Privacy Policy
Interpyro takes the protection of your personal data seriously. Here we explain what data we process, why, how long we keep it and what rights you have — in accordance with the GDPR and German privacy law (BDSG, TTDSG).
Who is responsible for your data?
The controller responsible for processing personal data (Verantwortlicher within the meaning of Art. 4(7) GDPR) is:
Tim van den Berg, trading as Interpyro.com
Erfweiler Straße 12, 66994 Dahn, Germany
Email: kontakt@interpyro.com
No separate Data Protection Officer has been appointed. Under Art. 37 GDPR and § 38 BDSG this is not
required given the nature and scope of our processing. Questions about data protection can be sent
directly to the email address above.
What data do we process?
- Account and contact details: name, email address, phone number, password (stored encrypted).
- Address details: for invoicing and, where applicable, company name and VAT number for business buyers.
- Bidding and order data: your bids, won lots, orders and payment status.
- Age verification: data needed to confirm you are old enough to purchase fireworks.
- Payment data: processed by our payment service providers; we do not store full card or account details ourselves.
- Technical data: IP address, device/browser information, app usage and cookie preferences.
- Push data: a device token, only if you have enabled notifications.
What do we use it for?
- Performing the purchase agreement: bidding, checkout, and informing the store about collection.
- Complying with legal obligations, such as tax record-keeping and age/identity checks for fireworks.
- Fraud prevention and countering bid manipulation.
- Sending transactional emails (order confirmation, payment reminders) and push notifications about your bids.
- Improving the platform and, with your consent, measuring visits.
On what legal basis?
We process your data based on: performance of the agreement (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c) GDPR, e.g. age verification for fireworks), our legitimate interest (Art. 6(1)(f) GDPR, such as fraud prevention) and/or your consent (Art. 6(1)(a) GDPR, such as for marketing cookies).
You can withdraw consent at any time — see Your rights below.
Sharing with third parties
We only share data when necessary, with:
- Affiliated stores — to fulfil and hand over your order, only the data necessary for that purpose.
- Payment service providers — to process your payment (depending on the provider chosen by the relevant store: Mollie, Stripe, or MultiSafepay).
- Email provider — to send transactional emails and, with consent, the newsletter.
- Push notification service — to send notifications about your bids, only if you have consented.
- Hosting provider — to keep the platform technically running.
We have data processing agreements (Art. 28 GDPR) in place with all these parties where required. Where a provider processes data outside the EU/EEA, we ensure appropriate safeguards (such as EU Standard Contractual Clauses).
Never longer than necessary
For tax and financial records, the German statutory retention period applies, generally ten (10) years (§ 147 Abgabenordnung, § 257 Handelsgesetzbuch).
We keep account data for as long as your account is active. If you delete your account, we erase your data, except for what we must retain under a statutory retention obligation.
Always in control
Under Art. 15–21 GDPR you have the right to access, correct, erase, restrict the processing of, and receive a copy of your data, and you can object to processing or withdraw consent already given.
Please contact us at kontakt@interpyro.com or via the contact page. We generally respond within one month.
Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).
Our website uses cookies
For non-essential cookies we ask for your prior consent, in accordance with the German Telecommunications and Telemedia Data Protection Act (TTDSG). You can read how that works and manage your preferences in our cookie policy.
Not satisfied with how we handle your data? You can file a complaint with the competent supervisory authority: the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI Rheinland-Pfalz), or the supervisory authority in the country where you live or work.