Privacy Policy

Last updated: September 3, 2025

This Privacy Policy explains how Puraite (“we”, “us”, “our”) collects, uses, discloses, and safeguards personal data when you visit or interact with our website at https://puraite.com (the “Website”).

If you have any questions, contact us at contact@puraite.com.

Controller: Puraite, c/o Founders Foundation, Obernstraße 50, 33602 Bielefeld, Germany

This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and other applicable laws.

What We Collect

Technical data: IP address, device/browser type and version, operating system, referrer URL, pages viewed, time spent, and similar usage data.
Communication data: information you provide via forms (e.g., name, email, message content) if you choose to contact us.

Why We Process Your Data (Legal Bases)

Website delivery and security (Art. 6(1)(f) GDPR): operating a secure, reliable website; server logs for troubleshooting and abuse prevention.
Analytics and improvements (Art. 6(1)(a) or 6(1)(f) GDPR): understanding how visitors use the site to improve content and performance. Where required by law, we rely on your consent.
Responding to inquiries (Art. 6(1)(b) or 6(1)(f) GDPR): handling messages you send via our contact options.

Cookies and Tracking

We use essential cookies necessary to operate the site. We may also use analytics cookies as described below. You can control cookies in your browser settings and, where applicable, via consent tools on the site.

Analytics (Google Analytics)

If enabled, we use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage.

Data processed: page views, interactions, truncated IP addresses, device/browser information, and similar usage data.
Legal basis: consent (Art. 6(1)(a) GDPR), where required; otherwise legitimate interests (Art. 6(1)(f) GDPR) in improving our website.
Retention: according to our configuration in Google Analytics.
Opt-out: You can withdraw consent (where applicable), disable cookies in your browser, or use Google’s opt-out add-on: https://tools.google.com/dlpage/gaoptout
Transfers: Google may process data outside the EU/EEA. Standard Contractual Clauses (SCCs) apply.

Tag Management (Google Tag Manager)

We use Google Tag Manager (GTM) to deploy and manage analytics/marketing tags.

Data processed: GTM itself does not typically set cookies; it facilitates loading other tags (e.g., Google Analytics). It may process IP addresses and request metadata when loading tags.
Legal basis: follows the legal basis of the respective tags loaded (e.g., consent for analytics where required).
Transfers: processing may occur outside the EU/EEA; SCCs apply via Google.

CRM and Forms (HubSpot)

If enabled, we use HubSpot (HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA) for forms, contact management, and related analytics.

Data processed: form entries (e.g., name, email), submission metadata (time, IP, page), and service cookies if you consent to them.
Legal basis: consent (Art. 6(1)(a) GDPR) for marketing/analytics cookies and form tracking; contract or legitimate interests for responding to your inquiry.
Transfers: data may be processed in the USA. SCCs apply.
More info: https://legal.hubspot.com/privacy-policy

Hosting, CDN (Cloudflare) and Server Logs

We use Cloudflare as CDN and security layer to deliver the Website and protect it from abuse (Cloudflare, Inc.). During delivery, server and edge logs may include IP addresses and request metadata.

Purpose: ensuring operation, performance, security (e.g., DDoS protection), and troubleshooting.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
Retention: logs are kept only as long as necessary for the stated purposes.

We share personal data with service providers that help us operate the website (e.g., hosting/CDN, analytics, email, CRM) under appropriate data processing agreements. We do not sell personal data.

Service providers may include:

Cloudflare (CDN and security).
Google Analytics (usage analytics; IP anonymization enabled by default).
HubSpot (CRM, forms, and related analytics, if enabled).
Pipedrive (CRM for sales pipeline management).
Google Workspace (email and productivity; processing of communications when you email us).

International Transfers

Where data is transferred outside the EU/EEA, we implement appropriate safeguards such as SCCs.

Retention

We retain personal data only for as long as needed for the purposes explained above or as required by law.

You may have the right to access, rectify, erase, restrict, or object to processing; to data portability; and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with a supervisory authority.

To exercise your rights, contact: contact@puraite.com

Children’s Privacy

Our website is not directed to children under 16.

Changes

We may update this Privacy Policy. The “Last updated” date indicates the latest revision.