The following privacy notice explains how we process your personal data. In doing so, we comply with the provisions of German data protection law and the requirements of the European General Data Protection Regulation (GDPR).
Data controller
The data controller for the imtron.eu website within the meaning of the GDPR is:
Imtron GmbH
, Media-Saturn-Straße 1
, 85053 Ingolstadt
(hereinafter ‘we’, ‘us’ or ‘IMTRON’)
Contact: Data Protection Officer
You also have the right to contact our external Data Protection Officer directly with any questions regarding data protection:
By post:
Dr Christian Borchers
c/o datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Email: MMS-DSB@datenschutz-sued.de
Purposes and legal bases for the processing of your personal data
We process your personal data for the following purposes:
Establishing contact and customer service
Imtron Chatbot (Interactive Instruction Manual)
Sponsorship
Log files, cookies, web analytics services and identifiers
Statistical analysis, prevention of misuse and enforcement of legal claims
Social media
1. Contact and Customer Service
If you contact us by telephone, email or post, for example to enquire about our products, regarding a spare part or repair, or in connection with a product recall, we will process your personal data in order to deal with your enquiry and respond to your request.
In doing so, we process the following categories of personal data:
Identity data,
Contact details,
Contract and billing data,
other communication content necessary to clarify the matter or to carry out the order.
Your data is processed so that we can manage you as a customer in our systems and fulfil our contractual obligations towards you. In addition, we store your data for the purpose of establishing, exercising or defending legal claims.
The legal basis is Article 6(1)(b) and (f) of the GDPR.
Provided you have given your consent in advance, we record individual telephone calls for the purposes of quality assurance and for the training of customer service advisers. Consent is given via the interactive voice response system and is documented together with the relevant communication connection data. We process your data for training and quality assurance purposes to improve our services.
In addition – provided you agree – you will be asked immediately after the telephone call about your satisfaction with our customer service. This feedback is used for quality assurance and is stored by us in anonymised form.
The legal basis is Article 6(1)(a) of the GDPR. You have the right to withdraw any consent you have given at any time with effect for the future (see the section ‘Your rights’).
As part of our customer service, we may use artificial intelligence (‘AI’) to help us record, process and/or respond to customer enquiries more quickly and efficiently. The data will not be used for any purpose other than processing your enquiry, neither by us nor by service providers engaged by us who are contractually bound by strict instructions within the framework of data processing on our behalf. Furthermore, there is no automated decision-making or profiling.
When using (AI) call bots on our helpline, what you say is recorded briefly so that it can be transcribed immediately into text form. Based on the text input received, the bot generates the relevant response in text form, which is then converted so that it can be reproduced as speech.
The processing of your data in the context of customer service is carried out to fulfil contractual obligations or to implement pre-contractual measures. Processing also regularly takes place on the basis of our legitimate interest in the efficient handling of customer enquiries and to provide evidence of correspondence.
The legal basis is Article 6(1)(b) or (f) of the GDPR.
2. Imtron Chatbot (Interactive Instruction Manual)
We provide support on our website in the form of a chatbot (Imtron Interactive Instruction Manual). Visitors to the website can access the chatbot via a QR code included in printed form with the products, or by manually entering the URL into their web browser, and use it to ask product-specific questions regarding general information or product support. The Imtron Chatbot can also be operated via your microphone using voice commands; however, the processing of your voice or the conversion of spoken words into text does not take place on our systems, but solely in your environment (i.e. on your operating system or in your browser).
The chatbot utilises artificial intelligence (‘AI’) and generates responses as a text-based, automated dialogue system based on various data sources made available.
The effective use of the Imtron chatbot does not require the input of personal data, and such input is not permitted under the Terms of Use. However, if personal data is nevertheless entered whilst using the Imtron chatbot (so-called ‘imposed personal data’), it will be processed to the extent described below.
Chat histories are stored for 30 days and analysed during this period. The stored chat histories are used to continuously improve and further develop the Imtron chatbot. This does not involve any training or machine learning of the Imtron chatbot. The analysis is also carried out for the purpose of improving our products. The storage also serves to ensure sufficient transparency and to protect Imtron in the event of legal claims.
When interacting with the Imtron chatbot, technical metadata and non-personal information, such as the date and time, the number of messages, the number of positive and negative ratings, and a session ID (a unique identifier for each enquiry) are also collected.
