PRIVACY POLICY

Introduction and general information

Thank you for your interest in our website and our services. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is collected through your use of our website and our no-code platform. Your data is processed in accordance with the statutory data protection regulations.

Controller within the meaning of the GDPR

umnify GmbH
Alte Bahnhofstr. 15
35096 Weimar (Lahn)
info@umnify.com

Contact details of the data protection officer

umnify GmbH
Data Protection Officer
Alte Bahnhofstr. 15
35096 Weimar (Lahn)
info@umnify.com

Definitions of terms

Our privacy policy should be simple and understandable for everyone.
This privacy policy generally uses the official terms of the General Data Protection Regulation
(GDPR) are used. The official definitions are explained in Art. 4 GDPR.

Data processing on our no-code platform
User data and app creation
We collect the following data when you register and use our no-code platform
Email address
First name and surname
Salutation
Postal address
Telephone number (optional)
Date and time of registration
We also process data that you enter in the apps you have created yourself. This data is processed exclusively to the extent and for the purpose specified by you.

Legal basis for data processing
Your personal data is processed on the basis of Art. 6 para. 1 lit. b GDPR for the fulfilment of a contract or for the implementation of pre-contractual measures. In cases where your express consent is required, we obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Cloud storage
All data is stored on servers within the European Union. We use state-of-the-art encryption technologies to protect your data. If storage outside the EU is required, we ensure that an adequate level of data protection is guaranteed through standard contractual clauses or other suitable guarantees.

Differentiation between the versions
We offer both free and paid versions of our platform. Data processing is basically the same for all versions, but the scope of the data processed may vary depending on the version.
Server log files

When you visit our website, it is technically necessary for data to be sent to our web server via
data is transmitted to our web server via your internet browser. The following data is collected during an ongoing connection
communication between your internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Web browser and operating system used
(Full) IP address of the requesting computer
Amount of data transferred

We collect the listed data in order to ensure a smooth connection setup of the website
and to enable convenient use of our website by users. The log file is also used to
analyse system security and stability as well as for administrative purposes.
The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, in particular for defence against attempted attacks on our web
attempts to attack our web server, this data is stored by us for a short time. This data does not allow us to
not possible to draw conclusions about individual persons. After 6 months at the latest, the
anonymised by shortening the IP address at domain level, so that it is no longer possible to
to establish a link to the individual user.
The data may also be processed in anonymised form for statistical purposes.
This data is stored together with other personal data of the user,
a comparison with other databases or a transfer to third parties takes place at no time.

Cookies

Our website uses cookies, which are stored on your device by the browser and which contain certain
settings for the use of the website (e.g. for the current session). Cookies serve to make our
make our website more user-friendly, effective and secure. Cookies are small text files that are stored on
stored on your computer and saved by your browser. Most of the cookies we use are so-called
are so-called session cookies, which are automatically deleted when you close your browser.
Other cookies remain stored on your end device until you delete them or the storage period expires.
These cookies enable us to recognise your browser on your next visit.

In some cases, cookies are used to simplify website processes by saving settings
(e.g. the provision of already selected options). Insofar as individual cookies implemented by us
also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR
either for the performance of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our
legitimate interests in the best possible functionality of the website and a customer-friendly and
and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and cookies
allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and
activate the automatic deletion of cookies when closing the browser. The cookie settings
can be managed under the following links for the respective browsers

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also individually manage the cookies of many companies and functions that are used for advertising.
To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a so-called ‘do-not-track function’, which you can use to indicate
that you do not wish to be ‘tracked’ by websites. If this function is activated, the
the respective browser informs advertising networks, websites and applications that you do not wish to be
behavioural advertising and the like. Information and instructions,
how you can edit this function, depending on your browser provider, can be found under the following links:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Safari: https://support.apple.com/kb/PH21416?locale=de_DE
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

You can also prevent scripts from loading by default. NoScript allows the execution of JavaScripts,
Java and other plug-ins only for trusted domains of your choice. Information and instructions on how to edit this
function can be obtained from the provider of your browser
(e.g. for Mozilla Firefox at:
https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that the functionality of this website may be restricted if cookies are deactivated.

