Privacy policy of www.kunomail.de

date of the last change: 30.06.2022

Inspired Software Kunomail takes the privacy and the security of our users very seriously . We are aware of the importance of your personal data for you and undertake to protect your personal data by complying with the legal and official requirements and taking into account proven security standards in the industry. This Kunomail data protection guideline (in below as "this guideline") should help you to understand in detail how we use, process, process, pass on and protect your personal data in connection with our products and/or services They have.

before you start using our products and/or services, It is important that you carefully read them (especially the conditions we have emphasized) to ensure that you fully understand and agree to your content before you start using our products and/or services. You are not obliged to accept this policy, but it is an important part and if you decide not to accept, we will probably not be able to use our products and/or services, and you can choose to avoid no longer With our products and/or services. If you choose a (renewed) use, it will be assumed that you accept and approved it, as it is necessary to provide the product and/or service.

that we collect certain personal data from you in certain service scenarios, but it does not mean that we will collect and process all personal data that falls under this guideline as long as you agree to this guideline and use our products and/or services. If additional business functions are affected and your non -essential personal data must be processed, we will obtain your consent separately. This guideline contains a number of technical concepts that we will try to present in an easily understandable way to facilitate your understanding. Please read and understand this guideline before you use it, and if you have any questions, please Contact us.

This application collects personal data from its users.

Provider and responsible

Inspired Software David Kubitsch

Schönfließerstraße 3

10439 Berlin

Germany

Provider e-mail address: david.kubitsch@inspiredsoftware.de

Types of data collected

The owner does not provide a listing of the personal data collected.

Full details of each type of personal data processed are provided in the designated sections of this Privacy Policy or selectively through explanatory text displayed prior to data collection.

Personal data may be provided voluntarily by the user or, in the case of usage data, may be collected automatically when this application is used.

Unless otherwise specified, the provision of all data requested by this application is mandatory. If the user refuses to provide the data, this may result in this application being unable to provide the user with its services. In cases where this application expressly states that the provision of personal data is voluntary, users may choose not to provide such data without any consequences for the availability or functioning of the service.

Users who are unclear about which personal data is mandatory can contact the provider.

Any use of cookies - or other tracking tools - by this Application or third-party service providers used by this Application is for the purpose of providing the service requested by the User and any other purposes described in this document and, if any, in the Cookie Policy.

Users are responsible for all personal data of third parties obtained, published or disclosed through this Application and confirm that they have obtained consent for the transfer of personal data of any third parties to this Application.

Type of data processing

Processing methods

The Provider processes User Data in a proper manner and takes appropriate security measures to prevent unauthorized access and unauthorized forwarding, modification or destruction of data.

Data processing is carried out by means of computers or IT-based systems according to organizational

Procedures and practices are implemented that are specific to the stated purposes. In addition to the responsible person, other persons could also be involved internally (human resources management, sales, marketing,

legal department, system administrators) or externally - and in that case as far as necessary, by the

Responsible party designated as processor (such as provider of technical services,

delivery companies, hosting providers, IT companies or communications agencies) - operate this application and thus have access to the data. An up-to-date list of these parties can be requested from the provider at any time.

Legal bases of the processing

The Provider may process personal data of Users only if one of the following applies:

Users have given their consent for one or more specific purposes. Note: In some

legislation, the provider may be permitted to process personal data until the user objects to such processing ("opt-out") without relying on consent or any other of the following legal bases. However, this does not apply if the processing of personal data is subject to European data protection law;  the data collection is necessary for the performance of a contract with the user and/or for pre-contractual measures arising therefrom;

 processing is necessary for compliance with a legal obligation to which the provider is subject; processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider; processing is necessary for the purposes of safeguarding the legitimate interests of the provider or a third party.

In any case, the provider will gladly provide information about the specific legal basis on which the

processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

Users also have the right to be informed about the legal basis of the transfer of data to a country outside the European Union or to an international organization governed by international law or established by two or more countries, such as the UN, as well as about the security measures taken by the Provider to protect their data.

If such a transfer occurs, the user can learn more about it by reviewing the relevant sections of this document or by contacting the provider using the information provided in the contact section.

Storage duration

Personal data is processed and stored for as long as required by the purpose for which it was collected.

Therefore applies:

Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until the complete fulfillment of this contract.

