Privacy Policy for Inventocloud.net

Last Updated:

This Privacy Policy describes how Inventocloud („we,“ „us,“ or „our“) collects, uses, and discloses your personal data when you visit our website https://inventocloud.net/landingpage-in/ (the „Website“) and interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner, in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable German data protection laws.

1. Data Controller Information

Inventocloud is the data controller responsible for the processing of your personal data under this Privacy Policy. This means we determine the purposes and means of processing your personal data.

Our contact details are as follows:

Inventocloud Römersteinweg 21 70794 Filderstadt Germany

Email: info@sn-dev.de Phone: 0049 15739016161

Providing clear and accessible contact information is not merely a legal requirement under GDPR Article 13(1)(a) ; it is fundamental to the principle of „Accountability“. By making it easy for individuals to identify and contact the entity responsible for their data, Inventocloud ensures that data subjects can readily inquire about their data, exercise their rights , and hold the company accountable for its data processing practices. This level of transparency fosters trust and facilitates compliance with data protection regulations.  

2. Types of Personal Data Collected

We may collect various types of personal data from you, depending on your interactions with our Website and services. It is important to note that the specific data collected by Inventocloud may vary, and this section provides examples based on common practices for cloud service landing pages. Inventocloud should verify and adapt these categories based on its actual data processing activities.

• Personal Data You Provide to Us Directly:
  • Contact Information: This includes data such as your name, email address, mailing address, and telephone number. This information is typically collected when you fill out forms on our Website (e.g., „Contact Sales“ or „Become a Partner“ forms, if available), subscribe to newsletters, or communicate with our customer service representatives.  
  • Business Information: Details related to your organization, such as your company name, job title, and other relevant information provided when you inquire about potential partnership or customer opportunities.  
  • Login Credentials: If you create an account to access our services, we may collect your username and password.  
  • Communication Records: We may maintain records of your interactions with us, including emails, call logs, or chat transcripts, to facilitate support and improve service quality.  
  • Payment Information: If you purchase any services from us, we may collect payment details, such as credit/debit card information or other financial account details, necessary to process transactions.  
  • Information for Support or Training: Data you provide to facilitate support cases or to enable your enrollment, attendance, and completion of any educational or training events offered by Inventocloud.  
• Data Collected Automatically (via Website Interaction and Technologies):
  • Usage Data: Information about how you access and use our Website. This can include your IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, and the time spent on various pages. This data helps us understand user behavior and improve our Website’s functionality.  
  • Geolocation Data: General location information derived from your IP address, such as the city or ZIP code associated with your device. This is typically used for analytical purposes to understand our audience’s geographical distribution.  
  • Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your interactions with our Website. These technologies help us enhance your user experience, analyze Website usage patterns, and for marketing purposes. It is important to note that GDPR explicitly considers cookie data and IP addresses as personal data.  
• Data from Third Parties:
  • Business Contacts: We may receive information from our clients, service providers, or partners, such as business contact information provided in the context of our contractual relationships with them.  
  • Publicly Available Information: Information that you publicly share about us or that is available from public sources or social media platforms if you interact with our pages or content on those platforms.  

To provide a clear overview, the following table summarizes the categories of personal data we may collect:

Data Category	Examples of Personal Data	Source of Collection
Contact Information	Name, email address, mailing address, telephone number	Directly from you (forms, customer service)
Business Information	Company name, job title, details for partner/customer assessment	Directly from you (inquiries, forms)
Account Information	Username, password	Directly from you (account creation)
Communication Data	Records of calls, chats, emails with customer service	Directly from you (interactions)
Payment Information	Credit/debit card details, financial account information	Directly from you (service purchases)
Support/Training Data	Information provided for support cases, enrollment in events	Directly from you (support requests, event registration)
Usage Data	IP address, device identifiers, browser type, operating system, pages viewed, time spent	Automatically (cookies, tracking technologies)
Geolocation Data	City, ZIP code (derived from IP address)	Automatically (IP address)
Third-Party Data	Business contact info from partners, public social media interactions	From third parties

In Google Sheets exportieren

3. Purposes and Lawful Bases for Processing Personal Data

We process your personal data only for specific, explicit, and legitimate purposes, and only when we have a valid legal basis to do so, in accordance with GDPR principles. The following table outlines the main purposes for which we process your data and the corresponding lawful bases. Inventocloud must ensure that its actual processing activities align with these stated purposes and lawful bases.  

