Unknot Join the waitlist

Privacy Policy

This is an English translation of our Datenschutzerklärung. If the two differ, the German version applies.

1. An overview of data protection

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data on this website is processed by the website operator. You can find their contact details in the section “Note on the controller” in this privacy policy.

How do we collect your data?

Some of your data is collected when you give it to us. This may be, for example, data you enter in a contact form.

Other data is collected by our IT systems automatically, or with your consent, when you visit the website. This is mainly technical data (e.g. web browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to make sure the website works without errors. If contracts can be concluded or initiated through the website, the data you send is also processed for contract offers, orders or other order requests. With your consent, we also count page views statistically, without cookies (see “Cloudflare Web Analytics”).

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to ask for this data to be corrected or deleted. If you have consented to data processing, you can withdraw that consent at any time for the future. You also have the right, under certain circumstances, to ask for the processing of your personal data to be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about this and any other questions about data protection.

2. Hosting

We host the content of our website with the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data and other data generated through a website.

External hosting serves to fulfil contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and is in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). If consent was requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers storing cookies or accessing information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Our host(s) will only process your data to the extent necessary to fulfil their service obligations and will follow our instructions regarding this data.

We use the following host:

Cloudflare (https://www.cloudflare.com/)

The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers our website through a worldwide network of data centres and protects it from attacks. In doing so, Cloudflare processes in particular your IP address, the date and time of access, the page requested, and information about your browser and operating system. We also store our waitlist entries with Cloudflare, and Cloudflare sends our emails to you (Cloudflare Email Service), such as the waitlist confirmation email. This may involve processing in the USA.

We have a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework (DPF); transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR) and, in addition, on the EU Standard Contractual Clauses. More information: https://www.cloudflare.com/privacypolicy/.

3. General and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmitted over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the controller

The controller responsible for data processing on this website is:

Guilherme Müller
Erich-Weinert-Str. 96D
10409 Berlin
Germany

Contact: contact form or hello@unknot.io

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data stays with us until the purpose for processing it no longer applies. If you make a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law); in that case, it will be deleted once those reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. If you have explicitly consented to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), processing is additionally based on § 25(1) TDDDG. Consent can be withdrawn at any time. If your data is needed to fulfil a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data where this is needed to fulfil a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The relevant legal basis in each case is explained in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of our business, we work with various external parties. In some cases, this requires transferring personal data to them. We only pass personal data on to external parties if this is needed to fulfil a contract, if we are legally obliged to do so (e.g. passing data on to tax authorities), if we have a legitimate interest in passing it on under Art. 6(1)(f) GDPR, or if another legal basis allows it. When we use processors, we only pass on our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING OPERATION IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

If the GDPR is breached, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. This right is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or to fulfil a contract handed over to you or to a third party in a common, machine-readable format. If you ask for the data to be transferred directly to another controller, this will only be done insofar as it is technically feasible.

Access, correction and deletion

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and, where applicable, a right to have this data corrected or deleted. You can contact us at any time about this and any other questions about personal data.

Right to restriction of processing

You have the right to ask for the processing of your personal data to be restricted. You can contact us at any time to do so. The right to restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, this data – apart from being stored – may only be processed with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

When SSL or TLS encryption is active, the data you send to us cannot be read by third parties.

Objection to advertising emails

We hereby object to the use of the contact details published in our legal notice (Impressum) for sending advertising and information material we have not expressly requested. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data collection on this website

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us in order to handle your request. We do not pass this data on without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the fulfilment of a contract or is needed to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling enquiries addressed to us effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if it was requested; consent can be withdrawn at any time.

The data you send us in contact requests stays with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing it no longer applies (e.g. once your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Contact form

If you write to us using the contact form, we process your message, your email address and, if you give it, your name in order to answer your enquiry. The message is delivered to us by email and is not also stored on the website. The legal basis and storage period are as described under “Enquiries by email, telephone or fax”.

Email inbox (Gmail)

Messages from the contact form and notifications of new waitlist entries arrive in our email inbox at Gmail. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in handling your enquiries and sign-ups reliably.

