Privacy Policy

1. Controller

Full company details are listed in the Imprint.

2. What happens when you visit this site

• Our hosting provider records technical access data in server log files (section 3).
• Your browser asks a geolocation service for the country of your IP address so that we can show a consent banner where it is legally required (section 4).
• If you visit from Germany, you see a consent banner provided by Usercentrics (section 5). Web analytics then only runs after you have agreed.
• We measure how the site is used with Google Analytics (section 6).
• You can subscribe to our newsletter through a form provided by Brevo (section 7). The form is protected against bots by Google reCAPTCHA (section 8).
• Fonts are served from our own server. We do not load fonts from Google or any other third party.

3. Hosting and server log files

This website is hosted by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. When you access the site, the web server automatically records the following data in log files: the IP address of your device, date and time of the request, the requested page or file, the referring URL, your browser type and version, your operating system, the HTTP status code and the amount of data transferred.

We use this data to deliver the website, to keep it secure (for example to detect attacks and abuse) and to analyse technical errors. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in the secure and reliable operation of the site. Log files are deleted after 90 days at the latest. We have concluded a data processing agreement with ALL-INKL in accordance with Art. 28 GDPR.

4. Determining your country

When a page loads, your browser sends a request to the geolocation service GeoJS (get.geojs.io). The service receives your IP address and returns only the two-letter code of the country it belongs to. We use this result to decide whether a consent banner has to be shown: currently we show it to visitors from Germany. We do not store the result. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in showing a consent banner where it is legally required and in keeping the site uncluttered for everyone else. GeoJS operates a worldwide network of servers, so the request may be processed outside the EU. Privacy information of GeoJS: geojs.io/privacy.

5. Consent banner (Usercentrics)

For visitors from Germany we use the consent management platform of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. The banner lets you accept or deny the use of Google Analytics and documents your choice. For this purpose Usercentrics processes your IP address, information about your browser and device, the date and time of your choice, the choice itself and a random consent ID. Your choice is stored in your browser's local storage (entries beginning with uc_) and on Usercentrics servers so that we can prove that consent was given or refused.

The legal basis is Art. 6(1)(c) GDPR (our duty to document consent under Art. 7(1) GDPR) and Art. 6(1)(f) GDPR (our legitimate interest in a legally compliant consent process). Your choice is remembered for 12 months; after that the banner appears again. You can change your choice at any time:

Change your privacy settings

Privacy information of Usercentrics: usercentrics.com/privacy-policy.

6. Web analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google Analytics uses cookies and similar technologies to recognise your browser across page views and visits. It processes a pseudonymous client ID, the pages you view, the actions you take on them, the referring website, your browser and device type, your screen size and your approximate location. Google Analytics 4 does not store full IP addresses: the IP address is used only to derive a coarse location and is then discarded.

We use the reports to understand which content is of interest and how the site is used, and to improve the site and our episodes. We do not use the data to identify you personally.

Visitors from Germany: Google Analytics is only loaded after you have agreed in the consent banner. The legal basis is your consent, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with the button in section 5, with effect for the future.

Visitors from other countries: We use Google Analytics on the basis of Art. 6(1)(f) GDPR, our legitimate interest in understanding how the site is used. You can object at any time, for example by installing thebrowser add-on provided by Googleor by blocking cookies and scripts from googletagmanager.com in your browser.

Google Analytics sets the cookies _ga and _ga_* with a lifetime of up to two years. User-level and event-level data is retained in Google Analytics for a maximum of 14 months; aggregated statistics may be kept longer. Google may transfer data to servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework, and we have concluded Google's data processing terms including the EU standard contractual clauses. More information:Google privacy policyand how Google uses data from sites that use its services.

7. Newsletter (Brevo)

You can subscribe to our newsletter to be informed about new episodes and related content. We use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany) to manage the subscriber list and to send the emails. The sign-up form is embedded from Brevo: when the start page loads, your browser loads the form's script and style files from Brevo's servers, which transmits your IP address to Brevo (legal basis Art. 6(1)(f) GDPR, our legitimate interest in a working sign-up form).