Web form for requesting a quote

A web form is provided on our website which you can use to contact us,
to request a free quote for our services by e-mail and telephone. The
The transmission of personal data via the web form is exclusively encrypted. If
If you use this option, the data entered in the input mask will be transmitted to us and stored.
stored. These data are The user’s e-mail address, first and last name, title, postal address and telephone number.
The following data is also stored when the message is sent: Date and time.
No data is passed on to third parties in this context. The data will be used exclusively
the scope of the stated purpose – to send an offer and to contact you by telephone – processed.
processed. The legal basis for the processing of the data transmitted in the course of sending an e-mail is the fulfilment
is the implementation of pre-contractual measures or a contract in accordance with Art. 6 para. 1 lit. b
GDPR or your consent granted to us pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
Your personal data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.
The personal data collected to obtain an offer will be deleted as soon as the offer has been sent and a
contact with you by telephone in a timely manner has taken place or was unsuccessful. Continued processing will only take place if it is necessary in the context of a resulting
initiation and processing of a contract or for the fulfilment of resulting contractual purposes.

Contact form and contact by email

If you send us enquiries via the contact form or e-mail, your details from the enquiry form or your
enquiry form or your e-mail, including the first and last name, title and postal address you provide there, will be
will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.
It is necessary to provide an e-mail address for contact purposes; providing your name and telephone number is voluntary.
telephone number is voluntary. We will never pass on this data without your consent.
The legal basis for processing the data is our legitimate interest in responding to your request in accordance with
your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that your
enquiry is aimed at the conclusion of a contract. Your data will be deleted after final processing
your enquiry, provided that there are no statutory retention obligations to the contrary. You can
in the case of Art. 6 para. 1 lit. f GDPR against the processing of your personal data at any time.
objection at any time.

Web form for sending applications

If you apply to us via our web form, we collect personal data. This includes
in particular your contact details (such as first and last name, title, postal address, telephone number and e-mail address of the user) as well as other data provided by you regarding your
(e.g. CV, qualifications, degrees and professional experience) and your personal details
(e.g. cover letter, personal interests). This may also include special categories of personal data
data (e.g. information on a severe disability). As a rule, your personal data will be
collected directly from you as part of the application process and encrypted during electronic transmission.
encrypted during electronic transmission. The data originates from the application form to be completed online and
from the uploaded files.
The data processing serves to initiate an employment relationship.
The primary legal basis for this is Art. 6 para. 1 b GDPR in conjunction with Section 26 para. 1 BDSG. In addition
consent pursuant to Art. 6 para. 1 lit. a, 7 GDPR in conjunction with Section 26 para. 2 BDSG can be used as a data protection law
permission regulation can be used. If the processing of your data is based on consent,
you have the right to withdraw your consent at any time with effect for the future.
Within our company, only those persons and departments (e.g. Human Resources) have access to your personal
personal data that they absolutely need to carry out the application process or to fulfil our legal obligations.
fulfil our legal obligations. If necessary, your applications will be forwarded to the responsible
responsible person for examination. Under no circumstances will your personal data be passed on to third parties without authorisation.
Your data relating to an application for a specific job advertisement will be stored and processed during the
stored and processed by us during the ongoing application process. After completion of the application process
(e.g. in the form of an acceptance or rejection), the application process, including all personal data, will be deleted after
deleted from the system 6 months after the end of the application process. In the event of a
we reserve the right to keep your application for longer if the date of entry is more than six months in the future.
more than six months in the future.

Registration

You have the option of registering for certain services provided on our website and thus creating a user profile.
and thus create a user profile. As part of the registration and set-up process, we collect and
use the following personal data:

e-mail address
First name and surname
Salutation
Postal address
Date and time of registration
Telephone number

In addition, voluntary information can be provided (e.g. telephone number etc.). Mandatory information,
provided for the purpose of registration are marked as mandatory fields in the input mask with an asterisk.
as a mandatory field. Your user account gives you the opportunity to use other parts of our website
website and to log in for the offers you have purchased. The legal basis for
data processing is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR if consent has been given,
if the processing is necessary to provide the requested services. Your data will be
deleted as soon as the user account on our website is deleted and insofar as there are no legal
retention obligations exist. You can request a change and/or deletion of your user account, including
data you have provided can usually be made directly in your user account after logging in
or by sending a corresponding message to the person responsible mentioned at the beginning.

