Data Privacy Statement

Welcome to our website. The protection and security of your personal information during your use of our website are very important to us. At this point, we therefore wish to inform you which of your personal data we record during your visit to our website and for which purposes they are used.

This data privacy statement is applicable to the internet provision of uberall GmbH, which can be found under the domain https://uberall.com/.

Who is responsible and how can I contact you?

Body responsible

For processing personal data in accordance with the EU General Data Protection Regulation (GDPR)

uberall GmbH
Hussitenstraße 32 – 33
13355 Berlin
Germany

E-mail: hello@uberall.com

Telephone: +49 30 208479320

Data Protection Officer

Mr Thorsten Ihler
E-Mail: dataprotection@uberall.com

What is it about?

This data privacy statement fulfils the statutory requirements for transparency in the processing of personal data. These comprise all information that relates to an identified or identifiable individual. This includes for example information such as your name, age, address, telephone number date of birth, e-mail address, IP address or user behaviour when visiting a website. Information from which we can make no connection to you as a person (or from which can make a connection only with disproportionate effort), e.g. as a result of anonymisation, does not constitute personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data are erased as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further retention of the data. In the individual processing operations, we inform you of the specific retention periods and criteria for storage. Notwithstanding this, we store your personal data in certain cases for the enforcement, exercise or defence of legal claims and in the case of existence of statutory retention requirements.

Who will receive my data?

Your personal data processed on our website are passed on to third parties by us only if this is necessary in order to fulfil the purposes and covered by the legal basis in the individual case (e.g. consent or for the protection of legitimate interests). Furthermore, we pass on personal data to third parties in certain cases if this aids the enforcement, exercise or defence of legal claims. Possible recipients could then include e.g. law enforcement agencies, lawyers, accountants, courts etc.

If we use service providers for the operation of our website, who process personal data on our behalf in accordance with art. 28 GDPR as part of contract processing, they may be recipients of your personal data. Further information about the use of contract processors and web services is available in the overview of individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser on your terminal device and stored there in the course of your visit to our web pages. As an alternative to the use of cookies, information can also be saved in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically essential cookies), whereas other cookies allow us to perform various analyses, so that we are able for example to recognise the browser you are using if you visit our website again, and send us various information (non-essential cookies). Among other things, cookies enable us to make our internet provision more user-friendly and effective for you, such as by tracking your use of our website and detecting your preferred settings (e.g. country and language settings). If third parties process information using cookies, they collect the information directly through your browser. Cookies are not harmful to your terminal device. They cannot run programmes or contain viruses.

In the individual processing operations, we provide information about the respective services for which we use cookies. Detailed information about the cookies used can be found in the cookie settings of the consent manager.

What are my rights?

Under the requirements of the statutory provisions of the General Data Protection Regulation (GDPR) and the German federal data protection act (BDSG), you have the following rights as a data subject:

  • Information concerning the stored personal data about you, in the form of meaningful information about the details of the processing as well as a copy of your data, in accordance with art. 15 GDPR, § 34 BDSG.
  • Rectification of inaccurate or incomplete data stored by us, in accordance with art. 16 GDPR.
  • Erasure of the data stored by us, in accordance with art. 17 GDPR, as long as the processing is not required in order to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the assertion, exercise or defence of legal claims.
  • Restriction of processing, in accordance with art. 18 GDPR, if the accuracy of the data is disputed, the processing is unlawful, we no longer require the data and you refuse their erasure because you require them for the assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with art. 21 GDPR.
  • Data portability, in accordance with art. 20 GDPR, if you have provided us with data as part of consent in accordance with art. 6 par. 1 letter a GDPR or on the basis of a contract in accordance with art. 6 par. 1 letter b GDPR and these are processed by us by means of automated methods. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
  • Objection to the processing of your personal data, in accordance with art. 21 GDPR, if this is being done on the basis of art. 6 par. 1 letters e, f GDPR and if there are grounds for this, which arise as a result of your particular situation or if the objection is to direct advertising. The right to object does not exist if prevailing, compelling and legitimate reasons for the processing are demonstrated or the processing takes place for the assertion, exercise or defence of legal claims. If the right to object does not exist in individual processing operations, this is indicated there.
  • Withdrawal of your issued consent, in accordance with art. 7 par. 3 GDPR, with effect for the future.
  • Complaint to a supervisory authority, in accordance with art. 77 GDPR, if you believe that the processing of your personal data is in violation of the GDPR. You can generally contact the supervisory authority for your usual place of residence, your workplace or the registered office of your company.

How is my data processed specifically?

Below, we provide you with information about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective retention period. No automated decision-making, including profiling, takes place in the individual case.

Provision of the website

Nature and scope of the processing

When our website is opened and used, we collect the personal data that your browser automatically transmits to our servers. The following information is stored temporarily in a so-called log file:

  • IP address of the requesting computer
  • Date and time of the access
  • Name and URL of the file retrieved
  • Website from which the access occurs (referrer URL)
  • Browser used and possibly the operating system of your computer as well as the name of your access provider

Our website is not hosted by us but rather by a service provider who processes the aforementioned data on our behalf, in accordance with art. 28 GDPR, for the purpose of providing the website.

Cookies and tracking

The complete list of cookies and tracking pixels is available and can be managed here.

