Enwikuna
DERequest a project
DE
Request a project

Legal

Privacy policy

Enwikuna takes the protection of your privacy and your personal data very seriously. We want you to know when we store which data and how we use it.

We aim to process only the personal data necessary for the appropriate and economically reasonable use of our services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Below we provide detailed information about which data is processed and in what form when you visit our website. In doing so, we also comply with our information obligations toward you pursuant to Art. 13 GDPR.

Controller

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:

Enwikuna UG (limited liability)
Alex-Gugler-Str. 16
83666 Waakirchen
E-mail: [email protected]
Phone: +49 8021 / 20 83 23 4

1. Information on the collection of personal data

  1. Below we inform you about the collection of personal data when using our website. Personal data means all data that can be related to you personally, e.g., name, address, e-mail addresses, user behavior.
  2. If you contact us by e-mail, via our chat, or via a contact form, the data you provide (your e-mail address and, if applicable, your name and your phone number) will be stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. The legal basis for this is our legitimate interest within the meaning of Art. 6(1)(f) GDPR to answer your request and, if your request is aimed at the conclusion of a contract, Art. 6(1)(b) GDPR.
  3. If we engage service providers for individual functions of our services or intend to use your data for advertising purposes, we will provide detailed information about the respective processes below. We will also state the criteria used to determine the storage period.

2. Your rights

  1. You have the following rights vis-à-vis us with regard to your personal data:

    • Right of access (Art. 15 GDPR)
    • Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to withdraw consent given (Art. 7(3) GDPR)
    • Right to object to the processing (Art. 21 GDPR)
    • Right to be informed (Art. 19 GDPR)
    • Right to data portability (Art. 20 GDPR)

  2. You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA). You can submit a complaint using the BayLDA online service.

  3. If personal data is processed for the performance of tasks carried out in the public interest (Art. 6(1)(e) GDPR) or to safeguard legitimate interests (Art. 6(1)(f) GDPR), you can object to the processing of your personal data at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless

    • there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
    • the processing is necessary for the establishment, exercise or defense of legal claims.

    You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling, insofar as it is connected with direct advertising. In the event of an objection, we must refrain from any further processing of your data for the purpose of direct advertising.

  4. To exercise your rights (with the exception of the right to lodge a complaint with a data protection supervisory authority), please contact the above-mentioned office.

3. Collection of personal data when visiting our website

  1. In the case of mere informational use of the website, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6(1)(f) GDPR):

    • IP address
    • Date and time of the request
    • Time zone difference to Greenwich Mean Time (GMT)
    • Content of the request (specific page)
    • Access status / HTTP status code
    • Amount of data transferred
    • Website from which the request originates
    • Browser
    • Operating system and its interface
    • Language and version of the browser software

  2. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small data packets that are stored on your hard disk (assigned to the browser you are using) and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website more user-friendly, functional and effective overall (legal basis is Art. 6(1)(f) GDPR). You can manage the cookie settings in your browser and, among other things, refuse to accept cookies in general or for our site and delete any cookies that have already been set. You can find more information on this in the help menu of your browser.

  3. This website uses cookies, the scope and function of which are explained below:

    Transient cookies

    Transient cookies (so-called session cookies) are automatically deleted when you close the browser. They contain a so-called session ID, with which various requests from your browser can be assigned to a common session. This allows your computer to be recognized during a visit.

    Persistent cookies

    Persistent cookies are stored on your end device beyond the current visit for a certain period of time and are then automatically deleted. The storage period may vary depending on the cookie and is used, for example, to save settings or preferences.

    Cookie settings

    Our website uses cookies and similar technologies. Technically necessary storage supports the website’s basic functionality and security. Your selection is stored in your browser’s local storage for up to six months. Analytics and marketing services are used only with your prior consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can make your selection on your first visit and change or withdraw it at any time using the cookie button at the bottom left.

4. Hosting of the website

  1. Our website is operated on servers of Hetzner Online GmbH. The servers are located in the Falkenstein data center (FSN), Germany. As part of hosting, the server automatically collects and stores information in so-called server log files, which your browser automatically transmits. This includes in particular:

    • IP address
    • Date and time of the request
    • Page or file accessed
    • Access status / HTTP status code
    • Amount of data transferred
    • Website from which the request originates
    • Browser
    • Operating system and its interface
    • Language and version of the browser software

  2. The processing of this data is technically necessary to ensure the secure and stable operation of the website and to prevent misuse and attacks. The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website.

  3. The server log files are stored for a maximum period of 14 days and then automatically deleted, unless security-related events make longer storage necessary.

  4. Information from the third-party provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. You can find an overview of data protection here.

