Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

U-Glow GmbH
Friedrich-Ebert-Straße 33
45468 Mülheim an der Ruhr
Germany

Phone: +49 (208) 88254 182
Email: info@u-glow.de

2. General information on data processing

We process personal data only to the extent necessary to provide this website, handle enquiries, initiate or perform business relationships, or process job and career-related enquiries.

Personal data means any information relating to an identified or identifiable natural person.

Depending on the processing activity, the legal basis is in particular Article 6(1)(a), (b) or (f) GDPR and — in the context of applications and employment — Section 26 BDSG.

3. Hosting by STRATO

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When you access the website, STRATO processes technically necessary access data. This may include in particular:

• page or file accessed
• date and time of access
• amount of data transferred
• browser type and browser version
• operating system
• referrer URL
• technical status information
• IP or host information in the anonymised form provided by STRATO

The processing serves to provide the website securely, reliably and without technical errors and to prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.

We have entered into a data processing agreement with STRATO pursuant to Article 28 GDPR.

4. Contact form

If you contact us using the contact form, we process the information you provide. This includes in particular:

• name
• company, if provided
• email address
• selected topic of enquiry
• content of your message

The data is processed in order to handle your enquiry and any subsequent communication.

If your enquiry is aimed at entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. For other business or general enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling incoming enquiries appropriately.

In the intended production setup, the contact form data is processed server-side on the website hosted by STRATO and forwarded to the U-Glow GmbH email address designated for handling the enquiry.

We retain enquiries only for as long as necessary to process them and, where applicable, for a subsequent business relationship. Statutory retention obligations remain unaffected.

5. Career and job applications

If you use the contact form for a job application, internship or another career opportunity, we process the personal data you provide in order to decide whether to establish an employment relationship.

The legal basis is in particular Section 26(1) BDSG in conjunction with Article 6(1)(b) GDPR.

If no employment relationship is established, we generally delete application data after the recruitment process has been completed, as soon as it is no longer required for the decision and there are no statutory or legal reasons for further retention. As a rule, deletion takes place no later than six months after completion of the recruitment process.

Longer retention, for example for an applicant or talent pool, takes place only on the basis of separate consent.

6. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide in order to handle your enquiry.

Where the communication relates to entering into or performing a contract, the processing is based on Article 6(1)(b) GDPR. In other cases, it is based on Article 6(1)(f) GDPR on the basis of our legitimate interest in handling incoming communications.

7. Protection against spam and abuse

The contact form uses technical measures to detect automated or abusive submissions. These may include, in particular, an invisible verification field, time-based plausibility checks and technical safeguards against excessively frequent requests.

The processing serves to protect our website against spam and misuse. The legal basis is Article 6(1)(f) GDPR.

No automated decision with legal or similarly significant effects within the meaning of Article 22 GDPR takes place in this context.

8. Consent management and technically necessary storage

When you first visit the website, you can choose whether analytics technologies may be used in addition to technically necessary functions.

Technically necessary information may be stored or accessed where this is required to provide the website you have requested or to store your privacy preferences.

Where information is stored on or accessed from your device for analytics purposes, this takes place only after you have given your consent in accordance with Section 25(1) TDDDG. The subsequent processing of personal data is based on Article 6(1)(a) GDPR.

You can change or withdraw your consent at any time with effect for the future via Cookie Settings in the footer.

9. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google, only after you have given your prior consent.

For users in the European Economic Area, the relevant Google service provider is generally Google Ireland Limited. Other companies within the Google group may also process data in connection with the provision of the service.

Google Analytics helps us understand how visitors use our website. The information processed may include in particular:

• pages viewed
• time and duration of page views
• interactions with the website
• approximate geographic region
• device and browser information
• technical identifiers and event data

Google Analytics is activated on this website only after you have consented to the Analytics category. The Analytics tag is not loaded before consent is given.

The legal basis for accessing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

According to Google, IP addresses of users in the EU are not logged or stored in Google Analytics 4. IP address data is used to derive approximate location information and is then discarded.

The retention period for user- and event-related data in our Google Analytics property is set to 14 months.

At launch, we use Google Analytics exclusively for reach and usage analysis. Personalised advertising features and Google Signals are not enabled.

Google may also process data in third countries as part of providing the service. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where required, Google also relies on contractual safeguards provided by Google for data transfers.

You can withdraw your consent at any time with effect for the future via Cookie Settings in the footer.

Further information on data processing by Google can be found in Google’s privacy information.

10. Local fonts

The fonts used on this website are served locally from our web server. No connection to Google Fonts or other external font services is established when the fonts are loaded.

11. External links

Our website may contain links to external websites. Simply visiting our website does not transmit data to the linked providers through ordinary links. Once you follow an external link, the privacy terms of the respective provider apply.

12. Recipients of personal data

Personal data is received only by those parties that require it for the respective purposes.

These may include in particular:

• responsible employees of U-Glow GmbH
• STRATO as hosting and infrastructure provider
• email and IT service providers
• Google in connection with Google Analytics, where you have consented to Analytics

Data is disclosed to other third parties only where there is a legal basis, where this is necessary for the performance of a contract, or where you have given your consent.

13. Third-country transfers

For certain services used on this website, processing outside the European Union or the European Economic Area cannot be ruled out.

Where personal data is transferred to third countries, this takes place only in compliance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards.

14. Retention period

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective processing purpose.

Statutory retention periods or the establishment, exercise or defence of legal claims may require longer retention.

Once the purpose no longer applies and the relevant retention periods have expired, the data is deleted.

15. Your rights

Subject to the statutory requirements, you have in particular the right to:

• obtain information about your personal data
• have inaccurate data corrected
• request deletion
• request restriction of processing
• data portability
• object to certain processing activities
• withdraw consent you have given with effect for the future

To exercise your rights, you can contact us at:

info@u-glow.de

16. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The authority particularly relevant to U-Glow GmbH is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf

18. Encrypted transmission

The website is transmitted using HTTPS encryption. This protects data exchanged between your browser and our website while it is in transit.

19. Automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place in connection with this website.

20. Currency of this policy

We update this Privacy Policy when the services used or the applicable legal or technical framework changes.