do not monitor, whether other providers comply with applicable data protection provisions. If you believe that linked external pages violate applicable law or contain other inappropriate content, please let us know. We will investigate your report and remove the external link where appropriate. We are not responsible for the content or availability of linked external websites.

12. Validity of the Privacy Policy

Further development of our websites or the implementation of new technologies may make it necessary to amend this Privacy Policy. We reserve the right to amend this Privacy Policy at any time with effect for the future. The version available at the time of your visit to the website always applies.

Version: February 2026