Ulto UG (haftungsbeschränkt) & Co. KG
Französische Allee 58a
14974 Ludwigsfelde, Germany
Represented by its general partner: Ulto Command UG (haftungsbeschränkt), which in turn is represented by its Managing Director: Dr.-Ing. Sebastian Engel.
Email: contact@ulto.ai
This section, together with the sections below, describes the processing of personal data in connection with this website — in particular the hosting described below and the handling of inquiries you send us.
Our website is delivered via the content delivery network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), acting as our processor under a data processing agreement pursuant to Art. 28 GDPR. To deliver the site securely and to defend against attacks (e.g. DDoS), Cloudflare processes connection data, including visitor IP addresses, in server log files. The legal basis is our legitimate interest in the secure and performant provision of the website (Art. 6(1)(f) GDPR).
As Cloudflare is based in the USA, personal data may be transferred there. The transfer is covered by Cloudflare's certification under the EU-U.S. Data Privacy Framework (adequacy decision) and, in addition, by EU Standard Contractual Clauses; a copy of the latter is available on request. See cloudflare.com/privacypolicy.
When you contact us by email or phone, we store your information (name, contact details, content of the inquiry) to process your request and for any follow-up questions. We store this data for a maximum of 6 months after the processing is complete, unless statutory retention obligations (e.g., from the German Commercial Code (HGB) or the German Fiscal Code (AO) for business-related transactions) require a longer storage period. The legal basis for the processing is Art. 6(1)(b) GDPR if your inquiry is aimed at concluding a contract (pre-contractual measures), or our legitimate interest in the efficient processing of your inquiry pursuant to Art. 6(1)(f) GDPR. Your inquiry is received and stored via our email and hosting provider, acting as our processor under Art. 28 GDPR.
Where we use AI services and personal data is transmitted to such a service, we only use providers that act as processors under a data processing agreement pursuant to Art. 28 GDPR, do not use the data to train AI models or retain it beyond what is necessary, and are located in the EU/EEA or a country covered by an EU adequacy decision. The legal basis is our legitimate interest in efficient and secure handling pursuant to Art. 6(1)(f) GDPR; you have the right to object (Art. 21 GDPR).
Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
Providers who process personal data on our behalf as processors under Art. 28 GDPR (e.g. our hosting provider and, where applicable, AI services) are not third parties within the meaning of this section. Beyond such processors, we do not disclose your personal data to third parties unless you have consented, we are legally obliged to do so, or it is necessary for the performance of a contract.
You have comprehensive rights, including the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR). To exercise your rights, please contact us by email at contact@ulto.ai.
You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The authority competent for us is the State Commissioner for Data Protection and Freedom of Information of Brandenburg (Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
If your data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing on grounds relating to your particular situation (Art. 21(1) GDPR).
We reserve the right to amend this privacy notice from time to time to ensure that it complies with current legal requirements or to implement changes to our services. The new privacy notice will apply to your subsequent visits.