Privacy Policy

‍

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data that can personally identify you. For detailed information on data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the section “Notice on the Responsible Party” in this privacy policy.

How do we collect your data?
Your data is collected when you provide it to us, for example, by filling out a contact or download form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or the time the page was accessed).

What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to lodge a complaint with the competent supervisory authority. For further questions regarding data protection, you can contact us at any time.

2. Hosting

Our website is hosted by Webflow. Webflow, Inc., based in the USA, provides us with the technical infrastructure to deliver our website securely and reliably.

Data Transfer to Third Countries
Since Webflow is based in the USA, personal data collected when you visit our website may be transferred to and processed in the USA. Webflow uses approved Standard Contractual Clauses (SCCs) and adheres to the EU-US Data Privacy Framework to ensure that the processing of personal data complies with European data protection standards.

More information on data processing by Webflow can be found in Webflow's privacy policy.

Logfiles and Data Processing
When you visit our website, Webflow automatically collects certain information, such as IP addresses, browser types, access times, and referring URLs. This data is stored on Webflow's servers and is used to ensure the secure and stable operation of the website.

Order Processing
We have entered into an order processing agreement (AVV) with Webflow, which ensures that Webflow processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Legal Basis for Data Processing

The data processing by Webflow is based on our legitimate interest in providing our website securely and reliably in accordance with Article 6(1)(f) GDPR. If you have given consent for data processing, the processing will be carried out on the basis of Article 6(1)(a) GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Notice on the Responsible Party

The responsible party for data processing on this website is:

ivoflow GmbH
Universitätsstraße 3
56070 Koblenz
Email: hello@ivoflow.com
Phone: +49 261 8854261

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons cease to apply.

General Information on the Legal Basis for Data Processing on This Website

If you have consented to data processing, we process your personal data based on Article 6(1)(a) GDPR and Article 9(2)(a) GDPR, if special categories of data according to Article 9(1) GDPR are processed. In case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), the data processing is additionally based on Section 25(1) TTDSG. Consent is revocable at any time.

If your data is necessary for the performance of a contract or for pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation based on Article 6(1)(c) GDPR. The data processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The relevant legal basis in each case will be explained in the following sections of this privacy policy.

4. Data Collection on This Website

What type of data we collect
When using our service, we collect various types of data:

• Usage data: This data is automatically collected when using our website and includes:
• Internet protocol (IP) address of the computers accessing the website
• Website requests
• Referring websites
• Browser used to access the website
• Time and date of access

• Personal data: This data is only collected when you use our contact forms or download forms to get in touch with us or download information. This includes:
• Name
• Email address
• Phone number
• Company

What we use your data for

ivoflow may use your data for the following purposes:

• To provide and maintain our service: We use your data to ensure the technical provision of our website and to monitor the use of our services.
• To contact you: ivoflow may contact you by email, phone, or other means in connection with the functionality, products, services, or security updates, when necessary or appropriate.
• To inform you of news, general information, new services, and events: We may use your data to keep you informed and send you relevant information about our company and offers.
• Marketing and advertising initiatives: ivoflow may use the non-personal data collected from you to improve marketing efforts and conduct targeted advertising campaigns.

Contact and Download Form

If you contact us via the contact or download form, the data you provide (e.g., name, email address, phone number) will be collected to process your request or to provide you with the requested information. This data is stored and processed via HubSpot.

HubSpot is a customer relationship management and marketing service. The data processing is carried out by HubSpot, Inc., based in the USA. HubSpot acts as our data processor and stores the data on our behalf in accordance with applicable data protection regulations (GDPR). Further information on data processing by HubSpot can be found in their privacy policy.

Data processing is carried out on the basis of Article 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual measures) or on the basis of your consent (Article 6(1)(a) GDPR), if requested. Consent can be revoked at any time.

The data you enter in the contact or download form will remain with us until the purpose of data storage no longer applies (e.g., after your request has been processed) or you request us to delete the data. Mandatory statutory provisions—especially retention periods—remain unaffected.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. It may sometimes be necessary to transfer personal data to these external parties. We only pass on personal data to external parties if it is necessary for the performance of a contract, if we are legally obliged to do so (e.g., passing data to tax authorities), if we have a legitimate interest in doing so under Article 6(1)(f) GDPR, or if another legal basis permits data sharing.

