Privacy Policy

Introduction

pompadourbz GmbH ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website pompadourbz.com or use our services.

This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. As the Data Controller, we are responsible for ensuring your personal data is processed lawfully, fairly, and transparently.

Data Controller

The Data Controller responsible for your personal data is:

Data Collection

The data we collect includes personal information such as your name, email address, phone number, company information, and any other details you provide when contacting us or using our services. We also automatically collect certain technical information when you visit our website.

Specifically, we may collect the following types of information:

• Personal Information: Name, email address, phone number, job title, company name
• Communication Data: Messages, inquiries, and correspondence you send to us
• Technical Data: IP address, browser type, operating system, referring URLs
• Usage Data: Information about how you use our website and services
• Marketing Data: Your preferences for receiving marketing communications

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific purposes
• Contract Performance: To fulfill our contractual obligations to you
• Legitimate Interest: For our business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

How We Use Your Information

We explain how we use your information for various purposes related to providing and improving our cloud infrastructure services. The use of your data is limited to legitimate business purposes and always in accordance with applicable data protection laws.

Specifically, we use your information to:

• Provide and maintain our cloud infrastructure services
• Respond to your inquiries and provide customer support
• Process service requests and manage client relationships
• Send important updates about our services and your account
• Improve our website and services based on your feedback
• Ensure the security and integrity of our systems
• Comply with legal obligations and resolve disputes
• Send marketing communications (with your consent)

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our operations
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you have given explicit consent for specific sharing

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The retention periods vary depending on the type of data and the purpose for processing.

Generally, we apply the following retention periods:

• Contact Inquiries: 3 years from last communication
• Client Data: Duration of service agreement plus 7 years for legal compliance
• Marketing Data: Until consent is withdrawn or 2 years of inactivity
• Technical Logs: 12 months for security and troubleshooting purposes

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us at [email protected]. We will respond to your request within one month.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure backup and disaster recovery procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Your explicit consent for specific transfers

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us using the information below. We are committed to resolving any privacy-related concerns promptly and transparently.

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In Germany, you can contact your local data protection authority or the Federal Commissioner for Data Protection and Freedom of Information.