Privacy policy
Last updated: July 2026
1. Controller
UNAIT GmbH
Kolonnenstr. 8
10827 Berlin
Germany
Email: info@unait.de
2. General information
Personal data on this website is processed in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection rules, in particular the German Telecommunications Telemedia Data Protection Act (TTDSG).
3. Hosting and server log files
This website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin, Germany. The servers are located exclusively in Germany. No personal data is transferred to third countries.
As part of hosting, Strato automatically processes the following data in server log files: the IP address of the requesting device, the date and time of access, the URL requested, the volume of data transferred, the HTTP status code and information about the browser and operating system. This data is technically necessary to deliver the website and is not combined with other data sources. Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
In addition, we keep a purely aggregated count of page views. A view is counted at most once per browser session; that limit is implemented solely in the browser's temporary session storage (sessionStorage). We store neither IP addresses nor cookies, browser identifiers, individual pages viewed or any other visitor data. The count serves only as a technical overview of reach and does not allow any attribution to individual people.
4. Consent management (cookie notice)
A notice banner is shown on your first visit to the website. Your decision is stored in the browser's local storage (localStorage) rather than as a cookie. That entry contains only the consent status and the time of the decision. No personal data is transmitted. Legal basis: § 25(2) TTDSG (technically necessary storage).
You can withdraw this preference at any time using the „Cookie settings“ link in the footer of this website.
5. External fonts and libraries
This website uses only locally embedded fonts (Montserrat) and animation libraries (GSAP). No resources are loaded automatically from external services such as Google Fonts or the Cloudflare CDN. The only exception is the product demo described under point 10, which is embedded only after you actively click.
6. Contact form
Data collected via the contact form (name, email address, message) is used solely to handle your enquiry and is deleted afterwards, unless a statutory retention obligation applies. Legal basis: Article 6(1)(b) GDPR.
6a. Demo registration
If you request a free demo version of our product via the „Request a demo“ form, we collect the following personal data: first name, last name, email address and the name of your institution or organisation. This data is stored in a secured database on our servers (operated by STRATO AG, Berlin).
The purpose of processing is to provide and coordinate demo access and to communicate with you about your request. The data is not passed on to third parties and is deleted after the demo period and the subsequent processing time have ended, unless a contract is concluded. Where a contract is concluded, the provisions of the data processing agreement apply.
Legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
7. Booking tool (Zeitplanr)
For appointment booking we link to the external service Zeitplanr (zeitplanr.de). The tool is not embedded in this website. Once you click the link, the privacy terms of Zeitplanr apply. Data is transmitted to Zeitplanr only when you actively click. Legal basis for the referral: Article 6(1)(b) GDPR.
8. UNAIT software (app.unait.de)
The UNAIT software at app.unait.de is a separate product with its own privacy policy. Data processing within the software, in particular AI-assisted functions, user administration and data storage, is governed by the privacy information for the software, which is made available to you when you use it.
9. LinkedIn
This website contains only links to the UNAIT LinkedIn profile. Simply visiting our website does not trigger any automatic transfer of data to LinkedIn. LinkedIn processes data only once you actively click the link.
10. Interactive product demo (Guideflow)
On our home page we offer an interactive product demo provided by the service Guideflow (Guideflow SAS, 92 Avenue Charles de Gaulle, 92200 Neuilly-sur-Seine, France).
This demo is not loaded automatically. It is embedded only once you actively click the „Load demo now“ button. Only at that point is a connection to Guideflow's servers established.
The following data may be processed in the process: IP address, browser and device information, and your interactions within the demo (for example clicks and the steps you view). Guideflow hosts the demo content on cloud infrastructure (including Google Cloud Platform and Cloudflare), so a transfer of data to third countries, in particular the United States, cannot be ruled out. The demo also contains a voice-over generated with artificial intelligence.
The legal basis is your consent, given by actively clicking „Load demo now“ (Article 6(1)(a) GDPR). Further information can be found in the Guideflow privacy policy: iubenda.com/privacy-policy/62163346.
11. Processing of customer and contract data
For invoicing and accounting we use the software Lexware Office (Haufe-Lexware GmbH & Co. KG, Germany). Processing covers names, addresses and invoicing data in the course of performing the contract. Legal basis: Article 6(1)(b) and (c) GDPR.
To manage customer and prospect contacts (CRM) we use the self-hosted open source software EspoCRM, which runs on our own server at Strato AG in Germany. No data is transmitted to the software vendor. The data processed comprises names, business contact details and the history of communication. Legal basis: Article 6(1)(b) GDPR (initiating and performing a contract) and Article 6(1)(f) GDPR (legitimate interest in customer administration).
We also transmit personal data to further categories of recipient where this is necessary to perform the contract or where statutory obligations exist, in particular to credit institutions for payment processing and to our tax advisers. These recipients are independent controllers under data protection law. Legal basis: Article 6(1)(b) and (c) GDPR.
11a. Communication by email and video conference (Google Workspace)
For business communication by email and for online meetings we use Google Workspace (Gmail and Google Meet), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you communicate with us by email or take part in an online meeting, your contact details, the content of the communication and technical connection data are processed. A transfer to the United States (Google LLC) cannot be ruled out; it takes place on the basis of the adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is certified. A data processing agreement (Data Processing Addendum) is in place with Google.
Legal basis: Article 6(1)(b) GDPR (communication in the course of initiating and performing a contract) and Article 6(1)(f) GDPR (legitimate interest in efficient business communication).
11b. Sending information by email (Brevo)
To send informational emails to customers and prospects (for example product news and event notices) we use the service Brevo, provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. The data processed comprises name, email address and dispatch and delivery data. According to the provider, processing takes place in data centres within the European Union. A data processing agreement is in place with Brevo.
Legal basis: your consent (Article 6(1)(a) GDPR) or, in relation to existing customers, our legitimate interest in direct marketing for our own similar services (Article 6(1)(f) GDPR in conjunction with § 7(3) UWG, the German Act against Unfair Competition). You may object to receiving such emails at any time, or withdraw your consent with effect for the future, for example via the unsubscribe link in every email or by writing to info@unait.de.
12. Retention period
Personal data is stored only for as long as is necessary for the respective purposes or as long as statutory retention obligations apply (in particular commercial and tax law periods of up to ten years).
13. Your rights
You have the following rights in relation to your personal data:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
To exercise your rights, please contact: info@unait.de
14. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de.