Privacy policy

Privacy Policy

Table of Contents

  1. Access Data and Hosting
  2. Data Processing for Contract Execution and Contact
  3. Provision of Digital Content
  4. Data Processing for Payment Transactions
  5. Cookies and Other Technologies
  6. TikTok Pixel and TikTok Events API
  7. Meta Pixel / Facebook Pixel and Facebook & Instagram by Meta
  8. Social Media
  9. Contact Options and Your Rights

Controller for data processing: Athanasios Ioannidis, Aachener Str. 27, 51145 Cologne, Germany, Email:support@ioardigital.com

We are pleased about your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a server log file containing, for example, the name of the requested file, your IP address, date and time of access, data volume transferred, and the requesting provider. This access data is evaluated solely for the purpose of ensuring smooth operation of the site and improving our services, serving our legitimate interests pursuant to Art. 6(1)(f) GDPR.

All access data is processed only for as long as necessary to achieve the purposes described above.

Hosting

Hosting and website display services are provided by external service providers, in particular Shopify, as processors acting on our behalf. Access data and data collected via forms on this website are processed on our service providers' servers. Our service providers may be located inside or outside the European Union and may use servers in various countries, including the EU, Canada, and the USA. Where personal data is transferred to third countries, this is done on the basis of appropriate safeguards, in particular adequacy decisions by the European Commission, certifications under the EU-US Data Privacy Framework, or standard contractual clauses.

2. Data Processing for Contract Execution and Contact

2.1 Data Processing for Contract Execution

For the purpose of contract execution pursuant to Art. 6(1)(b) GDPR, we collect personal data that you voluntarily provide during your order. Mandatory fields are marked as such, as we require this data to process your order and provide digital content. After full execution of the contract, your data will be restricted from further processing and deleted after expiry of statutory retention periods pursuant to Art. 6(1)(c) GDPR, unless you have expressly consented to further use.

2.2 Customer Account

If you choose to open a customer account, we use your data for account creation and to store your information for future orders, based on your consent pursuant to Art. 6(1)(a) GDPR. You may delete your customer account at any time by contacting us or using the delete function within your account.

Contact

When you contact us (e.g. via contact form, live chat, or email), we collect personal data to process your enquiry pursuant to Art. 6(1)(b) GDPR. Mandatory fields are marked as such. After your enquiry has been fully processed, your data will be deleted unless you have consented to further use.

3. Provision of Digital Content

To fulfil the contract, we provide purchased digital content β€” in particular PDFs and digital templates β€” via download and/or email. The personal data required for this, including name, email address, and order data, is processed pursuant to Art. 6(1)(b) GDPR.

4. Data Processing for Payment Transactions

We use PayPal Checkout and Shopify Payments as payment service providers. Shopify Payments may also process credit card payments, Apple Pay, and Google Pay depending on availability.

4.1 Transaction Processing

Depending on the payment method selected, we pass the necessary data to our technical service providers, credit institutions, or the selected payment provider to the extent required to process the payment, pursuant to Art. 6(1)(b) GDPR. Where data is transferred to third countries without an adequacy decision, the transfer is based on standard contractual clauses of the European Commission.

4.2 Fraud Prevention and Payment Optimisation

We may provide the aforementioned service providers with additional data for fraud prevention and payment process optimisation (e.g. invoicing, handling disputed payments, accounting support), serving our legitimate interests pursuant to Art. 6(1)(f) GDPR.

5. Cookies and Other Technologies

General Information

To make our website attractive and enable certain functions, we use technologies including cookies. Cookies are small text files automatically stored on your device. Session cookies are deleted after closing your browser; persistent cookies remain on your device and allow us to recognise your browser on your next visit.

For non-essential functions, storage of or access to information on your device requires your consent. Please note that some parts of the website may not be fully usable without consent.

These technologies collect and process your IP address, time of visit, device and browser information, and information about your use of our website, serving our legitimate interests in optimised presentation pursuant to Art. 6(1)(f) GDPR.

Cookie settings for your browser:

You may withdraw any consent given at any time by contacting us as described in this privacy policy.

6 TikTok Pixel and TikTok Events API

We use the TikTok Pixel and the TikTok Events API on our website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland (β€œTikTok”).

These technologies are only used if you have given your consent to the use of marketing cookies and comparable tracking technologies via our cookie consent tool. The legal basis for accessing or storing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

What are the TikTok Pixel and TikTok Events API?

The TikTok Pixel is a tracking technology that can record certain actions taken by visitors on our website and transmit this information to TikTok. In addition, we may use the TikTok Events API to transmit event data to TikTok through a server-side connection. This helps us measure and improve the performance of our TikTok advertising campaigns, subject to your prior consent.

Purposes of processing

We use the TikTok Pixel and the TikTok Events API for the following purposes:

  • measuring the effectiveness of our TikTok advertisements;

  • tracking conversions, such as product views, add-to-cart actions, checkout starts and purchases;

  • optimizing our advertising campaigns;

  • creating and analyzing advertising audiences;

  • retargeting users who have interacted with our website, where consent has been given;

  • improving the relevance and delivery of our advertisements on TikTok.

Categories of data processed

Depending on your interaction with our website and our selected TikTok data-sharing settings, the following categories of data may be processed and transmitted to TikTok:

  • technical data, such as IP address, browser information, device type, operating system, user agent and similar technical identifiers;

  • usage data, such as visited pages, referrer URL, time of visit and interactions with our website;

  • cookie and tracking data, such as TikTok cookies, TikTok Click ID, Pixel ID and session information;

  • event data, such as PageView, ViewContent, AddToCart, InitiateCheckout, AddPaymentInfo, Purchase and Search, depending on the configuration;

  • product and order data, such as product IDs, product names, product categories, prices, order value, currency and purchase status;

  • if Advanced Matching is enabled, hashed contact data such as email address and/or phone number may be transmitted to TikTok. This data is not transmitted in plain text, but is hashed before transmission and used by TikTok for matching website events with TikTok advertising data.

