1. Controller, Contact and Data Protection Officer

Controller according to Art. 4 No. 7 of the General Data Protection Regulation (GDPR) for the data processing operations described in this Privacy Policy is:

Baris Tikir
Seegefelder Str. 130
13583 Berlin
Germany
Email: [email protected]
Phone: +49 1522 6745591

2. Inquiries via Email or Our Chatbot, Customer Service

When you contact us by email or by message through the chatbot provided on our website, we store your personal data transmitted with the email or entered in the chatbot's message field (particularly contact and communication data). Unify uses this data exclusively to process your contact request. Our employees are sensitized by us to handle customer data confidentially and are contractually obligated to maintain confidentiality.

For the provision of the chatbot, we use currently none.

The legal basis for this processing is Art. 6 (1) lit. f.) GDPR or Art. 6 (1) lit. b) GDPR if the inquiry is directed towards concluding a contract. The data will be deleted when the purpose of processing ceases to exist, e.g., when the inquiry has been conclusively answered. Under certain circumstances, we may need to store this data for longer due to legal retention obligations, for example, if your contact request is related to a contract or a warranty case.

3. Processing of Personal Data for Account Registration

On our website, there is the possibility to create a customer account. A customer account is required to activate a free trial period for our platform or to subscribe to paid services through our website. When registering a customer account, we process the following data:

• IP address of the device from which registration occurs
• The date and time of registration
• Your contact details, e.g., your name, email address
• The company information for which you work
• Address data

The legal basis for processing the data as part of registration is Art. 6 (1) S. 1 lit. b) GDPR.

4. Processing of Personal Data for Paid Subscriptions

In addition to the free trial period, you also have the option to subscribe to paid services through your customer account. When you complete a subscription through our website, we process the following data:

• IP address of the device from which the order is placed
• The date and time of the order
• Contact information such as your email address
• Payment data
• The subscription you have chosen
• Any additional, supplementary data that you provide during the registration process (e.g., a promotional code)

For payment processing, we transmit the necessary payment data to our designated payment service provider Paddle.com Market Ltd. Legal basis for this data processing is Art. 6 (1) S. 1 lit. b) GDPR.

5. AI Content Generation and Processing

Our platform's core functionality is the generation and processing of content using artificial intelligence. This involves:

6.1 Input Processing:

• Text inputs for generation requests
• Uploaded images, videos or audio files for processing
• User preferences and settings
• Technical parameters for content generation

6.2 Output Generation:

• AI-generated images, videos, and audio content
• Technical metadata
• Generation parameters and settings
• Quality metrics and processing logs

6.3 Data Security Measures:

• All processing occurs on servers within the European Union
• No permanent storage of generation inputs unless explicitly requested

Legal basis for AI processing is Art. 6 (1) lit. b) GDPR (contract performance) and Art. 6 (1) lit. f) GDPR (legitimate interests).

6. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., pixels) on our website and platform. Cookies are text files that your browser automatically creates and stores on your device. Different information is stored in these cookies. Cookies are used to make our service more user-friendly and effective.

7. Data Retention

9.1 Account Data:

• Active accounts: For the duration of the account existence
• Deleted accounts: Personal data will be flagged as deleted and made inaccessible. For technical and backup purposes, your data may be retained in our system for up to 30 days. After this period, your personal data will be permanently deleted from our systems. For a direct deletion of your personal data please contact us at [email protected]
• Business records: According to legal retention periods (3-10 years)

9.2 Content Data:

• Generated content: According to user settings and subscription terms
• Input data: Maximum 30 days after generation

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

10.1 Information Rights:

• Right to access (Art. 15 GDPR)
• Right to data portability (Art. 20 GDPR)

10.2 Correction and Deletion:

• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)

10.3 Objection Rights:

• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)

To exercise these rights, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access control and authentication systems
• Employee training and confidentiality agreements
• Regular backups and disaster recovery procedures