This is an English translation of the German privacy policy (Datenschutzerklärung), which governs data processing under the GDPR for a German business. In case of discrepancies, the German version applies.
The following gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
The controller responsible for data processing on this website is:
Christoph Amann, Enderlegasse 6, 89077 Ulm-Söflingen, Germany
Email: info@ulm.one
This website is hosted by:
IONOS SE
The hosting provider processes data on our behalf under a data processing
agreement pursuant to Art. 28 GDPR.
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:
This data is not combined with data from other sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free operation of the website).
We use HubSpot (HubSpot, Inc., USA / HubSpot Ireland Limited) for our general contact form, to collect and manage submitted data. If you contact us via the contact form, your submitted details, including any contact data you provide, are stored by us for the purpose of processing your request and in case of follow-up questions.
[Placeholder: add details of the specific HubSpot setup — form used, data processing agreement with HubSpot, and safeguards for any transfer of data to the US, e.g. the EU-US Data Privacy Framework or Standard Contractual Clauses.]
The legal basis for this processing is Art. 6(1)(b) GDPR (processing a request or pre-contractual measures) or Art. 6(1)(a) GDPR (consent) otherwise.
When you list your business via the listing form, we store the details you provide (business name, category, description, email, and optionally phone and website) in a database operated by our sub-processor Supabase (Supabase Inc. / Supabase infrastructure; this project's server location is Frankfurt am Main, Germany/EU).
New listings are initially stored with the status "under review" and are not publicly visible in that state. Only after manual approval by us is a listing displayed publicly in the directory. Visitors to the website can only view already-approved listings; access to listings under review is technically restricted (database access rules) to us.
[Placeholder: add the data processing agreement with Supabase Inc. if its parent entity is located outside the EU and a third-country transfer becomes relevant.]
The legal basis is Art. 6(1)(b) GDPR (fulfilling your requested directory listing) in conjunction with your consent given via the checkbox on the listing form. Your data remains stored for as long as the listing is kept in the directory; you may request deletion or changes to your listing at any time via info@ulm.one.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies that enable an analysis of your use of this website. The information generated by the cookie is generally transmitted to and stored on a Google server, which may include transfer to the US.
Google Analytics is only loaded on this website after you give explicit consent via the cookie banner. No data processing by Google Analytics takes place without your consent. The legal basis is therefore Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect by clearing your browser's cookies and making a new selection in the banner.
[Placeholder: enter the actual GA4 Measurement ID in main.js (currently G-XXXXXXXXXX) and confirm whether additional privacy settings should be enabled in Google Analytics.]
This website embeds the fonts "Space Grotesk" and "Inter" via the Google Fonts CDN (fonts.googleapis.com). When a page is loaded, your browser retrieves the required fonts directly from Google's servers, which transmits your IP address to Google. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the website).
This website uses the following cookies / local storage (localStorage):
Personal data is only stored for as long as necessary for the respective purpose or as required by statutory retention periods.
Within the scope of applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of processing, as well as a right to rectification or erasure of this data.
You have the right to request the restriction of the processing of your personal data as well as a right to data portability.
Where processing is based on your consent, you may withdraw it at any time with future effect. Where processing is based on legitimate interests, you have a right to object.
You also have the right to lodge a complaint with the competent supervisory authority, e.g. the data protection authority of Baden-Württemberg (Landesbeauftragter für den Datenschutz Baden-Württemberg).
This privacy policy is a starting scaffold and does not constitute legal advice. Please have it reviewed by a lawyer before going live — particularly the HubSpot and Google Analytics sections (data processing agreements, US data transfer).