Chat function

This website uses a live chat from Tidio LLC, 180 Steuart St, CA 94119 and San Francisco

to ensure the best possible user experience
experience. To answer live enquiries, your chat name and the chat content you have communicated are collected
and stored for the duration of the chat.
Cookies are used to operate the chat function. Cookies are small text files,
stored locally in the cache of the visitor’s Internet browser. The cookies enable
to recognise the visitor’s Internet browser in order to distinguish between individual users of the chat function on our website.
chat function of our website. The information generated by the cookies about your
use of this website (including your IP address) is transmitted to a Tidio LLC server and stored there.
stored there.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.
If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on
basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimisation purposes.
optimisation purposes. If the chat history is aimed at concluding a contract, the additional legal basis for processing is
for the processing is Art. 6 para. 1 lit. b GDPR.
The use of the service provider Tidio LLC is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on
on the basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimisation purposes.
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The chat
and your specified chat name will be deleted immediately as soon as we or you have ended the chat conversation, but no later than
6 months after the last message in the chat history.
To avoid the storage of cookies, you can set your Internet browser so that no more cookies can be stored on your computer in the future.
cookies can no longer be stored on your computer or cookies that have already been stored are deleted. However, switching off all
However, switching off all cookies may mean that the chat function on our website can no longer be used.
If consent has been given, the user has the option to withdraw their consent to the processing of personal data at any time.
revoke their consent to the processing of personal data. In such a case, the conversation cannot be continued.
Tidio LLC, based in the USA, is certified for the US-European data protection agreement ‘Privacy Shield’, which
guarantees compliance with the level of data protection applicable in the EU.
Further information on data protection can be found in the privacy policy of Tidio LLC, https://www.tidio.com/privacy-policy/.

Evaluation reminder

If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR
we will send your email address to the iFEEDBACK® rating platform, Mies-van-der-Rohe-Str. 8, 80807, Munich, so that they can send you a rating reminder by email.
send you a review reminder by e-mail. You can withdraw your consent at any time by sending a message to
the data controller or the rating platform at any time.

Newsletter

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require
we require your e-mail address as mandatory information. Additional data is provided in order to be able to address you personally in the newsletter and/or to identify you,
if you wish to exercise your rights as a data subject.
We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by email if
you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive
first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address
wish to receive newsletters in future. By confirming, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR,
that we may use your personal data for the purpose of sending you the desired newsletter.
When you register for the newsletter, we store the IP address in addition to the email address required for sending the newsletter,
which you used to register for the newsletter as well as the date and time of registration and confirmation,
in order to be able to trace possible misuse at a later date.

You can unsubscribe from the newsletter at any time using the link provided in every newsletter or by sending an e-mail
to the controller named above. After cancellation, your e-mail address will be
e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly
have not expressly consented to the continued use of the data collected or the continued processing is otherwise
is otherwise permitted by law.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (‘Google’).
Google Analytics uses so-called cookies.
These are text files that are stored on your computer and enable your use of the website to be analysed.
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
Google server in the USA and stored there. We only use Google Analytics with activated IP anonymisation.
This means that the IP address of users is anonymised by Google within member states of the European Union or
other signatory states to the Agreement on the European Economic Area, which means that a
personal reference can be excluded. Google is certified for the US-European data protection agreement
‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU.
Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
processing on this website is carried out for the purpose of website analysis.
Google will use this information on behalf of the operator of this website,
to analyse your use of the website, to compile reports on website activities
and to provide other services related to the use of the website and the internet to the website operator.
the website operator. The IP address transmitted by your browser as part of Google Analytics will not be
IP address will not be merged with other Google data. The terms of use of
Google Analytics and information on data protection can be accessed via the following links
http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software;
However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
use all the functions of this website. You can also prevent the collection of data generated by the cookie and related to your
data generated by the cookie and related to your use of the website (incl. your IP address) to Google and the processing of this
data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=de
and installing the browser plug-in available at this URL.
Clicking on the following link will prevent Google Analytics from collecting data by setting an opt-out cookie:
Deactivation of Google Analytics
Information on how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

Hotjar

Our website uses the web analysis service Hotjar from Hotjar Ltd. Hotjar Ltd.
is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street,
St Julians STJ 1000, Malta, Europe, Tel: +1 (855) 464-6788).
This tool can be used to track movements on the websites on which Hotjar is used (so-called heat maps).
For example, it is possible to recognise how far users scroll and which buttons users click and how often. Furthermore
the tool can also be used to obtain feedback directly from website users. Above all, the
functionality of the Hotjar-based website can be improved through Hotjar’s services by making it more user-friendly,
more user-friendly, more valuable and easier to use for end users.
We pay particular attention to the protection of your personal data when using this tool. This means that we can only
which buttons are clicked, the path of the mouse, how far the user scrolls, the screen size of the device
screen size of the device, device type and browser information, geographical location (only the country) and
the preferred language to display our website. Areas of the websites where personal data about you or third
you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time.
IP addresses are only stored and processed in anonymised form in order to prevent them from being directly linked to individuals.
However, Hotjar uses various third-party services such as Google Analytics and Optimizely. It may therefore be the case
that these services collect data that is transmitted by your browser as part of web page requests.