Processing Activity	Purpose of Processing	Lawful Basis for Processing	Data Categories Involved
Responding to Inquiries & Providing Information	To respond to your inquiries regarding our products and services, including information about becoming a partner or customer, and to outline steps for furthering a business relationship.	Performance of a Contract: If your inquiry relates to entering into a contract with us. Legitimate Interest: To respond to general inquiries and engage with potential customers/partners, which is necessary for our business operations.	Contact Information, Business Information
Account Management & Service Provision	To facilitate your enrollment, attendance, and completion of Inventocloud-offered education or training events; to process and collect payments for services; to review compliance with applicable usage terms in your organization’s contract; to facilitate communications and resolution of your support cases; and to diagnose technical problems.	Performance of a Contract: Necessary for the provision of our services and fulfillment of contractual obligations.	Contact Information, Business Information, Account Information, Communication Data, Payment Information, Support/Training Data
Website Improvement & Analytics	To analyze and improve our services, promote our business, understand user behavior on our Website, and optimize the Website’s structure and content. This includes creating aggregated, de-identified, or anonymous data for lawful business purposes.	Legitimate Interest: To continuously improve our Website and services, which benefits both our users and our business.	Consent: For the use of non-essential cookies and tracking technologies that collect personal data for analytical or marketing purposes.	Usage Data, Geolocation Data, Cookies and Tracking Technologies
Marketing Communications	To send you marketing-related emails about our products, services, and updates.	Consent: You have explicitly opted-in to receive such communications. You have the right to opt-out at any time.	Contact Information
Legal Compliance & Security	To maintain the safety, security, and integrity of our services, products, business, databases, and other technology assets; to protect our rights, personnel, and property; to detect unauthorized use or abuse of services; to protect customers from fraudulent, abusive, or unlawful use; and to comply with applicable laws and regulations.	Legal Obligation: To comply with legal requirements.	Legitimate Interest: To protect our business, customers, and employees from harm and ensure the security of our systems.	Vital Interests: In cases where processing is necessary to protect the life of the data subject or another natural person.	All relevant data categories

4. How We Use Your Information

The personal data we collect is utilized to deliver and enhance our services, ensuring a seamless and secure experience for our users. For instance, contact and business information are used to respond to inquiries and assess potential customer or partner relationships, providing relevant information about our offerings. If you proceed to use our services, your data facilitates account management, technical support, and payment processing, all essential for fulfilling our contractual obligations.  

We also employ automatically collected data, such as usage patterns and information from cookies, to understand how our Website is navigated and used. This helps us identify areas for improvement, optimize the user experience, and ensure the efficiency and relevance of our content. This approach aligns with the GDPR principle of „Data Minimization“ , as we strive to collect only adequate, relevant, and limited data necessary for the stated purposes. Furthermore, we may create aggregated, de-identified, or other anonymous data from the personal information we collect by removing elements that make the data personally identifiable to you. This anonymous data may then be used and shared with third parties for various lawful business purposes, including analyzing and improving our services and promoting our business, without compromising individual privacy. This practice is a direct application of the „Purpose Limitation“ principle , ensuring that once the original purpose requiring identifiable data is met, the data is transformed to a less intrusive format for further analytical use.  

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period for different categories of personal data is determined based on:  

• The duration of our ongoing relationship with you (e.g., as long as you have an active account or are a customer/partner).
• Any legal obligations that require us to retain data for a specific period (e.g., tax laws, commercial laws).  
• Our legitimate interests, such as for the establishment, exercise, or defense of legal claims, or for fraud prevention.
• The necessity for the data to remain accurate and up-to-date for the purposes for which it is processed.  

This approach to data retention is a practical application of the „Storage Limitation“ principle under GDPR. While specific time periods for every data type are not listed here, the criteria for retention are clearly defined, demonstrating our commitment to not holding personal information longer than necessary. This also implies the existence of an internal data retention policy or schedule, which is a key component of our accountability framework under GDPR.  

6. Sharing and Disclosure of Personal Data

We may share your personal data with third parties in certain circumstances, always ensuring that such sharing is lawful, transparent, and in line with the purposes outlined in this Privacy Policy.  

• With Service Providers: We may engage third-party companies and individuals to perform services on our behalf, such as website hosting, data analytics, payment processing, customer relationship management (CRM), and email marketing. These service providers are granted access to your personal data only to perform their specific tasks on our behalf and are contractually obligated to protect it in a manner consistent with this Privacy Policy and applicable data protection laws. We ensure that appropriate data processing agreements (DPAs) are in place with these providers to uphold our accountability obligations.  
• For Legal Reasons: We may disclose your personal data to law enforcement, government authorities, or private parties if we believe it is necessary or appropriate to: (a) comply with applicable laws, regulations, or legal processes (e.g., court orders, subpoenas) ; (b) protect our rights, property, or safety, and the rights, property, or safety of our customers, employees, contractors, or the general public ; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect our customers from fraudulent, abusive, or unlawful use of the services.  
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any such change in ownership or control of your personal data.
• Aggregated or De-identified Data: We may share aggregated, de-identified, or otherwise anonymous data with third parties for our lawful business purposes, including to analyze and improve our services and promote our business. This data cannot be used to identify you personally.  

7. International Data Transfers

Inventocloud is based in Germany, within the European Union. However, in providing our services, your personal data may be transferred to, and processed in, countries outside the European Union (EU) and the European Economic Area (EEA) that may not provide the same level of data protection as your home jurisdiction. For example, some of our service providers or their data centers may be located in countries like the United States.  

When we transfer your personal data outside the EU/EEA, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements. These safeguards may include:

• Adequacy Decisions: Transferring data to countries deemed by the European Commission to provide an adequate level of data protection.
• Standard Contractual Clauses (SCCs): Implementing standard contractual clauses approved by the European Commission, which provide specific data protection safeguards.
• Binding Corporate Rules (BCRs): For intra-group transfers within multinational corporations, if applicable.

