The controller within the meaning of Art. 4 (7) of the General Data ProtectionRegulation (Regulation (EU) 2016/679) (in the following “GDPR”) and other national data protection laws of the member states as well as other data protection provisions is the:
FU. Life Service GmbH*
Head Office Berlin: Heidestraße 19, D-10557 Berlin
Branch Office Leipzig: Petersstraße 22/Sporergäßchen 2, D-04109 Leipzig (in thefollowing “we” or “us”)
E-Mail: info@fu.life
Website: www.fu.life
*A company of the FU.Life Group
1. Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The collection and use of personal data of our users is carried out only on a legal basis. An exception applies in those cases where a legal basis is not apparent, and the processing of the data can only be legitimized by consent.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a of the GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legalbasis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f GDPR serves asthe legal basis for the processing.
3. Data deletion and storage duration
The personal data of the data subject shall be deleted or the processing be restricted as soon as the purpose of storage ceases to apply. Data may also be stored if this has been provided for by the European or national legislator inEU regulations, laws or other provisions to which the controller is subject. Data will also be deleted or the processing be restricted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer or the data subject’s terminal device. The following data is collected:
– Information about the browser type and version used
– The operating system of the user
– The IP address of the user
– Date and time of access
– Websites from which the user's system accesses our Internet site
– Websites that are called up by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1lit. f GDPR.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer or terminal device. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art.6 para. 1 lit. f GDPR.
4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the caseof storage of data in log files, this is the case after 365 days at the latest.
IP addresses are logged completely for a maximum of 24 hours. After that, the last octet is deleted to make it anonymous, so that it is no longer possible to assign the calling client.
5. Possibility of objection
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
6. Security
To ensure the confidentiality of communication with you, we use TLS encryption for transmission.According to the current state of the art, the 128-bit encryption possible with this can be considered secure. All browsers of the younger generation achieve this level of security. If necessary, you should update the browser on your PC.
A cookie is a small text file that is stored on your computer by the operator of a website. Cookies primarily serve to make website visits more comfortable and secure and to speed them up.
We use cookies to offer additional functions that improve the convenience of using our websites, to ensure a flawless registration process, or to obtain information about the use of our websites and thus better tailor the design of our websites to our customers: session cookies and persistent cookies. These cookies store information about your use of our website in files on your computer for a limited period of time. A session cookie is deleted after you visit the website. A persistant cookie is stored on your computer for a defined period of time. You can find more detailed information in the list of cookies. When you visit our website again, the stored information is read out again, which saves you having to enter data again, for example.
You have the option to change your browser settings so that cookies are blocked if necessary or are only allowed after individual approval. If you block the storage of cookies, you may not be able to fully use the interactive features on this or any other website.
Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookie sis Art. 6 (1) lit. f GDPR, Section 25(2) Telecommunications Digital Services Data Protection Act (TDDDG).
The legal basis for the usage and storage of cookies that are not technically necessary for the provision of our website and our services is your consent, pursuant to Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG.
Purpose of data processing
The purpose of using technically necessary cookies is to provide our websites and services to our users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The user data collected through technically necessary cookies are not used to create user profiles.
The purpose for the use of technically not necessary cookies is to provide you with an eye-catching website tailored to your needs.
When you visit our website, a video will be played in the background. We use the video hosting platform Vimeo to embed and play the video. Vimeo is a video hosting platform offered by the US based company Vimeo.com, Inc, 330 West 34th Street, 10th Floor, New York, New York 10001 USA.
By embedding the video stored with the provider Vimeo, cookies are stored on your computer or terminal device, which stores certain information and certain data is transmitted to Vimeo. Regardless of whether you have an user account with Vimeo, the data collected through the cookie and transmitted to Vimeo include your IP-address, browser type, operating system, clicking behaviour and the duration you are watching the video. Vimeo uses this data, among other things, to improve its own services, to communicate with you and to set its own targeted advertising measures. Vimeo emphasizes on its website that only first-party cookies (i.e. cookies from Vimeo itself) are used for embedded videos as long as you do not interact with the video.
If you have an user account with Vimeo and are signed in to your user account, the above data will be automatically assigned to your Vimeo user account. If you do not want that this data is assigned to your Vimeo user account, you have sign off your user account before watching any videos hosted by Vimeo.
The data collected will be stored by Vimeo on servers that may be based in the USA. For the USA, there is currently an adequacy decision by the EU Commission, which is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. Vimeo is currently certified under the EU-US Data Privacy Framework. In addition, Vimeo states that it uses the standard contractual clauses approved by the EU Commission to ensure an adequate level of data protection, which you can view here: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0915&locale-en).
The legal basis for the use of Vimeo and the storage of the corresponding cookies is your prior consent according to Art. 6 (1) lit. a GDPR, Section 25 (1) TDDDG.
Further information on the processing of personal data by Vimeo can be found here:https://vimeo.com/privacy.
