Privacy Policy

This Privacy Policy explains how we process your personal data when you visit this website (unfoldculture.com) and when you subscribe to our launch list / newsletter. We process personal data in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and applicable German data protection law.

This website is currently a pre-launch landing page. It does not provide the Unfold Culture product itself; its only interactive feature is the newsletter sign-up. A separate privacy policy will apply to the Unfold Culture Toolbox product once it launches.

1. Who is responsible (controller)

This website ("Unfold Culture") is currently operated jointly, prior to incorporation of a company, by:

Chiara Hänel, Wöhrweg 3, 91238 Offenhausen, Germany
Fabian Urban, Spieselstraße 8, 73433 Aalen, Germany

They are jointly responsible (controllers) for the data processing described in this policy. For any data protection matter you can reach us at hello@unfoldculture.com. Further details are also set out in our Legal Notice (Impressum).

2. What data we process, why, and on what legal basis

a) Newsletter / launch list

When you sign up, we process your first name, last name and email address, together with your consent and proof-of-consent data (the date and time and the IP address used at sign-up and at confirmation). We use a double opt-in procedure: after you sign up we send a confirmation email, and you are only added to the list once you click the confirmation link.

• Purpose: to send you launch updates, early-access information and occasional related news; and to document that you validly consented.
• Legal basis: your consent under Art. 6(1)(a) GDPR (and § 7(2) UWG for email marketing). The proof-of-consent data is processed on the basis of our legitimate interest in being able to demonstrate consent, Art. 6(1)(f) GDPR.
• Withdrawal: you can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by emailing us. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

b) Server log data

When you visit the website, our hosting provider automatically processes technical data such as your IP address, the date and time of the request, the page requested, the referrer URL, and your browser and operating system type.

• Purpose: to deliver the website securely and reliably and to detect and prevent abuse (e.g. attacks / DDoS).
• Legal basis: our legitimate interest in a secure and functioning website, Art. 6(1)(f) GDPR.

c) Cookies and tracking

This website does not use cookies, web analytics, advertising or tracking technologies, and we do not create user profiles. For that reason no cookie consent banner is displayed.

d) Web fonts

The typefaces used on this website (Poppins, Inter and DM Serif Display) are hosted locally on our own server and are delivered together with the website. No font data is requested from, or transmitted to, third-party servers such as Google Fonts.

3. Recipients and processors

We use the following service providers, who process personal data on our behalf as processors under data processing agreements pursuant to Art. 28 GDPR:

• Brevo (newsletter / email): Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (part of Brevo / Brevo SAS, France). Brevo stores and sends our newsletter and the related contact data. As part of its service Brevo may transfer data to third countries (e.g. USA, India); for such transfers Brevo uses EU Standard Contractual Clauses as a safeguard.
• Vercel (website hosting): Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel hosts this website and processes server log data (including IP addresses). Vercel is certified under the EU-US Data Privacy Framework and additionally relies on EU Standard Contractual Clauses for transfers to the USA.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

4. Transfers to third countries

As described above, some processing may involve transfers to countries outside the EU/EEA (in particular the USA). Where this happens, it is safeguarded by the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses (Art. 46 GDPR). You can request a copy of the relevant safeguards from us at hello@unfoldculture.com.

5. How long we keep your data

• Newsletter data: until you unsubscribe or withdraw consent, after which we delete or anonymise it. We may retain the proof-of-consent record for as long as necessary to defend against legal claims.
• Server logs: kept only for a short period for security purposes and then deleted or anonymised.

6. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21); and
• withdraw consent at any time (Art. 7(3)).

To exercise any of these rights, contact hello@unfoldculture.com. You also have the right to lodge a complaint with a data protection supervisory authority - for example the authority responsible for the German federal state in which we are established, or your usual place of residence.

7. Is providing data required?

Providing your data is voluntary. You only need to give an email address (and, optionally, your name) if you want to receive our newsletter. There is no statutory or contractual obligation to provide data, and there is no disadvantage to you if you choose not to.

8. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Data security

This website is served exclusively over an encrypted connection (HTTPS/TLS). We and our processors maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

10. External links

This website links to external services - in particular our demo booking page on Cal.com. When you follow such a link, the privacy policy of the respective provider applies. We have no control over, and accept no responsibility for, the data processing of external sites.

11. Changes to this policy

We may update this Privacy Policy to reflect changes to our website or legal requirements. The current version is always available on this page, with the "last updated" date shown above.

12. Contact

For any privacy-related question, email hello@unfoldculture.com.