uRemoTech GmbH & Co. KG, Kieler Str. 20a, 24582 Bordesholm, Germany

Email (Data Protection): info@uRemoTech.de

Applies to the talyrix.uremotech.de website and to the Talyrix application. In addition, the Data Processing Agreement (DPA) applies to customer data processed in the application.

The talyrix.uremotech.de website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; its server-side functions run directly within that network. Traffic between your browser and the website is therefore routed through Cloudflare, which also processes personal data such as your IP address. The basis is our legitimate interest in a secure, error-free and fast delivery (Art. 6 (1)(f) GDPR). A data processing agreement is in place with Cloudflare. Data transfers to the USA are based on the EU-US Data Privacy Framework and on the EU Commission's Standard Contractual Clauses. Further information: https://www.cloudflare.com/privacypolicy/.

Website/Account/Billing/Security: uRemoTech = Controller.

Content in the application (profiles, CVs and permissions): Customer = Controller, uRemoTech = Processor (Art. 28 GDPR, DPA).

Master/Account data (name, business contact and tenant data), login/authentication data, usage/technical data (IP, timestamps, logs, devices/browsers), billing metadata (plan, status, invoice references), support communication, customer content (profiles, CVs and files), CRM data (contacts, interactions, preferences, opt-outs).

Registration, contract, support – Art. 6 (1)(b) GDPR.

Operation & security (RBAC, logs, abuse prevention) – Art. 6 (1)(f) GDPR (legitimate interest: secure, stable provision).

Billing/invoices – Art. 6 (1)(b), if applicable (c) GDPR.

CRM & direct marketing to existing B2B customers (own similar products) – Art. 6 (1)(f) GDPR in conjunction with § 7 (3) UWG; opt-out at any time.

Newsletter/marketing (separately subscribable) – Art. 6 (1)(a) GDPR (revocable at any time).

Hosting/operations (cloud, mail, monitoring)

Payment service providers

CRM providers

Document/conversion services (for file exports depending on plan)

Consulting/support/tooling (only as required, with DPA)

Specific subprocessors are named in the DPA.

Transfers outside the EEA (e.g. cloud/conversion or CRM services) only take place with appropriate safeguards under Art. 46 GDPR, in particular EU Standard Contractual Clauses (SCC), where necessary with additional measures.

Account/contract data until the end of the contract; deletion within 60 days thereafter, unless statutory retention obligations apply. Backups are overwritten periodically. Logs with rolling deletion deadlines. Content in the app is controlled by the customer; deletion after contract termination according to DPA. CRM data until objection or purpose ceases.

Only technically required cookies (session/CSRF/auth) for login and operation. If non-essential tools (analytics/marketing) are introduced, prior consent (opt-in) will be obtained.

Processing of IP address, date/time, request ID, user/tenant IDs (at login), status codes. Technical and organizational measures (Art. 32 GDPR), including encryption, RBAC/least privilege, logging, hardening. Details in the TOM appendix of the DPA.

Right of access, rectification, erasure, restriction, data portability, objection to processing based on Art. 6 (1)(f) GDPR; objection to direct marketing at any time (Art. 21 GDPR). Withdrawal of consent at any time with effect for the future.

Contact: info@uRemoTech.de.

Certain data is required for registration/contract; without it, use of Talyrix is not possible.

uRemoTech does not intend to process special categories of personal data (Art. 9 GDPR). Customers should not upload such content.

Right to lodge a complaint with a data protection supervisory authority, e.g. ULD Schleswig-Holstein.

Updates will be made as necessary (legal situation, service changes). The current version is available at talyrix.uremotech.de.