Privacy Policy

Preamble

With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to as "data") that we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the provision of our services and in particular on our websites, mobile applications, and external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").

The terms used are not gender-specific.

As of: October 5, 2023

Table of Contents

Controller

unframe GmbH
Viktoriaallee 4
16547 Birkenwerder

Represented by:
Tim Ebert
Maximilian Hackbarth
Sebastian Wloch

Contact:
Phone: +49 (0) 3303 8172815
Email: info@unframe.io

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects.

Types of processed data

Categories of data subjects

Purposes of processing

Legal Bases for Processing

Below, we provide an overview of the legal bases of the GDPR on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, if more specific legal bases are applicable in individual cases, we will inform you of these in the privacy policy.

Security Measures

We implement appropriate technical and organizational measures in accordance with legal requirements, taking into account the state of the art, the implementation costs, and the nature, scope, context, and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, availability, and separation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and the response to data threats. We also take into account the protection of personal data when developing or selecting hardware, software, and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings.

TLS encryption (https): To protect your data transmitted via our online offering, we use TLS encryption. You can recognize encrypted connections by the prefix https:// in the address line of your browser.

Transfer of Personal Data

As part of our processing of personal data, it may be necessary to transfer the data to other entities, companies, legally independent organizational units, or individuals or to disclose them to them. These recipients may include, for example, IT service providers or providers of services and content that are integrated into a website. In such cases, we comply with legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Data Processing in Third Countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, entities, or companies, this will only occur in accordance with legal requirements.

Subject to express consent or contractual or legal transfer, we process or have the data processed only in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications, or binding internal data protection regulations (Articles 44 to 49 GDPR, Information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en).

Deletion of Data

The data processed by us will be deleted or their processing restricted in accordance with legal requirements as soon as their storage is no longer necessary for the purposes for which they were collected or if you revoke your consent. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons or that is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.

Our privacy policy may also provide further information on the retention and deletion of data that is specific to the respective processing activities.

Use of Cookies

Cookies are small text files or other storage technologies that store and retrieve information on your device. For example, to store the login status in a user account, the contents of a shopping cart in an online store, or the visited pages and used functions of an online offering. Cookies can also be used for different purposes, such as functionality, security, and convenience of online offerings, as well as for analyzing visitor traffic.

Consent Notice: We use cookies in accordance with legal requirements. Therefore, we obtain prior consent from users, unless it is not required by law. Consent is not required, in particular, if the storage and retrieval of information, including cookies, is absolutely necessary to provide users with an expressly requested telemedia service (i.e., our online offering). Cookies that are absolutely necessary usually include cookies with functions that serve the display and functionality of the online offering, load balancing, security, storage of user preferences and choices, or similar purposes related to the provision of the main and ancillary functions of the online offering requested by users. The revocable consent is clearly communicated to users and includes information about the specific use of cookies.

Legal Bases for Data Processing: The legal basis for processing personal data using cookies depends on whether we ask users for consent. If users give their consent, the legal basis for processing their data is the declared consent. Otherwise, the data processed using cookies is based on our legitimate interests (e.g., in the economic operation of our online offering and the improvement of its usability) or, if the use of cookies is necessary to fulfill our contractual obligations, on the performance of a contract. We will inform users about the purposes for which we process cookies as part of this privacy policy or as part of our consent and processing procedures.

Storage Duration: With regard to the storage duration, the following types of cookies are distinguished:

General Notice on Revocation and Objection (Opt-Out): Users can revoke their consent at any time and also object to the processing of their data in accordance with the legal requirements of Art. 21 GDPR. Users can also declare their objection through the settings of their browser, for example, by deactivating the use of cookies (which may also restrict the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.

  • Legal Bases: Legitimate interests (Art. 6 (1) (f) GDPR); Consent (Art. 6 (1) (a) GDPR).

    • Further Information on Processing Procedures, Procedures, and Services:

  • Processing of cookie data based on consent: We use a procedure for cookie consent management, within the framework of which users' consents to the use of cookies, as well as the processing activities and providers mentioned in the cookie consent management procedure, can be obtained, managed, and revoked by users. The consent declaration is stored in order to avoid having to repeat the query and to be able to prove the consent in accordance with legal obligations. Storage can be done on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to be able to assign the consent to a user or his device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of the consent can be up to two years. For this purpose, a pseudonymous user identifier is created and stored together with the time of consent, information on the scope of the consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and device used; Legal Basis: Consent (Art. 6 (1) (a) GDPR).

    • Provision of the Online Offering and Web Hosting

    We process user data to provide them with our online services. For this purpose, we process the IP address of the user, which is necessary to transmit the contents and functions of our online services to the user's browser or device.

    Further Information on Processing Procedures, Procedures, and Services:

  • Provision of online offering on rented storage space: For the provision of our online offering, we use storage space, computing capacity, and software that we rent or otherwise obtain from a corresponding server provider (also called "web hoster"); Legal basis: Legitimate interests (Art. 6 (1) (f) GDPR).
  • Collection of access data and log files: Access to our online offering is logged in the form of so-called "server log files". Server log files may include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, a message about successful access, the type and version of the browser, the user's operating system, the referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider. Server log files can be used, on the one hand, to ensure security, for example, to avoid overloading servers (especially in the case of abusive attacks, so-called DDoS attacks), and, on the other hand, to ensure the load balancing and stability of the servers; Legal basis: Legitimate interests (Art. 6 (1) (f) GDPR); Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymized. Data whose further retention is necessary for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

    • Contact and Inquiry Management

    When contacting us (e.g., by post, contact form, email, telephone, or via social media) and in the context of existing user and business relationships, the information provided by the inquiring individuals is processed to the extent necessary to respond to the contact inquiries and any requested measures.

