Privacy Policy

In the following, we will inform you about how your personal data is processed when you use our website and products and what rights you have in this regard.

Together, we also refer to the websites and the applications as "services".

1. Information and contact details of the Controller

The Controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:

IONOS Group SE (im Folgenden auch IONOS)
Elgendorfer Straße 57
56410 Montabaur
Germany

Questions regarding data protection can be directed to our data protection officer:

IONOS Group SE
The Data Protection Officer
Elgendorfer Straße 57
56410 Montabaur
Germany
or by e-mail to

datenschutz@ionos.de

2. Processing of Personal Data

We and our service providers collect Personal Data in a number of ways.

a) Visits to our websites

When you visit our websites, we also collect personal data. Details are as follows:

Cookies and similar features

We use cookies to design our websites optimally for you, to improve our products for you as well as to show you interest-based advertising together with third-party providers.

More detailed information about cookies can be found on our separate cookie page. There you will also find information on how you can change your cookie settings.

b) Subscription to our newsletters

You can subscribe to newsletters on our websites. This requires, for example, your name and e-mail address. We use this data to send you the newsletter. 

The legal basis is Art. 6 (1) sentence 1 lit. a) GDPR.

Duration of storage: through your revocation, your contact data will be deleted immediately.

3. Categories of recipients  

a) Group companies  

IONOS Group SE is a company of United Internet AG. Along with other subsidiaries and sister companies, we are part of the United Internet AG Group, Montabaur, Germany. 
The legal basis for the data transfer is Art. 6 Para. 1 lit. f) GDPR. We have a legitimate interest in transferring your personal data to companies of United Internet AG in the above-mentioned, purpose-related cases on a case-by-case basis and taking into account your interests worthy of protection.

In cases where a Group company acts as a processor or there is joint controllership, the corresponding contractual arrangements will be made.

b) Processor

Processors: We pass on various personal data as data controllers to our processors as part of commissioned data processing. We have ensured the security of your data by entering into commissioned data processing agreements. Our processors fall into the following categories:

  • Provision of services: This includes newsletter distribution.
  • Operation of services, maintenance and care of hardware and software.

We only disclose data to authorities and third parties in accordance with legal regulations or a court order. Information to authorities may be provided on the basis of a legal provision for the prevention of danger or for criminal prosecution. Third parties only receive information if a legal provision stipulates this. This may be the case, for example, in the event of copyright infringements.

4. Data processing in third countries

Data processing in third countries does not take place.

5. Your rights as a data subject

a) Right of access and confirmation

You have the right to obtain information from us about the Personal Data stored related to you and receive a copy of this information free of charge.  storage period and your rights regarding data protection. For personal data not collected directly from you, you have the right to be informed about the source of the data.

b) Right to rectification

If the personal data we process is inaccurate or incomplete, you have the right to have your data rectified.

c) Right to erasure

You have the right to request that we delete your personal data in the following cases and if processing of your data is not required:

  • The personal data were collected or otherwise processed for purposes for which they are no longer necessary.

  • You withdraw your consent on which the processing was based and there is no other legal basis for the processing.

  • You object to the processing pursuant to Article 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) of the GDPR.

  • The personal data have been processed unlawfully.

  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

  • The personal data has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

d) Right to restriction of processing

You can request that we restrict the processing of your data in the following cases:

  • You have disputed the accuracy of data and you want us to stop using it pending final verification
  • The processing is unlawful, but you would prefer to restrict processing rather than have the data erased
  • We no longer need and would otherwise delete the data, but you still need it for the assertion, exercise or defence of legal claims
  • You have lodged an objection to the data processing pursuing Article 1 (1) GDPR, which is still under review

e) Right to object

You have the right to object at any time to the processing of personal data that we process on the basis of Article 6 (1) lit. e) or f).

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. 

You can object to data processing for the purpose of direct advertising at any time without providing a reason.

f) Right to data portability

You have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6 (1) lit. a) of the GDPR or Article 9 (2) lit. a) of the GDPR or on a contract pursuant to Article 6 (1) lit. b) of the GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability pursuant to Article 20 (1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

g) Right to withdraw

You have the right to withdraw your consent to future processing (e.g. to be contacted for advertising purposes) at any time.

h) Right to lodge a complaint with a supervisory authority

You have the right to contact a supervisory authority in the member state of your residence or workplace or of the alleged infringement at any time if you believe that the processing of personal data concerning you violates the EU General Data Protection Regulation.

Data protection issues relating to our products and our website:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz

6. Storage period

As far as possible, we have informed you about the exact storage period when using our respective services in the individual data protection notices referred to above.

In principle, your personal data will be stored for the duration of the fulfilment of the aforementioned purposes and then deleted.

Last update: 22 December 2022