PRIVACY POLICY
pepper-and-salt.com | DEEP DIVE App As of: 17 March 2026
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to our privacy policy below.
Data Collection on Our Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the ‘Note on the controller’ section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us, for example by entering data into a contact form.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. browser, operating system, time of page access). This data is collected automatically as soon as you access our website.
What do we use your data for?
Some data is collected to ensure error-free provision of the website. Other data may be used to analyse user behaviour. If contracts are concluded via the website, we also process data for contract performance and payment processing.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient and purpose of your stored personal data, as well as the right to correction or deletion. You may revoke any consent at any time. You also have the right to restrict processing and the right to lodge a complaint with the competent supervisory authority.
2. Hosting
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter ‘IONOS’). When you visit our website, IONOS collects various log files including your IP addresses. Details: https://www.ionos.de/terms-gtc/terms-privacy
Use of IONOS is based on Art. 6(1)(f) GDPR. We have concluded a Data Processing Agreement (DPA) with IONOS.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations.
Note on the Controller
The controller responsible for data processing on this website is:
PPR&SALT LTD
Katsantonaion 49
4154 Kato Polemidia, Limassol, Cyprus
Phone: +49 160 9380 4886
Email: hello@pepper-and-salt.com
Storage Duration
Unless a more specific storage period has been stated, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate deletion request or revoke consent, your data will be deleted unless we have other legally permissible reasons for storage.
Legal Bases for Data Processing
Where you have consented, we process your data on the basis of Art. 6(1)(a) GDPR. For contract performance: Art. 6(1)(b) GDPR. For legal obligations: Art. 6(1)(c) GDPR. For legitimate interests: Art. 6(1)(f) GDPR.
Recipients of Personal Data
We only disclose personal data to external parties where required for contract performance, where legally obliged, or where another legal basis permits disclosure.
Revocation of Consent
You may revoke any consent given at any time. The lawfulness of data processing prior to revocation remains unaffected.
Right to Object (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS WHICH OVERRIDE YOUR INTERESTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to Lodge a Complaint
As a company based in Cyprus, the competent supervisory authority for us is the Commissioner for Personal Data Protection (Cyprus): 1 Iasonos Street, 1082 Nicosia, Cyprus, www.dataprotection.gov.cy. Data subjects may alternatively contact the supervisory authority of their Member State of residence.
Right to Data Portability
You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or a third party in a machine-readable format.
Information, Correction and Deletion
You have the right at any time to free information about your stored personal data, its origin, recipients and processing purpose, and the right to correction or deletion of this data.
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data where you dispute the accuracy of the data, where processing is unlawful, where we no longer need the data but you need it for legal claims, or where you have objected pursuant to Art. 21 GDPR.
SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the address bar changing from ‘http://’ to ‘https://’ and the lock symbol in your browser.
Objection to Advertising Emails
The use of contact data published as part of our legal notice obligation for the purpose of sending unsolicited advertising is hereby prohibited. We reserve the right to take legal action in the event of unsolicited advertising communications.
4. Data Collection on This Website
Cookies
Our website uses cookies. Cookies are small data packages that do not cause any damage to your device. Session cookies are automatically deleted after your visit. Persistent cookies remain until you delete them or your browser does so automatically.
Necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Server Log Files
The provider automatically collects information in server log files. These include:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
This data is collected on the basis of Art. 6(1)(f) GDPR.
Contact Form
If you submit enquiries via the contact form, your details including the contact information provided will be stored for the purpose of processing the enquiry. This data is not passed on without your consent. Processing is based on Art. 6(1)(b) or (f) GDPR.
Enquiry by Email or Telephone
If you contact us by email or telephone, your request including all resulting personal data will be stored and processed for the purpose of handling your request. Processing is based on Art. 6(1)(b) or (f) GDPR.
Analytics and Tracking Tools
We currently do not use any analytics or tracking tools on this website. If we integrate such services in the future, we will update this privacy policy and inform you via a consent banner.
5. Newsletter
MailerLite
This website uses MailerLite for sending newsletters. Provider: MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02PR89, Ireland.
Data entered for the purpose of subscribing to the newsletter is stored on MailerLite’s servers. Processing is based on your consent (Art. 6(1)(a) GDPR). You may revoke consent at any time by unsubscribing.
Transfers to third countries are based on the EU Commission’s Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
MailerLite privacy policy: https://www.mailerlite.com/legal/privacy-policy
We have concluded a DPA with MailerLite.
6. Contract Processing and Payment Providers
Processing of Customer and Contract Data
We collect, process and use personal customer and contract data to the extent necessary for the establishment, performance and processing of our contractual relationships. Legal basis: Art. 6(1)(b) GDPR. Data will be deleted after completion of the contract unless statutory retention obligations apply.
Digistore24
For the sale of digital products via our website, we use the Digistore24 payment and order platform. Provider: Digistore24 GmbH, St. Martinistrasse 3, 38100 Braunschweig, Germany.
When you make a purchase via Digistore24, your order data (e.g. name, email address, payment data) is transmitted to Digistore24 and processed there. Digistore24 acts as an independent controller. Processing is based on Art. 6(1)(b) GDPR. Digistore24 is based in Germany (EU). Privacy policy: https://www.digistore24.com/info/privacy
Encrypted Payment Transactions
Payment transactions for fee-based content are processed exclusively via an encrypted SSL or TLS connection.
7. Video Conferencing
Zoom
We use Zoom for communication with our customers. Provider: Zoom Communications Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA.
Privacy policy: https://explore.zoom.us/de/privacy/. Data transfers to the USA are based on SCCs and the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b)/(f) GDPR. We have concluded a DPA with Zoom.
8. Overview of Third-Party Services Used
| Service | Provider / Location | Purpose | Third Country | Legal Basis | Safeguard |
| IONOS Hosting | IONOS SE, Germany | Web hosting, log files | No (EU) | Art. 6(1)(f) GDPR | DPA concluded |
| MailerLite | MailerLite Limited, Ireland | Newsletter, analysis | USA (possible) | Art. 6(1)(a) GDPR | DPA + SCCs Art. 46 GDPR |
| Zoom | Zoom Communications Inc., USA | Video conferencing | USA | Art. 6(1)(b)/(f) GDPR | DPF-certified + DPA + SCCs |
| Digistore24 | Digistore24 GmbH, Germany | Product sales, payment | No (EU) | Art. 6(1)(b) GDPR | No third-country transfer |
SCCs = Standard Contractual Clauses | DPF = EU-US Data Privacy Framework | DPA = Data Processing Agreement
This privacy policy was last updated: March 2026
PPR&SALT LTD | Katsantonaion 49, 4154 Kato Polemidia, Limassol, Cyprus | hello@pepper-and-salt.com
