Privacy Policy of Sovereign Cloud Group website
Effective: June 2025
The following privacy policy provides you with an overview of what types of personal data we process, for what purposes, and on which legal basis. Personal data means all information relating to an identified or identifiable natural person, e.g., name, address, email addresses, or user behavior. We also inform you about your rights in relation to us as the controller.
The controller pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is UhuruTec AG (“we/us”). Further information about us can be found in the legal notice (Impressum). For questions about data protection, you can reach us at datenschutz@uhurutec.com.
When you use our website for informational purposes only, we automatically collect and store information in server log files that your browser transmits to us. This data is technically necessary to display the website to you and to ensure stability and security (legal basis: § 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) sentence 1 lit. f GDPR):
IP address (anonymized)
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/http status code
Amount of data transmitted
Referring website (so-called referrer)
Browser, operating system, and interface
Language and version of browser software
Internet service provider of the accessing system
This data is not assigned to specific individuals, nor is it merged with other data sources. The data is stored exclusively on servers within the EU. After being used for the above purposes, it will be deleted after seven days.
If you contact us with inquiries, we will ask for your name, contact details, and other information we need to respond to your request. We use the data you provide solely for handling your request. The legal basis is either Art. 6 (1) lit. b GDPR (if your inquiry is aimed at concluding a contract) or Art. 6 (1) lit. f GDPR (for general communication).
5.1 Categories of personal data
If you apply to us, we usually process the following personal data:
Application documents
Address
Curriculum vitae
Certificates
Information about your professional background
Other details provided in your application
Special categories of personal data under Art. 9 (1) GDPR (e.g., health data, such as information about a disability) may also be processed.
5.2 Purpose of processing
We process your personal data for the purpose of deciding whether to establish an employment relationship or another type of engagement (e.g., internship).
5.3 Legal basis
The legal basis is § 26 (1) sentence 1 German Federal Data Protection Act (BDSG) or Art. 6 (1) lit. b and f GDPR. If you have given consent to process your data for a specific purpose, Art. 6 (1) lit. a GDPR applies. You may withdraw your consent at any time.
5.4 Data retention
We store your data for up to 6 months after the decision on employment has been made, after which the data is deleted.
We use cookies and similar technologies on our website. Cookies are small text files stored on your device that enable us or third parties to recognize your browser.
6.1 Consent Manager
We use a consent manager provided by onthewall GmbH, 1096 Berlin (https://onthewall.de/) to obtain and document consent for certain cookies. The consent manager sets a cookie to store your preferences. Data is processed until you revoke your consent or delete the cookie. Legal basis: Art. 6 (1) lit. c GDPR.
6.2 Microsoft Clarity
We use Microsoft Clarity (Microsoft Corporation, Redmond, USA) to analyze user behavior. Data collected may include:
IP address
Location
Browser information
Screen resolution
Language settings
Pages visited
Date/time of access
Clicks, scrolls, mouse movements
Microsoft stores data in the Azure Cloud. Processing occurs only with your explicit consent under Art. 6 (1) lit. a GDPR. Consent may be withdrawn at any time.
Further details: https://clarity.microsoft.com/terms
7.1 General and Third-Country Transfer
We use various Google services (Google Ireland Ltd., Dublin). Services are used in Basic Consent Mode, meaning no data is sent to Google unless you provide consent (Art. 6 (1) lit. a GDPR). Google LLC is certified under the EU-US Privacy Framework.
7.2 Google Tag Manager
Used to manage tracking/analytics tags. GTM itself does not set cookies. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).
7.3 Google Analytics 4
Collects anonymized website usage data. Data retention: 2 months. Processing only with consent. Opt-out options via cookie banner or browser add-on.
7.4 Google reCAPTCHA
Protects forms from bots/spam. Uses IP address, referrer, browser/OS info, time spent, and user interaction with the “I am not a robot” checkbox. Legal basis: Art. 6 (1) lit. a GDPR.
We maintain pages on GitLab, GitHub, Facebook, LinkedIn, Xing, and Nextcloud. These platforms operate their own servers and privacy policies.
GitLab: https://about.gitlab.com/privacy
GitHub: https://docs.github.com/en/github/site-policy/github-privacy-statement
Additional UhuruTec AG privacy policy PDFs are available for LinkedIn, Xing, Nextcloud, and Meta.
To protect your data during transmission, we use state-of-the-art encryption technology (e.g., SSL) via HTTPS.
Data is processed and stored only as long as necessary for its intended purpose. Afterwards, it is deleted in accordance with legal requirements.
You have the following rights under GDPR:
11.1 Right of access (Art. 15 GDPR)
11.2 Right to rectification (Art. 16 GDPR)
11.3 Right to erasure (Art. 17 GDPR)
11.4 Right to restriction of processing (Art. 18 GDPR)
11.5 Right to withdraw consent (Art. 7 (3) GDPR)
11.6 Right to object to processing (Art. 21 GDPR)
11.7 Right to data portability (Art. 20 GDPR)
11.8 Right to lodge a complaint (Art. 77 GDPR) with the relevant supervisory authority.
For UhuruTec AG, this is the Data Protection Authority of Baden-Württemberg:
Lautenschlagerstraße 20, 70173 Stuttgart
PO Box 10 29 32, 70025 Stuttgart
Tel.: +49 711/615541-0
Email: poststelle@lfdi.bwl.de
