Last updated: September 7, 2026
1. Controller
Hübers Industries GmbH
Falkenweg 15
41468 Neuss
Germany
Email: info@margin-pulse.de
2. General Principles
We process personal data only where necessary to provide this website, respond to enquiries, take steps prior to entering into a contract, or comply with legal obligations. The relevant legal bases include Article 6(1)(b), (c), and (f) GDPR.
Where we rely on legitimate interests, these interests are the secure and reliable operation of the website, prevention of misuse, and efficient handling of business enquiries.
3. Hosting and Server Log Data
When you access this website, our contracted hosting provider processes technically necessary connection data. This may include your IP address, date and time of access, requested address, amount of data transferred, HTTP status, referrer URL, browser type and version, and operating system.
We process this data to deliver the website, maintain its stability and security, identify technical errors, and prevent misuse, based on Article 6(1)(f) GDPR. Log data is erased or anonymised once it is no longer needed for these purposes. It is retained for longer only where necessary to investigate a security incident or comply with legal obligations.
Recipients or processors may include the hosting and technical infrastructure provider and IT service providers acting on our behalf. No transfer to a third country is intended for the current operation of this website.
4. Enquiry and Contact Form
When you request a profitability analysis or contact, we process the information you enter: name, company, business email address, optional telephone number, preferred contact method, and message. The language, page visited, button used, and any selected plan are also submitted. The request is sent by the server via email to info@margin-pulse.de.
The legal basis is Article 6(1)(b) GDPR for responding to your request and taking pre-contractual steps. Article 6(1)(f) GDPR additionally applies to general business enquiries. We cannot process the request without the fields marked as required.
Form data is received only by authorised employees and technically necessary hosting, email, and IT service providers. We erase enquiries after they have been fully dealt with where no further business relationship arises. If a contractual relationship arises or statutory documentation and retention duties apply, the required data is stored until those duties expire.
5. Customer, Contract, and User Account Data
When a company purchases or uses Margin Pulse, we process the data required to prepare, enter into, and perform the contract. This may include company and billing details, contact persons, business contact details, contract content, subscribed services, correspondence, billing and payment information, and support cases.
For user accounts, we may process names, business email addresses, company, roles and permissions, authentication and security information, and technical usage and log data. Where user accounts are offered, passwords are not stored in plain text.
The legal bases are Article 6(1)(b) GDPR for contracts and pre-contractual steps, Article 6(1)(c) GDPR for commercial and tax obligations, and Article 6(1)(f) GDPR for secure operation, support, misuse prevention, and internal business organisation. Contract and billing data is retained for the business relationship and thereafter as required by statutory retention obligations. Other account and support data is erased when no longer required for its purpose unless retention is necessary for a legal obligation or the establishment, exercise, or defence of legal claims.
6. Product Data Processed in Margin Pulse
To provide the agreed analysis, dashboard, reporting, and optimisation services, Margin Pulse may process in particular the following customer data:
- Amazon advertising account, profile, marketplace, and portfolio identifiers;
- OAuth access and refresh tokens and technical API information;
- campaigns, ad groups, ads, keywords, targets, bids, and budgets;
- ad spend, impressions, clicks, conversions, revenue, ACoS, TACoS, and other performance data;
- ASIN, SKU, product, catalogue, country, and assortment information;
- Vendor metrics, including Shipped Revenue, Shipped COGS, contribution margins, and agreed cost or margin data;
- depending on the subscribed scope, data from Sponsored Ads, Amazon DSP, or Amazon Marketing Cloud (AMC);
- targets, budgets, rules, mappings, comments, and files supplied by the customer, and analyses and recommendations generated from them.
The purposes are to set up and provide Margin Pulse, control profitability and budgets, identify anomalies, create reports and recommendations, and—only where expressly agreed—support or perform campaign actions.
Where this data is processed for our own performance of the contract, Article 6(1)(b) GDPR is the legal basis. Where we process personal data solely on the instructions of a business customer, we act as a processor under Article 28 GDPR. Roles, instructions, security measures, subprocessors, deletion, and return are then governed by a data processing agreement. The business customer remains responsible for the lawfulness of the data and instructions it provides.
Margin Pulse is designed for business advertising, product, and aggregated performance data. Special categories of personal data under Article 9 GDPR and unnecessary end-customer data should not be submitted.
7. Amazon Connection and Product Data Retention
A connection to Amazon is established only after purchase and express authorisation by an authorised customer through the designated Amazon interfaces. Access is limited to the agreed scope. Read-only access is used where technically and contractually intended. Customers can revoke an authorisation through their Amazon account management.
API tokens are stored only while the connection is active and required for the agreed service. Imported advertising, Vendor, and analysis data is processed for the contract term or agreed analysis period and then erased or returned according to the contractually agreed periods unless legal obligations or legal claims require retention.
