Privacy Policy

Last updated: 15 January 2025

1. Introduction

UnionStack GmbH (“UnionStack”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website (unionstack.cloud) or use our services.

Data Controller: UnionStack GmbH Friedrichstraße 123 10117 Berlin, Germany Email: privacy@unionstack.cloud

2. Data We Collect

Website Visitors

  • Analytics data: We use self-hosted Plausible Analytics, which collects no personal data, uses no cookies, and stores all data on EU servers. We track page views, referral sources, and country (derived from anonymised IP addresses).
  • Contact form submissions: Name, email address, company, and message content when you voluntarily submit our contact form.

Service Customers

  • Account data: Name, email, company name, billing address
  • Usage data: Service access logs, feature usage statistics (aggregated)
  • Customer content: Email, files, and other content you create or store using our services

We process personal data based on:

  • Contract performance (Art. 6(1)(b) GDPR): To provide our services
  • Legitimate interests (Art. 6(1)(f) GDPR): To improve our website and services
  • Consent (Art. 6(1)(a) GDPR): For marketing communications (opt-in only)

4. Data Storage and Transfers

All data is stored exclusively in EU data centers located in Germany, the Netherlands, and France. We do not transfer personal data outside the European Economic Area.

We do not use any US-based sub-processors. Our complete list of sub-processors is available upon request.

5. Data Retention

  • Website analytics: Aggregated, no personal data retained
  • Contact form data: Retained for 12 months or until your inquiry is resolved
  • Customer account data: Retained for the duration of the contract plus 10 years (statutory requirement)
  • Customer content: Deleted within 30 days of contract termination

6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (“right to be forgotten”) (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time (Art. 7(3))

To exercise these rights, contact us at privacy@unionstack.cloud.

7. Cookies

Our website does not use cookies. We use Plausible Analytics, which is cookie-free and fully GDPR compliant without requiring consent.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and regular security audits.

9. Changes to This Policy

We will notify you of material changes to this policy via email (for customers) or a prominent notice on our website.

10. Supervisory Authority

You have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

11. Contact

For privacy-related inquiries: Email: privacy@unionstack.cloud Post: UnionStack GmbH, Friedrichstraße 123, 10117 Berlin, Germany