At Vikunja Cloud, accessible from https://vikunja.cloud and https://app.vikunja.cloud, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Vikunja Cloud and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us. Our Privacy Policy was generated with the help of GDPR Privacy Policy Generator from GDPRPrivacyPolicy.net
We are a Data Controller of your information.
Vikunja Cloud legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect the information:
Vikunja Cloud will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us at hello@vikunja.io.
In certain circumstances, you have the following data protection rights:
When you register for an account on Vikunja Cloud, we store the following information:
We use this data to provide you with access to your Vikunja Cloud account.
Parts of Vikunja Cloud are hosted with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which acts as a data processor for us in accordance with Art. 28 GDPR. The processing is carried out for the purpose of providing the application, ensuring stability and security, and efficient content delivery, and is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient operation of Vikunja Cloud). In this context, Hetzner Online GmbH processes connection data (e.g., IP address, timestamp) and log/event data for the delivery and security of the service.
A Data Processing Agreement (DPA) has been concluded with Hetzner, they publish a list of subprocessors with information on processing locations.
For more information about the data processed by Hetzner Online GmbH for operation, please refer to Hetzner's privacy policy.
Parts of Vikunja Cloud are hosted at Scaleway, 8 RUE DE LA VILLE L'EVÊQUE 75008 PARIS 8, France, which we use as a data processor in accordance with Art. 28 GDPR. The processing is carried out for the purpose of providing the application, ensuring stability and security, and efficient content delivery. In this context, Scaleway processes connection data (e.g., IP address, timestamp) and log/event data for the delivery and security of the service. The processing takes place in EU regions of Scaleway that we have selected.
A Data Processing Agreement (DPA) has been concluded with Scaleway, they publish a list of subprocessors with information on processing locations.
The processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient operation of Vikunja Cloud).
For more information about the data processed by Scaleway for operation, please refer to Scaleway's privacy policy.
In case you purchase a subscription for Vikunja Cloud, we additionally
store the type and the last for digits of the credit card used.
To process payments, we transmit the following data to the payment
service provider Stripe Payments Europe Ltd., 1 Grand Canal Street
Lower, Grand Canal Dock, Dublin,
Ireland in accordance with Art. 6
(1) point b GDPR:
Your data will only be passed on for the purpose of payment processing
with the payment service provider Stripe Payments Europe Ltd. and only
to the extent necessary.
To learn how Stripe processes your data, take a look at their privacy
policy.
For the management of our accounting, we use the Lexware Office service provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany, as a data processor in accordance with Art. 28 GDPR.
The purpose of the processing is the creation and accounting of quotes and invoices, the recording and processing of incoming documents, as well as automated payment reconciliation with connected bank accounts, including the management of customer and supplier data.
Legal bases are Art. 6 para. 1 lit. b GDPR (contract/contract initiation), Art. 6 para. 1 lit. c GDPR (legal obligations, in particular tax and commercial law retention requirements), and—where necessary—Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient, audit-proof bookkeeping).
In particular, the following data is processed: master data (e.g., name, address, contact and bank details), receipt/invoice and payment data, as well as usage-related logs.
Lexware Office uses approved subprocessors for additional functions, whereby suitable guarantees in accordance with Art. 44 et seq. GDPR (in particular standard contractual clauses) have been agreed with providers outside the EU/EEA.
The storage period is based on legal retention requirements, in particular from § 147 AO and § 257 HGB.
A Data Processing Agreement in accordance with Art. 28 GDPR has been concluded with Haufe-Lexware GmbH & Co. KG.
Like any other website, Vikunja Cloud uses "cookies". These cookies are used to store login information.
Additionally, when you create an account and attempt to purchase a subscription, the stripe integration may set cookies to detect fraud and identify users. You can learn more about this in this Stripe article and in Stripe's cookie policy.
For more general information on cookies, please read "What Are Cookies".
Vikunja Cloud follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for administering the site and gathering demographic information.
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Vikunja Cloud does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
Our Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in Vikunja Cloud. This policy is not applicable to any information collected offline or via channels other than this website.
By using Vikunja Cloud, you hereby consent to our Privacy Policy and agree to its terms.