Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Controller

Iranet – Owner: Mohammad Reza Nosrati Gazafroudi

Address

Vaihinger Markt 30, 70563 Stuttgart, Germany

Email

info@iranet-stuttgart.de

Phone

+49 (0)711 3273396

We only process personal data insofar as this is necessary to provide our website, to handle enquiries or to safeguard legitimate interests, or where another legal basis applies. Personal data means any information relating to an identified or identifiable natural person.

The legal bases are in particular:

• Art. 6(1)(b) GDPR – steps prior to entering into a contract and performance of a contract
• Art. 6(1)(c) GDPR – legal obligations
• Art. 6(1)(f) GDPR – legitimate interests
• Art. 6(1)(a) GDPR – consent, where expressly obtained

This website provides information about the business and its services. Where further personal data are processed during a visit to the shop, or by parcel services or money transfer partners, additional privacy information from the respective responsible providers may apply.

When you access the website, connection and usage data are generated for technical reasons. Depending on how the hosting services are configured, the following may in particular be processed:

• IP address
• Date and time of the request
• URL or file accessed and HTTP status code
• Amount of data transferred
• Browser and operating system information
• Referrer information
• Security-related events

The purposes are the secure and stable delivery of the website, error analysis, the prevention of abusive access and ensuring technical functionality. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a secure, functional and reliable website.

As a rule, technical data are only processed and stored for as long as is necessary for the purposes stated above. The logging and security settings actually activated by the hosting provider and, where applicable, statutory retention obligations are decisive. Data are only stored for longer in the event of a specific security incident or where there is a legal obligation to do so.

Our website is provided via Vercel. The provider is Vercel Inc., USA. To deliver the website and secure its operation, Vercel processes technical connection data on our behalf or – insofar as Vercel pursues its own purposes – as an independent controller. This may include, in particular, IP addresses, request data and technical log information.

We use this hosting on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in the secure, efficient and reliable provision of our online services. Where Vercel processes personal data as a processor, it does so on the basis of a data processing agreement pursuant to Art. 28 GDPR.

When Vercel is used, data may be transferred to the USA or other countries outside the European Economic Area. For transfers to appropriately certified US recipients, the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) may apply; otherwise – where relevant – appropriate safeguards such as EU standard contractual clauses (Art. 46 GDPR) may be used. The transfer mechanisms actually used are set out in the contractual documents that apply to the Vercel services in use.

Further information: Vercel Privacy Notice (opens in a new tab) and Vercel Data Processing Addendum (opens in a new tab).

If you contact us by email or phone, we process the data you provide (for example your name, contact details, the content of your enquiry and, where applicable, details of the services you require) in order to deal with your request and to clarify any follow-up questions.

Where your enquiry relates to a contract or to pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. For general enquiries, we process your data on the basis of Art. 6(1)(f) GDPR; our legitimate interest is proper communication with customers and prospective customers.

The data will be deleted once your enquiry has been dealt with, unless statutory retention obligations or legitimate reasons for further storage prevent this. Business correspondence may be subject to statutory retention obligations. Providing the information needed for an enquiry is voluntary; without sufficient contact details or information, we may not be able to respond.

Storage and access technologies may be used where they are required for the basic technical functions of the website. Where such technologies are strictly necessary to provide a digital service you have expressly requested, no consent is required under Section 25(2) TDDDG. Any processing of personal data is also assessed according to the legal bases of the GDPR.

Non-essential cookies, similar access to end devices, or tracking and marketing services that require consent may, as a rule, only be used once valid consent has been given (Section 25(1) TDDDG and, where applicable, Art. 6(1)(a) GDPR).

Cookie notice and your choice. When you make a choice in the cookie notice (“Necessary only”, “Accept all” or “Save choice”) or load or hide the map, we store an entry in your browser’s local storage containing the time and your decision on Google Maps. This way the notice does not reappear on every page and your choice is respected. The entry contains no identifier and is not transmitted to us or to third parties. After two weeks it no longer takes effect, it is deleted on your next visit and we ask again. You can change your choice at any time via “Cookie settings” in the footer, or delete the entry in your browser settings. This storage is strictly necessary to apply your choice (Section 25(2) No. 2 TDDDG).

