As of: May 2026
Privacy Policy
1. Controller
The party responsible for data processing on this website is:
- UHP Software GmbH
- Mergenthalerallee 73–75
- 65760 Eschborn
- Germany
- Email: kontakt@uhp.digital
Represented by the Managing Director: Tomislav Prodanovic
2. General Data Processing When Visiting the Website
When you access our website, technically necessary data is processed so that the website can be displayed and operated securely. This may include in particular IP address, date and time of access, pages visited, browser type, operating system, and referrer URL.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and user-friendly provision of our website.
3. Hosting and Technical Provision
Our website is created and hosted with Macaly. According to publicly available information, the provider is LANGTAIL.COM s.r.o., Záhřebská 562/41, Vinohrady, 120 00 Prague 2, Czech Republic.
In the context of hosting, technical access data may be processed that is required for the operation, security, and delivery of the website.
4. Cookies and Consent
Our website may use cookies and similar technologies. Technically necessary cookies are used to provide the website.
Cookies and technologies beyond this, in particular for analytics purposes, are only used if you have previously consented. You can revoke any consent given at any time with effect for the future, e.g. via the cookie settings on the website.
5. Google Analytics
We use Google Analytics 4, a web analytics service provided by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand how visitors use our website, enabling us to improve content, structure, and user guidance. Data processed may include usage data, device information, browser information, approximate location data, and interactions on the website.
The use of Google Analytics is based solely on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
It cannot be excluded that data may be transferred to Google companies or service providers outside the EU/EEA. In such cases, the transfer is based on appropriate legal mechanisms, in particular standard contractual clauses or other applicable safeguards.
6. Contact Form and Email Contact
If you contact us via the contact form, we process the data you provide. Mandatory fields in the contact form are:
- First name
- Last name
- Email address
- Company
Further information, in particular the content of your message, is voluntary if the form contains corresponding fields.
We use this data exclusively to process your inquiry and for subsequent communication with you. The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry relates to a contract or pre-contractual measures. In all other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your inquiry and handling business communication.
If you contact us by email, we also process the data you transmit to handle your inquiry.
7. Newsletter via MailerLite
We use MailerLite for sending our newsletter.
When you subscribe to our newsletter, we process your email address and, if applicable, further voluntary information. The subscription is based on your consent pursuant to Art. 6(1)(a) GDPR.
You can unsubscribe from the newsletter at any time. An unsubscribe link is included in every newsletter email.
8. Job Applications
If you apply to us by email, we process the application data you submit. This may include in particular contact details, CV, certificates, qualifications, and other application documents.
Processing is carried out to conduct the application process on the basis of Art. 6(1)(b) GDPR and § 26 BDSG (German Federal Data Protection Act).
Application data will be deleted as soon as it is no longer required for the application process, unless statutory retention obligations exist or you have agreed to longer storage.
9. Internal Processing and Organisation
Inquiries, contact data, and project-related information may be processed internally in local files, in particular Excel spreadsheets, as well as via Microsoft Teams. This is done for the organisation, processing, and documentation of customer, prospect, and project communication.
The legal basis is Art. 6(1)(b) GDPR insofar as the processing is necessary for the performance of pre-contractual or contractual measures. Otherwise, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in efficient internal organisation and communication.
10. Recipients of Data
We only pass on personal data if this is necessary for the stated purposes, there is a legal obligation to do so, you have consented, or another legal basis exists.
Recipients may include in particular:
- Website and hosting service providers, in particular Macaly
- Analytics service providers, in particular Google Analytics
- Newsletter service providers, in particular MailerLite
- IT and communication service providers, in particular Microsoft Teams
- Internal processing in local files, in particular Excel spreadsheets
- Tax advisors, legal advisors, or authorities, where required
11. Third-Country Transfers
Some of the service providers we use may process personal data outside the European Union or European Economic Area, or transfer data to companies outside these countries.
Where this occurs, the transfer is only made on the basis of appropriate legal mechanisms, in particular adequacy decisions by the European Commission, standard contractual clauses, or your consent.
12. Retention Period
We store personal data only for as long as necessary for the respective purposes. Thereafter, the data is deleted, unless statutory retention periods apply or further storage is required for legal reasons.
Contact inquiries are generally stored only for as long as necessary for processing and subsequent business communication. Application data is deleted after the application process is completed, unless longer storage is required or agreed.
13. Your Rights
You have the following rights subject to the applicable legal conditions:
- Right of access to personal data stored with us
- Right to rectification of inaccurate data
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing operations
- Right to withdraw consent given with effect for the future
To exercise your rights, you can contact us at any time at kontakt@uhp.digital.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
The competent authority may in particular be the data protection supervisory authority of your place of residence, your place of work, or our company's registered office.
15. Data Protection Officer
We have not appointed a data protection officer, as in our assessment there is no statutory obligation to do so.
For questions about data protection, please contact: kontakt@uhp.digital
16. Updates to This Privacy Policy
We update this privacy policy when our website, the services we use, or legal requirements change.