Personal data collected to protect the Provider's legitimate interests will be retained for as long as necessary to fulfill those purposes. Users can obtain more detailed information about the Provider's legitimate interests in the relevant sections of this document or by contacting the Provider.

In addition, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data is deleted. Therefore, the

The right to information, the right to erasure, the right to rectification and the right to data portability may not be asserted after the expiry of the retention period.

Processing purposes

Personal data about the User is collected in order for the Provider to provide the Service and further to comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of the Users or third parties), detect malicious or fraudulent activities. In addition, data is collected for the following purposes: registration and login.

Users can find more detailed information on these processing purposes and the personal data used for each purpose in the "Detailed information on personal data processing" section of this document.

Detailed information on the processing of personal data

Personal data is collected for the following purposes using the following services:

Registration, account registration and authentication

If you register your email account in Kunomail, you must specify your email address, password and in some cases a verification code; If you refuse to do this, you cannot create an email account in Kunomail. In Kunomail, your email address, your password and in some cases a verification code are saved on your computer as a kunomail email account. There is no storage away from your computer! For products or services that require a kunomail account (e.g. Kunomail online shop), we can check your user identity based on the information you specified above to ensure that we provide the service for you personally.

By registering or logging in, users authorize this application to identify them and grant them access to specific services.

Depending on what is specified below, third party providers may provide registration and login services. In this case, this application may access some data stored by these third parties for registration or identification purposes.

Some of the services listed below may collect personal data for targeting and profiling purposes. For more information, see the description of each service.

KUNOMAIL.CONNECT

KUNOMAIL.CONNECT is a classic online messenger that offers various communication options. With KUNOMAIL.CONNECT, KUNOMAIL users can communicate with each other individually or in groups and exchange data. In private mode, no data is stored on the connection server. The data is directly between the communicating contacts exchanged.

In the public groups, the last 10 messages per channel are stored on the connection server. This are only used for message entry when dialing in again. All further messages are immediately deleted on the link server.

In the Questions and Answers section, all messages are stored on the connection server.

In the case of "inappropriate messages", every user can report them to the KUNOMAIL support kontakt@kunomail.de.

Google OAuth (Google Ireland Limited)

Google OAuth is a registration and login service provided by Google Ireland Limited, which is connected to the Google network.

Personal Data Processed: various types of data as described in the Service's Privacy Policy.

Processing location: Ireland - Privacy Policy .

Category of personal information collected under CCPA: Internet Data.

Under the CCPA, processing constitutes a "sale." In addition to the information contained in this clause, users may refer to the California Consumer Rights section for information on how to object to the sale.

The rights of users

Users may exercise certain rights in relation to their data processed by the Provider.

In particular, users have the right to do the following:

Revoke the consents at any time. If the user has previously consented to the processing of personal data, they may revoke their own consent at any time. Object to the processing of their data. The user has the right to object to the

to object to the processing of his or her data if the processing is based on another

legal basis than consent. Further information on this is provided below.

receive information regarding their data. The user has the right to know whether the data is processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.

Verification and rectification. The user has the right to verify the accuracy of his data and request its update or correction.

request restriction of the processing of their data. Users have the right to restrict the processing of their data under certain circumstances. In this case, the provider will not process the data for any purpose other than storage.

Request deletion or other removal of the personal data. Users have the right, under certain circumstances, to request that their data be deleted by the provider. Receive their data and have it transferred to another responsible party. Users have the right to receive their data in a structured, common and machine-readable format and, if technically possible, to have it transferred to another controller without hindrance. This provision applies insofar as the data is processed by automated means and the processing is based on the user's consent, on a contract to which the user is party, or on pre-contractual obligations.

File a complaint. Users have the right to file a complaint with the competent supervisory authority.

Details on the right to object to processing

If personal data are processed in the public interest, in the exercise of a sovereign power conferred on the Provider or in order to safeguard the Provider's legitimate interests, the User may object to such processing by providing a justification relating to his/her particular situation.

Users are informed that they may object to the processing of personal data for direct marketing purposes at any time without giving reasons. Users can find out whether the Provider processes personal data for direct marketing purposes in the relevant sections of this document.

How to exercise the rights

All requests to exercise user rights can be directed to the provider via the contact details provided in this document. Requests can be exercised free of charge and will be processed by the Provider as soon as possible, within one month at the latest.

