Privacy policy

1. General information and mandatory disclosures

Protecting your personal data matters to us. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

This privacy policy explains which data we collect on our website go-impulse.de, for what purpose, and how we protect your data.

Controller within the meaning of the General Data Protection Regulation (GDPR):

BESTVOR GmbH
Gerlachstraße 37
14480 Potsdam
Deutschland

Phone

+49 173 4207886

Email

info@go-impulse.com

Managing director

Tomer Lev

2. Collection and storage of personal data, and the nature and purpose of its use

a) When visiting the website

When you access our website go-impulse.de, the browser on your device automatically sends information to our website's server. This information is stored temporarily in what is known as a log file.

The following information is recorded without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the file retrieved,
• website from which access was made (referrer URL),
• browser used and, where applicable, your computer's operating system as well as the name of your access provider.

Purpose of the processing: we process the data listed above for the following purposes:

• ensuring the website connection is established smoothly,
• ensuring our website is comfortable to use,
• evaluating system security and stability, and
• for further administrative purposes.

The legal basis for the processing is Art. 6(1)(f) GDPR.

b) When contacting us by email or contact form

If you send us enquiries by email or through a contact form, the details you provide, including your contact data, are stored by us in order to process the enquiry and in case of follow-up questions.

The legal basis for this is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries addressed to us efficiently).

The details submitted via the contact and appointment forms are stored in our Firebase database in the Frankfurt am Main data centre (europe-west3) and are additionally delivered to our mailbox by email. Only the hosting provider named in section 4 and our email delivery provider are involved. The data is not passed on to any other third parties.

To protect against automated bulk requests we store a non-reversible check value of your IP address (a salted hash) with each form submission; the IP address itself is not stored. The legal basis is Art. 6 (1) (f) GDPR. We delete request data as soon as it is no longer required for processing and no statutory retention obligations apply.

3. Disclosure of data

Your personal data is not transferred to third parties for purposes other than those listed below.

We only pass your personal data on to third parties if:

• you have given your express consent (Art. 6(1)(a) GDPR),
• disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed (Art. 6(1)(f) GDPR),
• there is a legal obligation to disclose the data (Art. 6(1)(c) GDPR), or
• this is legally permissible and necessary for the performance of contractual relationships with you (Art. 6(1)(b) GDPR).

4. Audience measurement, third-party services and hosting

We do not use marketing or advertising services. No profiling for advertising purposes takes place, and we do not pass your data on to third parties for advertising. To improve what we offer, however, we measure how this website is used – exclusively with your consent (see "Audience measurement with Google Analytics 4").

All other parts of the website – including the fonts – are served from our own server. As long as you have not consented to audience measurement, this website does not open any connection to third-party servers when it loads.

Audience measurement with Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand which pages are opened, how long visitors stay and how they find us. We use this to improve the content and structure of the website.

The sole legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with section 25(1) TDDDG. Without your consent no analytics script is loaded and no cookie is set. You give consent via the "Audience measurement" option in our privacy notice.

Where consent has been given, Google sets the cookies "_ga" and "_ga_HFFQY4SSCR", each with a lifetime of two years, and processes among other things the pages opened, the time and duration of the visit, the referring page, approximate location data and information about your browser and device. Google truncates your IP address before storing it, and the data is not combined with other Google data. Advertising features, Google signals and links to Google advertising accounts are switched off.

Google processes the data on our behalf under a data processing agreement. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies. The data collected is deleted automatically by Google once the configured retention period has elapsed.

You can withdraw your consent at any time with effect for the future via the privacy settings at the bottom of every page. We then delete the measurement cookies immediately. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Hosting

The website is operated on Firebase Hosting by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the site is accessed, the provider processes the access data listed in section 2 a in order to make delivery technically possible.

The legal basis is Art. 6(1)(f) GDPR – our legitimate interest in operating the website securely and reliably. A data processing agreement is in place with the provider.

5. Your rights

You have the right:

• under Art. 15 GDPR, to request information about the personal data we process about you;
• under Art. 16 GDPR, to request that inaccurate personal data stored by us be corrected without delay, or completed;
• under Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary to comply with a legal obligation;
• under Art. 18 GDPR, to request the restriction of processing of your personal data;
• under Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
• under Art. 7(3) GDPR, to withdraw consent you have given at any time;
• under Art. 77 GDPR, to lodge a complaint with a supervisory authority.

6. Right to object

Where your personal data is processed on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data.

If you wish to exercise your right to object, an email is sufficient: info@go-impulse.com

7. Data security

During your visit to the website we use the widely adopted SSL (Secure Socket Layer) procedure together with the highest level of encryption supported by your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

8. Validity and changes to this privacy policy

This privacy policy is currently valid and dated September 2026. As our website and the services offered through it develop, or as legal or regulatory requirements change, it may become necessary to amend this privacy policy.

The current privacy policy can be viewed and printed at any time on the website at go-impulse.de/en/privacy.

Last updated: September 2026