SYSTEM ONLINE
Mode:
DE EN
SYSTEM ONLINE LOC: FRA1

{ legal / information }

Privacy policy

UhuruTec AG Privacy Policy
Effective: June 2025

1. General Information

The following privacy policy provides an overview of the types of personal data we process, the purposes for which we process them, and the legal basis for such processing. Personal data refers to any information that can be linked to you personally, such as your name, address, email addresses, or your user behavior. In addition, we inform you about your rights vis-à-vis us as the data controller.

2. Data Controller

The data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is UhuruTec AG (“we/us”). For more information about us, please refer to the legal notice. If you have any questions regarding data protection, you can contact us at datenschutz@uhurutec.com.

3. Data Processing on This Website

When you use our website for informational purposes only, we automatically collect and store information in server log files that your browser transmits to us. This data is technically necessary for us to display this website to you and to ensure its stability and security (the legal basis is Section 25(2)(2) of the German Telemedia Act (TDDG) in conjunction with Article 6(1)(f) of the GDPR):

  • IP address (anonymized)
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • The amount of data transferred
  • Website from which the request originated (so-called referrer)
  • Browser, operating system, and its interface
  • Language and version of the browser software
  • Internet service provider of the accessing system

We will not associate this data with specific individuals, nor will we combine this data with other data sources. This data is stored exclusively on servers located in the EU. After being used for the purposes described above, we will delete the data after seven days.

4. Contacting us

When you send us inquiries, we will ask for your name, contact information, and any other details we need to process your request. We use the data you provide to respond to or process your inquiry. The legal basis is either Article 6(1)(b) or (f) of the GDPR, depending on whether your inquiry is aimed at entering into a contract or serves other communication purposes.

5. Data Protection in Job Applications and the Application Process
5.1. Categories of Personal Data

When you apply for a position with us, we generally process the following personal data:

Special categories of personal data pursuant to Article 9(1) of the GDPR

We may process health data if, for example, you have indicated that you have a severe disability.

5.2. Purpose of Data Processing

We process your personal data for the purpose of deciding whether to establish an employment relationship or other form of employment (e.g., an internship).

5.3. Legal Basis for Processing

The legal basis for processing your data during the application process is Section 26(1) Sentence 1 of the Federal Data Protection Act (BDSG) or Article 6(1)(b) and (f) of the GDPR.

If you have given us consent to process your personal data for a specific purpose, the legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time.

5.4. Deletion of Your Data

We retain your data for up to 6 months after a decision regarding the establishment of the employment relationship. After that, we delete it.

6. Cookies and Other Technologies

We use cookies and other technologies on our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie.

6.1. Consent Manager

We use a consent manager on our website to obtain your consent for the use of and processing by specific cookies on your device and to document this in compliance with data protection regulations. The provider of this technology is

die onthewall GmbH, 1096 Berlin (https://onthewall.de/)

(hereinafter “Consent Manager Provider”)

When you visit our website, a connection is established with the Consent Manager Provider’s servers to obtain your consents and other declarations regarding cookie usage.

The Consent Manager stores a cookie in your browser to be able to associate the consents you have granted or refused, as well as any revocations thereof. The data collected in this manner is processed until you request its deletion, delete the Consent Manager cookie yourself, or the purpose for data processing no longer applies. Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

The Consent Manager is used to obtain any legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

We have entered into a data processing agreement with the Consent Manager provider for this purpose. This data processing agreement ensures that the Consent Manager provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

6.2. Microsoft Clarity

We collect and process various types of user information on our website via the “Microsoft Clarity” service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter “Microsoft”) for the purpose of statistical analysis of user behavior, as well as for optimization and marketing purposes.

The user information consists of the following data:

  • IP address
  • Location
  • Browser information
  • Screen resolution
  • Language settings
  • Visited website/subpages
  • Date/time of access to the website
  • Clicks, scrolls, mouse movements

Pseudonymized user profiles may be created and evaluated from this data for the purposes mentioned above.

Microsoft stores the data in the Azure Cloud. We have entered into a data processing agreement with Microsoft, obligating Microsoft to protect our customers’ data and not to disclose it to third parties.

All processing described above will only take place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Microsoft Clarity will not be used during your visit to the site.

You may revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service in the “Consent Manager” provided on our website.

For more information about Microsoft Clarity’s privacy policy, please visit https://clarity.microsoft.com/terms.

7. Google Services
7.1. General Information and Transfers to Third Countries

We use various services provided by the third-party provider Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (“Google”) on our website.

Google’s privacy policy can be found at:
http://www.google.de/intl/de/policies/privacy.

There you will also find further information regarding your rights in this regard and settings options to protect your privacy.

We generally use Google’s services in what is known as Basic Consent Mode. This means that we do not transmit any personal data to Google or set cookies unless you have given us your consent in accordance with Section 25(1) sentence 1 of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may revoke your consent at any time.

To exercise your right of withdrawal, please deactivate the relevant service via the “cookie banner” provided on our website.

If you consent to the processing or setting of cookies in connection with Google’s services, you thereby grant both us and Google consent to process your data and set cookies for the purposes specified here. Further information on the respective Google services can be found in the following sections.

For more information about Microsoft Clarity’s privacy policy, please visit https://clarity.microsoft.com/terms.
For the United States, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (such as Singapore) cannot be completely ruled out, we have also entered into the EU Standard Contractual Clauses with the provider.

