Legal
Information on which data we process when you use turbometrics.io, for which purposes, and which rights you have.
This is a translation for your convenience. The German version is legally binding. Read the German version.
Controller
Dipalino UG (haftungsbeschränkt)
Alexander-Puschkin-Platz 1
01127 Dresden
Germany
Contact
E-mail: [email protected]
Contact form: turbometrics.io/contact
Imprint: turbometrics.io/imprint
We process personal data only to the extent necessary for operating turbometrics.io, carrying out scans, administering user accounts, sending notifications and handling contact enquiries. This includes in particular the master data of your account, technical usage data, scan and monitoring data as well as communication data.
When turbometrics.io is accessed, technically necessary connection data is processed so that the website can be delivered and secured. This may include in particular the following data:
This processing serves the provision, stability and security of the website as well as error analysis and the prevention of abuse.
We use technically necessary cookies and session data so that logins, forms and protected areas work. This includes in particular session cookies and security mechanisms such as CSRF protection. This data is required to operate the application and is not used for advertising purposes.
When you create an account or use your profile, we process the data you provide to us or store in the app. This may include in particular:
We process this data for account administration, authentication, provision of the features booked and communication regarding your account.
When you scan a URL with turbometrics.io, we process the scan and result data required for this. This includes in particular:
Public scans and public reports may be visible to other visitors. This applies in particular to guest scans and to scans that are expressly kept as public. In these cases the domain, the URL and the associated report data may be publicly accessible.
Private scans are only shown within the associated user account.
If you use scheduled scans, alerts or notifications, we process additional monitoring data so that recurring checks and messages work. This includes in particular:
We need this data in order to provide monitoring, history, repetitions, state changes and the display in the user account.
If you store a webhook URL in your profile, we use it exclusively to send the notifications you have activated to your system.
In doing so we process in particular:
Please store only endpoints that you are authorised to use. In the application we display sensitive webhook targets only in a restricted form.
If you contact us via the contact form, we process the details you submit in order to handle your enquiry.
The processing serves to answer your enquiry and to communicate with you.
We use Brevo as an external delivery provider for sending transactional e-mails. This concerns in particular contact form messages, alert e-mails, test e-mails for alert settings and other system-related e-mails, insofar as they are triggered in the application.
In doing so, the data required for delivery is transmitted to Brevo, in particular the recipient address, sender information, subject, message content and technical delivery data.
The provider is Brevo (Sendinblue SAS). Further information on data processing by Brevo can be found in Brevo's official privacy policy: brevo.com/legal/privacypolicy.
We use Brevo exclusively for sending and technically delivering our e-mails.
For paid plans we use Stripe as our payment and billing provider. This concerns in particular Stripe Checkout, the customer portal for managing subscriptions and payment methods, and the technical processing of billing events via webhooks.
In particular, the following data may be processed or transmitted to Stripe:
From Stripe we receive in particular status information on checkout, on active or ended subscriptions and on payments, so that we can correctly assign and manage your plan in turbometrics.io.
Further information on data processing by Stripe can be found in Stripe's privacy policy: stripe.com/privacy.
We use Cloudflare as a content delivery network (CDN) and to protect our website against DDoS attacks and other threats. All traffic to turbometrics.io is routed through Cloudflare's servers before it reaches our own servers.
In doing so, Cloudflare processes in particular:
For security purposes Cloudflare sets its own cookies, in particular __cf_bm (bot detection) and cf_clearance (security challenge). These cookies are technically necessary and are not used for advertising purposes.
The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. The processing takes place on the basis of our legitimate interest in a secure and performant operation of the website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, so that an adequate level of data protection is ensured for transfers to the USA.
Further information on data processing by Cloudflare can be found in Cloudflare's privacy policy: cloudflare.com/privacypolicy.
What is the Live Data feature? Users on a suitable plan can embed a JavaScript snippet (tm.min.js) on their own websites. This snippet collects performance metrics from the visitors of those websites and transmits them anonymised to turbometrics.io.
Which data is collected? The snippet collects exclusively technical performance data, in particular:
What is not collected? No cookies are set, no browser fingerprinting is carried out, and no personal data such as names, e-mail addresses or complete IP addresses is stored.
IP anonymisation. IP addresses are used exclusively to determine the country of origin. The last octet of the IPv4 address, or the last 80 bits of the IPv6 address, is set to zero before storage. The complete IP address is not stored.
Legal basis for the processing. turbometrics.io processes the transmitted performance data on behalf of the respective user (Art. 28 GDPR). The controllers within the meaning of the GDPR are the users who embed the snippet on their websites — not turbometrics.io. The legal basis for the processing on the customer websites is typically the legitimate interest in the technical optimisation of the respective web offering (Art. 6(1)(f) GDPR).
Retention period. Performance data is stored for the period provided for in the plan booked (between 14 and 180 days) and is then deleted automatically.
Processing on behalf of the controller. Where turbometrics.io acts as a processor when processing end users' performance data, a data processing agreement is available. The current DPA is available at turbometrics.io/dpa.
We store personal data only for as long as it is required for the respective purposes or as long as statutory retention obligations exist. Account, scan, monitoring and notification data generally remains stored for as long as it is needed for the use of your account, for tracing reports and notifications, or for legal evidence.
Within the statutory requirements you have in particular the following rights:
If you have questions about data protection or about exercising your rights, please contact us via the contact form or by e-mail to [email protected].
We may adapt this privacy policy if features, legal requirements or the services used change. The current version is always available on this page.