These would be, for example
cookies or your IP address. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent given by you
for the purpose of statistical analysis of user behaviour for optimisation and marketing purposes.
Hotjar offers every user the option of using a ‘Do Not Track header’ to prevent the
use of the Hotjar tool so that no data about the visit to the respective website is recorded.
are recorded. This is a setting that all standard browsers in current versions support.
current versions support. To do this, your browser sends a request to Hotjar with the message
to deactivate the tracking of the respective user. If you use our websites with different browsers/computers
browsers/computers, you must set up the ‘Do Not Track header’ separately for each of these browsers/computers.
separately for each of these browsers/computers.
When visiting a Hotjar-based website, you can prevent the collection of your data by Hotjar
at any time by going to our opt-out page https://www.hotjar.com/legal/compliance/opt-out
and clicking on Deactivate Hotjar.
You can find more information about Hotjar Ltd. and the Hotjar tool at
https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at
https://www.hotjar.com/privacy

Google Analytics Remarketing/DoubleClick

Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google
functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This function enables the advertising target groups created with Google Analytics Remarketing to be combined with the cross-device functions of
Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages can be displayed,
which have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on
another of your devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose.
In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account.
To support this function, Google Analytics collects authenticated user IDs that are temporarily linked to our Google Analytics data.
Google Analytics data to define and create audiences for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising
in your Google account by following this link: https://adssettings.google.com/
The data collected in your Google account is summarised exclusively on the basis of your
on the basis of your consent, which you can give or withdraw from Google (Art. 6 para. 1 lit. a GDPR).
The information collected about users may be transmitted to Google and stored on Google’s servers in the USA. Google is certified for the us-European data protection agreement
‘Privacy Shield’, which guarantees compliance with the level of data protection applicable in the EU.
Further information and the data protection provisions can be found in Google’s privacy policy
at: https://www.google.com/policies/technologies/ads/

Facebook Pixel

We use ‘Facebook Pixel’ on our website, a service provided by
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter referred to as: ‘Facebook’).
Facebook Pixel enables Facebook to display our adverts on Facebook, so-called ‘Facebook Ads’, only to those
Facebook users who have visited our website, in particular those who have shown an interest
have shown interest in our online offering. Facebook Pixel also makes it possible to check whether a user
was redirected to our website after clicking on our Facebook Ads.
Among other things, Facebook Pixel uses cookies, i.e. small text files that are stored locally in the cache
cache of your web browser on your end device. If you are logged into Facebook with your user account
the visit to our online offer will be noted in your user account. The data collected about you
The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user.
However, this data can be linked by Facebook to your user account there. If you have
have a Facebook user account and are registered, Facebook can assign the visit to your user account.

(2) We use Facebook Pixel for marketing and optimisation purposes, in particular to place relevant and interesting ads for you on
relevant and interesting adverts for you on Facebook and thus improve our offer, make it more
more interesting for you as a user and to avoid annoying adverts.
(3) If you have given your consent to the storage of Facebook Pixel, this will be
this is done on the basis of Art. 6 para. 1 lit. a GDPR.
(4) The aforementioned collection by Facebook Pixel and the use of your data to
of your data for the display of Facebook Ads. The relevant settings,
which types of adverts are displayed to you within Facebook can be made on the following
the following Facebook website:
https://www.facebook.com/settings?tab=ads.
Please note that this setting will be deleted if you delete your cookies.
In addition, you can deactivate cookies that are used for reach measurement and advertising purposes via the
deactivate the following websites:
http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/
Please note that this setting will also be deleted if you delete your cookies.
(5) In addition, Facebook has submitted to the Privacy Shield Agreement concluded between the European
Privacy Shield agreement concluded between the European Union and the USA and is certified. This means that
Facebook undertakes to comply with the standards and regulations of European data protection law. Further
information can be found in the entry linked below:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
(6) Information from the third-party provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Further information from the third-party provider on data protection can be found on the following Facebook website
Facebook website: https://www.facebook.com/about/privacy.
Information on Facebook Pixel can be found on the following Facebook website
https://www.facebook.com/business/help/651294705016616

