Privacy policy for uubato
Effective Date: 21.07.2025
We appreciate your interest in our company. Data protection is a particularly high priority for the management of uubato. It is generally possible to use our website without providing any personal data. However, if a data subject wishes to use special services offered by our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in line with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to uubato (in particular the German Federal Data Protection Act – BDSG).
1. Name and Address of the Controller (des für die Verarbeitung Verantwortlichen)
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:
Mirko Pawlak, Geschäftsführer
E-Mail: mirko.pawlak@uubato.com
uubato UG (haftungsb.), Pappelallee 78/79, 10437 Berlin
2. Contact for Data Protection Inquiries
As uubato is a micro-enterprise, a formal appointment of a Data Protection Officer is not required under Art. 37 GDPR. Your point of contact for all data protection inquiries and for exercising your rights as a data subject is the Managing Director.
3. Collection of General Data and Information (Server Log Files)
Our website collects a series of general data and information with each visit by a data subject or an automated system. This data is stored in the server’s log files. The following may be collected:
- The browser types and versions used,
- The operating system used by the accessing system,
- The website from which an accessing system reaches our website (so-called referrers),
- The sub-websites that are accessed on our website via an accessing system,
- The date and time of access to the website,
- An Internet Protocol address (IP address),
- The Internet service provider of the accessing system.
This data is processed to ensure the smooth operation of the website and to guarantee the security of our information technology systems. The legal basis for this is our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO).
4. Processing of Personal Data, Purposes, and Legal Bases
We process personal data that you provide to us for various purposes:
- Contact: If you contact us via email or a contact form, the data you transmit (name, email address, content of your inquiry) will be stored to process your request. The processing is carried out for the performance of pre-contractual measures or to protect our legitimate interests in responding to your inquiry (Art. 6 Abs. 1 lit. b und f DSGVO).
- Contract Initiation and Fulfillment: For the establishment, implementation, and processing of business relationships with our customers and prospective clients (primarily business contacts), we process contact and contract data (name, email address, company affiliation if applicable). The legal basis is the fulfillment of a contract or the performance of pre-contractual measures (Art. 6 Abs. 1 lit. b DSGVO).
- Newsletter Dispatch: If you register for our newsletter, we process your email address to send you regular information about our offers. The dispatch is based exclusively on your explicit consent (Art. 6 Abs. 1 lit. a DSGVO). You can revoke this consent at any time, for example, via the unsubscribe link in each newsletter.
- Website Analysis and Improvement: To improve our services and our website, we analyze the usage behavior of our visitors. For this purpose, we use analysis tools (see Section 5). This usage data is processed based on your consent (Art. 6 Abs. 1 lit. a DSGVO), which you grant via our cookie banner.
- Personalized Advertising: We use data to display advertising that is relevant to you. This is also done only on the basis of your explicit consent (Art. 6 Abs. 1 lit. a DSGVO).
5. Use of Cookies and Google Analytics
a) Cookies
Our website uses cookies. These are small text files that are stored on your end device. We use technically necessary cookies, which are required for the basic functions of the website (Legal basis: Art. 6 Abs. 1 lit. f DSGVO), as well as cookies for analysis and marketing purposes.
For the use of non-essential cookies (e.g., for Google Analytics), we obtain your consent in accordance with Art. 6 Abs. 1 lit. a DSGVO via a cookie consent banner. You can change or withdraw your consent at any time in the cookie settings.
b) Google Analytics
This website uses, subject to your consent, Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
We have activated IP anonymization on this website, so your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA.
You can prevent the collection of data generated by the cookie and related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
6. Data Transfer to Third Parties
Your personal data will not be transferred to third parties unless we are legally obligated to do so or the transfer is necessary for the fulfillment of our contractual relationship.
Service providers who act on our behalf as part of data processing (e.g., hosting providers, newsletter service providers) are carefully selected by us and contractually bound in accordance with Art. 28 DSGVO . We ensure that all our service providers process the data exclusively within the EU and guarantee an adequate level of data protection.
7. Data Security
We take all necessary technical and organizational security measures to protect your personal data from loss and misuse. For example, our website is encrypted via a secure HTTPS connection to prevent unauthorized third-party access to your data during transmission.
8. Duration of Data Storage
We store your personal data only as long as is necessary to achieve the purposes stated here or as stipulated by the various retention periods provided for by law (e.g., from commercial or tax law). After the respective purpose ceases to apply or these periods expire, the corresponding data is routinely blocked or deleted in accordance with legal regulations.
9. Your Rights as a Data Subject
You have the right at any time to:
- Access information about your data stored by us (Art. 15 DSGVO).
- Rectification of incorrect data (Art. 16 DSGVO).
- Erasure of your data, provided there are no legal obligations to the contrary (Art. 17 DSGVO).
- Restriction of the processing of your data (Art. 18 DSGVO).
- Object to the processing of your data based on our legitimate interests (Art. 21 DSGVO).
- Data portability in a common, machine-readable format (Art. 20 DSGVO).
- Withdraw consent once given, with future effect (Art. 7(3) DSGVO).
To exercise these rights, please use the contact details provided in Sections 1 and 2.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 DSGVO).