5. Orders

  1. When you order a product from us, we ask you to provide important information for the purchase, including your name, optionally a company name, billing address, e-mail address and a telephone number (optional). If your billing country is in another EU country, a VAT identification number can be provided. The processing is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation). The information marked as mandatory fields is required to establish and fulfill the contract.
  2. If you use our products, we store your data required for the fulfillment of the contract, including details of the payment method, until you finally delete your access. We also store the voluntary data you provide for the duration of your use, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6(1)(f) GDPR.
  3. When you order a product, we may pass on your payment details to our bank. The legal basis for this is Art. 6(1)(b) GDPR. Your payment data will also be transmitted to the relevant payment service provider on this basis, depending on the payment method you have selected. The payment service provider is responsible for your payment data. Information about the payment service provider, including its controller, the contact details of its data protection officer and the categories of personal data it processes, can be found here when paying via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg).
    Depending on your location, device and the availability in your PayPal account, additional payment methods provided by PayPal may be displayed in the PayPal checkout. PayPal is responsible for the selection and processing of these payment methods. The personal data processed by PayPal depends on the payment method selected. Further information can be found in PayPal’s privacy policy linked above.
  4. To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.

6. Licenses

  1. Licenses are automatically assigned to the products you order after purchase or payment. Each license consists of a license code, the expiration date of the update and support plan, and a link to your user account and order. The use of our products requires the installation of our helper plugin. The following data is transmitted to our servers by the Enwikuna Helper and the respective plugin:

    • The license key
    • The URL of your WordPress site
    • The version of your product
    • URL of the page on which our product is installed
    • Name of the installed product
    • Version of the installed product

  2. The Enwikuna Helper plugin performs the following queries. It connects to our server via an interface and transmits the data listed above:

    • Query the validity of the license
    • Check for new updates
    • Check whether the update and support plan has expired
    • Updating the license data
    • Retrieving the update package

  3. The processing is carried out to provide and manage the license, to check the validity of the license and to provide updates. The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in IT security, the prevention of misuse and the error-free provision of services.

7. Use of Google Tag Manager

  1. We use Google Tag Manager to centrally manage and integrate website tags. Tag Manager is loaded only after you have consented to the analytics or marketing category. The services managed within it are activated according to your selection. When Tag Manager loads, technical connection data, in particular the IP address, may be transmitted to Google.
  2. The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw it at any time with future effect using the cookie button at the bottom left.
  3. Information from the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. An overview of data protection can be found here. Google LLC participates in the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists.

8. Use of Hotjar

  1. We use Hotjar to better understand the needs of our users and to optimize the offer on this website. Hotjar’s technology provides us with insights into the use of our website, for example how much time users spend on individual pages, what content is clicked on or how users interact with our website. This helps us to make our website more user-friendly and to continuously improve it.
  2. Hotjar works with cookies and similar technologies to collect information about the behavior of users and their end devices. This may include, in particular, technical information such as the IP address of the device (which is only recorded and stored in anonymized form), screen size, device type, unique device identifiers, information about the browser used, the approximate location (country) and the preferred language when viewing our website. Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or by us to identify individual users or merged with other data. Further information can be found here.
  3. The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent. You can give and revoke your consent via our cookie settings.
  4. The service is provided by Hotjar Limited, Dragonara Business Center, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta. Hotjar is part of the Contentsquare group, which is headquartered in Paris, France. Personal data may also be processed in third countries. If personal data is transferred to a third country, the transfer is based on an adequacy decision pursuant to Art. 45 GDPR or on appropriate safeguards pursuant to Art. 46 GDPR, in particular through the conclusion of standard contractual clauses and supplementary protection measures, if necessary. Further information can be found in Hotjar’s privacy policy. You can object to the storage of a user profile and information about your visit to our website by Hotjar, as well as the setting of Hotjar tracking cookies on other websites, by using Hotjar’s opt-out.

9. Use of Google Analytics

  1. We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website and advertising measures. Google processes website usage data on our behalf and is contractually obligated to take measures to ensure the confidentiality of the processed data.
  2. The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent. You can give and revoke your consent via our cookie settings.
  3. Google Analytics uses cookies and similar technologies to collect information about the use of our website. The data collected is processed pseudonymously so that it is not possible to directly identify individual users. The storage period for user-related data is a maximum of 14 months and depends on the settings we have made in Google Analytics. After this period, the data is automatically deleted or anonymized. Aggregated evaluations remain stored without personal reference.
  4. Information from the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. An overview of data protection can be found here. Google LLC participates in the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists.

10. Use of Google Ads

  1. We use Google Ads to draw attention to our products and services with the help of advertisements when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
  2. The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent. You can give and revoke your consent via our cookie settings.
  3. These advertisements are delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your computer. The unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser.
  4. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
  5. Information from the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. An overview of data protection can be found here. Google LLC participates in the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists.

