PRIVACY
POLICY

1. Overview

This Privacy Policy explains how personal data is processed when you visit this website or contact INNPIT. Personal data is any information relating to an identified or identifiable person.

2. Controller (Verantwortlicher)

The party responsible for data processing on this website is:

INNPIT GbR
Represented by its partners
Muldenbachstr. 38
88678 Markdorf
Germany

Email: hello@innpit.com

3. Website hosting

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. When the website is accessed, technical data such as the IP address, date and time of access, requested resource, referrer, browser and operating system may be processed in server logs to deliver and secure the website.

Processing is based on Art. 6(1)(f) GDPR. The legitimate interest is the reliable, secure and efficient operation of the website. Further information is available in the Vercel Privacy Policy.

4. Contact form and email enquiries

When you submit the contact form, the name, email address, selected project type and message that you provide are transmitted to INNPIT through a server-side Telegram bot. After successful delivery, the website also prepares an optional WhatsApp message in your browser so that you can continue the conversation there.

The legal basis is Art. 6(1)(b) GDPR for project and pre-contractual enquiries and, where applicable, Art. 6(1)(f) GDPR for general business communication. The same applies when you contact INNPIT by email.

5. Telegram delivery

Contact-form submissions are forwarded to an INNPIT Telegram chat through the Telegram Bot API. Telegram therefore processes the submitted content and related technical and communication data. Do not include sensitive or special-category personal data in your enquiry.

Details are available in the Telegram Privacy Policy.

6. WhatsApp communication

Project enquiries can be sent to INNPIT through WhatsApp. WhatsApp is provided in the EEA by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you open the prepared message, WhatsApp processes the submitted content and related communication data under its own terms. Do not include sensitive or special-category personal data.

Details are available in the WhatsApp Privacy Policy.

7. International data transfers

Vercel, Telegram and WhatsApp may process data in countries outside the European Economic Area. Where required, transfers are based on an adequacy decision, the European Commission's Standard Contractual Clauses or another safeguard permitted under Chapter V GDPR.

8. Retention

Enquiry data in Telegram, WhatsApp and email is retained by INNPIT only for as long as necessary to respond and manage the potential business relationship. It is normally deleted no later than 12 months after the last substantive contact unless a contract is concluded or statutory commercial and tax retention obligations apply. Security logs are retained according to the hosting provider's applicable settings and policies.

9. Your rights

Subject to the applicable legal requirements, you have the right to:

• request access to and a copy of your personal data;
• request correction or completion of inaccurate data;
• request erasure or restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a portable format where applicable;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

10. Cookies and analytics

This website currently does not use advertising trackers, analytics services or non-essential cookies. A session-storage entry is used only to avoid replaying the introductory animation during the same browser session. It is not used to identify users or track behaviour across websites.

11. Security and automated decisions

Appropriate technical and organisational measures are used to protect submitted data. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

12. Updates

This policy may be updated when services or legal requirements change.

Last updated: 16 July 2026