Privacy Policy

Introduction and General Information

Thank you for your interest in our website. Protecting your personal data is very important to us. Below you will find information on how we handle the data collected through your use of our website. Your data is processed in accordance with the applicable data protection regulations.

This is a courtesy translation. In case of discrepancy, the German version is legally binding.

Controller within the Meaning of the GDPR

UMNICORN GmbH
Ismaninger Strasse 42
81673 Munich
alexander.bauer@umnicorn.com

Contact Details of the Data Protection Officer

UMNICORN GmbH
Ismaninger Strasse 42
81673 Munich
alexander.bauer@umnicorn.com

Definitions

Our privacy policy aims to be simple and understandable for everyone. This privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are set out in Art. 4 GDPR.

Server Log Files

When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status

  • Web browser and operating system used

  • (Full) IP address of the requesting computer

  • Volume of data transferred

We collect the listed data to ensure a smooth connection to the website and to enable comfortable use of our website by users. The log file is also used to evaluate system security and stability, as well as for administrative purposes. The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR. For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period. This data does not allow us to draw any conclusions about individual persons. After no later than 6 months, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish a connection to the individual user. In anonymized form, the data may also be processed for statistical purposes. This data is never stored together with other personal data of the user, matched against other data sets, or disclosed to third parties.

Cookies

Our website uses cookies, which are stored by the browser on your device and contain certain settings for using the website (e.g. for the current session). Cookies help make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted once you close your browser. Other cookies remain stored on your device until you delete them or their storage period expires. These cookies allow us to recognize your browser on your next visit.
Some cookies are used to simplify website processes by storing settings (e.g. keeping track of options you have already selected). Where individual cookies we have implemented also process personal data, this processing takes place either under Art. 6(1)(b) GDPR for the performance of the contract, or under Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly, effective website visit.
You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and enable the automatic deletion of cookies when closing the browser. Cookie settings can be managed for the respective browsers under the following links.

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also individually manage the cookies of many companies and features used for advertising. To do so, use the relevant user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called "Do Not Track" feature, which allows you to indicate that you do not want to be "tracked" by websites. When this feature is enabled, the respective browser informs advertising networks, websites, and applications that you do not want to be tracked for behavior-based advertising and similar purposes. Information and instructions on how to manage this feature can be found, depending on your browser provider, at the following links:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Safari: https://support.apple.com/kb/PH21416?locale=de_DE
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

In addition, you can prevent the loading of so-called scripts by default. NoScript allows JavaScript, Java, and other plug-ins to run only on trusted domains of your choice. Information and instructions on how to manage this feature are available from your browser provider (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that disabling cookies may limit the functionality of this website.

Web Form for Requesting a Quote

Our website provides a web form through which you can contact us to request a free quote for our services by email and phone. The transmission of personal data via the web form is always encrypted. If you use this option, the data entered in the input form is transmitted to us and stored. This data includes: the user's email address, first and last name, salutation, postal address, and phone number.
At the time the message is sent, the following data is also stored: date and time.
In this context, the data is not disclosed to third parties. The data is processed exclusively for the stated purpose — sending a quote and making phone contact. The legal basis for processing the data transmitted when sending an email is the performance of pre-contractual measures or a contract pursuant to Art. 6(1)(b) GDPR, or the consent you have given us under Art. 6(1)(1)(a) GDPR.
Your personal data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected. The personal data collected for requesting a quote is deleted once the quote has been sent and timely phone contact with you has taken place or was unsuccessful. Continued processing only takes place if it is necessary for the initiation and execution of a resulting contract, or to fulfill resulting contractual purposes.

Contact Form and Contact by Email

If you send us inquiries via contact form or email, the information you provide in the inquiry form or your email — including the first and last name, salutation, and postal address you provide there — is stored by us for the purpose of processing the inquiry and in case of follow-up questions.
Providing an email address is required to be able to contact you; providing your name and phone number is voluntary. We never share this data without your consent.
The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR, and, where applicable, Art. 6(1)(b) GDPR if your inquiry is aimed at concluding a contract. Your data is deleted once your inquiry has been fully processed, unless statutory retention obligations prevent this. In the case of Art. 6(1)(f) GDPR, you may object to the processing of your personal data at any time.