7.2. Google Tag Manager

We use Google Tag Manager (GTM) on our website to manage JavaScript and HTML tags (tags) for tracking and analytics using our own and third-party software (e.g., Google Analytics). GTM is merely a support service that facilitates the integration and management of our tags via a separate interface. GTM does not set its own cookies. It merely triggers tags from other tracking and analytics services, which in turn collect your personal data
provided you have given your consent. However, GTM does not access this data.

The legal basis for the use of GTM is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in the aforementioned management of our tracking and analytics services.

For more information about Google Tag Manager, please visit
https://support.google.com/tagmanager/answer/6102821?hl=de.

7.3. Google Analytics 4

We use Google Analytics 4 on our website, a web analytics service provided by Google that allows us to analyze how you use our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last digits to prevent direct personal identification.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service via the “cookie banner” provided on our website. Alternatively, you can download a browser add-on HERE to deactivate Google Analytics 4.

For further legal information regarding Google Analytics 4, please visit
https://policies.google.com/privacy?hl=de&gl=de and
https://policies.google.com/technologies/partner-sites

7.4. Google reCAPTCHA

We also use Google reCAPTCHA in some input forms. Google reCAPTCHA is a security plugin provided by Google that helps protect your data and our websites from spam and abusive activities by determining whether the user is a human or a bot. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA ensures the integrity and functionality of our systems by defending against spam, DDoS attacks, and similar automated malicious interference. To this end, reCAPTCHA uses advanced risk analysis techniques to distinguish humans from bots. To perform the necessary analysis, reCAPTCHA evaluates various pieces of information:

  • IP address
  • the website from which an accessing system reaches our website (so-called referrer)
  • information about the operating system
  • the duration of the visitor’s stay on the website
  • the date and time of access to the website
  • browser types and versions used
  • The user’s mouse movements in the area of the reCAPTCHA checkbox (“I’m not a robot”)

If reCAPTCHA transmits your IP address, it will not be combined with other data held by Google unless you are logged into your Google account at the time you use the reCAPTCHA plugin. You can prevent such data transmission and storage of data about you and your behavior on our website by Google by logging out of Google before visiting our website or using the reCAPTCHA plugin.

For information on the purpose and scope of data collection, as well as the further processing and use of the data by Google, and your rights and options regarding the protection of your privacy, please refer to Google’s privacy policy at https://www.google.de/intl/de/privacy

The legal basis for the use of Google reCAPTCHA is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time with future effect by preventing the storage of cookies through the appropriate settings in your browser software; however, we would like to point out that in this case, you may not be able to use all
features of this website to their full extent.

Further information about Google reCAPTCHA can be found at
https://www.google.com/recaptcha/about/

8. Social Media

We also welcome you to use our pages on GitLab, GitHub, Facebook, LinkedIn, Xing, and Nextcloud. Please note that these pages are hosted on web servers that are beyond our control. Accordingly, we cannot guarantee the protection of your personal data when you access these pages; the handling of your personal data is determined by the operator of the respective website.

You can find GitLab’s privacy policy here:
https://about.gitlab.com/privacy

You can find GitHub’s privacy policy here:
https://docs.github.com/en/github/site-policy/github-privacy-statement

You can find LinkedIn’s privacy policy here:
1. https://www.linkedin.com/legal/privacy-policy
2. PDF download of the UhuruTec privacy policy for LinkedIn

You can find Xing’s privacy policy here:
1. https://privacy.xing.com/de/datenschutzerklaerung
2. PDF download of the UhuruTec privacy policy for Xing

You can find the privacy policy for Nextcloud here:
PDF download of the UhuruTec privacy policy for Nextcloud

You can find the privacy policy for Meta here:
PDF download of the UhuruTec Privacy Policy with META

9. SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

10. Routine Deletion and Blocking of Personal Data

Data is processed and stored for as long as necessary to fulfill the purpose of storage. It is subsequently deleted as soon as permitted by law.

11. Your Rights

You have the following rights with respect to your personal data:

11.1. Right of Access

You have the right to request information regarding the categories of data processed, the purposes of processing, any recipients of the data, and the planned storage period (Art. 15 GDPR);

11.2. Right to rectification

You have the right to request the rectification or completion of inaccurate or incomplete data (Art. 16 GDPR);

11.3. Right to erasure

You have the right, in certain cases under Article 17 of the GDPR, to request the erasure of data—in particular, if the data is no longer necessary for the intended purpose or is being processed unlawfully, or if you have withdrawn your consent or objected to the processing;

11.4. Right to restriction of processing

You have the right, under certain conditions, to request the restriction of data processing if erasure is not possible or the obligation to erase is disputed (Art. 18 GDPR);

10.5. Right to Withdraw Consent

You have the right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR);

11.6. Right to Object to Processing

You have the right to object to data processing based on a legitimate interest for reasons arising from your particular situation. In addition, you may object at any time, without providing a reason, to the processing of your personal data for the purposes of marketing and data analysis (Art. 21(1) GDPR).

11.7. Right to Data Portability

You have the right to data portability, i.e., you may receive the data you have provided to us in a commonly used machine-readable format, such as CSV, and, if necessary, transmit it to others (Art. 20 GDPR).

11.8. Right to lodge a complaint

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may also lodge a complaint with a data protection supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, who is responsible for us (Art. 77 GDPR).

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg

Street address:
Lautenschlagerstraße 20
70173 Stuttgart

Mailing address:

P.O. Box 10 29 32
70025 Stuttgart
Tel.: 0711/615541-0
Email: poststelle@lfdi.bwl.de

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.