Privacy Policy

The controller for personal data processed through purepofo advisor is Dr. Hazem Hamoudia Management Consulting, Munich, Germany.

For privacy-related questions, please contact support@purepofo.com.

This Privacy Policy explains how we process personal data when professional users access the website, create accounts, use advisor workspaces, or contact us.

This may include name, email address, organization, login identifiers, subscription details, and account preferences.

This may include mandate inputs, allocation settings, shortlist notes, research workflow content, construction decisions, monitoring items, and client-report preparation data entered by authorized users.

We may process IP address, browser type, device information, logs, page interactions, and performance diagnostics needed to operate and secure the service.

If you contact us, we may process the information contained in your request and our related correspondence.

We process data to create and manage accounts, provide subscriptions, maintain advisor workspaces, and deliver requested product functionality.

We process data to authenticate users, detect misuse, protect the service, troubleshoot issues, and improve platform stability.

We may process data where necessary to meet accounting, tax, security, or other legal obligations.

We may process data to improve product performance, understand service adoption, and protect our legal interests, while taking user rights into account.

We may share data with carefully selected providers supporting hosting, authentication, payments, infrastructure, analytics, and communications.

Where a workspace is used on behalf of an organization, that organization remains responsible for its own professional and client-data obligations.

If data is transferred outside the EEA, we use appropriate safeguards such as adequacy decisions or Standard Contractual Clauses where required.

We retain personal data only as long as necessary for the purposes described here, for support and contractual needs, and for mandatory legal retention obligations.

We use reasonable technical and organizational measures, including access controls, secure infrastructure, and monitoring, to protect personal data.

Where applicable, you may have rights of access, rectification, erasure, restriction, objection, and data portability under data-protection law.