Privacy policy
Last updated: September 2026
1. Controller
UNAIT GmbH
Kolonnenstr. 8
10827 Berlin
Germany
Email: info@unait.de
2. General information
Personal data on this website is processed in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection rules, in particular the German Telecommunications Telemedia Data Protection Act (TTDSG).
3. Hosting and server log files
This website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin, Germany. The servers are located exclusively in Germany. No personal data is transferred to third countries.
As part of hosting, Strato automatically processes the following data in server log files: the IP address of the requesting device, the date and time of access, the URL requested, the volume of data transferred, the HTTP status code and information about the browser and operating system. This data is technically necessary to deliver the website and is not combined with other data sources. Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
In addition, we keep a purely aggregated count of page views. A view is counted at most once per browser session; that limit is implemented solely in the browser's temporary session storage (sessionStorage). We store neither IP addresses nor cookies, browser identifiers, individual pages viewed or any other visitor data. The count serves only as a technical overview of reach and does not allow any attribution to individual people.
4. Consent management (cookie notice)
A notice banner is shown on your first visit to the website. Your decision is stored in the browser's local storage (localStorage) rather than as a cookie. That entry contains only the consent status and the time of the decision. No personal data is transmitted. Legal basis: § 25(2) TTDSG (technically necessary storage).
You can withdraw this preference at any time using the „Cookie settings“ link in the footer of this website.
5. External fonts and libraries
This website uses only locally embedded fonts (Montserrat) and animation libraries (GSAP). No resources are loaded automatically from external services such as Google Fonts or the Cloudflare CDN. The only exception is the product tour described under point 10, which is embedded only after you actively click.
6. Contact form
Data collected via the contact form (name, email address, message) is used solely to handle your enquiry and is deleted afterwards, unless a statutory retention obligation applies. Legal basis: Article 6(1)(b) GDPR.
6a. Demo registration
If you request free trial access to our product via the „Try it free“ form, we collect the following personal data: first name, last name, email address and the name of your institution or organisation. This data is stored in a secured database on our servers (operated by STRATO AG, Berlin).
The purpose of processing is to provide and coordinate demo access and to communicate with you about your request. The data is not passed on to third parties and is deleted after the demo period and the subsequent processing time have ended, unless a contract is concluded. Where a contract is concluded, the provisions of the data processing agreement apply.
Legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
7. Quote requests
If you request a quote via the „Request a quote“ form, we collect the following details: first name, last name, email address, the name of your institution or organisation, the solution you are interested in, the size band of your organisation (number of employees), your optional comments and whether you would also like trial access. This data is stored on our servers (operated by STRATO AG, Berlin).
The purpose of processing is to prepare and send your quote and to communicate with you about your request. If you also request trial access, section 6a applies to it.
The data is not passed on to third parties. The form contains a note on training offered by our partner KI-Wisskom; this choice is neither transmitted nor stored. For training, you contact KI-Wisskom directly. The data is deleted as soon as it is no longer needed to handle your request, at the latest 24 months after your last request, unless a contract is concluded or statutory retention obligations apply.
Legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
8. UNAIT software (app.unait.de)
The UNAIT software at app.unait.de is a separate product with its own privacy policy. Data processing within the software, in particular AI-assisted functions, user administration and data storage, is governed by the privacy information for the software, which is made available to you when you use it.
9. LinkedIn
This website contains only links to the UNAIT LinkedIn profile. Simply visiting our website does not trigger any automatic transfer of data to LinkedIn. LinkedIn processes data only once you actively click the link.
10. Interactive product tour (Guideflow)
On our website („Solutions“ page) we offer an interactive product tour provided by the service Guideflow (Guideflow SAS, 92 Avenue Charles de Gaulle, 92200 Neuilly-sur-Seine, France).
This product tour is not loaded automatically. It is embedded only once you actively click the „Start the product tour“ button. Only at that point is a connection to Guideflow's servers established.
The following data may be processed in the process: IP address, browser and device information, and your interactions within the product tour (for example clicks and the steps you view). Guideflow hosts the product tour content on cloud infrastructure (including Google Cloud Platform and Cloudflare), so a transfer of data to third countries, in particular the United States, cannot be ruled out. The product tour also contains a voice-over generated with artificial intelligence.
The legal basis is your consent, given by actively clicking „Start the product tour“ (Article 6(1)(a) GDPR). Further information can be found in the Guideflow privacy policy: iubenda.com/privacy-policy/62163346.
11. Processing of customer and contract data
For invoicing and accounting we use the software Lexware Office (Haufe-Lexware GmbH & Co. KG, Germany). Processing covers names, addresses and invoicing data in the course of performing the contract. Legal basis: Article 6(1)(b) and (c) GDPR.
To manage customer and prospect contacts (CRM) we use the self-hosted open source software EspoCRM, which runs on our own server at Strato AG in Germany. No data is transmitted to the software vendor. The data processed comprises names, business contact details and the history of communication. Legal basis: Article 6(1)(b) GDPR (initiating and performing a contract) and Article 6(1)(f) GDPR (legitimate interest in customer administration).
We also transmit personal data to further categories of recipient where this is necessary to perform the contract or where statutory obligations exist, in particular to credit institutions for payment processing and to our tax advisers. These recipients are independent controllers under data protection law. Legal basis: Article 6(1)(b) and (c) GDPR.
11a. Communication by email (Strato) and video conference (Webex)
Our email mailboxes are operated by Strato AG, Pascalstraße 10, 10587 Berlin, Germany; the servers are located exclusively in Germany. When you send us an email, your contact details, the content of your message and technical connection data are processed there. We also use this mailbox to send internal notifications about requests submitted via the forms on this website (trial access, quote request, contact form) to our own mailbox. No data is transferred to third countries. A data processing agreement is in place with Strato.
For online meetings we use Webex, provided by Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134, USA. When you take part in a Webex meeting, your name, where applicable your email address, video and audio data, content from chat and screen sharing as well as technical connection and device data (for example your IP address) are processed. We do not record meetings. Our Webex account is assigned to the EU data region; meeting data is processed in data centres in the EU (Frankfurt am Main and Amsterdam). As Cisco is a US company, a transfer to the United States nevertheless cannot be ruled out; it takes place on the basis of the adequacy decision for the EU-US Data Privacy Framework, under which Cisco is certified, and additionally on the basis of standard contractual clauses. A data processing agreement is in place with Cisco.
Legal basis: Article 6(1)(b) GDPR (communication in the course of initiating and performing a contract) and Article 6(1)(f) GDPR (legitimate interest in efficient business communication).
11b. Sending information by email (Brevo)
To send informational emails to customers and prospects (for example product news and event notices) we use the service Brevo, provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. The data processed comprises name, email address and dispatch and delivery data. According to the provider, processing takes place in data centres within the European Union. A data processing agreement is in place with Brevo.
Legal basis: your consent (Article 6(1)(a) GDPR) or, in relation to existing customers, our legitimate interest in direct marketing for our own similar services (Article 6(1)(f) GDPR in conjunction with § 7(3) UWG, the German Act against Unfair Competition). You may object to receiving such emails at any time, or withdraw your consent with effect for the future, for example via the unsubscribe link in every email or by writing to info@unait.de.
12. Retention period
Personal data is stored only for as long as is necessary for the respective purposes or as long as statutory retention obligations apply (in particular commercial and tax law periods of up to ten years).
13. Your rights
You have the following rights in relation to your personal data:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
To exercise your rights, please contact: info@unait.de
14. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de.