Privacy Policy RemoStack

1. Controller

Email (Data Protection): info@uRemoTech.de

Imprint

2. Scope

Applies to the remostack.uremotech.de website and to the RemoStack application. In addition, the Data Processing Agreement (DPA) applies to customer data processed in the application.

3. Hosting of the Website

The remostack.uremotech.de website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; its server-side functions run directly within that network. Traffic between your browser and the website is therefore routed through Cloudflare, which also processes personal data such as your IP address. The basis is our legitimate interest in a secure, error-free and fast delivery (Art. 6 (1)(f) GDPR). A data processing agreement is in place with Cloudflare. Data transfers to the USA are based on the EU-US Data Privacy Framework and on the EU Commission's Standard Contractual Clauses. Further information: https://www.cloudflare.com/privacypolicy/.

4. Roles under GDPR

Website/Account/Billing/Security: uRemoTech = Controller.

Content in the application (descriptions of projects and requirements): Customer = Controller, uRemoTech = Processor (Art. 28 GDPR, DPA).

5. Categories of Data Processed

Master/Account data (name, business contact and tenant data), login/authentication data, usage/technical data (IP, timestamps, logs, devices/browsers), billing data (invoices, invoice references), support communication, customer content (descriptions of projects and requirements), CRM data (contacts, interactions, preferences, opt-outs).

6. Purposes & Legal Bases

Registration, contract, support – Art. 6 (1)(b) GDPR.

Operation & security (RBAC, logs, abuse prevention) – Art. 6 (1)(f) GDPR (legitimate interest: secure, stable provision).

Billing/invoices – Art. 6 (1)(b), if applicable (c) GDPR.

CRM & direct marketing to existing B2B customers (own similar products) – Art. 6 (1)(f) GDPR in conjunction with § 7 (3) UWG; opt-out at any time.

Newsletter/marketing (separately subscribable) – Art. 6 (1)(a) GDPR (revocable at any time).

AI features (refinement of the described requirements, generation of the preview) – Art. 6 (1)(b)/(f) GDPR; no training on customer content without explicit consent (Art. 6 (1)(a) GDPR).

7. Recipients / Categories of Recipients

• Hosting/operations (cloud, mail, monitoring)
• CRM providers
• AI services as (sub-)processors
• Consulting/support/tooling (only as required, with DPA)

Specific sub-processors are named in the DPA.

8. Third-Country Transfers

Transfers outside the EEA (e.g. cloud, AI or CRM services) only take place with appropriate safeguards under Art. 46 GDPR, in particular EU Standard Contractual Clauses (SCC), where necessary with additional measures.

9. Storage Duration & Deletion

Account/contract data until the end of the contract; deletion within 60 days thereafter, unless statutory retention obligations apply. Backups are overwritten periodically. Logs with rolling deletion deadlines. Content in the app is controlled by the customer; deletion after contract termination according to DPA. CRM data until objection or purpose ceases.

10. Cookies & Similar Technologies

The website sets no cookies. The language shown follows the language tag your browser sends with every request; nothing is stored for this purpose.

If you reach us through an advertisement link carrying a campaign ID (parameter campaign_id), we store that ID in your browser's local storage in order to assess how our ads perform; the basis is your consent (Section 25 (1) TDDDG, Art. 6 (1)(a) GDPR), which you give through the consent notice. The ID remains stored until you withdraw your consent or clear your browser data, as does your choice itself; withdrawing removes the ID. You can change your choice at any time via "Cookie settings" in the page footer. If you register, the ID is sent along and the registration is attributed to the campaign.

Within the application, only technically required cookies (session/CSRF/auth) are used for sign-in and operation. If we introduce further non-essential tools (analytics/marketing), we obtain your prior consent (opt-in).

11. Server Logs & Security

When the website and the application are accessed, log data is processed by our host: among others, IP address, date and time, the address requested, status code, browser type and operating system. The basis is our legitimate interest in technically error-free and secure operation (Art. 6 (1)(f) GDPR). Within the application, request ID as well as user and tenant IDs are added for signed-in access. Technical and organizational measures (Art. 32 GDPR), including encryption, RBAC/least privilege, logging, hardening. Details in the TOM appendix of the DPA.

12. Fonts and Icons

Fonts and icons are delivered entirely from our own server and form part of the website. Your browser establishes no connection to any further provider.

13. AI Features

RemoStack processes the requirements described by the customer with AI support in order to ask follow-up questions, refine the description, and generate a preview from it. Processing takes place exclusively as processing on behalf of the customer; customer content will only be used for training with explicit consent. The provider engaged is named in the DPA.

14. Rights of Data Subjects

Right of access, rectification, erasure, restriction, data portability, objection to processing based on Art. 6 (1)(f) GDPR; objection to direct marketing at any time (Art. 21 GDPR). Withdrawal of consent at any time with effect for the future.

Contact: info@uRemoTech.de.

15. Obligation to Provide Data

Certain data is required for registration/contract; without it, use of RemoStack is not possible.

16. Special Categories

uRemoTech does not intend to process special categories of personal data (Art. 9 GDPR). Customers should not upload such content.

17. Complaints

Right to lodge a complaint with a data protection supervisory authority, e.g. ULD Schleswig-Holstein.

18. Changes to This Statement

Updates will be made as necessary (legal situation, service changes). The current version is available at remostack.uremotech.de.