Privacy Policy

This Privacy Policy explains how we collect, use, and protect your information.

Last updated: May 2025

1. General Information

We take your data privacy seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and this privacy policy.

2. Controller

Responsible for data processing on this website: IFFInity UG (haftungsbeschränkt), in formation G7, 29 68159 Mannheim, Germany Phone: +49 (0) 15128027080 Email: info@prmpto.ai

3. Hosting

This website is hosted by Amazon Web Services (AWS). A data processing agreement (DPA) has been signed with AWS in accordance with Art. 28 GDPR.

4. Data Collection on This Website

a) Cookies

We use cookies on our website. Please refer to the cookie banner for details. You can change your preferences at any time.

b) Contact Form

When you contact us via form, we store the data you provide to process your request (Art. 6(1)(b)/(f) GDPR).

c) Contact via Email, Phone or Fax

We store and process inquiries submitted via email, phone or fax to respond to your request (Art. 6(1)(b)/(f) GDPR).

d) Registration

When you register, we process your data to provide our services (Art. 6(1)(b) GDPR).

5. Analytics & Third-Party Tools

a) Google Analytics

We use Google Analytics to analyze website usage. Your IP address is anonymized. Data is processed based on your consent (Art. 6(1)(a) GDPR).

b) Google Tag Manager

Google Tag Manager is used to integrate tracking tools. No personal data is processed directly.

c) Google Fonts

Google Fonts are loaded from Google's servers. Your IP address is transmitted to Google. Note: Local hosting of Google Fonts is recommended for GDPR compliance.

6. Payment Providers

We use Stripe for payment processing. Your payment data will be transmitted to Stripe. The processing is based on Art. 6(1)(b) GDPR. Stripe is certified under the EU-US Data Privacy Framework.

7. Customer and Contract Data

We process customer data to fulfill contractual obligations (Art. 6(1)(b) GDPR).

8. SSL/TLS Encryption

This site uses SSL/TLS encryption for secure data transmission.

9. Your Rights

• Right of access, rectification, deletion, and restriction (Art. 15–18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object to processing in specific cases (Art. 21 GDPR) • Right to withdraw consent (Art. 7(3) GDPR) • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

10. Retention Period

Personal data is retained only as long as necessary for the intended purpose or as required by law.

11. Objection to Promotional Emails

We object to the use of our contact information for unsolicited advertising.

12. Updates to this Privacy Policy

This privacy policy is reviewed regularly.