Privacy policy
Hosting and Server Log Files
Our website’s servers are operated by the provider Bieber IT GmbH. The servers are located in Germany. We have entered into a data processing agreement with the provider in accordance with Art. 28 of the GDPR. The legal basis for using an external hosting provider is the fulfillment of a contract with our potential and existing customers pursuant to Article 6(1)(b) of the GDPR, as well as our legitimate interest in providing our website securely and efficiently in accordance with Article 6(1)(f) of the GDPR.
Every time our website is accessed, our system’s web server collects information about the device used. We collect the following data:
Information about the browser type
Operating system of the user’s device
Date and time of access
The previous website from which the user accessed our website (referrer)
We collect IP addresses only in anonymized form; therefore, we do not store any personal data as defined by the GDPR in our log files.
Data Controller
The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
IVALOX
Owner: Moritz Mösel
Am Kirchberg 9a
83083 Riedering
Germany
Phone: 017663008611
Email: Moritz@Ivalox.com
Contacting Us
You can contact us via email, phone, contact form, or letter; this may involve the processing of personal data. We process your data to handle and respond to your inquiry. We will not disclose your data to third parties without your consent.
The legal basis for this processing is our legitimate interest in effectively handling your inquiry pursuant to Article 6(1)(f) of the GDPR.
When you contact us via email, we store your email address as well as the information contained in the email. If you use the contact form, your IP address is recorded in pseudonymized form in addition to the information provided in the contact form. If you contact us by mail, your return address and the contents of the letter are stored. If you contact us by phone, we collect personal data depending on the specific circumstances.
We store your data until you request its deletion or until the purpose of processing (handling your inquiry) has been fulfilled.
Rights of Data Subjects
As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):
Right of Access (Art. 15 GDPR)
You have the right to request information about what personal data we have stored about you, the purpose for which it is processed, the recipients to whom it has been disclosed, and how long it will be stored.
Right to Rectification (Art. 16 GDPR)
You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Under certain conditions, you may request the erasure of your personal data, e.g., if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data, for example, if you contest the accuracy of the data or if the processing is unlawful, but you prefer restriction over erasure.
Right to Data Portability (Art. 20 GDPR)
You may request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used, and machine-readable format—or that we transfer this data directly to another controller.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data, provided that the processing is based on the legitimate interests of our company or on a task carried out in the public interest. If your objection is justified, we will cease processing unless there are compelling legitimate grounds for the processing.
Withdrawal of Consent (Art. 7 GDPR)
If you have given us your consent, you may withdraw it at any time without providing a reason, with effect for the future.
Right to File a Complaint with a Supervisory Authority (Art. 77 GDPR)
Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred.
Stripe
We use the “Stripe” service on our website to process payments. The provider is Stripe Payments Europe, Limited (“Stripe”), 1 Grand Canal Street Lower Grand Canal Dock, Dublin, D02 H210, Ireland.
The legal basis for using Stripe is our legitimate interest pursuant to Article 6(1)(f) of the GDPR to ensure the secure and efficient processing of payments and transactions on our website.
The data processed by Stripe includes your IP address, payment details, transaction information, device information, browser type, and operating system, and Stripe sets cookies for authentication and fraud prevention purposes.
The purpose of data processing is to process secure payment transactions and manage payment-related activities.
Stripe stores your personal data for as long as necessary to provide the services. Even after a transaction is completed or an account is closed, certain data may continue to be stored—for example, to comply with legal obligations, prevent fraud, or meet tax and accounting requirements. In doing so, Stripe adheres to the applicable statutory retention periods.
For more information about Stripe’s privacy policy, please visit: https://stripe.com/en-de/privacy
For information about the cookies we use, please visit: https://stripe.com/en-de/legal/cookies-policy
Subscription to Our Newsletter
You have the option to subscribe to our email newsletter, through which we inform you about our company’s offers.
The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect, for example by using the “Unsubscribe” link in every newsletter email, or by contacting the data controller.
Upon registration, we may send you a double-opt-in email to verify your email address. In addition to the data entered in the registration form, we process your IP address and the time of registration.
The sole purpose of this data processing is to send our newsletter.
The data collected in connection with the newsletter distribution will be stored until you unsubscribe from the newsletter. Data that we have stored for other purposes remains unaffected by this.
If you have provided us with your email address when purchasing goods or services, we reserve the right to periodically send you information via email about goods or services similar to those you have already purchased, provided you have not objected to this. Data processing is based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR in conjunction with §7(3) of the UWG.
Anonymous Visitor Statistics
On our website, we use the service provided by OÜ Plausible Insights. The provider’s full address is Västriku tn 2, Tartu 50403, Estonia. The service does not process personal data in a way that would allow visitors to be identified. Only IP addresses, as well as browser and device data, are transmitted; these are hashed using a salt that changes daily, so that no conclusions can be drawn about individual users. The raw data is not stored, and neither cookies nor persistent identifiers are used. The purpose is to determine anonymized visitor numbers and to analyze general usage patterns on our website without creating individual profiles. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest), as no personal data in the traditional sense is processed and no consent is required. For more information, please refer to the provider’s official privacy policy at https://plausible.io/data-policy.