When using processors, we only share personal data with our customers on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Revoking Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke any previously given consent at any time. The legality of the data processing carried out up until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and Direct Advertising (Art. 21 GDPR)

If the data processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, including profiling based on these provisions. The specific legal basis on which the processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, as far as it is related to such direct advertising. If you object, your personal data will no longer be used for direct advertising purposes.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive the data we process based on your consent or in the performance of a contract in a commonly used and machine-readable format. You also have the right to request the transfer of this data to another controller if technically feasible.

Access, Rectification, and Erasure

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of the data processing. You also have the right to request the rectification or erasure of this data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restriction of processing applies in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of the processing instead of the erasure.
• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing instead of the erasure.
• If you have objected to processing pursuant to Art. 21(1) GDPR, a balance must be struck between your and our interests. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock icon in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Cookies

Our website uses so-called "cookies." Cookies are small data packets that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain on your device until you delete them yourself or your web browser automatically deletes them. Cookies can be either first-party cookies or third-party cookies (from third-party providers).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies can be used to analyze user behavior or for advertising purposes.

Cookies required to carry out the electronic communication process, provide certain functionalities you have requested, or optimize the website (necessary cookies) are stored based on Art. 6(1)(f) GDPR. If consent for storing cookies and similar technologies is requested, processing will be based solely on your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG). Consent is revocable at any time.

You can set your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Websites use cookies to ensure smooth navigation and help perform specific functions. Essential cookies can be set without your consent. All other cookies must be approved before they are set in the browser.

• Strictly necessary cookies: These cookies are essential for core website functions such as user login and account management. The website cannot be used properly without them.
• Performance cookies: These cookies collect information about how visitors use a website, such as through analytics. They cannot be used to directly identify a particular visitor.
• Targeting cookies: These cookies are used to track visitors across different websites, for instance, content partners or banner networks. They can be used to build visitor profiles or show relevant ads on other websites.
• Functional cookies: These cookies are used to store visitor preferences on the website, such as language, timezone, or enhanced content.
• Unclassified cookies: These are cookies that do not belong to the other categories or are currently being classified.

You can change your consent to cookie usage in the cookie banner.

‍

‍Use of Google Analytics 4 and Google Tag Manager

Our website uses Google Analytics 4 (GA4), a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics 4 uses technologies such as cookies and similar tracking technologies that enable an analysis of your usage of the website. The information generated by the cookies about your use of this website is typically transmitted to a server operated by Google in the USA and stored there.

We use the Google Tag Manager to integrate Google Analytics 4 on our website and to control data collection. The Google Tag Manager itself does not collect any personal data but manages the implementation of tags and the execution of scripts.

Within the scope of Google Analytics 4, we use the consent mode. This means that Google Analytics will only become active and set cookies when you have consented to data collection. Your consent is recorded by the cookie banner that is displayed upon your first visit to our website. If you agree, cookies will be used to collect data such as IP addresses, demographic information, and user behavior on our website.

With the consent mode of Google Analytics 4, we enable data collection while simultaneously meeting the requirements of the GDPR. Here, the IP address is anonymized, and Google Analytics 4 only collects aggregated data to analyze visitor flows on our website. This helps us continuously improve the user experience and optimize the website’s functionalities.

The data collected by Google Analytics 4 may be transmitted to the USA. However, Google is committed to ensuring the protection of personal data in accordance with the Standard Contractual Clauses (SCC) and the provisions of the EU-US Data Privacy Framework.

You can revoke your consent to the use of Google Analytics 4 at any time by adjusting the cookie settings on our website or using a corresponding browser add-on to disable Google Analytics. Further information on how Google uses data and your options for configuration can be found in Google's privacy policy.

HubSpot Data Analysis and Tracking

Our website uses HubSpot, a service of HubSpot, Inc., USA, for analyzing and optimizing our website as well as for marketing purposes. HubSpot uses various cookies to track user behavior, analyze website traffic, and manage leads. The collected information helps us better align our marketing and sales activities with the needs of our website visitors.

Additionally, we store and process data you provide to us through the contact and download forms on our website via HubSpot. This data includes information such as your name, email address, phone number, and the content of your request or inquiry about our products and services.

