PRIVACY POLICY

WHAT TYPES OF DATA DOES UPFILE COLLECT ABOUT ME AND FOR WHAT PURPOSE?

In general terms, if we collect your data, we will only process it for the purposes for which we received or collected it.

We will only process data for other purposes if the legal requirements have been met in accordance with Art. 6 para. 4 GDPR. If this happens, we will inform you, the Data Subject, in advance. We will give you information about this in accordance with Art. 13 para. 3 and Art 14 para 4 GDPR.

 

WHAT IS THE LEGAL BASIS FOR UPFILE PROCESSING MY DATA?

The legal basis for the collection of your data is Art. 6 GDPR, unless there are other specific legal regulations that apply. This article outlines more specifics on what situations can provide the legal basis for data processing:

There is consent from the Data Subject (Art. 6 para. 1 lit. a GDPR).
The data processing is part of entering into and fulfilling a contract (Art. 6 para. 1 lit. b GDPR).
The data processing follows balance of interests requirements (Art. 6 para. 1 lit. f GDPR).
The data processing is done to fulfil the Controller’s legal obligations (Art. 6 para. 1 lit. c GDPR).
If we at UPFILE are processing your personal data because you, the Data Subject, have given us your consent to do so, you can revoke this consent at any time. We will then stop processing your data. To revoke your consent, please write to [email protected].

If we are processing your personal data based on the balance of interests requirements, you as the Data Subject have the right to object in accordance with Art. 21 GDPR.

 

HOW LONG WILL UPFILE STORE MY PERSONAL DATA?

We will store your data for as long as it takes to fulfill the purpose of processing your data.

If there are requirements for storing your data that apply, such as commericial law or tax law, we will store your personal data to meet these requirements. After this time has passed, we will check to see if any other data processing is required. If no other data processing is required, we will delete your data.

You can, of course, request information about what personal data of yours we have stored. You may also request that we delete your data or that we restrict the processing of your data if it is not necessary.

 

WHO DOES UPFILE FORWARD YOUR DATA TO?

In general terms, we at UPFILE will only forward your personal data to third parties if it is necessary for the fulfillment of our contract with you, if it is necessary to meet the balance of interests requirements in accordance with Art, 6 para. 1 lit. f GDPR, if we are legally required to forward your data, or if you have given us consent to forward your data.

 

WHERE DOES UPFILE PROCESS YOUR DATA?

We process your personal data only in our own data centers, which are all located within the European Union.

 

WHAT RIGHTS DO I HAVE AS THE DATA SUBJECT?

You have the

Right to receive information: You can receive information from us about the data that we are storing in accordance with Art. 15 GDPR (with restrictions according to Section 34 of the German Federal Data Protection Act (BDSG) if applicable).
Right to rectification: On your request, we will rectify your data that we store in accordance with Art. 16 GDPR if they are inapplicable or incorrect.
Right to deletion: If you would like, we will delete your data according to the principles of Art. 17 GDPR, provided this is not in conflict with other legal regulations (e.g. statutory retention obligations or restrictions according to Section 35 BDSG) or with a legitimate interest on our part (e.g. to defend our rights and claims).
Right to restriction of processing: In consideration of the requirements of Art. 18 GDPR, you can ask us to restrict the processing of your data.
Right to data portability: You also have the right to receive your data in accordance with the provisions of Art. 20 GDPR in a structured, common and machine-readable format or to send these data to third parties.
Furthermore, you have the right to lodge a complaint with any competent data privacy supervisory authority (Art. 77 GDPR). However, we recommend that you always forward a complaint to our data protection officer first, so that we can process your issue as quickly as possible.