Web Form for Submitting Job Applications

If you apply to us via our web form, we collect personal data. This includes, in particular, your contact details (such as first and last name, salutation, postal address, phone number, and the user's email address), as well as other data you provide about your professional background (e.g. résumé, qualifications, degrees, and work experience) and about yourself (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information about a severe disability).
Your personal data is generally collected directly from you as part of the application process and is encrypted during electronic transmission. The data comes from the online application form and the files you upload.
The data processing serves to initiate an employment relationship. The primary legal basis for this is Art. 6(1)(b) GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG). In addition, consent pursuant to Art. 6(1)(a), 7 GDPR in conjunction with Section 26(2) BDSG may serve as a legal basis under data protection law. Where the processing of your data is based on consent, you have the right to withdraw that consent at any time with effect for the future.
Within our company, only the persons and departments (e.g. Human Resources) that absolutely need your personal data to carry out the application process or to fulfill our legal obligations have access to it. Your applications may be forwarded to the respective responsible persons for review. Your personal data will never be disclosed to third parties without authorization.
Your data relating to an application for a specific job posting is stored and processed by us during the ongoing application process. After the application process has ended (e.g. through an offer or rejection), the application, including all personal data, is deleted from our system 6 months after the process has ended. In the event of a successful application, we reserve the right to retain your application for longer if the start date is more than six months in the future.

Registration

You have the option of registering for certain services provided on our website, thereby creating a user profile. As part of registration and setup, we collect and use the following personal data:

  • Email address

  • First and last name

  • Salutation

  • Postal address

  • Date and time of registration

  • Phone number

In addition, you may voluntarily provide further information (e.g. phone number, etc.). Mandatory fields required for registration are marked with an asterisk in the input form. Your user account gives you the option of using further parts of our website and logging in to access the offers you have purchased. The legal basis for the data processing is, where consent has been given, Art. 6(1)(a) GDPR, or Art. 6(1)(b) GDPR where processing is necessary to provide the requested services. Your data is deleted as soon as the user account on our website is deleted, provided no statutory retention obligations apply. You can generally change and/or delete your user account, including the data you provided, directly in your user account after logging in, or by sending a corresponding message to the controller named at the beginning of this policy.

Chat Function

This website uses a live chat provided by Tidio LLC, 180 Steuart St, CA 94119, San Francisco, to ensure the best possible user experience. To respond to live inquiries, your chat name and the chat content you provide are collected and stored for the duration of the chat.
Cookies are used to operate the chat function. Cookies are small text files that are stored locally in the internet browser cache of the website visitor. Cookies allow the visitor's internet browser to be recognized, in order to distinguish between individual users of our website's chat function. The information generated by the cookies about your use of this website (including your IP address) is transmitted to and stored on a server operated by Tidio LLC.
The legal basis for processing the data is, where the user has given consent, Art. 6(1)(a) GDPR. Where the information collected in this way relates to an identifiable person, processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer support and statistical analysis of user behavior for optimization purposes. Where the chat is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
The use of the service provider Tidio LLC is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Where the information collected in this way relates to an identifiable person, processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer support and statistical analysis of user behavior for optimization purposes.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The chat and your chat name are deleted immediately once you or we end the chat conversation, but no later than 6 months after the last message in the chat.
To avoid the storage of cookies, you can set your internet browser so that no further cookies can be stored on your computer in the future, or so that cookies already stored are deleted. However, disabling all cookies may mean that the chat function on our website can no longer be used.
Where consent has been given, the user may withdraw their consent to the processing of personal data at any time. In such a case, the conversation cannot be continued.
Tidio LLC, based in the USA, is certified under the US-EU "Privacy Shield" data protection agreement, which ensures compliance with the data protection level applicable in the EU. Further information on data protection can be found in Tidio LLC's privacy policy: https://www.tidio.com/privacy-policy/.

Review Reminder

Where you have given us your express consent to do so, during or after your order, pursuant to Art. 6(1)(a) GDPR, we transmit your email address to the review platform iFEEDBACK®, Mies-van-der-Rohe-Str. 8, 80807 Munich, so that it can send you a review reminder by email. You can withdraw your consent at any time by sending a message to the controller responsible for the data processing, or to the review platform.

Newsletter

If you would like to subscribe to the newsletter offered on the website, which provides regular information about our offers and products, we require your email address as a mandatory field. Additional data may be provided so that we can address you personally in the newsletter and/or identify you should you wish to exercise your rights as a data subject.
We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by email once you have explicitly confirmed that you consent to receiving newsletters. To do so, you will first receive an email with a link that allows you to confirm that, as the holder of the relevant email address, you wish to receive newsletters in the future. By confirming, you give us your consent pursuant to Art. 6(1)(a) GDPR to use your personal data for the purpose of sending the requested newsletter.
When you sign up for the newsletter, in addition to the email address required for sending it, we store the IP address you used to sign up, as well as the date and time of registration and confirmation, in order to be able to trace any possible misuse at a later date.
You can unsubscribe from the newsletter at any time via the link included in every newsletter, or by sending an email to the controller named above. After you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to continued use of the collected data, or continued processing is otherwise permitted by law.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called cookies. These are text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. We only use Google Analytics with IP anonymization enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, which rules out any connection to an identifiable person. Google is certified under the US-EU "Privacy Shield" data protection agreement, which ensures compliance with the data protection level applicable in the EU.
Where you have given your consent under Art. 6(1)(1)(a) GDPR, processing on this website takes place for the purpose of website analysis.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google. The terms of use for Google Analytics and information on data protection can be accessed via the following links: http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=de.
Clicking the following link prevents collection by Google Analytics by setting a so-called opt-out cookie:
Disabling Google Analytics
Information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Hotjar