Shopify integration and data sharing

We use TikTok through the Shopify integration. Depending on the selected data-sharing level, website events and conversion data may be transmitted to TikTok through the TikTok Pixel, TikTok Events API, Advanced Matching and Shopify APIs.

Recipients and third-country transfers

The recipient of the data is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. TikTok may also share or process data within the TikTok group of companies and with technical service providers.

It cannot be excluded that personal data may be transferred to or accessed from countries outside the European Union or the European Economic Area. These countries may not provide the same level of data protection as the European Union. Where required, TikTok states that it uses appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, for international data transfers.

TikTok may also process received data under its own responsibility and for its own purposes, including the provision, measurement, security and improvement of TikTok services and advertising products. We have no full control over TikTok’s independent processing activities.

Withdrawal of consent and opt-out

The use of the TikTok Pixel and TikTok Events API takes place only on the basis of your consent. You can withdraw your consent at any time with effect for the future by opening the cookie settings on our website and deactivating the relevant marketing or tracking category.

The lawfulness of any processing carried out before the withdrawal remains unaffected.

In addition, you may be able to manage certain tracking and advertising settings directly in your TikTok account, for example under privacy or off-TikTok activity settings.

Further information

Further information about data processing by TikTok can be found in TikTok’s privacy policy and in the information provided by TikTok for its business and advertising tools.

Meta Pixel / Facebook Pixel and Facebook & Instagram by Meta

We use the Meta Pixel (also known as the Facebook Pixel) on our website, as well as the Facebook & Instagram by Meta connection via Shopify, a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (β€œMeta”). This use only takes place if you have given your consent to the use of marketing cookies and comparable technologies via our cookie consent tool. The legal basis for accessing information on your device is Section 25(1) TDDDG; the legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

With the help of the Meta Pixel, we can understand how visitors interact with our website and our digital products. This allows us to measure the effectiveness of our content and advertisements, create audiences for interest-based advertising, and address people again on Facebook and Instagram who have visited our website or performed certain actions (retargeting).

In particular, the following data may be processed and transmitted to Meta: IP address, device and browser information, referrer URL, pages accessed, time of visit, cookie IDs, and event data such as page views, product views, cart actions, checkout actions, and purchases. Depending on the data-sharing setting selected in Shopify (Standard, Enhanced, or Maximum), additional data such as order and transaction data and, where applicable, hashed contact information (e.g. email address, name, phone number, or address) may also be transmitted to Meta via the Conversions API and/or enhanced data sharing.

Meta also processes the data under its own responsibility in accordance with Meta's privacy policy. The data may be transferred to Meta Platforms, Inc. in the USA as well as to other Meta companies or service providers. Where data is transferred to third countries, Meta states that this is carried out on the basis of appropriate safeguards, in particular the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

You can withdraw or change your consent at any time with effect for the future via the cookie settings on our website. Further information about data processing by Meta can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy/. Information about the Meta Business Tools can be found here: https://www.facebook.com/legal/technology_terms.

7. Social Media

Our presence on Facebook (by Meta), Instagram (by Meta), YouTube

Where you have given your consent to the respective social media operator pursuant to Art. 6(1)(a) GDPR, your data is automatically collected and stored when you visit our social media profiles, and usage profiles are created using pseudonyms for market research and advertising purposes. Please refer to the providers' privacy policies for details:

Facebook & Instagram are services of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland. Data is generally transferred to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Processing on Facebook/Instagram Pages is based on a joint controller agreement pursuant to Art. 26 GDPR. For countries without an adequacy decision (including Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Mexico), the transfer is based on standard contractual clauses of the European Commission.

YouTube is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Data is generally transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Where no adequacy decision exists for the relevant countries, the transfer is based on standard contractual clauses of the European Commission.

8. Contact Options and Your Rights

8.1 Your Rights

As a data subject, you have the following rights:

  • Art. 15 GDPR – Right of access to your personal data processed by us.
  • Art. 16 GDPR – Right to rectification of inaccurate or incomplete personal data.
  • Art. 17 GDPR – Right to erasure, unless further processing is required for freedom of expression, legal obligations, public interest, or legal claims.
  • Art. 18 GDPR – Right to restriction of processing.
  • Art. 20 GDPR – Right to data portability in a structured, commonly used, machine-readable format.
  • Art. 77 GDPR – Right to lodge a complaint with a supervisory authority. The competent authority is: Landesbeauftragte fΓΌr Datenschutz und Informationsfreiheit NRW (LDI NRW), Postfach 20 04 44, 40102 DΓΌsseldorf, Germany, Tel: +49 211 38424-0, www.ldi.nrw.de

Right to Object

Where we process personal data based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you may object to such processing with future effect. For direct marketing purposes, you may exercise this right at any time. For other purposes, an objection requires reasons arising from your particular situation. Following a valid objection, we will no longer process your data for those purposes unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise, or defence of legal claims.

8.2 Contact

For questions about the collection, processing, or use of your personal data, or to request access, rectification, restriction, or deletion, or to withdraw consent or object to data use, please contact us directly:

πŸ“§ support@ioardigital.com

Β 

Β Last updated: 14 July 2026