Privacy Policy
1. Data protection at a glance
General information
The following information provides an overview of what happens to your personal data when you visit our website. Personal data means all information by which you can be personally identified.
Detailed information on data protection can be found in the following sections of this Privacy Policy.
Controller
The controller responsible for data processing on this website is:
IOTuning GmbH
Konrad-Zuse-Str. 4a
Technopark
59174 Kamen
Germany
Phone: +49 231 5868 7250
Email: info@iorevo.com
Represented by the managing director:
André Henkel
Register court: Local Court of Dortmund
Commercial register number: HRB 33020
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2. General information on data processing
Legal bases
We process personal data only where there is a legal basis for doing so.
Where we have obtained your consent, processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw any consent you have given at any time with effect for the future.
Where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR.
Where processing is necessary for compliance with a legal obligation, processing is carried out on the basis of Art. 6(1)(c) GDPR.
In other cases, processing may be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legitimate interest is explained in the respective sections of this Privacy Policy.
Storage period
Unless a more specific storage period is stated in this Privacy Policy, we store personal data only for as long as necessary for the respective processing purpose.
If you submit a justified request for deletion or withdraw consent, we will delete the relevant data unless statutory retention obligations or other legally permissible reasons require further storage.
Statutory retention periods may arise in particular from commercial and tax law requirements.
Recipients of personal data
We use external service providers in part to provide our services. In this context, it may be necessary to transfer personal data to these service providers.
This may include in particular:
- hosting and IT service providers,
- technical service providers and web agencies,
- email and communication service providers,
- tax advisors, legal advisors, and other professional advisors,
- authorities and public bodies where there is a legal obligation.
Where service providers process personal data on our behalf, we conclude a data processing agreement with them pursuant to Art. 28 GDPR where legally required.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can recognize an encrypted connection in particular by the fact that your browser address line begins with “https://”.
When encryption is activated, data that you transmit to us generally cannot be read by third parties without further effort.
3. Hosting and server log files
When our website is accessed, the web server or our hosting provider automatically processes information transmitted by your browser.
This may include in particular:
Processing of this data is necessary to technically provide the website, ensure its stability and security, identify technical errors, and defend against abusive access.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and error-free provision of our website.
Server log files are stored only for as long as necessary for the purposes stated above. Longer storage may occur if there are specific indications of unlawful use or a security incident, or if legal obligations require this.
Further information about the hosting provider and the specific storage period can be provided upon request.
4. Cookies and similar technologies
Our website uses cookies and comparable technologies. Cookies are small data records that can be stored on or read from your device.
Cookies may be necessary, for example, to provide basic website functions, store your language settings, or document your consent decision.
Technically necessary cookies
Technically necessary cookies are used where they are required to provide functions expressly requested by you or to enable communication via an electronic communications network.
In these cases, storing or accessing information on your device is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Where personal data is processed in this context, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically secure and functional provision of the website.
Cookies and services requiring consent
Cookies and comparable technologies that are not technically necessary are used only if you have previously given your consent via our consent banner.
In this case, storing or accessing information on your device is based on your consent pursuant to Section 25(1) TDDDG. Subsequent processing of personal data is carried out on the basis of Art. 6(1)(a) GDPR.
You may withdraw or change consent you have given at any time with effect for the future. To do so, you can use the “Manage consent” or “Cookie settings” function provided on the website.
5. Consent management with Complianz
We use the Complianz consent management system on our website. The system is used to inform you about the cookies and services used, obtain required consent, and document your selection.
In particular, the following information may be stored:
For this purpose, cookies with names such as the following may be used:
cmplz_functional,cmplz_preferences,cmplz_marketing,cmplz_consented_services.According to the current settings, consent cookies may be stored for up to 365 days.
The storage of this information is necessary in order to be able to prove a decision made by you and to take it into account during later visits.
Access to the device is based on Section 25(2) No. 2 TDDDG. The associated processing of personal data is carried out on the basis of Art. 6(1)(c) GDPR for compliance with our legal documentation obligations and, additionally, on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in legally compliant and user-friendly consent management.
You can change your selection at any time via the “Manage consent” function.
6. WordPress
Our website is operated using the WordPress content management system.
WordPress is used to create, manage, and deliver website content. Technically necessary cookies may be set in this process. These may include in particular:
wpEmojiSettingsSupports
This cookie or storage information is used to determine whether the browser used supports certain emoji functions. Storage generally takes place for the duration of the session.
wp-settings-* and wp-settings-time-*
These cookies may store settings for logged-in WordPress users. They are normally set only for users who log in to the website administration area.
wordpress_logged_in_*
This cookie is used to identify logged-in WordPress users during their session. It is generally not required for normal website visitors who are not logged in.
The use of technically necessary WordPress functions is based on Section 25(2) No. 2 TDDDG. Processing of personal data is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically secure and efficient management and provision of our website.
7. Language settings with Polylang
We use the WordPress plugin Polylang to provide the website in multiple languages.