1.Description and scope of data processing
In the“Contact” section of our website, accessible at https://www.fu.life/#Contact, we offer you the possibility to get in touch with us, ask questions or make any inquiries you deem necessary. When you use our contact form on our website, we process your name, your email address, your phone number, your country of residence, the point of time of your request and the content and information that you provide to us in your individual message in connection with your inquiry.
2. Legal basis for the processing
The legal basis for the processing is your freely given consent pursuant to Art. 6 (1) lit. a GDPR if the contact is not related to the initiation, conclusion or performance of a contract that has already been concluded. If the contact is related to the initiation, conclusion or performance of a contract, the legal basis for the processing your personal is Art. 6 (1) lit. b GDPR.
3. Purpose of data processing
The purpose of processing your data is to respond to your questions and inquiries and to initiate, conclude or perform a contract concluded with you.
4. Duration of storage
We delete the data collected in this context, if the request is assigned to a contract, after the contract term, otherwise after the storage is no longer necessary, or restrict the processing if there are statutory retention obligations.
5. Possibility of objection and withdrawal of consent
Collecting your data in the context of contacting us is necessary to respond to your questions and inquiries. Consequently, there is no possibility of objection on the part of the user. However, if the processing is based on your consent, you may withdraw your consent at any time without giving a reason with effect to the future. It should be noted that withdrawing your consent does not affect the lawfulness of the processing in the past.
In addition to the cases explicitly mentioned in this privacy notice, your personal data will only be shared with your express prior consent or if this is permitted and required by law (Art. 6 (1) lit. c GDPR). This may involve, in particular, the disclosure of information for the purposes of law enforcement, the prevention of danger or the enforcement of intellectual property rights or third party rights.
1. For the purpose of the provision of our website, we may share your personal data collected when visiting our website with our external technical service providers, in particular our hosting providers. If we use such external service providers, we have carefully selected them beforehand as processors and verify their reliability in accordance with Art. 28 (1) GDPR and contractually obligate them within the scope of Art. 28 (3) GDPR to process all personal data provided by us exclusively in accordance with our instructions. If the service providers are located outside the EU, we take appropriate measures to provide guarantees that the recipient complies with the requirements of data protection law. You can request further information on these measures taken at any time using the contact details above.
We use GoDaddy.com, LLC, a Delawar limited liability company, with its headquarter in100 S. Mill Ave, Suite 1600, Tempe. AZ 854 USA, as our hosting provider. GoDaddy’s global privacy notice (including links to a local customized privacy notice for the EU) can be accessed at:https://www.godaddy.com/en-ie/legal/agreements/privacy-policy.
2. We may also share your personal within our company group for internal administrative purposes and for joint customer services and responding to your inquiries, if this is necessary for the above purposes. We have concluded corresponding data processing agreements with our group companies. Our group companies with whom we may share your personal data for the above purposes are:
• FU.Students Service GmbH, Heidestr. 19/19A, 10557 Berlin
• FU.Signature Living GmbH, Heidestr. 19/19A, 10557 Berlin
3. We may share your personal data with persons engaged in the conduct of our business to the extent necessary (auditors, financial institutions, insurance companies, legal advisors, regulators, parties involved in acquisitions or the establishment of joint ventures) based on our legitimate business interest (Art. 6 (1) lit. f GDPR).
The above mentioned recipients of your personal data may process your personal data outside the European Union. We take appropriate measures to provide sufficient guarantees that the recipient complies with the requirements of data protection law. You can request further information on these measures taken at any time using the contact details above. Such processing is carried out exclusively for the fulfillment of contractual and business obligations (if any) and for the maintenance of our business relationship (legal basis is Art. 6 (1) 1 lit. b or lit. f in each case in conjunction with Art. 44ff. GDPR).
The European Commission certifies that some third countries have a level of data protection comparable to the EEA standards by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be accessed here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection for various reasons. If this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data pursuant to Art. 46 (1), (2) lit. c GDPR (the standard contractual clauses of 2021 are available at https://eur-lex.europa.eu/legal-content/EN/TXT/uri=CELEX%3A32021D0915&locale-en), certificates or recognized codes of conduct. Please contact using the contact details above if you would like more information on this.
We do not use your personal data for automated decision making or profiling purposes.
We do not make the conclusion of contracts with us dependent on the prior provision of your personal data. There is also no statutory or contractual obligation to provide us with your personal data. However, we may only be able to provide you with certain services and conclude an agreement with you if you provide us with the personal data required to conclude the agreement.
You have the right:
– in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
– in accordance with Art. 16 GDPR to immediately demand the correction of in corrector completion of your personal data stored by us;
– pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
– to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
– pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
– to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
– to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, an e-mail to is sufficient.
Should a change to this privacy notice become necessary in the future, you will find the current status here at all times and we will inform you about any changes at least 4 weeks in advance.
LIVE DIFFERENT
FU was established by A-Labs Advisory & Finance Ltd.
Copyright, FU Management S.à r.l. (Holding) | 2021| All rights Reserved | dataprotection@fu.life