Our website uses the web analytics service Hotjar, provided by Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd., Level 2, St. Julians Business Centre, 3, Elia Zammit Street, St. Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788).
This tool makes it possible to track movements on the websites on which Hotjar is used (so-called heatmaps). For example, it can show how far users scroll and which buttons users click and how often. Furthermore, the tool also makes it possible to gather feedback directly from website users. Above all, the functionality of the Hotjar-based website can be improved through Hotjar's services by making it more user-friendly, more valuable, and easier for end users to use.
We pay particular attention to the protection of your personal data when using this tool. We are only able to track which buttons are clicked, the movement of the mouse, how far the page is scrolled, the device's screen size, device type and browser information, geographic location (country only), and the preferred language for displaying our website. Areas of the website in which personal data belonging to you or third parties is displayed are automatically hidden by Hotjar and are therefore never traceable.
To rule out any direct connection to an identifiable person, IP addresses are only stored and further processed in anonymized form. However, Hotjar uses various third-party services such as Google Analytics and Optimizely. It is therefore possible that these services collect data transmitted by your browser as part of web page requests. This could be, for example, cookies or your IP address. In these exceptional cases, this processing takes place under Art. 6(1)(a) GDPR on the basis of the consent you have given for the purpose of statistical analysis of user behavior for optimization and marketing purposes.
Hotjar gives every user the option of using a "Do Not Track header" to prevent the use of the Hotjar tool, so that no data about the visit to the respective website is recorded. This is a setting supported by all common browsers in their current versions. To do this, your browser sends a request to Hotjar indicating that tracking of the respective user should be disabled. If you use our websites with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers.
You can prevent Hotjar from collecting your data when visiting a Hotjar-based website at any time by going to our opt-out page https://www.hotjar.com/legal/compliance/opt-out and clicking to disable Hotjar.
Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com
Hotjar Ltd.'s privacy policy can be found at: https://www.hotjar.com/privacy

Google Analytics Remarketing / DoubleClick

Our website uses the features of Google Analytics Remarketing in conjunction with the cross-device features of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This feature makes it possible to link the advertising audiences created with Google Analytics Remarketing with the cross-device features of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that were tailored to you based on your previous usage and browsing behavior on one device (e.g. mobile phone) can also be displayed on another one of your devices (e.g. tablet or PC).
Where you have given the relevant consent, Google links your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be shown on every device on which you sign in with your Google account.
To support this feature, Google Analytics collects authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and create audiences for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google account; to do so, follow this link: https://adssettings.google.com/
The compilation of the collected data in your Google account is carried out solely on the basis of your consent, which you can give or withdraw with Google (Art. 6(1)(a) GDPR).
The information collected about users may be transmitted to Google and stored on Google's servers in the USA. Google is certified under the US-EU "Privacy Shield" data protection agreement, which ensures compliance with the data protection level applicable in the EU.
Further information and the data protection provisions can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/

Facebook Pixel

We use "Facebook Pixel" on our website, a service provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter referred to as "Facebook").
Facebook Pixel allows Facebook to show our ads on Facebook, so-called "Facebook Ads," only to Facebook users who have visited our website, in particular those who have shown interest in our online offering. Facebook Pixel also makes it possible to check whether a user was redirected to our website after clicking on one of our Facebook Ads.
Facebook Pixel uses, among other things, cookies — small text files that are stored locally in your web browser's cache on your device. If you are logged into Facebook with your user account, your visit to our online offering is recorded in your user account. The data collected about you is anonymous to us and therefore does not allow us to draw any conclusions about the identity of users. However, this data may be linked by Facebook to your user account there. If you have a Facebook user account and are registered, Facebook can attribute the visit to your user account.
(2) We use Facebook Pixel for marketing and optimization purposes, in particular to display ads on Facebook that are relevant and interesting to you, and thereby improve our offering, make it more interesting for you as a user, and avoid annoying ads.
(3) Where you have given your consent to the storage of Facebook Pixel, this is done on the basis of Art. 6(1)(a) GDPR.
(4) You may object to the collection described above by Facebook Pixel and to the use of your data to display Facebook Ads. You can adjust the settings for which types of ads are shown to you within Facebook on the following Facebook page:
https://www.facebook.com/settings?tab=ads
Please note that this setting will be deleted if you delete your cookies. In addition, you can disable cookies used for reach measurement and advertising purposes via the following websites:
http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/
Please note that this setting will also be deleted if you delete your cookies.
(5) Facebook has also submitted to and certified itself under the Privacy Shield agreement concluded between the European Union and the USA. By doing so, Facebook commits to complying with the standards and regulations of European data protection law. Further information can be found in the linked entry below:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
(6) Third-party provider information: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Further information from the third-party provider on data protection can be found on the following Facebook page:
https://www.facebook.com/about/privacy
Information about Facebook Pixel can be found on the following Facebook page:
https://www.facebook.com/business/help/651294705016616

