Privacy Policy

IOVION, owner: Richard Junggebauer

Rendsburger Landstraße 148

24113 Kiel, Deutschland

Email:

Hosting

The website runs on a server rented from netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. netcup processes the data that arises when the website is used only on our behalf and on our instructions, under a data processing agreement pursuant to Art. 28 GDPR. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a secure and reliable website.

Server log files

Each time a page or file is requested, the server automatically records: the IP address of the requesting device, date and time, the requested address, the HTTP status code and the amount of data transferred, the referring page (referrer) and the identification of your browser and operating system (user agent). We need this data to deliver the website and to detect and fend off faults and attacks. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in exactly these purposes. The log files are deleted automatically after 30 days at the latest; an entry that documents an attack may be kept until the incident has been dealt with. The data is not combined with other data.

Cookies and local storage

Browsing this website sets no cookies apart from the security cookie named below; the cookies of the login and of the payment are described under "Customer portal, orders and payment". Your browser's local storage keeps your choice of language and appearance (light or dark), so that the next page opens the way you left it. On the pages of our security services (products and live demo), the page fetches data from our server; for this the server sets a security cookie (__Host-iovion.csrf) that protects against cross-site request forgery and is deleted when you close the browser. Whatever you enter in the order form is kept in your browser's local storage; it is sent to us only when you place an order and stays in your browser until you delete it there. All of this is strictly necessary for the function you use, so it needs no consent under Section 25(2) no. 2 TDDDG; the processing is based on Art. 6(1)(f) GDPR. You can delete these entries at any time in your browser settings; language and appearance then fall back to their defaults.

YouTube videos

Some pages show videos hosted on YouTube. Until you click on a video, you see only a preview image stored on our own server, and no connection to YouTube is made. Only when you click the play button does your browser load the YouTube player from www.youtube.com. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google then receives at least your IP address, the address of our page and technical information about your browser, and may store cookies or similar identifiers on your device and evaluate how you use the video. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Legal basis: your consent, given by clicking the play button (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future by not starting any further video and deleting the cookies YouTube has set in your browser. Google's handling of the data is described at https://policies.google.com/privacy.

Contact by email

If you write to us by email, we process your email address, your message and whatever else you send us, in order to answer you. Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns a contract or its preparation, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering enquiries. We delete the correspondence once it is no longer needed for your request, unless commercial or tax law requires us to keep it (Section 257 HGB, Section 147 AO: up to six or ten years). Our emails are stored by our email hosting provider, which acts as our processor under Art. 28 GDPR. Writing to us is voluntary; without your email address we cannot reply.

Purchases in the app stores

Our watch faces and apps are sold only through the stores of the platforms (Google Play, Garmin Connect IQ, Huawei). The store operator handles payment, download and refunds as an independent controller under its own privacy policy. We receive sales reports from it without your name or payment details. If you contact us about a purchase, we process what you send us as described under "Contact by email".

Customer portal, orders and payment

Our security services can be ordered through a customer portal, insofar as we offer it at the time. The following applies only if you use it. Account and login: to sign in, a login window of our login service Auth0 opens. Auth0 is operated by Okta, Inc., 100 First Street, San Francisco, CA 94105, USA, and processes your email address, your password (encrypted), your name where given, your IP address and technical login data on our behalf (Art. 28 GDPR), and sets the cookies needed for the login. While you are signed in, our website stores a cookie (auth0.…is.authenticated, valid for one day) and, on each page you open, checks with Auth0 in the background whether your login is still valid. Data may be transferred to the USA; Okta, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). Orders: for an order we process your name, billing address and email address, the website to be tested and the access data you provide for it, as well as the results of the tests. We store this on our servers and send invoices and reports by email. Access data and test results are kept for as long as your account exists, unless you ask us to delete them earlier. Payment: payments are handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, as an independent controller. PayPal's payment buttons, and with them PayPal's cookies, are loaded only on the payment step of an order. PayPal's handling of the data is described at https://www.paypal.com/myaccount/privacy/privacyhub. Legal basis: Art. 6(1)(b) GDPR (contract and its preparation) and Art. 6(1)(c) GDPR (retention obligations); the cookies of the login and of the payment are strictly necessary for the service you request (Section 25(2) no. 2 TDDDG). We keep your account data for as long as the account exists; invoices and order records for as long as commercial and tax law require (Section 257 HGB, Section 147 AO: up to ten years). Without the data marked as required, no order can be placed.

Links to other websites

Our pages link to other websites, for example to the app stores or to the privacy policies of the platform operators. Nothing is transmitted to these websites before you follow a link; from then on, the operator of the page you open is responsible for its processing.

Your rights

Regarding your personal data, you have the right • to obtain access to it (Art. 15 GDPR), • to have it rectified (Art. 16 GDPR), • to have it erased (Art. 17 GDPR), • to have its processing restricted (Art. 18 GDPR), • to receive the data you provided to us in a structured, machine-readable format (Art. 20 GDPR), • to withdraw a consent at any time with effect for the future (Art. 7(3) GDPR); processing carried out before the withdrawal remains lawful. An email to the address above is enough, and it costs you nothing.