1. General

When operating this website (“iunus.eu”) and using the IUNUS Development offered via this website, personal data is processed. This privacy policy is intended to inform you as a visitor of the website and user of the IUNUS Development about the nature, scope and purpose of the processing of personal data.

The terms used in this privacy policy (e.g. “personal data”, “data processing”, “pseudonym” or “anonymous”) correspond to the definitions of the General Data Protection Regulation (“GDPR”), in particular those of Article 3.

Controller for data processing is the website operator (“we”):

IUNUS
Email: info.dev[at]iunus.eu
Domain: www.iunus.eu

Company Personal Data – according to the GDPR, visible in the imprint for our customers.

2. Data processing

The nature, scope and purpose of the processing of personal data depend on which IUNUS Development is used. In particular, if you use our services such as Design & Development solutions, we process specific personal data required for the service.

2.1. Provision of the website

The group of data subjects with regard to the provision of the website are all website visitors.

The legal basis for the processing is Art. 6 (1) lit. b GDPR (performance of a contract). In order to make the website available at all, to enable basic functions and smooth operation, it is technically necessary to process personal data. Although these are essentially device data, this data may possibly be linked to the website visitor. For example, the IP addresses of the end devices used, identifiers of the end devices used, operating systems and browsers must be processed in order to establish a connection between the end device and the server on which the website is hosted and to display the content in the intended layout.

We use so-called web fonts for the uniform display of fonts and use Google Web Fonts for this purpose. This service is provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, “Google”).

When a page is called up, the browser of the website visitor loads the required web fonts into the browser cache in order to display texts and fonts correctly.

For this purpose, the browser used by the website visitor must connect to Google's servers. This enables Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers.

If your browser does not support web fonts, a standard font from your computer will be used.

The legal basis for the processing is Article 6.1 (f) GDPR (legitimate interest).
Further information on Google Web Fonts can be found on the Google Web Fonts website and in Google's privacy policy.

2.2. Security of the website

The group of data subjects with regard to the security of the website are all website visitors.

To ensure the security of the website, data about accesses to the website is processed as server log files. Although these are essentially device data, this data may possibly be linked to the website visitor. This data is compared with existing attack vectors and evaluated in the event of detected attacks.

Data in the server log files are: the website visited, the time of access, the amount of data sent in bytes, the referrer from which the website was accessed, the browser used and the operating system used.

The data is deleted as soon as it is no longer required to achieve the purpose of its collection. For server log files, the storage period is a maximum of 7 days. If data must be retained for evidentiary reasons, it is excluded from deletion until the incident has been finally clarified.

The legal basis for the processing is Art. 6 (1) lit. f GDPR (legitimate interest).

2.3. Reach measurement and optimisation of the offer

The group of data subjects with regard to reach measurement and optimisation of the offer are all website visitors.

This website uses cookies for reach measurement and optimisation of our offer. The cookies are transmitted by us or by third parties commissioned by us to the browser of the website visitor and stored there. This potentially enables recognition of the device used. The data collected in this way is pseudonymous. Therefore, it is not possible for us or the commissioned third parties to assign the data to the website visitor. The data is also not stored together with other personal data of the website visitors. In some cases, the data is anonymised before use, so that any conclusion about the website visitor is completely impossible.

These cookies are only set once you have given us your consent to do so. To give consent, we provide you with a communication field at the beginning of your visit to the website.

The legal basis for the processing is Art. 6 (1) lit. a) GDPR (consent). Given consent can be revoked at any time with effect for the future in the cookie settings on our website. The cookie settings can be found at the bottom of this page. The cookies set will then be deleted.

There are three different cookie categories on the website: Essential (these technologies are required to enable the core functionality of the website), Functional (these technologies allow us to analyse the use of the website in order to measure and improve performance) and Marketing (these technologies are used by advertisers to display ads that are relevant to your interests).

2.3.1. Google services

We use the Google services Google Analytics, Google Analytics Remarketing, Google Ads, Google Search Ads 360 and Google Tag Manager. These services are provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, “Google”). Google is based in the so-called third country USA, which in principle lacks a level of data protection equivalent to the EU. However, Google is certified under the EU-U.S. Privacy Shield and thus offers an adequate level of data protection in accordance with Art. 45 GDPR.

More information about Google can be found in Google's privacy policy.

2.3.1.1. Google Analytics

Google Analytics uses cookies. The information collected by these cookies is usually sent to a Google server in the USA and stored there. IP anonymisation is activated on this website. The IP address of the website visitor is shortened. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. As a result of this shortening, the personal reference of the IP address is eliminated. The IP address transmitted by the browser is not combined with other data stored by Google.

As part of the data processing agreement concluded between the website operator and Google Inc., Google uses the collected information to evaluate the use of the website and website activity and provides associated services.

The data collected by Google on behalf of the website operator is used to analyse the use of the online offer by individual users, for example to create reports on activity on the website and to improve our online offer.

The cookie stored in your browser as a result of your consent will be completely deleted after a maximum of 90 days.

2.3.1.2. Google Analytics Remarketing

Google Analytics Remarketing makes it possible to link the advertising target groups created with the cross-device functions of Google Ads and the Google Campaign Manager. In this way, interest-based, personalised advertising messages that have been adapted based on the previous usage and surfing behaviour of the website visitor on one device can also be displayed on another device of the website visitor. This requires that the website visitor has given Google the corresponding consent. If this is the case, Google links the web and app browsing history with the personal Google account for this purpose.

To support this function, Google Analytics collects Google-authenticated IDs of website visitors, which are temporarily linked with Google Analytics data to define and create target groups for cross-device display advertising.

