1. Who we are
The controller responsible for personal data processed through ipsorder.com and our own services is:
Patrick Schmitz — IPS Order
Gemüsegasse 9
56068 Koblenz
Germany
Email: info@ipsorder.com
This policy explains how we process personal data when you visit our website, purchase our products, contact us or use our licensing and update services. It also explains how IPS Order Wishlist handles data when installed in a merchant’s store.
2. Website hosting and email
Our website and email services are hosted by Alfahosting GmbH, Germany. Alfahosting processes data needed to provide these services, including website requests, stored website data and email communications.
When you visit our website, technical data such as your IP address, requested pages, access times and browser information may be recorded to deliver the website, investigate errors and protect against misuse.
This processing is based on our legitimate interest in operating a reliable and secure website under Article 6(1)(f) GDPR.
Further information: Alfahosting Privacy Policy.
3. Customer accounts, purchases and support
When you create an account, purchase a product or contact us, we process the information needed to handle your request. This may include your name, email address, billing address, company details, order and subscription information, and correspondence.
Support and website chat are provided through our own IPS Order Support plugin. We process the contact details, messages, attachments and technical information you submit to investigate and answer your enquiry.
We process this information to fulfil contracts or take steps at your request before entering into a contract under Article 6(1)(b) GDPR. For general enquiries, we rely on our legitimate interest in responding to communications under Article 6(1)(f) GDPR. Processing required to meet statutory accounting and tax obligations is based on Article 6(1)(c) GDPR.
Information marked as required is necessary to provide the requested account, purchase or service. Without it, we may be unable to complete your request.
4. Payments
We offer payments through Mollie and Amazon Pay. Depending on your chosen payment method, the provider processes payment details, transaction information, billing and contact details, and technical information needed to process and secure the payment.
We receive information needed to manage your order, such as payment confirmations, transaction references and payment status.
Payment providers also process information for their own regulatory and fraud-prevention purposes. Their privacy notices explain this processing, including retention, international transfers and your rights:
– Mollie Privacy Statement
– Amazon Pay Privacy Notice
Our processing necessary to complete your purchase is based on Article 6(1)(b) GDPR.
5. Cookies and privacy preferences
We use cookies and similar browser storage for functions such as login sessions, shopping baskets, requested wishlist features and remembering privacy preferences.
We use Complianz to manage cookie preferences. Complianz uses browser storage to remember your choices. You can manage available choices through our cookie settings and remove stored cookies through your browser. Removing necessary cookies may affect website functionality.
Further information: Cookies used by Complianz.
Storage strictly necessary to provide a service you expressly request is based on Section 25(2) TDDDG. Where consent is required, the basis is Section 25(1) TDDDG and, for associated personal-data processing, Article 6(1)(a) GDPR. See Section 25 TDDDG.
We currently do not use separate audience analytics or advertising tracking tools on our website.
6. Our plugins and licensing services
IPS Order Wishlist
IPS Order Wishlist stores wishlist information in the database of the store where it is installed. This includes saved products, quantities, list names, visibility settings and relevant dates. Wishlists are associated with a customer account or a guest session identifier.
Guest wishlists use a cookie containing a random session identifier. Its default lifetime is 30 days, may be renewed through use and can be configured by the merchant.
Depending on the enabled features:
– Sharing a wishlist makes its contents accessible according to its sharing settings.
– Wishlist reports allow the merchant to evaluate interest in saved products.
– Email features process recipient details and relevant product information using the store’s email services.
– Estimate requests send the information submitted by the customer to the merchant’s configured recipients.
– Custom icons hosted on another domain cause the visitor’s browser to contact that host.
Installing the plugin does not automatically give IPS Order access to the merchant’s customer database. The merchant is responsible for the processing carried out in their store, including its legal basis, configuration and customer privacy information.
Licence validation and updates
Product editions using IPS Order’s licensing and update services communicate with ipsorder.com. These requests may contain a licence key, website URL, installation identifier, product and version information, and connection data such as an IP address.
We use this information to validate access, deliver updates and protect our services, based on Articles 6(1)(b) and 6(1)(f) GDPR. Wishlist contents are not included in these licensing and update requests.
7. Who receives personal data
Information is available to people and service providers who need it for the purposes described above, including hosting and email providers, payment providers and, where necessary, professional advisers or public authorities.
Payment providers may process information outside the European Economic Area. Their linked privacy notices explain the relevant arrangements and safeguards. For example, Mollie describes using appropriate transfer mechanisms such as EU Standard Contractual Clauses. See Mollie’s privacy statement.
8. How long we retain data
We retain personal data for the relevant service or purpose and for applicable legal obligations:
– Accounts, orders and licences: while needed to manage the account, contract or service. Records subject to accounting, tax or other statutory retention obligations are retained for the applicable period.
– Support enquiries: generally for 30 days, or during the contractual relationship where needed for ongoing support. Relevant correspondence may be retained longer where required by law or necessary to establish, exercise or defend legal claims.
– Server logs (access and error logs): retained only for as long as necessary to maintain website security and investigate technical issues, and for no longer than 14 days.
– Website backups: retained for 14 days.
– Server snapshots: retained for up to 14 days.
For IPS Order Wishlist installations, retention also depends on the merchant’s configuration. Guest records follow their expiry and cleanup process. Account wishlists remain until deleted through the available functions or other applicable cleanup procedures.
Optional back-in-stock notification records are subject to automatic cleanup, including a 30-day cleanup period for completed and permanently stale records. Disabling or uninstalling the plugin does not automatically remove all stored data. Merchants can enable the option to delete plugin data on uninstall.
9. Your rights
Subject to the applicable legal conditions, you may request access to, correction or deletion of your personal data, restriction of processing and data portability.
Where processing relies on legitimate interests, you may object on grounds relating to your particular situation.
You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
You also have the right to complain to a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. These rights are provided by the General Data Protection Regulation.
For requests concerning our processing, contact info@ipsorder.com. For wishlist information held by another merchant, contact that store directly.
10. Changes to this policy
We may update this policy when our services or processing practices change. The current version will be available on this page.