Further information on the collection and processing of data

Legal measures

The User's personal data may be processed by the Provider for the purposes of law enforcement within or in preparation of legal proceedings arising from the improper use of this Application or the related services.

The User declares that he/she is aware that the Provider may be required by the authorities to disclose personal data.

More information about the personal data of the user

In addition to the information set forth in this Privacy Policy, this Application may provide the User, upon request, with additional contextual information relating to specific services or to the collection and processing of personal data.

System logs and maintenance

This application and third party services may collect files that record the interaction that takes place through this application (system logs) or use other personal data (e.g. IP address) for this purpose for operational and maintenance purposes.

Information not included in this privacy statement

Further information about the collection or processing of personal data can be requested from the provider at any time via the listed contact details.

How "Do Not Track" requests are handled

This application does not support Do Not Track requests by web browsers. For information on whether integrated third-party services support the Do Not Track protocol, users should refer to the privacy policy of the respective service.

Changes to this privacy policy

The provider reserves the right to make changes to this privacy policy at any time by informing users on this page and, if applicable, via this application and/or - as far as technically and legally possible - by sending a message via user contact details available to the provider. Users are therefore advised to visit this page regularly and in particular to check the date of the last modification indicated at the bottom of the page.

Insofar as changes affect a data use based on the consent of the user, the provider will - if necessary - obtain a new consent.

Information for California consumers

This section completes and supplements the other sections contained in the privacy policy

Information and is provided by the company operating this Application - or, if applicable, its parent, subsidiary or affiliate (collectively referred to as "we", "us", "our" within this section).

The provisions of this section apply to all users who are acting as consumers under the California Consumer Privacy Act 2018 and who reside in the State of California (users hereinafter referred to for convenience as "you," "you," "your"), and supersede for such users any different or conflicting provisions of the Privacy Policy.

Within this section, the term "personal information" is used as defined by the California Consumer Privacy Act.

Categories of personal information collected, disclosed or sold

In this part, we summarize the categories of personal information collected, disclosed or sold, as well as the purposes pursued thereby. Detailed information about these activities can be found under "Detailed information about the processing of personal data" within this document.

Information collected: the categories of personal information we collect

We have collected the following categories of personal information about you: Internet data.

We will not collect any other categories of personal information about you without notifying you.

How we collect information: from what sources do we collect personal information?

We collect the above categories of personal information directly or indirectly from you when you use this application.

For example, you provide personal information when you submit a request through this application. Also, when you use this Application, you indirectly provide us with Personal Information that is automatically monitored and collected. Finally, we may collect personal information about third parties who work with us to provide the Service or to operate this Application or individual features thereof.

How we use the information we collect: Sharing and disclosing your personal information to third parties for commercial purposes.

We may disclose personal information collected about you to third parties for commercial purposes. In such cases, such third parties undertake to us by means of a written agreement to treat personal information confidentially and to use it solely for the purpose of implementing the agreement.

We may also disclose your personal information to third parties if you have explicitly requested or authorized it in order to provide the service to you.

For more details about the purposes of the processing, please refer to the relevant section of this document.

Sale of your personal information

In this context, "sale" means the "selling, renting, publishing, disclosing, distributing, making available, transmitting, or any form of oral, written, or electronic communication of personal information of consumers by one business to another business or third party in exchange for money or other monetary benefit."

For example, this means that a sale can take place when advertising is placed on an application, when statistical analyses of traffic or views are performed, or simply when plugins of social networks or similar are used.

Your right to object to the sale of personal information

You have the right to object to the sale of your personal information. This means that if you request that your information no longer be sold, we will honor your request.

The objection may be made voluntarily, at any time, without verifiable request, in accordance with the instructions below.

Instructions on the right to object to the sale of personal information

If you want to learn more or to get all kinds of information about this application on- and offline*.

*following* *data sales, you can reach us via the contact details in this document for more information.

For what purposes do we process your personal information?

We may use your personal information to operate and maintain this Application or individual features thereof in working order ("Operational Purposes"). In such cases, we will process your personal information to the extent necessary and proportionate for the operational purposes for which it was collected and only for the relevant operational purposes.

We may also use your personal information for other purposes, such as for commercial purposes (as described in the "Detailed Information on Processing of Personal Data" section of this document), as required by law, or to enforce our claims before the competent bodies should our rights or interests be threatened or infringed.