Website visitors who use a Google account can permanently opt out of cross-device remarketing/targeting by disabling personalised advertising in their Google account (https://www.google.com/settings/ads/onweb/).

2.3.1.3. Google Tag Manager

To manage the Google Analytics tracking (see above), we use the Google Tag Manager service. The Google Tag Manager itself does not collect any personal data.

3. Rights of the user vis-à-vis the controller

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller in accordance with Articles 15 to 21 GDPR. To exercise your rights or to obtain further information about data protection at IUNUS Development, please contact our data protection officer. Send an email to privacy[at]iunus.eu.

3.1. Revocation of your consent

You have the right to revoke your consent to the processing of your personal data at any time. An email to privacy[at]iunus.eu is sufficient.

3.2. Rectification of your data

In accordance with Art. 16 GDPR, you have the right to request the rectification and/or completion of your personal data if this data is incorrect or incomplete.

3.3. Deletion of data

If your request does not conflict with a legal obligation to retain data (e.g. data retention), you have a right to the deletion of your personal data in accordance with Art. 17 GDPR. Data stored by the controller will be deleted if it is no longer required for its purpose and is not subject to legal retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, the data processing will be restricted. In this case, the data will be blocked and not processed for other purposes. Deleting your data means that the services of IUNUS can no longer be used to their full extent or cannot be used at all.

The controller is obliged to delete personal data immediately if processing is not necessary and one of the following reasons applies:

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You have revoked your consent on which the processing was based, and there is no other legal basis for the processing;
• You have objected to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for processing, or you have objected to the processing in accordance with Art. 21 (2) GDPR;
• The personal data was processed unlawfully;
• The deletion of your personal data is necessary to fulfil a legal obligation under German or European law.

If we have made your personal data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform the data processors who process your personal data that you have requested them to delete all links to your personal data or copies or reproductions of your personal data. The measures will only be taken insofar as processing is not necessary.

4. SSL encryption

To protect your transmitted data as best as possible, the website operators use SSL encryption. You can recognise such encrypted connections by the prefix “https://” in the page link in the address bar of your browser. Unencrypted pages are marked with “http://”. All data that you transmit to this website – for example in the case of enquiries or logins – cannot be read by third parties thanks to SSL encryption.

5. Changes to our privacy policy

We reserve the right to amend this privacy policy at any time within the framework of the statutory provisions.

6. Offer and conclusion of contract

6.1 The presentation of the services/products in the online shop does not constitute a legally binding offer, but an invitation to order. Errors excepted.

6.2 By clicking the button “Order with obligation to pay” in the last step of the ordering process, you place a binding order for the services/products contained in the shopping cart. The purchase contract is concluded when we accept your order by means of a confirmation immediately after receipt of your order. This order confirmation is displayed on the website and sent to you by email at the same time.

6.3 The conclusion of the contract is exclusively in the language selected by the profile system.

7. Voucher terms and validity

7.1 The voucher can only be redeemed to the amount paid for the voucher and expressly not according to the service stated on the voucher.

7.2 When using the payment methods PayPal, credit card, Sofort, Giropay, Klarna, advance payment, a voucher is valid immediately after the order and can be redeemed on the same day.

7.3 The voucher is generally valid for 3 years. For special offers or promotions, the validity can be limited. Further information and the expiry date can be found on the voucher.

7.4 The provider of the voucher will only redeem vouchers that have been paid in full.

7.5 A cash payment of the voucher value is generally not possible.

7.6 The voucher can be redeemed, subject to availability, for any service of the voucher provider.

7.8 The voucher can only be redeemed if it is presented to the voucher provider in digital or printed form on the day of redemption.

8. Payment

8.1 Payment can be made by PayPal, credit card or advance payment. The respective available payment methods will be shown to you during the ordering process.

8.2 If you select the payment method advance payment, you will receive our bank details after completion of the order process and with the order confirmation by email. The provision or activation of the agreed services will take place after the payment has been clearly received in our account.

8.3 Payment on invoice with later settlement is generally not possible. Payment is due in accordance with the agreed payment terms at the start of the contract or after completion of the order process. Due to the ongoing fixed costs for our services, customer projects / services are not pre-financed by IUNUS!

8.4 The payment processing is fully automated via our system. Subsequent individual adjustments to the payment deadlines or changes to the agreed payment terms are not possible after confirmation of the offer and conclusion of the contract.

8.5 If a payment is not made on time, the contractually agreed reminder fees will be automatically charged. After expiry of the original payment deadline, an additional payment period of 3 days will be granted.

8.6 If no payment is still received after this additional payment period, the customer account will initially remain active. However, if no payment is received within 10 days after the expiry of the additional payment period, the customer account will be blocked and the further use of the services will be discontinued. The outstanding claim can then be handed over to a collection agency for further processing.

8.7 You have a right of set-off only if your counterclaims have been legally established or are undisputed or have been acknowledged in writing by us.

8.8 You may only exercise a right of retention insofar as the claims arise from the same contractual relationship.

9. Data protection

The data of the orderer is collected, stored and used as customer data exclusively for the processing of the order. The basis for this is the relevant data protection provisions of the German Federal Data Protection Act (BDSG) and the Telemedia Data Protection Act (TDDSG).

10. Dispute resolution and Consumer Dispute Settlement Act

The European Commission provides a platform for online dispute resolution (OS), which you can find at http://ec.europa.eu/consumers/odr. We are not obliged and not willing to participate in a dispute resolution procedure before a consumer arbitration board.