Skip to main content

Privacy Notice of the Uberall Group

Personal data is processed in various constellations, not just when visiting websites, but also at other points of contact. It goes without saying that we at Uberall take the protection of your personal data very seriously and are happy to inform you about it in detail through this privacy notice ("Privacy Notice").

Legal
Imprint
Privacy Notice
Terms & Conditions

This Privacy Notice has a modular structure and consists of three main parts. In these you will be informed about:

By clicking on the above links you can be forwarded directly to the respective part of this Privacy Notice.

1. General information on processing of personal data at Uberall

I. Terminology

"Personal Data" means personal data within the meaning of Art. 4 (1) GDPR.
"Processing" means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Data Subject" means the individual whose Personal Data is subject to the respective Processing.

"Applicable Data Protection Law" means the data protection laws applicable to the respective Processing, which can include in particular (i) Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (General Data Protection Regulation) ("GDPR") and any applicable national implementations of the GDPR by member states of the European Union, such as the German Bundesdatenschutzgesetz ("BDSG"), (together with GDPR "EU Data Protection Law"); (ii) the GDPR as it forms part of UK law ("UK GDPR) by virtue of section 3 of the UK European Union (Withdrawal) Act 2018 and the UK Data Protection Act 2018 (together with UK GDPR "UK Data Protection Law"); (iii) the Canadian Personal Information Protection and Electronic Documents Act ("PIPEDA") and any applicable provincial Canadian data protection laws (together with PIPEDA "Canadian Data Protection Law"); (iv) the California Consumer Privacy Act of 2018 ("CCPA") and the California Privacy Rights Act of 2020 ("CPRA"; CCPA and CPRA together "California Data Protection Law").

II. Responsibilities

‍‍The controllers (or responsible business within the meaning of California Data Protection Law or organizations within the meaning of Canadian Data Protection Law), so the person(s) responsible for the Processings described in this Privacy Notice ("Controller") are, depending on the Processing, uberall GmbH, Hussitenstraße 32-33, 13355 Berlin, Federal Republic of Germany ("Uberall GmbH") and/or its affiliated companies described in section III below (each "Uberall Group Company"; Uberall GmbH and the Uberall Group Companies together and individually also hereinafter also referred to as "Uberall"), either as individual data Controllers ("Individual Controller") or as joint data Controllers within the meaning of Art. 26 GDPR (or Art. 26 UK GDPR or collectively responsible businesses within the meaning of California Data Protection Law or organizations within the meaning of Canadian Data Protection Law) ("Joint Controllers"). The Controller for each individual Processing described in this Privacy Notice is set out in Part B of this Privacy Notice.

Uberall GmbH and the Uberall Group Companies act as Joint Controllers for some Processings described in this Privacy Notice, as, due to Uberall's group structure, certain internal activities within the group of Uberall are performed jointly by shared service units. With regard to all Processings as Joint Controllers, Uberall has concluded a Joint Controllership Agreement to clearly set forth the responsibilities with regard to the Processing(s) concerned. However, as a Data Subject affected by such Processing, you can, at your own choice, either contact all controllers individually or jointly to exercise your rights described in Part C.

III. Contact Information & Data Protection Officer

The contact addresses of Uberall GmbH and the Uberall Group Companies are as follows:

  • uberall GmbH, Hussitenstraße 32-33, 13355 Berlin, Federal Republic of Germany
  • uberall B.V., Weteringschans 109, 1017 SB Amsterdam, Netherlands
  • uberall France, 229 rue Saint-Honoré, 75001 Paris, France
  • uberall Ltd, 27 Old Gloucester Street London WC1N 3AX, United Kingdom
  • uberall Inc, 19 Clifford Street, Detroit, Michigan 48226, USA
  • Momentfeed UB, Inc., 19 Clifford Street, Detroit, Michigan 48226, USA
  • SweetIQ Analytics Inc. (in French: Analytiques SweetIQ inc.), 3700-1 Place Ville-Marie, Montréal (Québec), H3B 3P4, Canada

Uberall GmbH and the Uberall Group Companies can also be reached via email under dataprotection@uberall.com.