The legal basis for the processing of the aforementioned personal data is Article 6(1)(f) of the GDPR. Processing is carried out on the basis of our legitimate interest in providing the Imtron chatbot and the associated services, in answering the questions posed as effectively as possible, and in logging, quality assurance and the further development of our products and processes.
3. Sponsorship
Where we provide prizes for competitions and other marketing campaigns organised by group companies or external partners, we process your contact details to notify you of a win and to dispatch the prize in accordance with the relevant terms and conditions of entry.
The legal basis for the processing is Article 6(1)(b) of the GDPR.
Provided you have given your express consent, we are entitled to publish the winner’s name or social media account. The legal basis for the processing is Article 6(1)(a) of the GDPR. You have the right to withdraw any consent you have given at any time with effect for the future (see the section ‘Your rights’).
4. Log files, cookies, web analytics services and identifiers
When you visit our website, the internet connection data transmitted by your browser to our server is processed first. Each time our website is accessed, it collects a range of general data and information, which is temporarily stored in a server’s log files. A log file is created as part of an automatic logging process by the processing computer system. The data collected may include, amongst other things:
Access to the website (date, time and frequency)
How you arrived at the website (previous page, hyperlink, etc.)
Amount of data transmitted
Which browser and browser version you are using
The operating system you are using
Which internet service provider you use
Your IP address, which your internet service provider assigns to your computer when you connect to the internet.
The legal basis for this data processing is Article 6(1)(f) and (b) of the GDPR, as well as Section 25(2)(2) of the TDDDG (Telecommunications, Digital Services and Data Protection Act), as the processing of this data is necessary for the operation of the website in order to ensure its functionality and to deliver the content of our website correctly. Furthermore, the data helps us to optimise our website and to ensure the security of our IT systems.
We use cookies, analytics tools and other technologies to improve functionality and carry out analyses. To this end, we work with solutions developed in-house or use solutions provided by service providers. The legal basis is Article 6(1)(a), Article 7, and in part Article 49(1)(a) of the GDPR, as well as Section 25(1) of the TDDDG.
You can change your settings at any time here in the privacy settings (option to enable, disable or withdraw consent). For further information on the individual services, click on ‘Change your consent’, then on ‘Show details’, then on the relevant category of cookies and then on the relevant cookie.
5. Statistical analysis, prevention of misuse, and enforcement of legal claims
We also process your data to compile statistics for the purpose of improving our products and services. During this processing, your data is pseudonymised and is not analysed on an individual customer basis or used to predict your personal preferences.
However, the processing of your data may also be necessary, for example, to ensure IT security and IT operations, or to prevent and investigate criminal offences and cases of misuse, in particular through data analysis.
Finally, we process your personal data to the extent that we are legally obliged to do so, for example following an order from a public authority or a court, and for the purpose of exercising our rights and defending our legal position.
The legal basis for this is Article 6(1)(f) or (c) of the GDPR.
6. Social media
We operate corporate social media profiles (hereinafter ‘social media page(s)’) to get in touch with you, provide you with information and offers, and showcase our services. These include, in particular, the following well-known platforms:
Instagram (platform operator: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
YouTube (platform operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
LinkedIn (platform operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
You use our social media pages at your own risk. When you visit our social media pages (our company profiles on the aforementioned platforms), the respective platform operators process your personal data for their own purposes, in particular by using cookies and similar technologies to track your usage behaviour. The nature, scope and purposes of data processing on social media platforms are primarily determined by the platform operators. Further information on this can be found in the respective privacy policies of the platform operators, which are available when you visit the relevant platforms.
We generally only receive aggregated, statistical analyses from the platform operators (e.g. regarding reach, interactions and demographic characteristics), which do not allow us to draw any direct conclusions about individual persons.
If you contact us directly via our social media pages (e.g. via a comment, post or ‘direct message’), we will process the data you provide (e.g. name/profile name, content of the message) to deal with your enquiry or request. Where necessary, we may refer you to our other contact channels (e.g. contact form or helpline) if this is required to ensure your enquiry is handled securely and in compliance with data protection regulations.
The legal basis is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR.
If you do not wish the platform operators to process your data in connection with your visit to our social media pages, you may alternatively use our other contact options (e.g. our online shop, contact forms, helpline or email).
Data Recipients
Your data will be disclosed, on a case-by-case basis, to the recipients listed below (contracted service providers and cooperation partners). We require all recipients to ensure the security of your personal data and to process it in accordance with applicable law.