We will not use your personal information for any other unrelated or incompatible purpose without informing you in advance.

Your privacy rights under California law and how you can exercise them

Right of access and data portability

You have the right to request information from us about:

The categories and sources of personal information we collect about you, the purposes for which we use your information, and the entities to which we disclose such information; in the case of the sale or disclosure of personal information for operational purposes - and in the form of two separate lists:

Sale: the categories of personal information acquired by each category of recipients; and

Disclosure for operational purposes: the categories of personal information disclosed to each category of recipients.

The information described above relates to personal information that we have collected or processed within the past 12 months.

If we provide the information electronically, it will be "portable," meaning that it will be provided in an easily readable format so that you can transmit the information to other entities without impediment, to the extent technically possible.

Right to delete your personal information

You have the right to request that we delete your personal information unless this is precluded by a legal exception (such as when the information is used to identify and fix errors for this application, to investigate security incidents or to prevent fraudulent or illegal activity, to enforce certain rights, etc.).

If no legal exception applies, we will delete your personal information at your request and instruct our service providers, if any, to do the same.

How to exercise your rights

In order to exercise the rights described above, you must send us a verifiable request using the contact details in this document.

In order to process your request, we need to know who you are. Therefore, you can only exercise the rights described if your request is verifiable, ie:

it contains information that your identification reasonably allows us to determine whether you are the person about whom we have collected personal information or an authorized representative thereof;

it is described in sufficient detail so that we can reliably understand, evaluate and respond to it.

We will not respond to the request if we cannot determine your identity and therefore whether the personal information we hold is actually related to you.

If you cannot make a verifiable request yourself, you may authorize an agent approved by the California Secretary of State to act on your behalf.

If you are of legal age, you may make a verifiable request on behalf of a minor for whom you have custody.

You can make a maximum of 2 requests in a 12-month period.

How and when we respond to your request

We will acknowledge receipt of your verifiable request within 10 days and let you know how we will process it.

We will respond to your request within 45 days of receipt. If we need longer, we will inform you of the reasons and the additional processing time required. In this regard, please note that the processing of your request may take up to 90 days.

Our information relates to the preceding 12 months.

If we reject your request, we will explain the reasons for the rejection.

We do not charge a fee for processing and responding to your verifiable request unless it is clearly unfounded or disproportionate. In such cases, we may charge a reasonable fee or refuse to process your request. In either case, we will notify you of our decision and the reasons behind it.

Information for users in Brazil

This section supplements and completes the information contained in the remaining sections of the Privacy Policy and is provided by this Application or, as applicable, its related parent or subsidiary and/or affiliates (collectively referred to as "we," "us," and "our" for purposes of this section).

The provisions of this section apply to all users residing in Brazil pursuant to the "Lei Geral de Proteção de Dados" (users are hereinafter referred to as "you" and "your"). For such users, these provisions shall prevail over any different or inconsistent provisions from the Privacy Policy.

Within this section of the document, the term "personal information" is used in accordance with the definition from the Lei Geral de Proteção de Dados (LGPD).

Legal basis for the processing of your personal information

We may only process your personal information if there is a legal basis for the processing. The legal bases for processing are the following:

 Your consent to the processing activities in question

the fulfillment of a legal or regulatory obligation to which we are subject

the performance of public-law duties arising from a law, ordinance, contract, agreement or similar legal text

Studies by research institutes, preferably based on anonymized personal information

the execution of a contract and pre-contractual measures, if you are a party to said contract

protecting our rights in legal, regulatory and arbitration proceedings protecting your physical safety or that of a third party

the protection of health in procedures carried out by health personnel or institutions our legitimate interests, provided that your fundamental rights and freedoms are not overridden, and the protection of claims.

To find out more information about the legal basis, you can always contact us using the contact details in this document.

Categories of personal information processed

You can find out which categories of personal data are processed in the section "Detailed information on the processing of personal data" in this document.

Why we process personal information

You can find out why we process personal information in the "Detailed information about the processing of personal information" and "Purposes of processing" sections of this document.

