The following data can be collected automatically by our service providers:
IP address of requesting computers
date of request
name and URL of requested resources
used browser, operating system and internet access provider
referrer website when applicable
It is being used for the following purpose:
general service fulfillment
continuous service improvement
avoiding fraud and security breaches
general administrative reasons
This data is exchanged to accomplish any kind of internet-based service and therefore its collection is based on justified interest. We will never use any of this data to create a connection to your person.
This website is hosted by netlify.com.
Netlify is fully GDPR compliant. All personal data mentioned before is automatically deleted within 30 days.
Tracking is provided by Google Analytics.
Google Analytics is fully GDPR compliant. In any case, we respect the do-not-track setting of your browser and do not initiate any tracking when do-not-track is activated.
Furthermore, IP anonymization is activated for Google Analytics so that your IP address is never permanently stored by Google Analytics.
We do not use demographic features of Google Analytics or any other additional tracking features that deal with personal data.
Uplink services run on infrastructure provided by AWS (Amazon Webservices)
AWS is fully GDPR compliant. All data is processed and stored in AWS data centers in Germany and Ireland and therefore applicable to the strict European regulations on data protection, data privacy and data security.
We process and store the following personal data:
We use state of the art encryption technology for transferring data between internal and external services. Personal data is either stored encrypted or irreversibly anonymized across our entire system, including system logs and analytics.
When uninstalling the service, all personal data is automatically deleted within 30 days except for billing data which is stored for as long as required to comply with accounting and tax regulations.
Exchanged messages are only stored temporarily and only for as long as necessary - typically less than a second.
Exchanged messages are only forwarded to the messaging platforms of involved conversation participants and only for service fulfillment.
When sending out invitations to contacts, your name and email address is contained in the invitation to allow invited users to verify your identity.
The email address of an invited user is never stored, only its hashed representation and only for a limited time period to protect invited contacts from being spammed.
When accepting an invitation and joining the service, the inviting user might receive a notification for this event.
Tokens provide permission to exchange data with platform APIs (e.g. Slack). All tokens are stored encrypted and automatically deleted when uninstalling the app.
We do not forward any personal data to third party analytics services. We only use aggregated and anonymized data for analytics purposes which cannot be tracked back to a user or team.
You have the following rights:
to be informed about the personal data that we process and store about you - more specifically about the reason for storing it, the category of stored data, the category of services involved in storing and processing it as well as data retention periods
to know about the origin of your data when not collected by us
to be informed about the basis of automated decision making incl. profiling
to demand a correction or completion of your personal data
to demand deletion of you personal data, as long as the processing is not protected by the right of free speech and information and used in the context of legal regulations that concern the public interest and other legal demands of higher concern
to demand restriction of the processing of your personal data when you question the correctness of your data or the lawfulness of their processing, but are refusing a deletion of your data to claim legal demands or because you objected against data processing
to demand a data takeout of your personal data in a common processable format
to withdraw from the data protection agreement at any time with the consequence that we will terminate the service
to file a complaint at a regulation authority, e.g. Data Protection Berlin
In case that your data is processed based on justified interest you have the right to object against the data processing when you have reasons that apply to your special personal situation.
To make use of any of the above rights, it is sufficient to
uninstall the service when you want all your personal data to be deleted
to write an email to support@uplink-chat.com for all other matters.
This document was last edited in July 2019.
It can be updated in the future as we update our service. Users of our service will be notified about substantial changes.
We operate from Germany and are accountable with respect to German and European law.
All privacy related matters are regulated by the European Unions's GDPR.
Christian Bick