Privacy Policy (Datenschutzerklärung)

1. Controller

InnoTrue GmbH
Radlerweg 10, 83257 Gstadt, Germany
Email: hello@innotrue.com
Represented by Doina Popa, Geschäftsführerin

2. Data We Collect

Automatically collected data: When you visit innotrue.com, our hosting provider (Cloudflare) may process your IP address, browser type, referring URL, and timestamps for the purpose of delivering the website securely and reliably. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure website.

Analytics: We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not track users across websites. Plausible is GDPR-compliant by design and processes all data within the EU. No consent is required for Plausible.

Contact forms and bookings: When you book a session or submit a form, we collect your name, email address, and any information you voluntarily provide. This data is processed by Zoho (our CRM and booking system) on the basis of your consent (Art. 6(1)(a) GDPR) or to take pre-contractual steps at your request (Art. 6(1)(b) GDPR).

Email communication: If you subscribe to our mailing list or correspond with us by email, we process your email address and message content. Marketing emails are sent only with your explicit consent and include an unsubscribe link in every message.

3. Cookies

This website uses only technically necessary cookies required for the website to function. We do not use tracking cookies, advertising cookies, or third-party cookies that require consent. If this changes in the future, we will implement a GDPR-compliant consent mechanism before any optional cookies are set.

4. Third-Party Services

Cloudflare (Hosting & CDN): Cloudflare, Inc., 101 Townsend Street, San Francisco, CA, USA. Cloudflare processes connection data to deliver the website. Cloudflare is certified under the EU-US Data Privacy Framework. Cloudflare Privacy Policy.

Plausible Analytics: Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia. All data is processed within the EU. Plausible Data Policy.

Zoho (CRM & Bookings): Zoho Corporation, EU data centres. Processes contact and booking data. Zoho Privacy Policy.

Google Fonts: Fonts are self-hosted on our servers and are not loaded from Google's CDN. No data is transmitted to Google.

5. Your Rights

Under the GDPR you have the right to: access your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). You also have the right to withdraw any consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at hello@innotrue.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for InnoTrue GmbH is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. tax retention obligations under German law: 6–10 years). Data collected for marketing purposes is deleted promptly upon withdrawal of consent or unsubscription.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including TLS encryption for all data in transit, access controls, and regular security reviews.

8. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at this URL. Material changes will be noted with an updated date at the top of this page.