The data collected through cookies includes information such as IP addresses, pages visited, and time spent on the website. HubSpot also stores any information you enter into forms to process your inquiries and provide you with the requested information. This data is stored and processed in our HubSpot CRM system to better serve you in future inquiries.

HubSpot stores this data on our behalf and processes it in compliance with applicable data protection regulations. Further information can be found in HubSpot's privacy policy.

The processing of this data is based on your consent (Art. 6 para. 1 lit. a GDPR) and can be revoked at any time by adjusting the cookie settings on our website.

Facebook Tracking and Advertising Measures

Our website uses Facebook Pixel and other tracking cookies from Meta Platforms, Inc. (formerly Facebook, Inc.), USA, to run targeted advertising campaigns. These cookies enable us to show relevant ads to visitors of our website on Facebook and other platforms within the Meta network. In doing so, data such as IP address, visited pages, and interactions on the website are collected.

The data collected by these cookies allows us to better understand the behavior of website visitors and run targeted ads based on user interests. The data is transmitted to Facebook, with Meta Platforms committed to protecting this data in accordance with the Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework.

The use of Facebook tracking cookies occurs only with your consent under Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by adjusting the cookie settings on our website or using a corresponding browser add-on to disable Facebook tracking. Further information on how Meta Platforms processes data can be found in Facebook's privacy policy.

Microsoft Cookies for Tracking and Analytics

Our website uses cookies from Microsoft to analyze user behavior on our website and run targeted advertising campaigns. These cookies allow us to track visitors on our website and other Microsoft services to optimize our advertising and marketing efforts.

The cookies may collect anonymized information such as IP address, browser type, operating system, and browsing behavior. This data is used to optimize our website and display relevant advertisements.

Legal Basis for Processing

The processing of data is based on your consent under Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by adjusting the cookie settings on our website or using corresponding browser add-ons to disable Microsoft cookies.

Further information on Microsoft's data processing can be found in Microsoft's privacy policy.

LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag, a service provided by LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA. The LinkedIn Insight Tag allows us to analyze the effectiveness of our ad campaigns on LinkedIn and run targeted advertising. A LinkedIn cookie is set on your device, which allows LinkedIn to recognize you during visits to our website and provide us with anonymized reports on website activity and interactions with our ads.

Legal Basis for Data Processing

The processing is based on your consent under Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by adjusting the cookie settings in your browser or opting out via LinkedIn (see below).

Data Transfer and Data Processing

The data is transferred to and processed by LinkedIn in the USA. LinkedIn ensures an adequate level of data protection through the European Commission's Standard Contractual Clauses. Further information on LinkedIn's data privacy can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

Opt-Out and Right to Object

You can prevent data collection by the LinkedIn Insight Tag by disabling personalized advertising in your LinkedIn account under ad settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. You can also prevent cookies from being saved by adjusting your browser settings. Please note that this may limit the functionality of our website.

Data Retention Period

Data collected by LinkedIn is anonymized as soon as it is no longer required for our analysis purposes and is deleted after 90 days at the latest.

Data Collected Despite Cookie Refusal

Even if you decline the storage of cookies, certain technical data will automatically be collected when you visit our website to ensure the functionality and security of the website. This data includes:

• Your IP address
• The browser type and version used
• The referring website (referrer)
• The operating system of your device
• The date and time of access to the website
• The duration of the visit and the pages viewed

This data is technically necessary to ensure the functionality and security of the website and is collected independently of your consent to the use of cookies. The processing of this data is based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. This purely technical information does not allow us to draw any conclusions about your identity.

5. Obligation to Confidentiality and Data Protection Training

We limit access to personal data to authorized employees and contractors of ivoflow GmbH. These individuals are required to comply with applicable data protection laws and this privacy policy. Violations may result in disciplinary action or legal consequences. Our employees regularly undergo data protection training.

7. Enforcement

This privacy policy is regularly reviewed to ensure its currency and compliance with applicable laws. ivoflow is committed to responding to complaints and inquiries regarding the processing of personal data promptly and resolving any disputes in cooperation with the relevant data protection authorities.

8. Security Measures and Risk Mitigation

Your personal data is protected by technical and organizational measures against unauthorized access, loss, alteration, and other misuse. These data are stored in a secure operating environment that is not accessible to the public.