Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Abbas Albukhari
Bebelstr. 9
44623 Herne
Germany
Email: eng.abbas.it@gmail.com
2. Subject of Data Protection
ipano360 is a software-based platform (SaaS) for creating, managing, and displaying virtual tours.
This privacy policy provides information about the type, scope, and purpose of the collection and processing of personal data.
3. Collected Data
When registering and using the platform, the following data is collected and processed:
Name, email address, password (encrypted), and user-uploaded content (images, media files, configuration data of virtual tours).
For technical reasons, access logs (server log files) are also temporarily collected. These include in particular:
IP address, time of access, requested resource, and amount of data transferred.
4. Legal Basis for Processing
The processing of personal data is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the platform).
5. Purpose of Data Processing
The collected data is processed exclusively for the provision and delivery of the contractually agreed services.
No use is made for marketing, advertising, or profiling purposes.
6. Processors and Data Sharing
To provide the service, the provider uses the following processor:
Amazon Web Services EMEA SARL (AWS) – hosting and storage of user data and uploaded content (including Amazon S3).
Server location: European Union.
A data processing agreement (Data Processing Addendum) in accordance with Art. 28 GDPR is in place with AWS.
No further transfer of personal data to third parties takes place unless this is necessary for contract performance or required by law.
The provider reserves the right to update the list of processors and inform users of significant changes.
7. Cookies
The platform uses only technically necessary cookies.
These are used to store the selected interface language and maintain the user session (session cookie).
No cookies are used for analytics, tracking, or advertising purposes.
Separate consent is not required for technically necessary cookies in accordance with § 25(2) TDDDG.
8. Storage Duration
Personal data is stored for the duration of the contractual relationship.
After termination of the contract, the data will be deleted unless statutory retention obligations apply.
Server log files are automatically deleted after a maximum of 30 days.
9. Data Subject Rights
You have the following rights under the GDPR:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
To exercise your rights, please contact: eng.abbas.it@gmail.com
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Competent authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2–10
40213 Düsseldorf
10. Data Security
The platform uses state-of-the-art technical and organizational measures to protect personal data, in particular encrypted data transmission (TLS/SSL) and secure password storage.
11. Changes to this Privacy Policy
The controller reserves the right to amend this privacy policy in order to adapt it to legal changes or changes to the platform.
The current version is always available on the platform.