Privacy Policy

§ 1 Data Controller

Responsible for data processing on this B2B platform (UYUNI):

UYUNI
Tenko Krüger
De-Saint-Exupéry-Str. 10
60549 Frankfurt
Germany

Email: info@uyuni.io
Hotline: 0800 95 20000

§ 2 Provision of Infrastructure & Hosting

This web application is hosted on highly secure servers of specialized cloud providers. Each time the infrastructure is accessed, the systems automatically collect data and information from the computer system of the calling computer. The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's IP address
  • Date and time of access

The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR (legitimate interest in the stability and security of the system).

§ 3 Authentication, Database & System Communication

We use specialized, GDPR-compliant cloud service providers for central user management, storage of company data (multi-tenant architecture), secure system login, and system-relevant email dispatch. Authentication is carried out via highly secure cryptographic tokens.

Binding Data Processing Agreements (DPA) in accordance with Art. 28 GDPR exist with all providers used, which guarantee the strict isolation and security of the transmitted B2B data. For security and architectural reasons, the exact infrastructure nodes are not broken down publicly.

§ 4 Payment Processing

The processing of subscription payments and one-time fees is carried out entirely via a certified, external payment service provider (PCI-DSS compliant). If you opt for a paid system activation, the data required for payment processing (e.g., company name, billing address) is transmitted to the service provider via an encrypted connection.

We never store full credit card data on our own servers, but only the payment status (e.g., "ACTIVE") and reference IDs for account activation (Art. 6 (1) lit. b GDPR).

§ 5 Tracking, Analysis & Local Storage

Out of conviction, the UYUNI system completely refrains from using external tracking services or advertising pixels (such as Google Analytics or Meta Pixel).

To ensure the functionality of the application (in particular, maintaining the active session after login), we strictly use technically essential storage technologies in the user's browser (Local Storage and Session Cookies). Any anonymized system analyses for performance monitoring take place exclusively via internally developed, closed modules within our own infrastructure.

§ 6 Location Data & Live Geofencing (Time Tracking)

To use time tracking with integrated live geofencing, we collect and process your current location data (GPS coordinates). The collection occurs exclusively after your explicit system approval and serves for tamper-proof matching with predefined deployment locations in real-time. No permanent movement profiles are created outside your active working hours. The legal basis for this processing is the fulfillment of contractual obligations (Art. 6 Para. 1 lit. b GDPR) as well as your explicit consent through the activation of location services in your operating system (Art. 6 Para. 1 lit. a GDPR).

§ 7 AI-Powered Live Translation & Mapping Services

To enable on-demand live translation for you in our communication module (Messenger), requested text fragments are temporarily transmitted via highly encrypted interfaces to certified, external AI service providers. These providers act as bound data processors in accordance with Art. 28 GDPR. The transmitted texts are processed exclusively for the purpose of real-time translation, deleted immediately, and explicitly not used for training external AI models.

Additionally, we use specialized, GDPR-compliant mapping service interfaces to convert location addresses into coordinates (geocoding). When you, as an administrator, create system locations, your IP address is briefly transmitted to the respective service provider for technical reasons during this conversion.

§ 8 Your Rights

You have the right to request information about your personal data stored by us at any time. Likewise, you have the right to correction, blocking, or, apart from the mandatory data storage for business transactions, deletion of your personal data (Art. 15 to 21 GDPR). Please reach out to the contact mentioned in § 1 for this purpose.