PRIVACY POLICY
1. Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
UNDPLUS GmbH
Prinzenstraße 85c
10969 Berlin
Germany
Phone: +49 30 67 94 5237
Email: info@undplus.com
To the extent that individual processing operations are carried out by UNDPLUS München GmbH (c/o Hanne Hallwaß, Corneliusstraße 16, 80469 Munich, email: info@undplus.com), particularly in the case of inquiries or project initiations related to Munich, the company may be solely or jointly responsible in this regard.
2. General Information on Data Processing
Personal data is collected only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data is based on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation), or Art. 6(1)(f) GDPR (legitimate interests).
3. Hosting and Server Log Files
This website is hosted by Framer B.V. (Wilhelminaplein 4, 3072 DE Rotterdam, Netherlands). When you visit the website, the hosting provider automatically stores information in so-called server log files:
IP address of the requesting device
Date and time of access
URL / file accessed
Referrer URL
Browser type and browser version
Operating system used
Amount of data transferred
Processing is carried out on the basis of Art. 6(1)(f) GDPR for the purpose of technical provision, stability, and security of the website. The log data is stored only for as long as necessary for the aforementioned purposes.
A data processing agreement has been concluded with Framer B.V. in accordance with Article 28 of the GDPR. To the extent that data is transferred to countries outside the EEA, this is done on the basis of appropriate safeguards (standard contractual clauses pursuant to Article 46 of the GDPR).
4. Framer Analytics
This website uses the “Framer Analytics” analysis tool integrated into Framer. Framer Analytics collects exclusively anonymized, non-personal usage data (e.g., page views, referrers). Neither cookies nor persistent identifiers are used; it is not possible to identify individual persons.
Since no personal data is processed and no cookies are set, no consent and no cookie banner are required for the use of Framer Analytics.
5. Cookies
This website uses only technically necessary cookies that are absolutely essential for the proper functioning of the website (e.g., session cookies). These are set on the basis of Art. 6(1)(f) GDPR in conjunction with § 25(2)(2) TDDDG and do not require separate consent.
Non-essential cookies (e.g., for analytics, marketing, or social media embeds) are not currently used on this website. Should non-essential cookies be used in the future, this will be done exclusively on the basis of prior consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.
6. Contact
When contact is made via email or telephone, the personal data transmitted in the process (in particular name, contact details, content of the inquiry) is processed in order to respond to the inquiry.
The legal basis is Article 6(1)(b) of the GDPR, provided the inquiry is aimed at the conclusion or performance of a contract; otherwise, Article 6(1)(f) of the GDPR applies. The data will be deleted as soon as the inquiry has been fully processed and there are no conflicting legal retention obligations.
7. Job Applications
Application documents are processed exclusively for the purpose of conducting the application process. This applies in particular to name, contact details, resume, references, portfolio, and other voluntarily provided information.
The legal basis is Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) of the GDPR. If the applicant is not hired, application data will be deleted upon completion of the process, generally within six months, provided there is no legal retention obligation or consent for longer storage.
8. Portfolio and Media Content
This website displays project images, reference photos, and similar media. To the extent that this media is hosted directly on Framer’s servers, no personal data of website visitors is transferred to third parties.
If media content from external providers (e.g., video platforms) is embedded, this is done exclusively with the prior consent of the visitors (Art. 6(1)(a) GDPR).
9. Recipients / Processors
Personal data may be transferred to external service providers (processors) to the extent necessary for the operation of the website or the processing of inquiries. Currently used processors:
Framer B.V., Wilhelminaplein 4, 3072 DE Rotterdam, Netherlands – Hosting and website infrastructure
Data processing agreements in accordance with Art. 28 GDPR have been concluded with all processors.
10. Transfers to third countries
To the extent that data is transferred to countries outside the European Economic Area (EEA) in connection with hosting or embedded services, this is done only on the basis of appropriate safeguards pursuant to Art. 44 et seq. of the GDPR, in particular the EU Commission’s Standard Contractual Clauses.
11. Retention Period
Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations (in particular under commercial and tax law). As soon as the purpose no longer applies and no obligations remain, the data is deleted or anonymized.
12. Rights of data subjects
Data subjects have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent with future effect (Art. 7(3) GDPR)
To exercise these rights, simply send an informal email to: info@undplus.com
13. Right to lodge a complaint with a supervisory authority
Data subjects have the right to lodge a complaint with a data protection supervisory authority regarding the processing of their personal data. The competent supervisory authority for UNDPLUS GmbH (Berlin) is:
Berlin Commissioner for Data Protection and Freedom of Information
219 Friedrichstr.
10969 Berlin
www.datenschutz-berlin.de
14. Automated Decision-Making / Profiling
Automated decision-making, including profiling, as defined in Article 22 of the GDPR, does not take place.
15. Validity and Changes to This Privacy Policy
This Privacy Policy is current as of April 2026. We reserve the right to amend it so that it always complies with current legal requirements and the actual processing procedures on this website.
As of: April 2026