etracker

On this website, we use the services of etracker GmbH (www.etracker.com) for web analytics. Data is automatically collected and stored, from which usage profiles are created using pseudonyms.
Where you have given your consent under Art. 6(1)(1)(a) GDPR, data is automatically collected on this website using etracker GmbH's technologies (www.etracker.com) for the purpose of website analysis.
The pseudonymized usage profiles are not merged with personal data about the person behind the pseudonym without a separately granted, explicit consent. Once the purpose no longer applies and our use of etracker has ended, the data collected in this context is deleted.
You can object to the collection and storage of data at any time, with effect for the future, by clicking this link (http://www.etracker.de/privacy?et=jLs). After you object, an opt-out cookie will be placed on your device. If you delete your cookies, you will need to click the link again.

Google AJAX Search API

We use Ajax on these pages. Google AJAX Search API is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool is used to optimize loading speeds.
To do this, program libraries are called from Google servers and Google's CDN (Content Delivery Network) is used. If you have previously used jQuery from the Google CDN on another page, your browser will use the copy stored in the cache. If this is not the case, a download is required, during which data is sent from your browser to Google. Your data is transferred to the USA.
Further information can be found in the provider's privacy notice:
https://policies.google.com/privacy?hl=de&gl=de
The legal basis for this processing is our legitimate interest in giving you the option, in the event of a potentially very high volume of postings or matching requests, to search the content of our page. We do not know what data Google links with the data received or for what purposes Google uses this data.
Google is certified under the US-EU "Privacy Shield" data protection agreement, which ensures compliance with the data protection level applicable in the EU. To completely prevent the execution of JavaScript code from Google, you can install a JavaScript blocker (e.g. www.noscript.net).

Google Maps

Our homepage uses the online map service provider Google Maps via an interface. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is transmitted to and stored on a Google server in the USA. The provider of this website has no influence on this data transfer.
The use of the Google Maps map service is in the interest of an appealing presentation of our online offering and of making the addresses listed by us on the website easier to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Google is certified under the Privacy Shield agreement and thereby provides a guarantee to comply with European data protection law:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on how user data is handled can be found in Google's privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out:
https://www.google.com/settings/ads/

Google Web Fonts

(1) We use "Google Web Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Web Fonts allows us to use external fonts, so-called Google Fonts. To do this, the required Google Fonts are loaded by your web browser into your browser cache when you access our website. This is necessary so that your browser can also display our texts in a visually improved way. If your browser does not support this feature, a default font on your computer is used for display. These web fonts are embedded via a server call, usually to a Google server in the USA. This transmits to the server which page of our website you have visited. The IP address of the visitor's device browser is also stored by Google.
(2) We use Google Web Fonts for optimization purposes, in particular to improve your use of our website and to make its design more user-friendly.
(3) This also constitutes our legitimate interest under Art. 6(1)(f) GDPR.
(4) Google has submitted to and certified itself under the Privacy Shield agreement concluded between the European Union and the USA. By doing so, Google commits to complying with the standards and regulations of European data protection law. Further information can be found in the linked entry below:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
(5) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Further information on data protection can be found in Google's privacy policy:
http://www.google.de/intl/de/policies/privacy
Further information on Google Web Fonts can be found at:
http://www.google.com/webfonts/
https://developers.google.com/fonts/faq?hl=de-DE&csw=1
https://www.google.com/fonts#AboutPlace:about

