Privacy Policy
As of November 3, 2025
1) Introduction and contact details of the responsible party
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when using our website. Personal data is any data that can be used to personally identify you.
1.2 The controller within the meaning of the GDPR is:
inutec GmbH
In the industrial park 17
38315 Schladen
E-mail: kontakt@auteniq.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 Data Protection Contact / DPO
A data protection officer has not been appointed – unless legally required. For data protection inquiries, please contact [privacy@auteniq.de].
2) Data collection when visiting our website
2.1 Server log files
When you use our website for purely informational purposes (if you do not register or otherwise provide us with information), we only collect data that your browser transmits to our server (so-called server log files). The following data is collected:
- accessed page/file, referrer URL
- Date and time of retrieval
- amount of data transferred
- HTTP status code
- Browser type and version, operating system
- IP address (possibly in anonymized form)
The processing is based on Article 6(1)(f) GDPR, stemming from our legitimate interest in the stability, security, and functionality of the website. This data will not be combined with other data. We reserve the right to conduct a subsequent review if there are concrete indications of unlawful use.
2.2 TLS/SSL encryption
For security reasons, our website uses TLS/SSL encryption (recognizable by "https://" and the padlock symbol in the browser).
3) Hosting & Content Delivery Network (CDN)
Shopify
We host our website and process usage data via the provider:
Shopify International Ltd., 1‑2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).
Depending on the service, data may also be transferred to Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.
We have concluded a data processing agreement (Art. 28 GDPR) with Shopify. For transfers to Canada, there is an adequacy decision by the EU Commission (for commercial organizations). Where transfers to third countries are necessary, Shopify uses appropriate safeguards (e.g., standard contractual clauses). Further information is available in Shopify's privacy policy.
4) Cookies, local storage and consent management
We use cookies and similar technologies (e.g., local storage, session storage, pixels). The legal basis for this is – depending on the necessity – Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (contract/quasi-contractual), Art. 6 para. 1 lit. f GDPR (legitimate interests) and Section 25 TTDSG (access to end-device information).
4.1 Consent via Consent Tool
Services/cookies that are not technically necessary will only be loaded after you have given your consent via our cookie consent tool. You can revoke or adjust your consent at any time with effect for the future.
4.2 Technically necessary cookies
These are necessary for the operation of the website (e.g. shopping cart, login) and are used on the basis of Art. 6 para. 1 lit. b or lit. f GDPR as well as § 25 para. 2 no. 2 TTDSG.
4.3 Browser settings
You can control cookies via your browser settings; however, this may limit the functionality of the website.
5) Contact & Support Channels
5.1 Contact form / Email
When you contact us, we process your information solely for the purpose of handling your request (Art. 6 para. 1 lit. f GDPR; in the case of contract negotiations, Art. 6 para. 1 lit. b GDPR). Data will be deleted as soon as the request has been processed and there are no legal obligations to retain it.
6) Data processing when opening a customer account
During registration, we process the required mandatory information (Art. 6 para. 1 lit. b GDPR). The account can be deleted at any time. After deletion, data will be removed unless there are legal retention obligations or a legitimate interest in further storage.
7) Use of customer data for direct marketing
7.1 Newsletter registration (double opt-in)
After you register, we will send our newsletter to the email address you provided. Required field: email address. Legal basis: Art. 6 para. 1 lit. a GDPR. We log registration, confirmation, and IP address/time. You can unsubscribe at any time (link in the newsletter).
7.2 Newsletter to existing customers
If you have made a purchase from us, we may send you emails about similar products (Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG). You can object to this at any time.
8) Data processing for order processing
8.1 Transfer to shipping/payment service providers
For contract processing, we transmit data – where necessary – to transport and payment service providers (Art. 6 para. 1 lit. b GDPR). For legally required product/security updates, we use your contact details in accordance with Art. 6 para. 1 lit. c GDPR.
8.2 External Shipping Partners
We transmit your name, delivery address and – if necessary – telephone number/email address for delivery notification/appointment scheduling. Legal basis: Art. 6 para. 1 lit. b GDPR.
8.3 Payment service providers (if activated in the shop)
Amazon Pay (Amazon Payments Europe sca, Luxembourg)
PayPal (Europe) S.à rl et Cie, SCA, Luxembourg)
Shopify Payments (Shopify International Ltd., Ireland)
Depending on the payment method, the providers process payment/transaction data independently. For payment methods involving a credit check, data may be transferred for risk assessment purposes (Art. 6 para. 1 lit. f GDPR). Please refer to the respective providers' privacy policies for details.
9) Online Marketing
Google AdSense
Cookies/web beacons may be used to display advertisements. Processing only takes place after consent has been given via the consent tool (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG). Information and options for withdrawing consent can be found in the consent tool.
10) Web analytics and tag management
10.1 Google Analytics 4
We use Google Analytics 4 for audience measurement. IP addresses are shortened; data may be transferred to the USA. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG). Standard storage period: 2 months. Additional functions (e.g., Google Signals, user IDs) are only used with your consent and can be revoked at any time in the consent tool.
10.2 Google Tag Manager
The Tag Manager itself does not set any tracking cookies, but allows other services to be loaded. Consent-based (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG).
10.3 PayPal Marketing Solutions
Services from PayPal may be used for analysis/optimization. Legal basis: Consent (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG). We have concluded a data processing agreement.
11) Retargeting / remarketing and conversion tracking
11.1 Google Ads Conversion Tracking
We use conversion cookies to measure the success of advertising campaigns. Legal basis: consent (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG). Objection is possible via the consent tool.
12) Page functionalities
12.1 YouTube
When playing an embedded video, data is transmitted to Google and cookies are set – only with your consent (Art. 6 para. 1 lit. a GDPR; § 25 TTDSG). If you are logged into Google, this data can be associated with your account.
13) Consent management platform (cookie consent tool)
To manage your consent, we use a consent tool that stores your settings in a technically necessary cookie. Legal basis: Art. 6 para. 1 lit. c GDPR (obligation to manage consent) and Art. 6 para. 1 lit. f GDPR (legally compliant and user-friendly design).
14) Your rights
You have the following rights vis-à-vis the data controller:
- Right of access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent (Art. 7 para. 3 GDPR)
- You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
14.1 Right to object (Art. 21 GDPR)
If we process data based on Article 6(1)(f) GDPR, you have the right to object to this processing on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.
15) Storage duration
We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention periods. If processing is based on consent, we store the data until consent is withdrawn. After that, we delete the data unless there are compelling legal retention obligations or overriding legitimate interests that prevent us from doing so.
16) Changes to this privacy policy
We will amend this statement if required by law, our services, or data processing. The version published on this page at any given time is the applicable one.
Information on transfers to third countries (USA/Canada)
As described in this statement, data may be transferred to third countries (especially the USA and Canada), depending on the service. These transfers are based on adequacy decisions (e.g., Canada for commercial organizations), participation in the EU-US Data Privacy Framework, or using standard contractual clauses of the EU Commission along with additional safeguards.