Privacy Policy

1. Controller

uberlay UG (haftungsbeschränkt)
Kolonnenstraße 8
10827 Berlin
Germany

Email: niklas@superkind.ai

2. Scope

This Privacy Policy explains how we process personal data when you visit our website, contact us, or otherwise interact with us through this website.

Our website is intended for business users and business-related inquiries.

3. Categories of Data We Process

Depending on how you use our website, we may process the following categories of personal data:

• contact data, such as your name, company name, email address, phone number, and any other information you provide to us
• communication data, such as the content of your inquiry or message
• technical and usage data, such as IP address, browser type, device information, operating system, referring URL, pages visited, access times, and similar log and analytics data
• consent and preference data, such as your cookie and analytics preferences

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes and based on the following legal bases:

a) Providing the website and ensuring security and stability

We process technical data and server log data to provide the website, maintain its security, prevent abuse, and ensure stability and performance.

Legal basis: Article 6(1)(f) GDPR (legitimate interests)

Our legitimate interests are the secure, reliable, and efficient operation of our website and infrastructure.

b) Responding to inquiries

If you contact us by contact form or email, we process your data to handle your request, communicate with you, and, where relevant, take steps prior to entering into a contract.

Legal basis: Article 6(1)(b) GDPR, where your request relates to pre-contractual measures or a contract; Article 6(1)(f) GDPR in all other cases.

Our legitimate interest is handling inbound business inquiries and communication efficiently.

c) Managing contacts and business relationships

We may store and manage inquiry and customer-related data in our CRM system in order to organize communications, process requests, and manage our business relationships.

Legal basis: Article 6(1)(b) GDPR, where relevant to contractual or pre-contractual steps; Article 6(1)(f) GDPR in all other cases.

Our legitimate interest is the efficient management of leads, contacts, and business communications.

d) Analytics and measurement

We use analytics tools to understand how visitors use our website, improve our content, measure performance, and optimize the user experience.

Legal basis: Article 6(1)(a) GDPR where consent is required; Article 6(1)(f) GDPR where processing is strictly limited to privacy-friendly, non-cookie, aggregate, or otherwise permitted analytics.

You may withdraw any consent you have given at any time with effect for the future.

5. Hosting and Website Delivery

Our website is hosted and delivered via Vercel. In this context, Vercel may process server log data and technical connection data that is necessary to deliver the website, ensure security, and maintain availability.

This may include, in particular:

• IP address
• date and time of request
• requested page or file
• browser and device information
• operating system
• referrer URL
• status codes
• similar technical event data

6. Contact Form and Email Contact

When you contact us through our contact form or by email, we process the information you provide in order to respond to your inquiry and, where relevant, to initiate or manage a business relationship.

The data you provide may include: name, business email address, company name, phone number, message content, and any additional information you choose to share.

We ask that you do not send sensitive personal data through the website unless it is strictly necessary.

7. CRM

We use HubSpot as our CRM and contact management platform. If you submit an inquiry through our website or otherwise contact us, your data may be stored, organized, and processed in HubSpot for the purpose of managing communications, tracking requests, and maintaining business relationships.

This may include: identity and contact data, company-related information, communication history, inquiry details, and internal processing notes related to your request.

8. Analytics

8.1 Vercel Web Analytics

We use Vercel Web Analytics to obtain privacy-friendly information about website usage and performance. According to Vercel, Web Analytics does not use cookies and uses anonymized or reduced data for measurement purposes.

Legal basis: Article 6(1)(f) GDPR, to the extent this processing is permissible without consent; otherwise Article 6(1)(a) GDPR.

8.2 Google Analytics

We use Google Analytics to analyze the use of our website and better understand visitor interactions. Google Analytics may process information such as pages visited, session information, approximate location, technical device and browser information, and interactions on the website.

Google Analytics is only activated where the required consent has been obtained through our consent mechanism. You can withdraw your consent at any time through the consent settings available on our website.

9. Cookies and Similar Technologies

We use cookies and similar technologies on our website. Some of these technologies are strictly necessary for the operation, security, and core functionality of the website. Others are used for analytics, performance measurement, or related optimization purposes.

Where legally required, non-essential cookies and similar technologies are used only after you have given your consent through our consent mechanism. You can change or withdraw your preferences at any time.

10. Recipients and Service Providers

We may disclose personal data to service providers and processors that support our website and business operations, in particular: Vercel, Google, HubSpot.

We only share personal data where this is necessary for the relevant purpose and subject to appropriate contractual and legal safeguards.

11. International Transfers

Some of our service providers may process personal data outside the European Union or the European Economic Area, in particular in the United States. Where personal data is transferred to a third country, we ensure that an adequate level of data protection is in place through adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms.

12. Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Once the relevant retention period expires, the data will be deleted or anonymized.

13. Data Subject Rights

Subject to the applicable legal requirements, you have the following rights: access, rectification, erasure, restriction of processing, objection to processing, data portability, withdrawal of consent, and the right to lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us at: hello@superkind.ai

14. Obligation to Provide Data

You are generally not obliged to provide personal data when visiting our website. However, certain features, such as the contact form or direct communication with us, may not function without the provision of the necessary information.

15. Automated Decision-Making

We do not use your personal data collected through this website for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

16. Data Protection Officer

We have not appointed a Data Protection Officer.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect legal, technical, or operational changes. The version published on this website at the time of your visit shall apply.