The data protection officer (DE: Datenschutzbeauftragter; FR: Délégué à la protection des données; NL: Functionaris voor gegevensbescherming) of uberall GmbH, uberall B.V., uberall France, uberall Ltd and (the Privacy Officer of) SweetIQ Analytics Inc can also be reached under: dataprotection@uberall.com.‍

IV. Purposes, data categories, legal basis and duration of Processing

‍The purpose and respective legal basis of the Processing of Personal Data described in this Privacy Notice as well as the respective categories of processed Personal Data and the duration for which those are being processed differ per Processing and are set out for those different Processing individually in Part B of this Privacy Notice.

V. Disclosure of Personal Data and use of third parties

Furthermore, Uberall can disclose Personal Data to service providers Processing the Personal Data that on its/their respective behalf ("Processors"), such as in particular

  • Technical / IT service providers;
  • Subcontractors engaged for the provision of services;
  • Subcontractors engaged for the outsourcing of business activities (e.g. agencies);
  • Management consultants; and
  • Tax consultants.

Any such Processor acting on behalf of Uberall is contractually obligated to only process the Personal Data on behalf of Uberall solely for the provision of the services and per its instructions. A Processor will receive access to Personal Data only to the extent it is necessary for their service.

In the event such disclosure is permitted or required to comply with statutory duties or legal obligations, Uberall can – only to the extent legally permissible or required – transmit Personal Data to authorities (such as law enforcement agencies) and courts.

VI. International Transfer of Personal Data

Personal Data processed by Uberall may be processed outside of the European Economic Area (EEA).

For the transfer of Personal Data to which EU Data Protection Law or UK Data Protection Law is applicable outside of the European Economic Area (EEA) or United Kingdom (UK), as applicable, an international data transfer may take place under an adequacy decision in the meaning of Art. 45 (1) GDPR and Art. 45 (1) UK GDPR, as applicable ("Adequacy Decision"). For any such transfer of Personal Data for which no Adequacy Decision is applicable, Uberall will ensure that such transfer complies with the requirements of Art. 44 et seq. GDPR and Art. 44 et seq. UK GDPR

Uberall may also conduct an international data transfer if the transfer is necessary for the conclusion or performance of a contract concluded by Uberall in the interest of the respective Data Subject. The legal basis for this data Processing is Art. 49 (1) lit. (c) GDPR or Art. 49 (1) lit. (c)UK GDPR, as applicable. Uberall further may process an international data transfer if the transfer is necessary for the establishment, exercise or defense of claims. The legal basis for this data Processing is Art. 49 (1) lit. (a) GDPR or Art. 49 (1) lit. (a) UK GDPR, as applicable.

VII. Security

Uberall uses appropriate technical and organizational measures to protect your Personal Data from loss, manipulation or destruction and from unauthorized access by third parties, taking into account the state of the art, the implementation effort and the nature, scope, context, purpose and risks of the respective data Processing. These security measures are continuously improved in line with technological developments.

You can also find more information about the security measures of Uberall under https://uberall.com/en-us/security-at-uberall .

2. Data Processing, Processing purposes and legal bases in detail (Part B)

I. Log Files of Website Visitors

Uberall GmbH processes Personal Data of website visitors as follows as part of log files.

  1. Purpose of Processing: Ensuring the security and proper functioning of this website. This includes monitoring for unauthorized access attempts, diagnosing technical issues, ensuring system stability, and optimizing website performance.
  2. Categories of Personal Data: Electronic identification data (IP address)
  3. Legal Basis for Processing: The legal basis for this Processing is Art. 6 (1) lit. (f) GDPR. As a Data Subject to this Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: 7 days

II. Content Delivery (Cloudflare, jsDelivr, Amazon CloudFront)

Uberall GmbH, as the provider of this website, uses content delivery systems (CDNs) to efficiently deliver the content of this website, in particular scripts, stylesheets, fonts, and images, by reducing latency and improving load times for users. This enhances the performance, security, and reliability of the website. Additionally, CDNs help protect against distributed denial-of-service (DDoS) attacks and ensure high availability of online assets. The CDNs currently in use for this purpose are Cloudflare (cdnjs.cloudflare.com) and jsDelivr (cdn.jsdlivr.net) and Amazon CloudFront.

  1. Purpose of Processing: Efficient and secure provision of website content
  2. Categories of Personal Data: Electronic identification data (IP address), browser information (user agent etc.)
  3. Legal Basis for Processing: The legal basis for this Processing is Art. 6 (1) lit. (f) GDPR. As a Data Subject to this Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose.

To the extent that Uberall uses further CDNs that process data for marketing or tracking purposes, such CDNs will only be used subject to prior consent obtained via the cookie management of this website (see below).

III. Use of Cookies

Cookies are small text files that are initially stored on the end-device of the respective user and through which certain information flows to the body that set the cookie (usually a website or third-party pixels, web beacons or other storage technologies).

Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that are not personally identifiable. A distinction is also made between so-called session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual interaction with the body that set the cookie.

In terms of their function, cookies are also divided into the following three categories:

  • Technically necessary or essential cookies ("Essential Cookies"), which are required in order to navigate the respective website, use its core functionalities and ensure the security of the website. This is done in particular to enable you to navigate between pages without losing your previous actions from the same browsing session, remember your previous actions, such as your prior cookie consent selection, guarantee optimal load distribution when loading our websites or maintain your data for authentication purposes.
  • Functional cookies ("Functional Cookies"), help enhance your user experience by enabling features that improve website functionality, analyze usage patterns, and optimize performance and ensure that the website operates smoothly and adapts to your preferences, for example by remembering your language settings, region, or display preferences to provide a more personalized browsing experience or collecting data on website speed, responsiveness, and any errors encountered to help improve overall performance and user satisfaction or provide you with multimedia content that matches your technical requirements.
  • Marketing cookies ("Marketing Cookies"), which serve to allow us or respective third parties to offer the user of a website interest-aligned advertising on online and social media offerings and content, if necessary, to measure the effectiveness of this advertising.

You can access the cookie management settings (cookie settings) of this website when first opening this website, through the link at the bottom of this website. The Controller of the Processing of each cookie and further information on the respective Processing can be found in the cookie settings.

IV. Offices Locator

In the event that you use elements of this website that provide you with the functionality (Locator) to visualise and order physical office locations of Uberall, in particular by distance to a selected location, Uberall GmbH processes your Personal Data as follows.

  1. Purpose of Processing: Provide you with the functionality to visualise and order physical office locations of Uberall, in particular by distance. To the extent that the functionality "Favorite Location" (by saving an office as a favorite location) is utilized, allowing you customisation by having an office location selected by you (re-)appear at the top of Locator when you utilize Locator again in the future. Moreover, to the extent that electronic identification data (IP address) is being processed, such Personal Data is processed for accounting and security purposes.
  2. Categories of Personal Data: Any personal data included by the user of Locator in the query input. Moreover, to the extent that the functionality "Favorite Location" (by saving an office as a favorite location) is utilized, a cookie tracker is saved on the end device of the respective website visitor so that the favorite location can be recognized for future visits. Electronic identification data (IP address) is being processed, for accounting and security purposes.
  3. Legal Basis for Processing: Regarding the extent of the Processing which is necessary to provide the functionality of Locator and, if applicable, Favorite Location, the legal basis for such Processing(s) is Art. 6 (1) lit. (b) Alt. 1 GDPR. To any other extent the legal basis of the Processing is Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Query input is processed for the duration of a session. Electronic identification data is processed for not more than 7 days, unless it is part of the logs of a security event. Any data resulting from the use of the functionality "Favorite Location" is processed for not more than 1 year from the last use of such functionality.

V. Contact Forms, sales process and contract initiation

If you get in contact with Uberall to explore opportunities to conclude a contract on products and/or services of Uberall or fill out one of the contact forms provided by Uberall on this website, which in particular allow you to contact us to request pricing offers and/or product information, demos or information material on products, the Uberall Group Companies will process Personal Data as Joint Controllers of you as follows:

  1. Purpose of Processing: Establishing contact and exchange on potential business exchange and/or collaboration or on Uberall products and services
  2. Categories of Personal Data: Contact data, employment information, communication data and business information
  3. Legal Basis for Processing: To the extent that you contacted Uberall to take steps prior to entering a contract, the legal basis for this Processing is Art. 6 (1) lit. (b) Alt. 2 GDPR. To any other extent the legal basis of the Processing is Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose.

VI. Referrals and other forwarded requests

In the event that your Personal Data was forwarded to us at your request by a partner of Uberall for support purposes or to explore opportunities to conclude a contract on products and/or services of Uberall, you will be subject to the following Processing.

If you or the company on behalf of which you are in contact with Uberall or the partner referring you to Uberall has a contract with a Uberall Group Company, that Uberall Group Company will be the Controller of the Processing. Otherwise, the Uberall Group Companies will process your Personal Data as Joint Controllers.

  1. Purpose of Processing: Realization of the purpose of the request, to the extent owed or intended by Uberall
  2. Categories of Personal Data: Contact data, employment information, communication data and business information, other Personal Data included in the inquiry, if applicable
  3. Legal Basis for Processing: To the extent that the purpose of the contact form is to take steps prior to entering a contract, the legal basis for this Processing is Art. 6 (1) lit. (b) Alt. 2 GDPR. To any other extent the legal basis of the Processing is Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose.

VII. Newsletter & Email Marketing

In the event that you are a recipient of and/or have signed up the newsletter of Uberall, the Uberall Group Companies process your Personal Data each as Individual Controllers as follows:

  1. Purpose of Processing: Email marketing on products, services, market trends, promotions and events of Uberall. In the event that object to email marketing we process your email address to comply with such objection.
  2. Categories of Personal Data: Contact data, communication data, log data
  3. Legal Basis for Processing: In the event that you have given your consent to receive email marketing of Uberall, the legal basis for this Processing is Art. 6 (1) lit. (a) GDPR. Otherwise you may receive marketing emails of an Uberall Group Company only if you are an existing customer of that Uberall Group Company and have not objected to the receipt of such emails, in which event such Processing is based on Art. 6 (1) lit. (f) GDPR and applicable email marketing laws (such as Art. 7 (3) German Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb), Article 11.7 (3) Dutch Telecommunications Act (Telecommunicatiewet), Article L34-5 Post and Electronic Communications Code (Code des postes et des communications électroniques) or Regulation 22 of The Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR)), in which case, as a Data Subject to such Processing, you may ask that Uberall Group Company for further information on such balancing of interests. In the event of an objection to email marketing the data necessary to comply with such objection is processed on the legal basis of Art. 6 (1) lit. (c) GDPR.
  4. Duration of Processing: If the Processing is based on consent, until such consent is revoked, otherwise until the purpose of the Processing expires or an objection to email marketing occurs, whereas in the latter event the email address itself will continue to be processed in order to comply with such objection. In deviation from that log data is processed until expiration the statute of limitation on applicable claims regarding unwarranted email marketing or Processing of Personal Data.

VIII. Webinar & Event Participation

In the event that you sign up to and/or participate in webinars or similar events of Uberall, the Uberall Group Companies process your Personal Data as Joint Controllers as follows:

  1. Purpose of Processing: Organisation and realisation of interactive webinars and events
  2. Categories of Personal Data: Contact data, communication data (query data), usage data (user activity information) and, only to the extent that you are voluntary speaker participating in a webinar of Uberall, audio and video data
  3. Legal Basis for Processing: In regards to contact data processed as a result from any registration for webinar participations, Art. 6 (1) lit. (a) GDPR. In regards to the other aforementioned categories of Personal Data, Art. 6 (1) lit. (f) GDPR, to which extent, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose.

Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you also have the right to object to the Processing of your Personal Data.

IX. Platform User Segmentation

In the event that you use any SaaS Product(s) of Uberall, the Uberall Group Company that is a party to the contract under which you provided with access to such SaaS Product(s) will process Personal Data as follows:

  1. Purpose of Processing: The purpose of user segmentation is the effective and reliable identification and grouping of users of the SaaS products of Uberall for agreed or required targeted deployment of features or (in-platform) communication (in particular on products, services, scheduled or unscheduled maintenance) or for platform stability.
  2. Categories of Personal Data: Electronic identification data, usage data, preference data, location data, browser information.
  3. Legal Basis for Processing: To the extent that the respective segmentation is contractually required for the performance of a contract with you, the legal basis of the Processing is Art. 6 (1) lit. (b) Alt. 1 GDPR and otherwise, Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose.

X. Platform Activity Logs

In the event that you use any SaaS Product(s) of Uberall, the Uberall Group Company that is a party to the contract under which you provided with access to such SaaS Product(s) will process Personal Data as follows as part of log files on activities on changes on corporate locations or their data within the SaaS Product(s), in particular since the contractual remuneration is generally calculated per corporate location:

  1. Purpose of Processing: Invoicing, booking keeping and defense against potential claims
  2. Categories of Personal Data: Contact information, employer information, log data and, to the extent applicable, Personal Data included in corporate location data
  3. Legal Basis for Processing: To the extent that the data is processed for invoicing and bookkeeping purposes, the legal basis of the Processing is Art. 6 (1) lit. (c) GDPR and otherwise, Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Until expiration of the respective statutory retention period(s).

XI. Support Requests

In the event that you raise a support request with us on products and/or services of Uberall, you will be subject to the following Processing, whereas the Uberall Group Company with which you or the company on behalf of which you are in contact with Uberall has a contract with on the provision of products and/or services will be the Controller of the Processing.

  1. Purpose of Processing: Assessment and fulfillment of support requests
  2. Categories of Personal Data: Contact data, communication data, business information, any other Personal Data included in the respective support request
  3. Legal Basis for Processing: To the extent that the respective support is contractually required for the performance of a contract with you, the legal basis of the Processing is Art. 6 (1) lit. (b) Alt. 1 GDPR and otherwise, Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Until expiration of the respective statutory retention period(s).

XII. Customer Satisfaction Surveys / Feedback

If you participate in customer satisfaction surveys of Uberall, which may in particular either be related to the satisfaction with prior (tech) support cases (CSAT) or the experience and usage of Uberall's platform and products (NPS), or if you otherwise provide feedback to Uberall, the Uberall Group Companies will process your Personal Data as Joint Controllers as follows:

  1. Purpose of Processing: Conducting customer satisfaction surveys and obtaining feedback for market and business analysis and improvement of product development
  2. Categories of Personal Data: Contact Data, electronic identification data, usage data, feedback data
  3. Legal Basis for Processing: Art. 6 (1) lit. (f) GDPR, unless the respective survey is provided as email marketing (in which event the description of "Newsletter & Email Marketing" processings in subsection VII further above applies instead). As a Data Subject to the Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Personal Data is processed due to this Processing until no longer necessary for the described purpose. Anonymized or aggregated information created based on the survey result data or feedback may be kept beyond the retention period.

XIII. Accounting and contract information

In the event that you or the company on behalf of which you are interacting with a Uberall Group Company has a contract with Uberall on the provision of products and/or services and your Personal Data is included in the contract or other related documentation (e.g. invoicing details) as contact information, that Uberall Group Company will process your Personal Data as follows:

  1. Purpose of Processing: Proper documentation of contracts and accounting as required by applicable law
  2. Categories of Personal Data: Contact data, employment information, business information
  3. Legal Basis for Processing: Art. 6 (1) lit. (b) GDPR in the event that the contract in question has been concluded directly with the Data Subject. In any other event Art. 6 (1) lit. (c) GDPR to the extent that the Processing is necessary for compliance with applicable laws and otherwise, Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Until expiration of the respective statutory retention period(s).

XIV. Data Subject Right Requests or other legal inquiries

In the event that you contact Uberall to exercise your rights under Applicable Data Protection Law (as described under Section C below) in regards to any Personal Data processed by an Uberall Group Company on you as a Controller or to raise any other claim against an Uberall Group Company, that Uberall Group Company will process Personal Data of you as follows:

  1. Purpose of Processing: Execution and documentation of Data Subject right request or documentation and defence against that claim
  2. Categories of Personal Data: Contact data, communication data, log data (which may, to the extent required, include copies of the Personal Data to which the Data Subject right request relates), any other Personal Data that is subject to the request or inquire
  3. Legal Basis for Processing: The legal basis of the Processing is Art. 6 (1) lit. (c) GDPR and, to the extent that Personal Data is only processed for the defense against any potential claims, Art. 6 (1) lit. (f) GDPR, in which case, as a Data Subject to such Processing, you may ask Uberall for further information on such balancing of interests.
  4. Duration of Processing: Until expiration of the applicable statute of limitation for claims, in the event of a Data Subject right request, that the respective Data Subject right had not been fulfilled as required by applicable law or, otherwise, of the respective claim.

XV. Other Processings

You may find information on the following other Processings of Uberall that are not subject to this Privacy Notice as described below:

3. Your Rights

Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you have the right to receive information about your Personal Data, to require rectification or erasure of your Personal Data or the restriction of the Processing and to receive your Personal Data in a structured, commonly used and machine-readable format (data portability).

To the extent that Californian Data Protection Laws are applicable, you further have the right to non-discrimination and the right to object to opt out of sales of your Personal Data.

You can exercise any of the above rights by submitting a respective request to Uberall to the contact information provided in Part A, section II above.

Further, you are entitled to lodge a complaint with a supervisory authority regarding the Processing of your Personal Data.‍

Last Updated: September 22nd, 2025