Adobe Typekit Fonts

For a consistent display of fonts, we use so-called web fonts provided by Adobe. Adobe Typekit is a service that provides access to a font library and is offered by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When a page is accessed, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. To do this, the browser you use must connect to Adobe's servers. This lets Adobe know that our website was accessed via your IP address. The use of Adobe Typekit Fonts is in the interest of a consistent and appealing presentation of our online offerings. The legal basis is Art. 6(1)(f) GDPR.
Adobe is certified under the Privacy Shield agreement and thereby provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active). Further information on Adobe Typekit Fonts can be found in Adobe's privacy policy:
https://www.adobe.com/de/privacy/policies/typekit.html
You can set your browser so that fonts are not loaded from Adobe's servers (e.g. by installing add-ons such as NoScript or Ghostery). If your browser does not support Adobe Fonts, or if you block access to Adobe's servers, the text will be displayed in the system's default font.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). reCAPTCHA is used to check whether data entry on our website (e.g. in a contact form) is being carried out by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website.
For this analysis, reCAPTCHA evaluates various pieces of information, e.g.:

  • IP address

  • Time spent by the website visitor on the website

  • Mouse movements made by the user

  • The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place. Data processing takes place on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our website from abusive automated spying and from unwanted automated messages (spam).
Google is certified under the US-EU "Privacy Shield" data protection agreement, which ensures compliance with the data protection level applicable in the EU. We do not store any personal data as a result of using reCAPTCHA. In general, personal data of the data subject is deleted or blocked as soon as the purpose of storage no longer applies.
Further information about Google reCAPTCHA as well as Google's privacy policy can be found at the following links:
https://www.google.com/intl/de/policies/privacy/
https://www.google.com/recaptcha/intro/v3beta.html

YouTube

Our website uses plugins from the YouTube website operated by Google. The pages are operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our pages equipped with a YouTube plugin, a connection is established to YouTube's servers. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
Further information on how user data is handled can be found in YouTube's privacy policy at:
https://www.google.de/intl/de/policies/privacy

Data Disclosure and Recipients

Your personal data is not transmitted to third parties, except

  • where we have explicitly pointed this out in the description of the respective data processing,

  • where you have given your express consent to this under Art. 6(1)(1)(a) GDPR,

  • where disclosure is necessary under Art. 6(1)(1)(f) GDPR to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

  • where there is a legal obligation to disclose the data under Art. 6(1)(1)(c) GDPR, and

  • insofar as this is necessary under Art. 6(1)(1)(b) GDPR for the performance of contractual relationships with you.

In addition, we use external service providers to carry out our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Where necessary, we have concluded data processing agreements with them pursuant to Art. 28 GDPR. These are service providers for web hosting, sending emails, and maintaining and servicing our IT systems, etc. The service providers will not disclose this data to third parties.

Data Security

In accordance with Art. 32 GDPR, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. For security reasons and to protect the transmission of confidential content, this website uses SSL encryption.

Retention Period of Personal Data

The duration for which personal data is stored is determined by the relevant statutory retention periods (e.g. under commercial and tax law). Once the respective period has expired, the corresponding data is routinely deleted. Where data is required for the performance or initiation of a contract, or where we have a legitimate interest in its continued storage, the data is deleted once it is no longer required for these purposes, or once you have exercised your right of withdrawal or objection.

Your Rights

Below you will find information on the rights that applicable data protection law grants you as a data subject, vis-à-vis the controller, with regard to the processing of your personal data:
The right, pursuant to Art. 15 GDPR, to request confirmation of the personal data concerning you that we process. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details involved.
The right, pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data concerning you stored by us, or the completion of incomplete personal data.
The right, pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
The right, pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, provided that the accuracy of the data is contested by you, the processing is unlawful but you object to its erasure, we no longer need the data but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.
The right, pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of the federal state of our registered office named above, or, where applicable, that of your habitual residence or place of work.
The right to withdraw consent given, pursuant to Art. 7(3) GDPR: You have the right to withdraw consent you have given to the processing of data at any time, with effect for the future. In the event of withdrawal, we will delete the affected data without delay, unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.

Right to Object

Where your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data for reasons arising from your particular situation. Where the objection relates to the processing of personal data for direct marketing purposes, you have a general right to object without needing to specify a particular situation.
If you wish to exercise your right of withdrawal or objection, an email to info@umnicorn.com is sufficient.

External Links

Social networks (Facebook, Twitter, and Xing) are embedded on our website only as links to the respective services. After clicking on the embedded text/image link, you will be redirected to the respective provider's page. User information is only transmitted to the respective provider after the redirect. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.

Right to Amend

We reserve the right to amend or update this privacy policy as necessary, in compliance with applicable data protection regulations. This allows us to adapt it to current legal requirements and to take account of changes to our services, for example when introducing new services. The version in force at the time of your visit shall apply.

© 2026 UMNICORN GmbH