Purpose and legal basis

The processing is undertaken to safeguard our overriding legitimate interest to display our website and to guarantee security and stability on the basis of art. 6 par. 1 letter f GDPR. The data recording and the storage in log files are essential for operation of the website. On the basis of the exception in accordance with art. 21 par. 1 GDPR, there is no right to object to the processing. If further storage of the log files is required by law, the processing is undertaken on the basis of art. 6 par. 1 letter c GDPR. There is no statutory or contractual obligation to provide the data, although access to our website is technically impossible without provision of the data.

Retention period

The aforementioned data will be stored for the duration of display of the website and beyond that for a maximum of 7 days for technical reasons.

Contact form

Nature and scope of the processing

On our website, we offer you the option to contact us using a form provided. The information collected via mandatory fields is required in order to be able to handle the enquiry. Furthermore, you can voluntarily provide additional information that you consider necessary for the handling of the contact enquiry. Your personal data are not passed on to third parties if the contact form is used.

Purpose and legal basis

Your data from the use of our contact form are processed for the purposes of communication and handling of your enquiry on the basis of consent, in accordance with art. 6 par. 1 letter a GDPR. If your enquiry relates to an existing contractual relationship with us, the processing is undertaken for the purpose of contractual performance on the basis of art. 6 par. 1 letter b GDPR. There is no statutory or contractual obligation to provide your data but handling of your enquiry is not possible without provision of the information in the mandatory fields. If you do not wish to provide these data, please contact us by other means.

Retention period

If you use the contact form on the basis of your consent, we store the collected data from every enquiry for the duration of three years beginning with the resolution of your enquiry or until revocation of your consent.

Applicant data

Nature and scope of the processing

On our website, we offer you to submit an application to us via a provided form. The information collected via mandatory fields is necessary to process the request. In addition, you may voluntarily provide additional information that you feel is necessary to process the contact request.

Your request will be processed by a processor appointed by us in accordance with Art. 28 DSGVO.

Purpose and legal basis

The processing of your data based on the use of the applicant form is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of Section 26 BDSG. There is no legal or contractual obligation to provide your data, but the processing of your application is not possible without providing the information of the mandatory fields. If you do not wish to provide this data, please use other means of applying to us.

Retention period

We store the data collected for the duration of the application process and, in the event of non-employment, for a period of six months from the date of rejection and, in the event of employment, for a period of three years after the end of employment.

Newsletter

Nature and scope of the processing

If you register on our website to receive our newsletter, we record your e-mail address [as well as your name…] and store this information together with the registration date and your IP address. You will then receive an e-mail in which you must confirm the registration for the newsletter (double opt-in). If you do not confirm the registration within 48 hours, it expires automatically and the data will not be processed for distribution of the newsletter.

For distribution of the newsletter, we use a service of SendGrid Inc., which processes your personal data on our behalf in accordance with art. 28 GDPR. Your data are not transmitted to third parties.

Purpose and legal basis

We process your data for the purpose of newsletter distribution on the basis of your consent, in accordance with art. 6 par. 1 letter a GDPR. By unsubscribing from the newsletter, you can declare your revocation with effect for the future at any time, in accordance with art. 7 par. 3 GDPR. There is no statutory or contractual obligation to provide your data, although distribution of the newsletter is impossible without the provision of your data.

Retention period

After registration for the newsletter, we store the data for a maximum of 48 hours, until confirmation of the registration. After successful confirmation, we store your data until revocation of your consent (you unsubscribe from the newsletter) [and beyond that for a maximum of 7 days for technical reasons].

CDNJS

Nature and scope of the processing

We use CDNJS for proper provision of the content of our website. CDNJS is a service of Cloudflare, Inc., which acts as a content delivery network (CDN) on our website.

A CDN helps to make content of our online provision available more quickly, especially files such as graphics or scripts, by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Cloudflare, Inc., through which your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the aforementioned purposes and to maintain the security and functionality of CDNJS.

Purpose and legal basis

The content delivery network is used on the basis of our legitimate interest, i.e. interest in secure and efficient provision as well as optimisation of our online provision, in accordance with art. 6 par. 1 letter f GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is rather determined by Cloudflare, Inc. Further details can be found in the data privacy statement for CDNJS: https://www.cloudflare.com/privacypolicy/.

Cloudflare CDN

Nature and scope of the processing

We use Cloudflare CDN for proper provision of the content of our website. Cloudflare CDN is a service of Cloudflare, Inc., which acts as a content delivery network (CDN) on our website.

A CDN helps to make content of our online provision available more quickly, especially files such as graphics or scripts, by means of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Cloudflare, Inc., through which your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the aforementioned purposes and to maintain the security and functionality of Cloudflare CDN.

Purpose and legal basis

The content delivery network is used on the basis of our legitimate interest, i.e. interest in secure and efficient provision as well as optimisation of our online provision, in accordance with art. 6 par. 1 letter f GDPR.

Retention period

The specific retention period of the processed data cannot be influenced by us but is rather determined by Cloudflare, Inc. Further details can be found in the data privacy statement for Cloudflare CDN: https://www.cloudflare.com/privacypolicy.


We do respect your privacy. On our website we use technologies like Cookies to personalise content and advertisements, offer social media functionalities and to measure website traffic. You can modify or withdraw your agreement anytime by clicking on "Manage my cookie preferences".