Privacy Policy

1. Data Controller

The controller responsible for the processing of your personal data is:

2. Information We Collect

We collect information you provide directly to us when you:

• Create an account or make a purchase
• Subscribe to our newsletter
• Contact us for support
• Participate in surveys or promotions

Personal Information

• Name and contact information (email address, phone number)
• Billing and shipping address
• Payment information (processed securely through Stripe)
• Company name and VAT ID (for business customers)
• Purchase history and preferences

Automatically Collected Information

• IP address and location data
• Browser type and version
• Device information
• Usage data and analytics
• Cookies and similar tracking technologies

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations when you purchase our products
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Obligations: To comply with tax and legal requirements
• Consent: For marketing communications and optional services

4. How We Use Your Information

We use the collected information to:

• Process your transactions and deliver purchased products
• Send order confirmations and updates
• Respond to customer service requests
• Send technical notices and security alerts
• Communicate about products and offers (with consent)
• Comply with legal and tax obligations
• Detect and prevent fraudulent transactions

5. Data Sharing and Disclosure

We may share your information with:

• Payment Processors: Stripe for secure payment processing
• Service Providers: Third parties who assist in our operations
• Legal Authorities: When required by law or court order
• Business Transfers: In case of merger or acquisition

We do not sell your personal data to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL encryption for all data transmissions
• Secure payment processing through PCI-compliant providers
• Regular security audits and updates
• Access controls and employee training
• Data minimization and purpose limitation

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@proveno.net

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy and as required by law. Specifically:

• Transaction data: 10 years (German tax law requirements)
• Account information: Until account deletion request
• Marketing data: Until consent withdrawal
• Cookie data: According to specific cookie lifespans

9. Cookies

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze website traffic and usage
• Personalize content and offers
• Prevent fraud and enhance security

You can manage cookie preferences through your browser settings.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the EU Commission
• Adequacy decisions for specific countries
• Privacy Shield certification (where applicable)

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The "Last updated" date will be revised accordingly.

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:

14. Contact Information

For questions about this Privacy Policy or your personal data, contact us at: