Privacy Policy

1.   General
This privacy policy informs you about the nature, scope and purpose of the processing of your personal data by the data controller in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).The definitions of the GDPR, in particular according to Art. 4, are used as a basis.
‍
1.1. Controller
The controller according to data protection law is:
‍
The UnleashPeople GmbH & Co KG  („UnleashPeople“, „we“)
Edinburghplatz 45
81829 München
E-Mail: info@unleashppl.com
‍
‍1.2. Data Protection
You can reach us at privacy@unleashppl.com

‍2. Details of data processing
2.1. Website operation and website functions
When you visit our website, we process personal data as follows.  In doing so, we only use essential cookies. You can adjust your preferences at a later date or revoke your consent with effect for the future. These adjustments are possible at any time via the "Privacy settings" button ("fingerprint") in your browser window. Please note that without your consent, individual functions of the website may only function to a limited extent.

2.1.1. Provision of the website content
Purpose
> Establishment of the technical connection between the visitor’s terminal device and our website (execution of the session).
> Maintaining and improving the functionality of the website
> Maintaining and improving the information security or data security (confidentiality, availability and integrity) of the website (data storage in log files)

Categories of processed data
> IP address of the accessing systembrowser type of the end device used and version
> Internet service provider of the accessing system
> Date, time and success of the access
> Third-party websites from which the user’s system accesses our website
> Third-party websites that are accessed by the user’s system via our website
> Analyzing website usage (anonymized IP; referrer, no user ID)

Categories of recipients
Web hosting - Webflow, Inc.
Google Tag Manager (Google Inc.) - no processing of personal data.

Third-country transfer
US (web hosting) in accordance with appropriate guarantees pursuant to Art. 46 GDPR

Storage period or its criteria
> Session: data deletion at the end of the respective session
> Log files: data deletion after 7 days or anonymization

Legal basis
> Art. 6 (1) f) GDPR (legitimate interests)

2.2. Contact
We can be contacted via our website using the contact form.

Purpose
> Contacting UnleashPeople
> Submitting requests to UnleashPeople to be answered

Categories of processed data
> Personal general data (name, e-mail address)
> Message content (optional) IP address, log data, and tracking

Categories of recipients
Google Workspace

Storage period or its criteria
> 3 months after receipt/response to contact request

Legal basis
> Art. 6 para. 1 a) GDPR (consent)
> Art. 6 (1) f) GDPR (legitimate interests)

3. Rights of the data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR. You are therefore entitled to the following rights towards the controller:
‍
3.1. Right of access
Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you can request the following information from us: Processing purposes; Category of personal data being processed; Recipients or categories of recipients to whom your data have been or will be disclosed; Planned storage period or, if specific information on this is not possible, criteria for determining the storage period; Existence of a right to rectification, erasure, restriction of processing or objection; Existence of a right to lodge a complaint with a supervisory authority; Origin of your data, if it has not been collected by us; Existence of automated decision-making including „profiling“ and, if applicable. meaningful information on their details; transfer of personal data to a third country or to an international organization; appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

3.2. Right to rectification
In accordance with Art. 16 GDPR, you have the right to demand the correction or completion of your personal data stored by us without delay.

3.3. Right to restriction of processing
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.

3.4. Right to deletion
Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

3.5. Right to notification
If you have asserted the right to rectification, erasure or restriction of processing against the controller, we are obligated pursuant to Art. 19 GDPR to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

3.6. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

3.7. Right to object
According to Art. 21 GDPR, you have the right to revoke your consent at any time. We will then no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to „profiling“ insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

3.8. Right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

3.9. Right to complain to a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, workplace or the place of the alleged infringement. The Bayrische Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision) is responsible for UnleashPeople.

4. Actuality and changes to this privacy policy
This data protection declaration shall apply in its currently valid version. The current data protection declaration can be accessed and printed out at any time on the website.

Latest version: March 2024