etracker

On this website, we use the services of etracker GmbH (www.etracker.com) for web analysis.
automatically collected and stored, from which user profiles are created using pseudonyms.
Insofar as you have given your consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
data is automatically collected on this website using technologies from etracker GmbH (www.etracker.com) for the purpose of website analysis.
automatically collected for the purpose of website analysis.
The pseudonymised user profiles are not combined with personal data without separate
pseudonymised user profiles are not merged with personal data about the bearer of the pseudonym without express consent.
After the end of the purpose and the end of the use of eTracker by us, the data collected in this context will be deleted.
data will be deleted. You can object to the collection and storage of data at any time with effect for the future,
by clicking on this link (http://www.etracker.de/privacy?et=jLs).
After your objection, an opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.

Google AJAX Search API

We use Ajax on these pages. Google AJAX Search API is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This tool is used to optimise the
loading speeds is achieved. For this purpose, programme libraries are called from Google servers and
the CDN (content delivery network) of Google is used. If you have previously used jQuery on another
page from the Google CDN, your browser will fall back on the copy stored in the cache.
If this is not the case, this requires a download, whereby data from your browser is sent to Google
to Google. Your data will be transferred to the USA. You can find out more in the
privacy policy of the provider: https://policies.google.com/privacy?hl=de&gl=de
The legal basis for this processing is the legitimate interest in being able to provide you with the offer of
to give you the opportunity to search the contents of our website in the event of a large number of
to be able to search the contents of our site. We do not know which data Google links with the data received
and for what purposes Google uses this data. Google is certified for the US-European
‘Privacy Shield’ data protection agreement, which guarantees compliance with the data protection level applicable in the EU.
data protection level applicable in the EU. To prevent the execution of Java Script code from Google altogether,
you can install a JavaScript blocker (e.g. www.noscript.net).

Google Maps

Our website uses an interface with the
online map service provider Google Maps. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functionalities of Google Maps it is necessary to save your IP address,
to save your IP address. This information is transmitted to a Google server in the USA and stored there.
and stored there. The provider of this site has no influence on this data transfer. The use
of the map service Google Maps is in the interest of an appealing presentation of our online offer
and to make it easier to find the addresses listed on our website. This constitutes a
legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Further information on the handling of
user data can be found in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

Goolge Web Fonts

(1) We use ‘Google Web Fonts’ on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
(hereinafter referred to as: ‘Google’). Google Web Fonts enables us to use external fonts, so-called
fonts, so-called Google Fonts. For this purpose, when you access our website, the required Google Fonts are loaded from your web browser
loaded into your browser cache. This is necessary so that your browser can also display a visually improved presentation of our texts.
If your browser does not support this function, a standard font will be used by your computer for display. The integration of these
web fonts is done by a server call, usually a Google server in the USA. This transmits to the server
which page of our website you have visited. The IP address of the browser of the visitor’s end device is also stored by Google.
stored.
(2) We use Google Web Fonts for optimisation purposes, in particular to improve the use of our website for you and to make it more user-friendly.
and to make its design more user-friendly.
(3) This is also our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
(4) Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and is certified.
Google thereby undertakes to comply with the standards and regulations of European data protection law. You can find more information
the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
(5) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland,
Fax: +353 (1) 436 1001.
Further information on data protection can be found in Google’s privacy policy:
http://www.google.de/intl/de/policies/privacy
Further information on Google Web Fonts can be found at
http://www.google.com/webfonts/, https://developers.google.com/fonts/faq?hl=de-DE&csw=1 and
https://www.google.com/fonts#AboutPlace:about.

Adobe Typekit Fonts

We use so-called web fonts provided by Adobe for the standardised display of fonts.
Adobe Typekit is a service that enables access to a font library and is provided by the company
Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
display texts and fonts correctly. For this purpose, the browser you are using must connect to the Adobe servers.
Adobe servers for this purpose. This informs Adobe that our website has been accessed via your IP address.
website was accessed via your IP address. The use of Adobe TypeKit fonts is in the interest of a standardised and
and appealing presentation of our online offers. The legal basis is Art. 6 para. 1 lit. f GDPR.
Adobe is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law ().
data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active ).
Further information on Adobe TypeKit Fonts can be found in Adobe’s privacy policy:
https://www.adobe.com/de/privacy/policies/typekit.html
You can set your browser so that the fonts are not loaded from the Adobe servers (e.g. by
(e.g. by installing add-ons such as NoScript or Ghostery).
If your browser does not support Adobe fonts or you prevent access to the Adobe servers,
the text will be displayed in the system’s default font.

