GDPR Compliance

1. Introduction

We are committed to ensuring that your privacy is protected in compliance with the General Data Protection Regulation (GDPR). This page explains how we collect, process, and protect your personal data, as well as your rights under GDPR.

Please note that by using our services, you consent to the collection, processing, and storage of your personal data as described in this policy.

2. Data Controller and Contact Information

For the purposes of the GDPR, the data controller is LaunchX UG (haftungsbeschränkt), the company behind UptimeEye. If you have any questions about your personal data, or wish to exercise your rights under the GDPR, please contact us at: [email protected]

If you believe that we are processing your data unlawfully, you also have the right to lodge a complaint with the relevant supervisory authority.

3. Personal Data We Collect

We collect the following types of personal data from our users:

Account Information: Including your name, email address, and password.
Usage Data: Information about how you use our service, including API requests, monitors, and scheduled tasks.
Technical Data: Information about your device, IP address, browser type, and operating system.

We only collect the minimum amount of personal data necessary to provide our service and comply with legal obligations. We do not collect any sensitive personal data (such as health data, racial or ethnic origin, etc.).

4. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the GDPR:

Consent: By using our service, you consent to the collection and processing of your personal data.
Contractual Necessity: We process data to fulfill our contractual obligations and provide the monitoring and task scheduling services.
Legal Obligation: We may process data to comply with legal or regulatory requirements (e.g., for tax or accounting purposes).
Legitimate Interests: In some cases, we may process data based on our legitimate interests, such as to improve our services or to detect and prevent fraud.

You have the right to withdraw your consent at any time, without affecting the legality of processing based on consent before its withdrawal.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as long as required by law (e.g., tax or accounting requirements). Upon request, we will delete your personal data, provided that there is no legal obligation to retain it.

We implement retention schedules and review the necessity of storing data periodically.

6. Your Rights Under GDPR

You have the following rights regarding your personal data under the GDPR:

The right to access: You can request a copy of the personal data we hold about you.
The right to rectification: You can request that we correct any inaccuracies or update your personal data.
The right to erasure (Right to be Forgotten): You can request that we delete your personal data, subject to legal exceptions.
The right to restrict processing: You can request that we limit the processing of your personal data under certain conditions.
The right to data portability: You can request that we transfer your personal data to another service provider in a structured, commonly used, and machine-readable format.
The right to object: You can object to the processing of your personal data in certain situations.
The right to withdraw consent: If we process your data based on consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, or destruction. However, no data transmission method or storage system is 100% secure, and we cannot guarantee the absolute security of your personal data.

In case of a data breach, we will notify affected individuals and relevant supervisory authorities within 72 hours as required by the GDPR.

8. Data Transfers

We may transfer your personal data to third-party service providers or partners located in countries outside the European Economic Area (EEA). When transferring data outside the EEA, we ensure that appropriate safeguards are in place to protect your data in compliance with GDPR, such as using Standard Contractual Clauses or ensuring the recipient is certified under the EU-US Privacy Shield.

9. Third-Party Services

We use third-party services for the following purposes:

Clerk: For managing user accounts and authentication. Clerk ensures that your data is protected and is in compliance with GDPR.
Stripe: For processing payments securely. We use Stripe's services to handle payments, and they comply with GDPR and other data protection regulations.

Both Clerk and Stripe are third-party providers that process your data on our behalf, and we ensure they comply with GDPR and data protection laws.

10. Use of Cookies

We do not use cookies for analytical purposes. However, we use cookies to ensure the functionality of our website and service (e.g., for session management). You can control cookies through your browser settings.

11. Changes to This GDPR Policy

We may update this GDPR policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page.

Please review this page periodically to stay informed about how we are protecting your personal data.

12. Contact Us

If you have any questions or concerns about how we handle your personal data or GDPR compliance, please contact us at: [email protected]