Privacy Policy

§ 1 Data Controller

Responsible for data processing on this B2B platform (UYUNI):

UYUNI
Tenko Krüger
De-Saint-Exupéry-Str. 10
60549 Frankfurt
Germany

Email: info@uyuni.io
Hotline: 0800 95 20000

§ 2 Provision of Infrastructure & Hosting

This web application is hosted on highly secure servers of specialized cloud providers. Each time the infrastructure is accessed, the systems automatically collect data and information from the computer system of the calling computer. The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's IP address
  • Date and time of access

The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR (legitimate interest in the stability and security of the system).

§ 3 Authentication, Database & System Communication

We use specialized, GDPR-compliant cloud service providers for central user management, storage of company data (multi-tenant architecture), secure system login, and system-relevant email dispatch. Authentication is carried out via highly secure cryptographic tokens.

Binding Data Processing Agreements (DPA) in accordance with Art. 28 GDPR exist with all providers used, which guarantee the strict isolation and security of the transmitted B2B data. For security and architectural reasons, the exact infrastructure nodes are not broken down publicly.

§ 4 Payment Processing

The processing of subscription payments and one-time fees is carried out entirely via a certified, external payment service provider (PCI-DSS compliant). If you opt for a paid system activation, the data required for payment processing (e.g., company name, billing address) is transmitted to the service provider via an encrypted connection.

We never store full credit card data on our own servers, but only the payment status (e.g., "ACTIVE") and reference IDs for account activation (Art. 6 (1) lit. b GDPR).

§ 5 Tracking, Analysis & Local Storage

Out of conviction, the UYUNI system completely refrains from using external tracking services or advertising pixels (such as Google Analytics or Meta Pixel).

To ensure the functionality of the application (in particular, maintaining the active session after login), we strictly use technically essential storage technologies in the user's browser (Local Storage and Session Cookies). Any anonymized system analyses for performance monitoring take place exclusively via internally developed, closed modules within our own infrastructure.

§ 6 Your Rights

You have the right to receive information about your personal data stored by us at any time. You also have the right to correction, blocking or, apart from the mandatory data storage for business transactions, deletion of your personal data (Art. 15 to 21 GDPR). Please contact the entity mentioned in § 1 for this purpose.