Goolge reCAPTCHA

We use ‘Google reCAPTCHA’ (hereinafter ‘reCAPTCHA’) on our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).
The purpose of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is made by a human being
or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on
various characteristics. This analysis begins automatically as soon as the website visitor enters the website.
For the analysis, reCAPTCHA evaluates various information, e.g.

IP address
How long the website visitor stays on the website
Mouse movements made by the user
The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is being
analysis is taking place. Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.
We have a legitimate interest in protecting our website from abusive automated spying and from unwanted, automated
unwanted, automated mailings (spam).
Google is certified for the US-European data protection agreement ‘Privacy Shield’,
which guarantees compliance with the level of data protection applicable in the EU.
We do not store any personal data from the use of reCAPTCHA. The general rule is
personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies.
Further information on Google reCAPTCHA and Google’s privacy policy can be found at the following links
can be found at: https://www.google.com/intl/de/policies/privacy/ and
https://www.google.com/recaptcha/intro/v3beta.html

YouTube

Our website uses plugins from the Google-operated YouTube site. The operator of the pages is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established.
to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.
If you are logged in to your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile.
to your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube’s privacy policy at
https://www.google.de/intl/de/policies/privacy

Data transfer and recipients

Your personal data will not be transferred to third parties unless
– if we have explicitly indicated this in the description of the respective data processing
– if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
– the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the establishment, exercise or defence of
defence of legal claims and there is no reason to assume that you have an overriding legitimate
interest in the non-disclosure of your data,
– in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
– insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
We also use external service providers for the processing of our services, which we have carefully selected
and commissioned in writing. They are bound by our instructions and are regularly monitored by us.
If necessary, we have concluded order processing contracts with them in accordance with Art. 28 GDPR.
These are service providers for web hosting, the sending of e-mails as well as the maintenance and
maintenance of our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

We take security measures in accordance with Art. 32 GDPR, taking into account the state of the art, the
costs of implementation and the nature, scope, context and purposes of processing as well as the risk of
probability of occurrence and severity of the risk to the rights and freedoms of natural persons
of natural persons, appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.
level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the
transmission of confidential content, this website uses SSL encryption.

Duration of storage of personal data

The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g. from
retention periods (e.g. from commercial law and tax law). After expiry of the respective period
the corresponding data is routinely deleted. If data is required for contract fulfilment or
contract fulfilment or contract initiation or if we have a legitimate interest in the further storage of the data
the data will be deleted if they are no longer required for these purposes or if you exercise your right of revocation or objection.
your right of cancellation or objection.

Your rights

Below you will find information on the rights of data subjects under the applicable data protection law
rights vis-à-vis the controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR.
In particular, you can request information about the purposes of processing, the category of personal data, the
categories of recipients to whom your data has been or will be disclosed, the planned storage period,
the existence of a right to rectification, erasure, restriction of processing or objection
the existence of a right to lodge a complaint, the origin of your data if it was not collected by us
the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.
information on the details thereof.
The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or completion of your personal data stored by us.
personal data stored by us.
The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR,
unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal
fulfil a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal
or defence of legal claims.
The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR,
if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we
erasure and we no longer need the data, but you require it for the establishment, exercise or defence of legal
defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR
The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a
structured, commonly used and machine-readable format or to request transmission to another controller.
responsible person.
The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable
that of your usual place of residence or workplace.
The right to withdraw consent given in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time.
revoke your consent to the processing of data at any time with effect for the future.
In the event of revocation, we will delete the data concerned immediately, provided that further
processing cannot be based on a legal basis for processing without consent.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
processing is not affected;

Right to object

If your personal data is processed by us on the basis of legitimate interests
pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to
right to object to the processing of your personal data,
insofar as this is done for reasons arising from your particular situation.
Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing
you have a general right to object without the need to specify a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to info@umnion.com.

External links

Social networks (Facebook, Twitter and Xing) are only integrated on our website as links to the corresponding services.
services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider.
respective provider. Only after you have been forwarded will user information be transmitted to the respective
provider. For information on the handling of your personal data when using these websites
please refer to the respective data protection provisions of the providers you use.

Subject to change

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable
data protection regulations. In this way, we can adapt it to the current
legal requirements and take changes to our services into
services, e.g. when introducing new services. The latest version applies to your visit.