  • Processed data types: Contact data (e.g., email, telephone numbers); Content data (e.g., entries in online forms); Usage data (e.g., websites visited, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
  • Data subjects: Communication partners.
  • Purposes of processing: Contact inquiries and communication; Management and response to inquiries; Feedback (e.g., collecting feedback via online form); Provision of our online offering and user-friendliness.
  • Legal bases: Legitimate interests (Art. 6 (1) (f) GDPR); Performance of a contract and pre-contractual inquiries (Art. 6 (1) (b) GDPR).

    • Further Information on Processing Procedures, Procedures, and Services:

  • Contact form: When users contact us via our contact form, email, or other communication channels, we process the data provided to us in this context to process the respective request; Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 (1) (b) GDPR), Legitimate interests (Art. 6 (1) (f) GDPR).

    • Modification and Update of the Privacy Policy

    We ask you to regularly inform yourself about the content of our privacy policy. We will adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g., consent) or other individual notification.

    If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that the addresses may change over time and to check the information before contacting us.

    Rights of Data Subjects

    As data subjects, you have various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

    Our privacy policy may also provide further information on the retention and deletion of data that is specific to the respective processing activities.

    Use of Cookies

    Cookies are small text files or other storage markers that store information on end devices and read information from end devices. For example, to store the login status in a user account, the contents of a shopping cart in an e-shop, the accessed content, or the used functions of an online offering. Cookies can also be used for various purposes, such as ensuring the functionality, security, and convenience of online offerings, as well as creating analyses of visitor traffic.

    Consent Notice: We use cookies in accordance with legal requirements. Therefore, we obtain prior consent from users, unless it is not required by law. Consent is not necessary, in particular, if storing and reading the information, including cookies, is absolutely necessary to provide users with a telemedia service expressly requested by them (i.e., our online offering). Cookies that are absolutely necessary usually include cookies with functions that serve the display and functionality of the online offering, load balancing, security, storage of user preferences and choices, or similar purposes related to the provision of the main and ancillary functions of the online offering requested by users. The revocable consent is clearly communicated to users and contains information about the respective cookie usage.

    Information on the Legal Bases of Data Processing: The legal basis on which we process users' personal data using cookies depends on whether we ask users for consent. If users give their consent, the legal basis for processing their data is the declared consent. Otherwise, the data processed using cookies is based on our legitimate interests (e.g., in the commercial operation of our online offering and improving its usability) or, if the use of cookies is necessary to fulfill our contractual obligations, the legal basis is the performance of a contract. We will clarify the purposes for which we process cookies in the course of this privacy policy or as part of our consent and processing procedures.

    Storage Duration: With regard to the storage duration, the following types of cookies are distinguished:

    General Notice on Revocation and Objection (Opt-Out): Users can revoke their consent at any time and also object to the processing of their data in accordance with the legal requirements of Art. 21 GDPR. Users can also declare their objection through the settings of their browser, for example, by deactivating the use of cookies (which may also restrict the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.

    Further Information on Processing Procedures, Procedures, and Services:

  • Processing of cookie data based on consent: We use a procedure for cookie consent management, within the framework of which users' consents to the use of cookies, as well as the processing activities and providers mentioned in the cookie consent management procedure, can be obtained, managed, and revoked by users. The consent declaration is stored in order to avoid having to repeat the query and to be able to prove the consent in accordance with legal obligations. Storage can be done on the server side and/or in a cookie (so-called opt-in cookie or using comparable technologies) in order to be able to assign the consent to a user or his device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of the consent can be up to two years. For this purpose, a pseudonymous user identifier is created and stored together with the time of consent, information on the scope of the consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and device used; Legal Basis: Consent (Art. 6 (1) (a) GDPR).

    • Provision of the Online Offering and Web Hosting

    We process user data to provide them with our online services. For this purpose, we process the IP address of the user, which is necessary to transmit the contents and functions of our online services to the user's browser or device.

    Further Information on Processing Procedures, Procedures, and Services:

    Contact and Inquiry Management

    When contacting us (e.g., by post, contact form, email, telephone, or via social media) and in the context of existing user and business relationships, the information provided by the inquiring individuals is processed to the extent necessary to respond to the contact inquiries and any requested measures.

  • Processed data types: Contact data (e.g., email, telephone numbers); Content data (e.g., entries in online forms); Usage data (e.g., websites visited, interest in content, access times); Meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
  • Data subjects: Communication partners.
  • Purposes of processing: Contact inquiries and communication; Management and response to inquiries; Feedback (e.g., collecting feedback via online form); Provision of our online offering and user-friendliness.
  • Legal bases: Legitimate interests (Art. 6 (1) (f) GDPR); Performance of a contract and pre-contractual inquiries (Art. 6 (1) (b) GDPR).

    • Further Information on Processing Procedures, Procedures, and Services:

    Modification and Update of the Privacy Policy

    We ask you to regularly inform yourself about the content of our privacy policy. We will adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g., consent) or other individual notification.

    If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that the addresses may change over time and to check the information before contacting us.

    Rights of Data Subjects

    As data subjects, you have various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

    Definition of Terms

    In this section, you will find an overview of the terms used in this privacy policy. Many of the terms are taken from the law and are primarily defined in Art. 4 GDPR. The legal definitions are binding. The following explanations are intended to help understand the terms. The terms are sorted alphabetically.