Polylang may set the cookie pll_language. This cookie stores the language selected by you or the language version last accessed so that the website can be displayed in the appropriate language during later visits.
Use is based on Section 25(2) No. 2 TDDDG where storage is necessary to provide the language selected by you.
Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a user-friendly multilingual website.
The cookie may be stored permanently or in accordance with the storage period specified in the consent manager.
8. Contact form
We provide a contact form on our website. In this context, the following information in particular may be processed:
According to the current design, providing the message content is optional. The other information marked as mandatory is required in order to assign and respond to your inquiry.
We process the transmitted data exclusively for the purpose of handling your inquiry and communicating with you.
If your inquiry relates to a potential contract, an offer, a vehicle project, product development, or other business cooperation, processing is carried out on the basis of Art. 6(1)(b) GDPR.
For other inquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of incoming inquiries and communication with prospects, customers, and business partners.
Where you voluntarily provide us with additional information that is not required, processing may additionally be based on Art. 6(1)(a) GDPR.
The data will be deleted once your inquiry has been finally processed and there are no statutory retention obligations, contractual requirements, or other legitimate reasons for further storage.
Please do not transmit sensitive or confidential data via the contact form unless this is required for processing your inquiry.
9. Contact by email or telephone
If you contact us by email or telephone, we process the information you provide in order to handle your inquiry.
This may include in particular:
Processing is carried out on the basis of Art. 6(1)(b) GDPR if the communication serves to initiate or perform a contract.
In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business and general inquiries.
The data will be deleted when the purpose of processing no longer applies and there are no statutory retention obligations or other legal reasons for further storage.
10. Contact via WhatsApp
A link is provided on our website that allows you to contact us via WhatsApp.
The provider of WhatsApp for users in the European Economic Area is generally:
WhatsApp Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
If you click the WhatsApp link, you leave our website and are redirected to WhatsApp. Data may already be processed by WhatsApp when WhatsApp is accessed or used.
This may include in particular:
We receive and process the information you transmit to us via WhatsApp in order to handle your inquiry.
Use of WhatsApp is voluntary. Alternatively, you can contact us by email, via the contact form, or by telephone.
If the contact serves to initiate or perform a contract, processing is carried out on the basis of Art. 6(1)(b) GDPR. In other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in fast and user-friendly communication with prospects, customers, and business partners.
Where WhatsApp processes data for its own purposes, WhatsApp is independently responsible for this. It is possible that data may also be processed outside the European Union or the European Economic Area.
Further information about data processing by WhatsApp can be found in WhatsApp’s privacy notices.
11. External links
Our website contains links to websites and offerings of external providers, for example to WhatsApp or to legal information on the website of IOTuning GmbH.
If you click an external link, you leave our website. The respective operator of the linked website is generally responsible for the processing of personal data on that website.
We do not have full influence over which data external providers process after you click a link.
Please therefore observe the privacy policies of the respective providers accessed.
12. No automated decision-making
No exclusively automated decision-making, including profiling pursuant to Art. 22 GDPR, that produces legal effects concerning you or similarly significantly affects you takes place via this website.
13. Your rights
Within the scope of the statutory requirements, you have the following rights:
Right of access
Pursuant to Art. 15 GDPR, you may request information as to whether and which personal data we process about you.
Right to rectification
Pursuant to Art. 16 GDPR, you may request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure
Under the conditions of Art. 17 GDPR, you may request the erasure of your personal data.
Right to restriction of processing
Under the conditions of Art. 18 GDPR, you may request that processing of your personal data be restricted.
Right to data portability
Where the statutory requirements are met, you may request pursuant to Art. 20 GDPR that we provide you with the personal data you have provided in a structured, commonly used, and machine-readable format or transmit it to another controller.
Right to withdraw consent
You may withdraw consent you have given at any time with effect for the future.
The lawfulness of processing carried out until withdrawal remains unaffected.
Right to object
Where your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to processing for such advertising purposes at any time. This also applies to profiling insofar as it is related to such direct marketing.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
The data protection supervisory authority responsible for our registered office is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Alternatively, you may also contact a data protection supervisory authority at your habitual residence, place of work, or the place of the alleged infringement.
14. Obligation to provide data
When using our website purely for informational purposes, there is generally no statutory or contractual obligation to provide us with personal data.
For contact or project inquiries, however, you must provide the information required to process the inquiry or to initiate or perform a contract.
Without this information, we may not be able to process your inquiry, or may not be able to process it completely.
15. Security
We take appropriate technical and organizational measures to protect personal data against loss, destruction, unauthorized access, unauthorized alteration, and unauthorized disclosure.
Our security measures are reviewed and adapted in line with technical development and the respective risk.
Nevertheless, data transmission over the internet may have security gaps. Complete protection against access by third parties cannot be guaranteed.
16. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the legal situation, the services used, the technical design of the website, or our data processing procedures change.
The version published on this website at the relevant time shall apply.
Last updated: July 2026