The necessity to address international data transfers underscores the extraterritorial reach of the GDPR. Even for a German-based company like Inventocloud , using global service providers (e.g., cloud hosting or analytics outside the EU) necessitates explicit legal bases and safeguards for such transfers. This ensures that personal data remains protected even when it leaves the EU/EEA, reinforcing the „Integrity and Confidentiality (Security)“ principle across borders.  

8. Your Data Protection Rights

Under the GDPR, you have specific rights regarding your personal data. We are committed to upholding these rights and will respond to your requests within one month of receipt. If a request is particularly complex, we may extend this period by two further months, provided we inform you of the extension within the initial one-month period. We will not charge a fee for exercising these rights.  

The following table details your rights and how you can exercise them:

Your Right	What it Means	How to Exercise
Right to be Informed	You have the right to receive clear, transparent, and easily understandable information about how we process your personal data. This Privacy Policy serves to fulfill this right.	This right is primarily fulfilled through this Privacy Policy. For specific questions, please contact us at info@sn-dev.de.
Right of Access	You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and certain information about its processing.	Send an email to info@sn-dev.de with the subject „Data Access Request“. We may ask for additional information to verify your identity.
Right to Rectification	You have the right to request the correction of inaccurate personal data concerning you, or to have incomplete personal data completed.	Send an email to info@sn-dev.de with the subject „Data Rectification Request“, specifying the data to be corrected.
Right to Erasure („Right to be Forgotten“)	You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent and no other legal basis for processing exists.	Send an email to info@sn-dev.de with the subject „Data Erasure Request“.
Right to Restriction of Processing	You have the right to request that we limit the use of your personal data under certain circumstances, for example, if you contest the accuracy of the data, or if the processing is unlawful.	Send an email to info@sn-dev.de with the subject „Data Processing Restriction Request“, specifying the data and reasons.
Right to Data Portability	You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance from us, where technically feasible.	Send an email to info@sn-dev.de with the subject „Data Portability Request“.
Right to Object	You have the right to object to the processing of your personal data based on our legitimate interests or for direct marketing purposes.	Send an email to info@sn-dev.de with the subject „Objection to Data Processing“, specifying the processing activity you object to.
Rights Related to Automated Decision-Making Including Profiling	You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.	Send an email to info@sn-dev.de with the subject „Automated Decision-Making Inquiry“.
Right to Lodge a Complaint	You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.	You can find contact details for data protection authorities on the website of the European Data Protection Board (EDPB).

9. Cookies and Other Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and for marketing purposes. Cookies are small text files placed on your device by websites that you visit.  

We may use different types of cookies:

• Session-based cookies: These expire once you close your web browser and exist only during a single session.  
• Persistent cookies: These remain on your device for a set period or until you delete them, helping us recognize you as a unique user when you return to our Website.  
• Essential cookies: Necessary for the Website to function correctly.
• Analytical/Performance cookies: Used to collect and compile anonymous, aggregated information for statistical and evaluation purposes, helping us understand how users interact with our Website and improve its structure.  
• Marketing/Targeting cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

You have control over cookies. Most web browsers allow you to remove and/or stop accepting cookies from the websites you visit. You can typically adjust your browser settings to decline cookies or to notify you when a cookie is being placed. Please note that disabling certain cookies may affect the functionality or features of our Website. For more detailed information, please refer to your browser’s settings or our separate Cookie Policy (if available).  

The requirement for specific user permission for browser cookies highlights the interplay between GDPR and the ePrivacy Directive (often referred to as the „Cookie Law“). This means that beyond merely stating cookie usage in this Privacy Policy, Inventocloud needs an active cookie consent mechanism (e.g., a banner) on its Website to obtain explicit consent for non-essential cookies before they are placed. This is a critical operational step to ensure full compliance.  

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to, encryption, access controls, secure servers, and regular security assessments. We adhere to the GDPR principle of „Integrity and Confidentiality (Security)“ by continuously reviewing and updating our security practices.  

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. In the unlikely event of a data breach involving personal data that is likely to result in a high risk to your rights and freedoms, we are committed to notifying the relevant supervisory authority within 72 hours and, where required, communicating the breach to you without undue delay.  

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The „Last Updated“ date at the top of this policy indicates when it was last revised.

If we make material changes to the way in which we use or share personal data we collect, we will use reasonable efforts to notify you, for example, by posting a prominent notice on our Website or by sending you an email. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The dynamic nature of data processing and regulatory compliance means that privacy policies are not static documents , and regular updates are essential to maintain transparency and adherence to the „Right to be Informed“.  

12. Contact Us

If you have any questions about this Privacy Policy, our data processing practices, or if you wish to exercise any of your data protection rights, please do not hesitate to contact us:

Inventocloud Römersteinweg 21 70794 Filderstadt Germany

Email: info@sn-dev.de Phone: 0049 15739016161

This dedicated contact point for privacy inquiries is crucial for users to exercise their rights ¹ and reinforces our commitment to the „Right to be Informed“ and the overall „Accountability“ principle.