Your privacy rights under Brazilian law, how to make a request, and how we will respond

Your privacy rights under Brazilian law

You have the right:

 To obtain information about whether your personal information is being processed; to obtain access to your personal information;

Have incomplete, inaccurate or out-of-date personal information corrected; request anonymization, blocking or deletion of unnecessary or redundant personal information, as well as personal information that is not processed in accordance with the LGPD;

  Obtain details of third parties with whom we share your personal information; Upon your express request and subject to our corporate and commercial confidentiality, effect the transfer of personal information (other than anonymized information) to another service or product provider; Request the erasure of your personal information where the processing was based on your consent, unless at least one of the exceptions under Article 16 LGPD applies;

Revoke your consent at any time; file a complaint regarding your personal information with ANPD (the federal data protection agency) or with a consumer protection agency;

object to the processing of personal information unless it is carried out lawfully;

receive understandable and adequate information about criteria and procedures for automated decision-making; and

request a review of a decision taken solely on the basis of the automated processing of your personal information which has an impact on your legitimate interests. This concerns decisions regarding your personal or professional profile, their consumer profile or creditworthiness, as well as characteristics of your personality.

You will not be discriminated against or otherwise disadvantaged as a result of exercising your rights.

How to make your request

Your express request to exercise your rights can be made at any time and free of charge through the contact details in this document or through our legal representative.

How we respond to your request

We will make every effort to process your request promptly.

If we are unable to do so, we will inform you of the factual or legal reasons why we cannot respond to your request or cannot respond to it immediately. If we do not process your personal information, we will, if we are able to do so, refer you to the natural or legal person to whom you should submit your request.

Should you submit a request for access to personal information or confirmation of the processing of personal information, please indicate whether your personal information should be provided electronically or in paper form. You must also tell us whether you want us to respond to your request immediately - in which case we will respond in simplified form - or whether you require full information. If the latter, we will respond within 15 days of the request and provide you with full details of the source of your personal information, confirmation of whether records exist and the processing criteria and purposes, while maintaining our corporate and commercial confidentiality.

If you make a request to correct, delete, anonymize or block personal information, we will see that your request is promptly forwarded to such entities with whom we have shared your personal information to enable them to fulfill your request, unless such forwarding proves impossible or involves an unreasonable effort on our part.

Lawful transfer of personal information outside Brazil

We may transfer your personal information outside of Brazil in the following circumstances:

 The transfer is, in accordance with the lawful procedures under international law, for the

international cooperation between public safety, investigative, or law enforcement agencies is required.

The transfer is necessary to protect your life, physical safety, or the life or physical safety of others.

The transmission was approved by the ANPD.

The transfer results from an obligation within an international cooperation agreement.

The transfer is necessary for the performance of a public law task or a public task assigned by law.

The transfer is necessary for the fulfillment of a legal or official obligation, for the

performance of a contract or for pre-contractual measures in connection with a contract or for the regular exercise of rights in judicial, administrative or arbitration proceedings.

Definitions and legal information

Personal data (or data)

Any information by which the identity of a natural person is or can be determined, directly or in combination with other information.

Usage data

Information that this application (or third party services that this application uses) automatically collects, such as: the IP addresses or domain names of the computers of users who use this application, the URI (Uniform Resource Identifier) addresses, the time of the request, the

method used to send the request to the server, the size of the received response file, the numerical code indicating the status of the server response (successful result, error, etc.), the country of origin, the functions of the browser and operating system used by the user, the various time data per call (e.g. how much time was spent on each page of the application) and information about the path followed within an application, in particular the order of the pages visited, as well as other information about the operating system of the device and/or the IT environment of the user.

Users

The person using this application who, unless otherwise specified, is the same as the person concerned.

Affected

The natural person to whom the personal data relates.

Order processor (or data processor)

Natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller as described in this Privacy Policy.

Responsible person (or provider, partly also owner)

The natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data and the means used for that purpose, including the security measures relating to the operation and use of this Application. Unless otherwise specified, the controller is the natural or legal person through which this application is offered.

This application

The hardware or software tool used to collect and process the User's personal data.

Service

The service offered through this application as described in the relevant T&Cs (if any) and on this website/application.

European Union (or EU)

Unless otherwise indicated, all references in this document to the European Union refer to all current Member States of the European Union and the European Economic Area (EEA).

Legal notice

This Privacy Policy has been drafted based on provisions of various legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This Privacy Policy applies solely to this Application, unless otherwise stated in this document.

Last updated: 30 June 2022