When Amazon data is retrieved or managed, data is exchanged between Margin Pulse and Amazon. Amazon acts under its own contractual and privacy terms for its platform and account administration. Depending on the Amazon service and marketplace, processing outside the European Economic Area cannot be excluded. The specific integration scope, data locations, and any safeguards required for international transfers will be documented before activation in the customer contract or data processing agreement. The current public website does not yet import genuine Amazon customer data.
8. Recipients and Service Providers for the Product
Access is limited to authorised employees and, where required to operate and provide the service, contractually bound hosting, cloud, database, email, support, and IT security providers. Amazon receives or processes data as part of the API and platform use authorised by the customer. Customer data is not sold or disclosed for advertising.
Production data is generally processed within the EU or European Economic Area unless otherwise agreed with the customer and protected in accordance with data protection law. The specific subprocessors and possible international transfers will be disclosed before production use and documented in the contractual materials.
9. Cookies and Local Storage
We currently do not use analytics or marketing cookies. Google reCAPTCHA is used solely to secure the enquiry form; see Section 11 for details.
We use the following technically necessary storage for features you request:
- marginPulseLanguage (local storage): remembers your selected language until you clear your browser data or change the language.
- marginPulseCookieNotice (local storage): remembers that you acknowledged the cookie notice until you clear your browser data.
- mp_form_rate (cookie): prevents immediately repeated form submissions and is automatically deleted after 20 seconds.
These storage operations are necessary for the language selection, management of the notice, or secure operation of the form requested by you. Storage or access on your device is based on Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). To the extent that personal data is processed, the legal basis is Article 6(1)(f) GDPR.
10. Email Communication
When you contact us by email or we respond to a form submission, we process your sender and contact details and the content of the communication. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Article 6(1)(f) GDPR. We use services provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, as a processor for technical email delivery. Recipient, sender, message, and technical delivery data are processed for this purpose. The retention criteria described in Section 4 apply.
11. Google reCAPTCHA
We use Google reCAPTCHA v3 to protect our enquiry form against automated submissions and spam. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is loaded only when you submit the form. In particular, your IP address, browser and device information, referrer, time, page visited, and interaction characteristics may be transmitted to Google and processed to produce a risk score. Google may use technically necessary cookies or comparable storage technologies for this purpose. We receive the verification result, risk score, action name, and hostname, but not the underlying Google profile data.
The processing serves our legitimate interest in protecting the website and forms against misuse, spam, and automated attacks. The legal basis is Article 6(1)(f) GDPR; technically necessary access to your device is based on Section 25(2) no. 2 TDDDG. Google may also process data outside the European Economic Area, particularly in the United States. Google is responsible for its further processing and must provide the safeguards required by law. More information is available in the Google Privacy Policy and Google Terms of Service.
If the verification falls below the configured security score, the form request will not be sent. This decision has no legal or similarly significant effect. If a legitimate request is blocked, you can contact us directly at info@margin-pulse.de.
12. Cookieless, Self-Hosted Website Statistics
We create simple, self-hosted website statistics to measure reach and improve the technical operation and content of our service. We record the page path, time, language, device category, the domain of an external referrer, and clicks on calls to action. When an enquiry is successfully submitted, a conversion event is also stored without the form content. We do not use analytics cookies, advertising identifiers, or an external analytics provider.
The IP address and browser type are used only on our server to generate a pseudonymous visitor value that changes weekly; the raw IP address is not stored in the statistics. The rotating value does not permit recognition across different weeks. Statistical events are deleted after no more than 100 days. Enabled “Do Not Track” and “Global Privacy Control” browser signals are respected.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is privacy-conscious performance measurement, error detection, and optimisation of the website. The data remains on our own webspace and is not disclosed for advertising purposes. You may object to this processing at any time by emailing info@margin-pulse.de.
13. Public Amazon Sign-In and Marketing Services
Amazon sign-in on the public website and marketing technology are not currently active. Amazon connections for contracted customers are described in Section 7. Before further external services are activated, this Privacy Policy will be updated and prior consent will be obtained where required.
14. Data Security
This website is transmitted using encrypted HTTPS. We take appropriate technical and organisational measures to protect personal data against loss, manipulation, and unauthorised access. However, completely risk-free transmission over the internet cannot be guaranteed.
15. Your Rights
Where the statutory requirements are met, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), and objection (Article 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then no longer process the data concerned unless compelling legitimate grounds or legal claims require otherwise.
To exercise your rights, email info@margin-pulse.de.
16. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is in particular:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
17. Automated Decisions and Updates
Except for the automated spam assessment described in Section 11, no automated decision-making, including profiling, takes place on this website. The spam assessment has no legal or similarly significant effect. We will update this Privacy Policy when website functions, service providers, or legal requirements change.