Privacy Notice

Dear customers and interested parties,

in this privacy notice we inform you about our processing of your personal data when you use our knowledge bases for our software products schul.cloud and stashcat.

I. Controller for Data Processing

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

stashcat GmbH
Schiffgraben 47
30175 Hannover, Germany

Represented by: Christopher Bick, Felix Ferchland
Phone: +49 (511) 898 40100
Email: hello@stashcat.com

You can reach stashcat GmbH's Data Protection Officer at:

EDV-Unternehmensberatung Floß GmbH
Hopfengarten 10
33775 Versmold, Germany

Phone: 05423 / 96490-0
Fax: 05423 / 96490-60
Email: datenschutz@floss-consult.de

II. Privacy Notice for Our Knowledge Base

Below we inform you about how we process personal data in connection with the use of our public knowledge base.

(1) Description and Scope of Data Processing

Our knowledge base, accessible at kb.stashcat.com/de/stashcat, provides a central information platform where tips, tricks, and guidance on our software products are made available. It is intended to help our customers and users use the software efficiently and find answers to frequently asked questions.

Our knowledge base is publicly accessible and can be used without prior registration or login.

(2) Processing of Personal Data

Our knowledge base is publicly accessible; registration or login is not required. No personal data for user identification is collected when using it.

When accessing the knowledge base, data automatically transmitted by your browser to our server is processed. This includes:

• IP address of the accessing device

• Date and time of access

• Content accessed (pages, files)

• Referring URL (referrer)

• Browser type and version

• Operating system

Note: We use a technically necessary cookie to store your cookie preferences (consent cookie). It does not store any content, only the selection you have made.

(3) Purpose and Legal Basis of Data Processing

The information listed above is required to ensure the accessibility and technical stability of the knowledge base.

The legal basis for this is our legitimate interest within the meaning of Art. 6(1)(f) GDPR in the technically error-free, secure, and permanent provision of our knowledge base for our software products.

With regard to our own employees who use the system as registered users, the legal basis for the data processed in this context is the employment relationship within the meaning of Art. 6(1)(b) GDPR (contract).

(4) Retention Period

The technical log data referred to above is deleted no later than 6 months after your last visit to the website, unless statutory retention obligations apply.

Content in the knowledge base is retained for as long as it is required for provision as product information in the wiki.

(5) Data Recipients

Your personal data is used exclusively for the use of the knowledge base and is not disclosed to third parties or used for purposes other than those specified, not even in anonymized form.

Within stashcat, access to your data is granted to those departments that require it to fulfill our contractual and statutory obligations. Service providers and agents engaged by us may also receive data for these stated purposes.

Our knowledge base is hosted via Atlassian Confluence Cloud. When using the platform, a limited amount of data may be transferred to the hosting provider.

Service providers and vendors of the Confluence knowledge base:

We have entered into appropriate data processing agreements with all service providers. They process the data in accordance with our instructions and in compliance with applicable data protection laws.

(6) Transfer of Data to Bodies in Third Countries or International Organizations

As a general rule, your personal data is not transferred to third countries. Insofar as, due to the use of the Confluence knowledge base, a transfer of personal data to a country outside the EU or EEA cannot be entirely ruled out, such transfer will only take place if the statutory requirements of Art. 44 et seq. GDPR are met.

(7) Automated Decision-Making

Automated decision-making refers exclusively to decisions made by machine without any evaluation by a natural person. We do not use automated decision-making within the meaning of Art. 22 GDPR. No automated decision-making or profiling takes place in connection with our knowledge base.

III. Your Rights

You may contact us at any time to exercise your data protection rights. Provided the statutory requirements are met, you may be entitled to the following rights:

• Right to information as to whether and which of your data is processed (Art. 15 GDPR)

• Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)

• Right to erasure of data under the conditions specified in detail in Art. 17 GDPR

• Right to restriction of processing for specific purposes under the conditions of Art. 18 GDPR

• Right to data portability under the conditions set out in Art. 20 GDPR

• Right to withdraw consent at any time, if you have given us such consent. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

• Right to object to certain data processing activities referred to in Art. 21 GDPR that are based on Art. 6(1)(e) or (f) GDPR (this also includes the right to object to processing for advertising purposes, such as direct marketing)

• Right to lodge a complaint with a supervisory authority if you believe that stashcat's processing of your data does not comply with data protection requirements (Art. 77 GDPR)

The supervisory authority responsible for stashcat GmbH is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

IV. Changes to This Privacy Notice

We reserve the right to amend this privacy notice in order to adapt it to changes in the legal situation or to changes in our data processing.