1. Group companies
The group companies within the MediaMarktSaturn Retail Group will receive your data where necessary to enable us to provide all services relating to our own-brand products.
In particular, for the purpose of settling claims, we transfer data to the store or online shop of the MediaMarkt and Saturn retail chains from which you purchased our product, as well as to the Group’s Legal and Insurance departments for the purpose of handling complaints, product liability cases and product recalls.
The legal basis for this is Article 6(1)(b) or (c) of the GDPR.
2. Third parties and data processors
In order to fulfil our contractual and legal obligations, we also use external service providers. Your data may be disclosed to the following recipients, amongst others:
Cooperation partners, where necessary in connection with the handling of warranty/guarantee claims and repairs,
to Capita West GmbH, Nassauer Ring 39–41, 47803 Krefeld, in connection with call centre services,
other data processors within the meaning of Article 28 of the GDPR, e.g. to ensure our IT operations,
service providers, e.g. for the dispatch of parcels and letters or for payment processing,
to other third parties for the purposes mentioned above (e.g. debt collection agencies in the case of reminders)
Data transfers to third countries
We attach great importance to processing your data within the EU. However, in the course of the administration, development and operation of IT systems, as well as marketing and customer communications, we may use service providers who process data outside the EU (‘third countries’). In these countries, despite careful selection and the service providers’ commitment, the high European standard of data protection cannot necessarily be guaranteed. Where data is transferred to the USA, for example, there is a risk that this data may be processed by US authorities for monitoring and surveillance purposes, without effective legal remedies being available or all data subjects’ rights being enforceable.
Where we use service providers in third countries, we take additional measures in accordance with Article 44 et seq. of the GDPR and thereby ensure that the transfer is, in principle, permissible and that the specific conditions for a transfer to a third country are met (e.g. by entering into EU Standard Contractual Clauses and providing additional safeguards, as well as supplementary technical and organisational measures such as encryption or anonymisation).
Where any data transfer is based on your consent, providing such consent is voluntary. This consent also includes your consent in accordance with Article 49(1)(a) of the GDPR to the processing of data outside the EEA, e.g. in the USA. You may withdraw this consent at any time as described in the section ‘Your rights’.
Retention period and routine deletion of personal data
We process and store your personal data only for the period necessary to fulfil the purpose of the processing or insofar as this is provided for by law or regulation. Once the purpose no longer applies or has been fulfilled, your personal data will be deleted or blocked.
In the event of blocking, deletion will take place as soon as statutory or contractual retention periods no longer prevent this.
Your rights
Naturally, you have rights regarding the collection of your data, which we are pleased to explain to you here. In accordance with legal requirements, you have the right
to receive information from us regarding the personal data concerning you (Art. 15 GDPR)
to rectification (Art. 16 GDPR)
to erasure (Art. 17 GDPR)
to restriction of processing (Article 18 of the GDPR)
to data portability (Art. 20 GDPR)
to object to processing (Art. 21 GDPR) Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time pursuant to Art. 21 GDPR.
to withdraw consent (Article 7(3) of the GDPR) Where your personal data is processed on the basis of consent, the lawfulness of the processing carried out prior to the withdrawal remains unaffected by the withdrawal.
If you wish to exercise your rights*, simply send a message to our Data Protection Officer:
By post:
Imtron GmbH –
Data Protection Department –
Media-Saturn-Straße 1
, 85053 Ingolstadt
, Germany
By email:
*For your own protection, when you exercise your rights (e.g. requests for access or erasure), we are obliged, where necessary, obtain further information necessary to verify your identity, for example, to ensure that personal data is not disclosed to unauthorised persons or that such data is deleted. Should it not be possible to verify your identity, we must refuse to process such requests if there are doubts regarding your identity.
You also have the right to contact our external data protection officer directly with any questions regarding data protection:
By post:
Dr Christian Borchers
c/o datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Email: MMS-DSB@datenschutz-sued.de
If you have given your consent to the use of relevant services on our website, you can also withdraw this consent here in the privacy settings.
Links to other companies’ websites
Our website contains links to websites operated by other organisations. We are not responsible for the data protection measures on external websites that you may access via these links. Please check the data protection policies of these external websites for further information.
Changes to the privacy policy
To ensure that our privacy policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy needs to be amended due to new or revised offers or services.
Date: September 2026 Version: 20260922