Cloudflare Turnstile

To protect the waitlist and the contact form from spam and automated access, we use Cloudflare Turnstile (provider: Cloudflare, Inc., see section 2). Only once you use one of these forms (for example by clicking into a field) does your browser load a script from Cloudflare and send Cloudflare your IP address and technical information about your browser and device, so it can check whether the input comes from a person. Merely visiting our pages does not load the script. The legal basis for accessing your device is § 25(2) No. 2 TDDDG, as this is strictly necessary to provide the form you are using protected from abuse. The legal basis for processing your data is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our forms from abuse.

Cloudflare Web Analytics

To see how often our pages are visited, we use Cloudflare Web Analytics (provider: Cloudflare, Inc., see section 2) with your consent. Only after you choose “Allow” in the notice at the bottom of the screen does your browser load a small script from Cloudflare that reports the page requested, the referring page, page load times, and information about your browser, operating system and device to Cloudflare; Cloudflare also receives your IP address. The script sets no cookies and stores nothing on your device, and it does not recognise you across visits or other websites. We only see aggregated statistics (such as visits per page, referrers, countries and browsers), never individual visitors. The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time via “Privacy settings” at the bottom of every page; this does not affect the lawfulness of processing up to that point.

We keep your choice (“Allow” or “Decline”) and when you made it in your browser’s local storage (localStorage), so we don’t ask again on every page. This is strictly necessary for that purpose (§ 25(2) No. 2 TDDDG). The entry never leaves your device, and you can delete it at any time by clearing this website’s data in your browser. After twelve months, we ask again.

5. Newsletter

Newsletter data

This includes our waitlist: we will let you know by email as soon as Unknot is available and, if you explicitly choose this when signing up, occasionally send you news about Unknot.

If you would like to receive the newsletter offered on the website, we need your email address and information that lets us verify that you own that address and agree to receive the newsletter. We use this data to send the information you asked for and do not pass it on to third parties.

Signing up for the waitlist (double opt-in)

When you sign up for the waitlist, we store your email address and the time you signed up with Cloudflare and send you an email with a confirmation link. Only when you click that link do we add you to the waitlist, and we then also store the time you confirmed. If you don’t confirm within 7 days, we delete your address automatically. To stop anyone using the form to flood other people’s inboxes, we also remember for 24 hours that a confirmation email was sent to an address.

When signing up, you can also tick a box to receive occasional product news by email. The box is not pre-ticked, and ticking it is voluntary. Without the tick, we will only write to you once after you confirm, when Unknot is available. We store your choice together with the times you signed up and confirmed; it only takes effect once you confirm.

We store the sign-up and confirmation times so we can prove your consent (Art. 7(1) GDPR). The legal basis for this is Art. 6(1)(f) GDPR; our legitimate interest lies in this proof.

So that only you can unsubscribe, your address gets a random code that is stored with it and put into the unsubscribe links in our emails. You can withdraw your consent at any time: through the unsubscribe link in any of our emails, through “Leave the waitlist” below the sign-up form, or through the contact form. Unsubscribing applies to all waitlist emails: we then delete your address, your choice and this code.

General information on the newsletter

The data entered in the newsletter sign-up form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent to the storage of your data and email address and their use for sending the newsletter at any time, for example through the “unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.

The data you give us to receive the newsletter is stored by us or the newsletter service provider until you unsubscribe, and is deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest under Art. 6(1)(f) GDPR.

Data we have stored for other purposes remains unaffected.

After you have been removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blocklist if this is needed to prevent future mailings. The data in the blocklist is only used for this purpose and is not combined with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blocklist is not limited in time. You can object to it if your interests outweigh our legitimate interest.

6. Plugins and tools

Fonts, scripts and images (hosted locally)

The fonts, JavaScript libraries, icons and images used on this website are stored on our own server. No connection is made to servers of Google, unpkg, Unsplash or other third parties for them.

Source of the German original: https://www.e-recht24.de. Translation by us.