Last updated: July 21, 2026
The controller responsible for data processing under the General Data Protection Regulation (GDPR) and other applicable data protection laws is: Standards United AG Vogelsanger Weg 157 40470 Düsseldorf Germany Email: info@uneida.com Phone: 02173 2650871 Represented by: Mikail Aydoner / Vorstand Commercial register: Amtsgericht Düsseldorf, HRB 108614
(2.1)
Scope of processing of personal data We process personal data of our users only to the extent necessary to provide a functioning website, our content, and our services. Processing of personal data generally takes place only with the user's consent. An exception applies where obtaining prior consent is not possible for practical reasons and processing is permitted by law.
(2.2)
Legal basis for processing Where we obtain consent for processing operations of personal data, Art. 6(1)(a) GDPR serves as the legal basis. For processing necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing required to carry out pre-contractual measures, for example inquiries about using our B2B matchmaking platform for the hydrogen market. Where processing is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. Where processing is necessary to protect the legitimate interests of our company or a third party, and provided the interests, fundamental rights and freedoms of the data subject do not override those interests, Art. 6(1)(f) GDPR serves as the legal basis. Our legitimate interest in facilitating business connections between participants in the hydrogen market via our platform, as well as the analysis, optimization, and economic operation of our online offering.
(2.3)
Erasure and storage period Personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond this if provided for by EU or national legislation, regulations, or other rules to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned rules expires, unless there is a necessity for further storage for the conclusion or performance of a contract.
(3.1)
Description and scope of data processing Each time our website is accessed, our system automatically collects data and information from the accessing computer system, including: • Browser type and version used • The user's operating system • The user's internet service provider • The user's IP address • Date and time of access • Websites from which the user's system reaches our website (referrer) • Websites accessed by the user's system via our website This data is processed by our system and hosting infrastructure only for the duration necessary to deliver the website. This data is not stored together with other personal data of the user and, as set out in Section 3.4 below, we do not currently operate a separate, persistent log storage system.
(3.2)
Legal basis The legal basis for the temporary storage of data and log files is Art. 6 (1)(f) GDPR.
(3.3)
Purpose of processing Temporary processing of the IP address by the system is necessary to enable delivery of the website to the user's device. For this, the IP address must remain available for the duration of the session. This temporary processing ensures the functionality of the website and serves to optimize the website and ensure the security of our IT systems. Our legitimate interest in processing lies in these purposes.
(3.4)
Duration of storage Data is erased as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected for provision of the website, this is the case when the respective session ends. We do not currently operate a separate, persistent log storage system with a configured retention period; should structured log storage and analysis be implemented in the future, a defined retention period will be established and this policy updated accordingly.
(3.5)
Hosting / Content Management Our website is hosted by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, on Microsoft Azure infrastructure located in the Germany West Central region (Frankfurt, Germany). The hosting provider's servers may include, in particular, IP addresses, contact inquiries, meta and communication data, and usage data generated on our website, all of which is processed exclusively within the European Union. The hosting provider acts solely for purposes serving the storage of data of visitors to this website. Processing is based on our legitimate interests in an efficient and secure provision of our online offering pursuant to Art. 6 (1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR concluded with Microsoft exists.
(4.1)
Description and scope of data processing Our website includes a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input form (including name, company, email address, message, and, where applicable, details of supply/demand in the hydrogen market) will be transmitted to and stored by us. Alternatively, contact may be made via the email address provided; in this case, the personal data transmitted with the email will be stored. Contact form submissions are transmitted internally via Microsoft Graph API (Microsoft Ireland Operations Limited) for email delivery, under the same data processing agreement referenced in Section 3.5.
(4.2)
Legal basis Where consent has been obtained, Art. 6 (1)(a) GDPR is the legal basis for processing. The legal basis for processing data transmitted in the course of sending an email or using a contact form is Art. 6 (1)(f) GDPR. Where the contact aims at the conclusion or initiation of a contract (e.g. facilitation of a business contact via the matchmaking function), Art. 6 (1)(b) GDPR is an additional legal basis.
(4.3)
Purpose of processing Processing of the personal data from the input form serves solely to handle the contact request and to facilitate suitable business connections between market participants.
(4.4)
Duration of storage Data is erased as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input and data sent by email, this is the case once the respective conversation with the user has ended. A conversation is deemed to have ended when the circumstances indicate that the matter has been conclusively clarified. Statutory retention obligations (in particular under commercial and tax law) remain unaffected.
(4.5)
Right to object and means of deletion The user may revoke their consent to the processing of personal data at any time. If a user contacts us by email, they may object at any time to the storage of their personal data with effect for the future, e.g. by email to info@uneida.com.
Where users create an account to use our matchmaking platform, we process the data provided (including company name, contact person, email address, and details of the supply/demand profile in the hydrogen market). The legal basis is Art. 6 (1)(b) GDPR (contract performance or pre-contractual measures). Data is retained until the account is terminated or deleted by the user, or, at the latest, upon expiry of applicable statutory retention periods. At the initial registration step, the following fields are collected: • Salutation • First name • Last name • Country • Phone number • Email address • Password First name, last name, phone number, email address, and password are mandatory; salutation and country are pre-filled with a default value that the user can change. A double opt-in procedure is used, with a verification email sent to confirm the account before the company profile details referred to above can be submitted. Once a company profile is created and approved, it is visible to other verified members of the platform.
We use cookies on our website. These are small text files stored on the user's computer system by the internet browser. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is visited again. We distinguish between: • Strictly necessary cookies, required to provide the basic functions of the website. Legal basis: Art. 6 (1)(f) GDPR. • Analytics and marketing cookies, which are only set with the user's prior consent via a cookie consent tool. Legal basis: Art. 6 (1)(a) GDPR in conjunction with Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). At present, our website only uses strictly necessary technical cookies and local browser storage for authentication, session management, and security validation via the Cloudflare Turnstile bot prevention mechanism. No analytics or marketing cookies are currently deployed, and no cookie consent banner is required at this time. Users can configure their browser settings so that they are informed about the setting of cookies and can decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or generally, as well as activate automatic deletion of cookies when closing the browser.
Provided the applicable legal requirements are met, you have the following rights: • Right to information (Art. 15 GDPR) • Right to rectification (Art. 16 GDPR) • Right to erasure (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object (Art. 21 GDPR) • Right to withdraw consent given (Art. 7 (3) GDPR) • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) The competent supervisory authority for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte fur Datenschutz und Informationsfreiheit Nordrhein-Westfalen).
Where personal data is processed for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. This also applies to profiling, to the extent it is related to such direct marketing.
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services in the privacy policy. The new privacy policy will apply to your next visit.
