Privacy Policy

This policy covers the website gp-innovations.de. The privacy policies for our apps are published with each app and are linked in the footer of every page.

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

G&P Innovations GbR
Torstraße 105
10119 Berlin
Germany

Represented by its partners Ben Grunden and Mark-Michael Portnow.
Email: kontakt@gp-innovations.de

These contact details also apply to data protection matters.

2. Data protection officer

No data protection officer has been appointed, as the conditions of Art. 37 GDPR in conjunction with § 38 BDSG are not met.

3. In principle

This is a static website. It sets no cookies, uses no analytics, tracking or advertising tools, embeds no third-party content and loads no fonts from external servers. There are no user accounts, no forms and no comment function.

Because nothing is stored on or read from your device beyond what is strictly necessary to deliver the page, no consent under § 25(1) TDDDG is required. For the same reason this website has no consent banner.

Beyond your visit to the site, we process personal data only if you write to us yourself.

4. Hosting and server log files

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; represented in the European Union by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany).

When you open the website, Cloudflare processes the technically necessary connection data your browser transmits. This includes the IP address, the date and time of the request, the address requested, the HTTP status code, the volume of data transferred, the browser type and operating system and, where applicable, the page previously visited.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free delivery of the site, in defending against attacks and in its stability. This data is not combined with other sources and is not evaluated for marketing purposes. We do not access it ourselves.

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare (the Cloudflare Data Processing Addendum). Processing in the United States of America is possible. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer rests on an adequacy decision of the European Commission under Art. 45 GDPR, supplemented by the standard contractual clauses under Art. 46(2)(c) GDPR.

Retention period: [PLATZHALTER: Speicherdauer der Server-Logs gemäß Cloudflare-Auftragsverarbeitungsvertrag prüfen und eintragen]

Cloudflare’s own privacy policy is available at https://www.cloudflare.com/privacypolicy/.

5. Fonts

The typefaces used on this website are held on our own server and delivered together with the page. There is no connection to Google Fonts or any other font service, and no IP address is passed to a third party.

6. Contact by email

If you send us an email, we process your details in order to answer your enquiry. That is at least your email address and the content of your message, plus anything else you choose to tell us.

The legal basis is Art. 6(1)(b) GDPR where your enquiry serves the performance of a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

Our mailbox runs on Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A data processing agreement pursuant to Art. 28 GDPR is in place with Google. Where data is transferred to Google LLC in the United States, the transfer rests on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, supplemented by the standard contractual clauses.

We delete your enquiry once it has been dealt with conclusively and no statutory retention periods apply. Business correspondence is subject to commercial and tax retention periods of six and ten years respectively (§ 257 HGB, § 147 AO).

7. Links to the app stores

On our product pages we link to Apple’s App Store and to Google Play. These are ordinary links. No store content is embedded in this website and no data is transferred to Apple or Google when you merely open our pages. The respective provider’s privacy terms apply only once you follow such a link.

8. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22(1) and (4) GDPR takes place.

9. Your rights

You have the right, as against the controller, of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

You also have the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). Any consent you have given may be withdrawn at any time with effect for the future.

To exercise these rights, contact kontakt@gp-innovations.de.

10. Right to lodge a complaint

Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany

11. Encrypted transmission

This website is available over HTTPS only. Traffic between your browser and our server is encrypted to current standards.

12. Changes to this policy

We adapt this privacy policy when the website or the legal position changes. The version published on this page is the one that applies. The date of the current version is shown at the top of this page; earlier versions can be traced through the revision history of the source code repository.