When you subscribe, we process your email address. You then receive a confirmation email; your subscription only becomes active once you click the link in that email (double opt-in). As proof of your consent, Brevo stores the time of your sign-up and confirmation and the IP address used. The legal basis is your consent, Art. 6(1)(a) GDPR. Our emails may contain tracked links and a tracking pixel that tell us whether an email was opened and which links were clicked; this measurement is covered by your newsletter consent.

You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter or by emailing a@unglove.com. After you unsubscribe, your address is removed from the mailing list. We keep the proof of your original consent and of your unsubscription for up to three years to be able to demonstrate compliance (Art. 6(1)(f) GDPR).

Your data is stored on Brevo's servers in the European Union. We have concluded a data processing agreement with Brevo in accordance with Art. 28 GDPR. Brevo processes your data only on our instructions. More information:Brevo privacy policy.

8. Spam protection (Google reCAPTCHA)

The newsletter form is protected by the invisible version of Google reCAPTCHA, a service of Google Ireland Limited (see section 6). reCAPTCHA checks whether a form is submitted by a person or by an automated program. For this purpose it analyses your behaviour on the page (for example mouse movements, typing patterns and time spent), your IP address, your browser and device information, the referring URL and cookies set by Google. The analysis runs in the background; you are not asked to solve a puzzle unless the check is inconclusive. reCAPTCHA sets the cookie _GRECAPTCHAwith a lifetime of six months and may transfer data to Google servers in the USA (see section 6 for the transfer safeguards).

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in protecting the sign-up form against automated abuse and in keeping our subscriber list free of fake entries. The reCAPTCHA script is loaded on the start page, where the form is located. More information:Google privacy policyand Google terms of service.

9. Episode previews and links to social networks

When we publish episodes, the start page shows preview images that are loaded from YouTube servers (Google Ireland Limited, domain i.ytimg.com). Loading these images transmits your IP address and browser information to Google. No video is embedded and no YouTube cookies are set until you click a preview and leave our site. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in presenting our episodes.

The links to our profiles on YouTube, Instagram, Threads, TikTok, LinkedIn, Medium, X and Facebook are plain links. No data is transferred to these platforms until you click one of them. Once you are on their site, the privacy policy of the respective platform applies.

10. Contact by email

If you contact us by email, we process your email address, the content of your message and the associated metadata in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or a pre-contractual measure, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering requests. We delete the correspondence once your request has been settled, unless statutory retention obligations for business correspondence require us to keep it longer.

11. Cookies and local storage

Besides the entries listed here, this website does not set any cookies.

12. Data transfers to countries outside the EU

Google may process data on servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the EU standard contractual clauses apply under our agreements with Google. The country lookup via GeoJS may also be processed on servers outside the EU; this request contains only your IP address. All other services we use (hosting, newsletter, consent management) process data within the EU.

13. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15 GDPR),
• have inaccurate data rectified (Art. 16 GDPR),
• have your data erased (Art. 17 GDPR),
• have the processing of your data restricted (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• object to processing that is based on our legitimate interests (Art. 21 GDPR); we then stop the processing unless we can demonstrate compelling legitimate grounds,
• withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, email us at a@unglove.com. You also have the right to lodge a complaint with a data protection supervisory authority, for example with the authority of your habitual residence or with the authority responsible for us, the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de).

14. Security

All pages of this website are delivered over an encrypted HTTPS connection. We take technical and organisational measures to protect your data against loss, misuse and unauthorised access and review them regularly.

15. Obligation to provide data and automated decisions

You are not legally or contractually obliged to provide us with personal data. Without an email address, however, we cannot send you the newsletter. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. Changes to this policy

We update this policy whenever the services we use or the legal requirements change. The current version is always available at this address; the date of the last update is shown at the top.