1. Controller
InPro electric GmbH, Benzstraße 31-33, 38446 Wolfsburg, Germany. Data protection contact: datenschutz@inpro-electric.de. This notice supplements the privacy policy of InPro electric GmbH.
2. Data processed
- Connection data: QuickBooks company ID and company name, the email address of the QuickBooks user who authorized the connection, and the OAuth access and refresh tokens.
- Business data from QuickBooks: transactions such as invoices, credit memos, bills and vendor credits with numbers, dates, amounts, taxes, currency, customer or vendor name and address, email addresses on the transaction, custom fields and memos, as well as their PDFs and attachments.
- Usage data: the InProjekt user who connected the App, changed its settings or recorded a transaction, and technical log entries.
3. Purposes
Internal accounting and project controlling of the InPro group: recording sales invoices against projects and orders and routing supplier invoices into the approval workflow of the document management system. The data is not used for marketing or profiling and is not sold.
4. Recipients
Only authorized employees of the InPro group with role-based permissions have access. Data is not disclosed to third parties, except to Intuit as the provider of QuickBooks Online when the App calls its interface, and to IT service providers acting on InPro's behalf under data processing agreements.
5. Storage location
The data is stored on servers operated by or on behalf of the InPro group in Germany. Data of the InPro group company in the United States is therefore transferred to Germany within the InPro group for the purposes above.
6. Security
All connections use TLS. OAuth tokens are encrypted at rest with AES-256-GCM; the key is kept separately from the database. Access is only possible through InProjekt with authentication and role-based permissions. QuickBooks user names and passwords are entered only at Intuit and are never seen or stored by the App.
7. Retention
Tokens are deleted when the connection is ended. Business data and documents are kept as long as required for accounting, generally up to ten years under German commercial and tax law, and are deleted afterwards.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability under the GDPR, and the right to lodge a complaint with a supervisory authority. Please contact datenschutz@inpro-electric.de.