Should additional features, analytics tools or third-party services be used in future, this information will be updated and any consent required will be obtained before they are loaded.

To understand how our website is used – for example which pages are viewed and how often, which pages visitors come to us from and which types of device they use – we use Vercel Web Analytics. The provider is Vercel Inc., USA, which is also our hosting provider.

When a page is viewed, the following information may be processed:

• Time of the page view
• Page viewed – the path only; we remove URL parameters and fragments before transmission
• Referrer (the page visited previously)
• Approximate location (country, region, city), derived from the IP address
• Operating system and browser, each with version, and device type (smartphone, tablet, desktop)
• Version of the analytics script

The analytics script is loaded from our own domain; the information collected is transmitted to Vercel and analysed there. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring the reach of our website anonymously and improving our services on the basis of these statistics. With regard to possible transfers to the USA and the safeguards that apply to them, the information under Hosting by Vercel applies accordingly.

The daily hash value is discarded after 24 hours at the latest. Vercel stores the aggregated statistics in accordance with the contractual terms that apply to our account. You may object to the processing at any time under Art. 21 GDPR; technically, it is sufficient to enable “Do Not Track” or “Global Privacy Control” in your browser or to use a content blocker.

Further information: Vercel Web Analytics – Privacy and Compliance (opens in a new tab).

In the contact section of our website you can display an interactive map from Google Maps. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As long as you have not consented, we only show a map illustration from our own server in its place; no connection to Google is established.

The map is only loaded when you click “Load map”, choose “Accept all” in the cookie notice or enable Google Maps in the cookie settings. Your browser then connects to Google’s servers. In particular, your IP address, browser and device information, the address of the page you are viewing and your interactions with the map are transmitted to Google. Google may use cookies or similar technologies on your device and may also process data in the USA.

For transfers to the USA there is an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework, Art. 45 GDPR), under which Google LLC is certified. Independently of the map, our website contains links that open our location directly in Google Maps; Google is only contacted when you click. Any further processing by Google is governed by Google’s privacy information.

Information from Google: Google Privacy Policy (opens in a new tab).

Our website may contain links to services offered by other providers, for example to WhatsApp, parcel services, or money transfer and mobile network partners. If you follow such a link, you leave our website. Any subsequent processing of personal data is governed by the privacy policy of the respective external provider.

Whether third-party content is loaded as soon as a page is viewed depends on how it is technically integrated. On our website, external services are linked, not embedded – with one exception: the Google Maps map, which only loads with your consent (see Google Maps).

Personal data may be transferred to technical service providers that we need to operate the website or to handle enquiries. Where these act on our behalf, this takes place in accordance with the statutory requirements for processing on behalf of a controller.

Personal data are only transferred to countries outside the EEA where this is necessary for the services used and an appropriate legal basis or a permissible transfer mechanism is in place. Details on Vercel (Hosting, Web analytics) and Google Maps are explained in the corresponding sections.

Unless a specific period is stated in the individual sections, we only store personal data for as long as is necessary for the respective purpose. They are then deleted or anonymised, unless statutory retention obligations, the establishment, exercise or defence of legal claims, or other legally permissible reasons prevent their deletion.

Subject to the statutory requirements, you have in particular the following rights:

• Access to the personal data processed (Art. 15 GDPR)
• Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
• Erasure of your personal data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability, where applicable (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(e) or (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
• Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected

To exercise your rights, simply send a message to info@iranet-stuttgart.de.

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. For our location in Stuttgart, the competent authority is in particular the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg:

Supervisory authority

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

Address

Heilbronner Straße 35, 70191 Stuttgart, Germany

Website

www.baden-wuerttemberg.datenschutz.de (opens in a new tab)

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss or alteration, and against unauthorised disclosure or access. Our website is generally accessed via an encrypted HTTPS connection. However, absolute security cannot be guaranteed when data are transmitted over the internet.

Providing technical connection data is necessary in order to use the website. You are not obliged to provide any other personal information, in particular in voluntary contact enquiries; however, without the information needed to process your enquiry, we may not be able to respond.

No exclusively automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place in connection with your visit to this website.

We will update this privacy policy whenever the legal requirements or the actual data processing on our website change. The version available on our website at the time applies.