11. Google reCAPTCHA

  1. We use Google reCAPTCHA to check whether the data input on our websites (e.g. in a contact form or registration window) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. The analysis begins automatically as soon as a corresponding function of our website is used. Various information is evaluated for the analysis, in particular the IP address, length of visit, mouse movements and other technical information. The data collected is transmitted to Google. The reCAPTCHA analyses run completely in the background.
  2. The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website from abusive automated access and spam.
  3. Information from the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. An overview of data protection can be found here. Google LLC participates in the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists.

12. Use of Cloudflare Turnstile

  1. We use Cloudflare Turnstile to protect public forms and interactive features of our website against abusive automated access, spam and bots. For this purpose, a connection to Cloudflare is established. When a protected feature is used, Turnstile performs a security check in the background and, after a successful check, provides a short-lived token that our server verifies through Cloudflare’s interface.
  2. Turnstile processes technical signals such as the IP address, TLS fingerprint, User-Agent header, sitekey and associated origin. According to Cloudflare, Turnstile does not access, store or transmit communications, form entries or other page inputs. Strictly necessary cookies or similar technologies may be used for the security check.
  3. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security and functionality of our website and in preventing spam, bots and other misuse. Where information is stored on your device or existing information is accessed, this is done, insofar as it is strictly necessary for technical reasons, on the basis of Section 25(2)(2) TDDDG.
  4. Cloudflare processes the technical signals as a processor when securing our website. Where Cloudflare processes these signals to improve its own bot detection, Cloudflare states that it acts as an independent controller. The service provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Processing may therefore also take place in the United States or other third countries. Cloudflare participates in the EU-US Data Privacy Framework. Where its requirements are not met, Cloudflare’s Data Processing Addendum provides in particular for EU Standard Contractual Clauses and supplementary safeguards.
  5. Further information can be found in the Turnstile Privacy Addendum, the Cloudflare Privacy Policy and the Cloudflare Data Processing Addendum.

13. Use of Cloudflare Interactive Challenges

  1. We use Cloudflare Interactive Challenges to protect particularly sensitive areas of our website, especially login and access pages, against automated access, abusive login attempts and other attacks. When a security assessment is triggered, Cloudflare processes, in particular, the IP address and technical information about the requested access, the browser, the device and its system environment to assess whether the access is being made by a human.
  2. After a successful assessment, Cloudflare stores strictly necessary proof on your device for the validity period specified by us. This prevents another assessment from being required for every protected access during this period.
  3. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and user accounts and in preventing automated access and other misuse. The strictly necessary storage of and access to information on your device are based on Section 25(2)(2) TDDDG.
  4. Cloudflare processes the data as a processor. The information in Section 12(4) applies accordingly with regard to the provider, possible transfers to third countries and the safeguards in place. Further information can be found in the Cloudflare Privacy Policy and the information about Cloudflare cookies.

14. Use of TidyCal

  1. To arrange appointments, we link to the external booking page of the online service TidyCal. When you follow the corresponding link, a connection to TidyCal is established. On TidyCal’s booking page, you can select an available appointment and enter the contact details requested in the booking form. We receive the booking data you provide insofar as this is necessary to prepare and conduct the appointment. After completing the booking, you will receive a confirmation email from TidyCal.
  2. TidyCal is operated by Sumo Group Inc. in the United States. Personal data may therefore also be processed in a third country. A data processing agreement is in place for the use of the service. Information about the data protection safeguards provided by TidyCal can be found in the provider’s privacy policy and data processing agreement.
  3. Your details from the booking form, including the data you provide there, will be stored by us for the purpose of processing your request or for the purpose of processing a corresponding contractual relationship. If your inquiry has been answered or the purpose no longer applies (e.g. the contractual relationship ends), we will delete your data promptly, subject to contractual or statutory retention options. If you would like your data to be deleted prematurely, you can ask us to delete it or revoke your consent to its storage. Mandatory statutory provisions – in particular retention periods – remain unaffected.
  4. The legal basis for the processing of the data is Art. 6(1)(b) GDPR, insofar as the processing is necessary to carry out pre-contractual measures or to fulfill a contract. Insofar as the processing is carried out to safeguard our legitimate interests, in particular to organize and secure the appointment, it is carried out on the basis of Art. 6(1)(f) GDPR.
  5. Information from the third-party provider: Sumo Group Inc. (d/b/a “TidyCal”), 1305 E. 6th St #3, Austin, TX 78702, USA. Further information can be found in TidyCal’s privacy policy and data processing agreement.

15. Storage period

Unless we expressly state otherwise, we store personal data for as long as statutory retention periods apply. Once these periods have expired, we delete the data if it is no longer required to fulfill our contractual obligations to you and we can no longer rely on a legitimate interest in its continued storage.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy if legal requirements, our website or the services we use change. The current version published on this website shall apply. The date of this privacy policy can be found at the end of the page.

Last updated