Privacy Policy#
Preface#
For the Konrad Langenberg Software compliance with data protection laws is not only a legal obligation, but a necessary element of trust. In the following we want to transparently inform you about the methods, scope and purpose of the processing of your personal data which might be collected from you while visiting this website. We will also inform you about your rights.
Controller#
As operator of the websites https://vikunja.io, https://try.vikunja.io and https://community.vikunja.io the Konrad Langenberg Software, Willy-Brandt-Allee 31A, 23554 Lübeck, Germany (subsequently referred to as “we” and “us”) is the controller pursuant to Art. 4 No. 7 of the General Data Protection Regulation (GDPR). You can contact us at hello@vikunja.io with any questions about this privacy policy.
Data protection officer#
According to Art. 37 GDPR and § 38 Bundesdatenschutzgesetz (BDSG) we are not obligated to appoint a data protection officer. For any questions regarding the protection of your data and to claim the rights stated hereafter, you can contact us at any time via the contact information mentioned above.
Rights of the data subject#
Your rights as a data subject#
As a data subject you have the following rights concerning your personal data. You have
- the right of access to information on – among others – the purposes of the processing, the categories of personal data concerned, the envisaged period for which the personal data will be stored as well as possible recipients, pursuant to and in accordance with the requirements of Art. 15 GDPR and § 34 BDSG
- the right to rectification and to erasure of incorrect or incomplete data pursuant to and in accordance with the requirements of Art. 16 and 17 GDPR and § 35 BDSG.
- the right to restriction of processing pursuant to and in accordance with the requirements of Art. 18 GDPR and § 35 (1) 2 BDSG.
- the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) pursuant to and in accordance with the requirements of Art. 21 (1) GDPR.
- the right to withdraw your given consent at any time, which does, however, not affect the lawfulness of processing based on consent before its withdrawal according to Art. 7 (3) GDPR.
- the right to data portability in a structured, commonly used and machine-readable format pursuant to and in accordance with the requirements of Art. 20 GDPR
- You have, pursuant to and in accordance with the requirements of Art. 22 GDPR, the right not to be subject to a decision based solely on automated processing, including profiling, which entails legal effects concerning you or significantly affects you in a similar way.
- Furthermore pursuant to Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority about the processing of your personal data by us, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.
Procedure#
When you claim your rights toward us according to the GDPR and the BDSG, we will process the data you thereby submit to fulfill your claims.
Subsequently we will store the data submitted by you and the data submitted by us to you in return for the purpose of documentation until the expiry of the regulatory offenses limitation period (3 years).
The lawfulness of processing and storing the data is based on Art. 6 (1) point (f) GDPR (legitimate interest of data processing). The legitimate interest results from our obligation to fulfill your requests and the need to exonerate ourselves in possible fine proceedings by proving that we have lawfully fulfilled your requests.
You can object to the processing of your personal data based on our legitimate interest at any time under the premises of Art. 21 GDPR. Please use the contact details provided in the imprint. We would like to note that the processing of your personal data is mandatory for the verification of compliance with data protection rights of the data subject according to Art. 21 (1) GDPR, as other methods of verification do not exist or are not equally suitable.
Data protection measures / arrangements#
We secure our website and other systems — and thus your data — through technical and organizational measures against loss, destruction, access, change or dissemination through unauthorized persons. In particular your personal data will be transmitted encrypted through the internet. Therefore we operate with the coding system TLS (Transport Layer Security).
Having said this, the transmission of information via internet is never fully safe, which is why we cannot guarantee the safety of the data transmitted by our website to a 100%.
Data processing modalities#
Sources and categories of personal data#
We process your personal data insofar as it is necessary for the statement, content-related configuration or modification of a contractual relationship between you and us (inventory data). In particular the following can be inventory data: Name, form of address, contact details (postal address, telephone, email address), date of birth, etc.
Furthermore we process your usage data. Usage data is data that is collected when you interact with our web content and our services, in particular your IP address, start and end of your visit on our website and information on the contents you have viewed on our website.
We collect the data mentioned directly from you (e.g., through the visit of our website), or, provided that it is permitted by data protection laws, from third parties or respectively from publicly accessible sources (e.g., commercial or association register, the press, media, internet).
Data transfer to third party countries outside the EU#
All information we acquire from or on you will generally be processed on servers located within the European Union. A transmission of your data or a processing of your data in third party countries will occur without your explicit consent solely if this is legally intended or permitted and if an appropriate data protection level is guaranteed in the third party country or if there are contractual obligations in place via the EU’s so-called standard contractual clauses.
With regard to data transfers to the United States, the European Commission has issued an adequacy decision known as the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection for the transfer of personal data by companies participating in the EU-U.S. Data Privacy Framework.
The adequacy decision applies only to companies that have officially self-certified under the Data Privacy Framework. Outside of this framework, the U.S. is considered a so-called “unsafe third country.” When personal data is transferred to the U.S., there is a risk that U.S. security authorities may access this data under the “Cloud Act.” EU citizens have no effective legal remedies against these measures, either in the U.S. or in the EU.
To the extent that we use services that transfer personal data to the U.S., it is up to the respective service provider to ensure that the company is certified under the EU-U.S. Privacy Framework.
Data disclosure, processing on behalf of the controller#
We will never illicitly disclose your personal data to third parties. However, we may disclose your data to third parties, in particular if you have agreed to data disclosure, if the disclosure is necessary to fulfill our legal obligations or if we are obligated or authorized to disclose said data by law or administrative or judicial orders. In particular this may be the case for the purposes of criminal proceedings, averting of dangers or enforcement of intellectual property rights.
Under certain circumstances we may transmit your data to external service providers which process data on our behalf and in accordance with our instructions (data processor) to simplify and disburden our own data processing. Every data processor will be bound by contract according to Art. 28 GDPR. In particular this means that the data processor has to offer sufficient guarantees that appropriate technical and organizational measures are implemented so that data processing is compliant with the requirements of the GDPR and your rights as a data subject are ensured. Despite commissioning data processors we remain the responsible party for the processing of your personal data according to the GDPR.
Purpose / Objective of the data processing#
In general we will use the data solely for the purpose for which the data was gathered. We may subsequently process the data for another, different purpose, provided that this other purpose is not incompatible with the original purpose (Art. 5 (1) point (c) GDPR).
Storage period#
Unless specified otherwise, we will store data gathered from you only for as long as it is necessary for each respective purpose and unless there are legal retention obligations preventing deletion, for example from commercial law or tax law.
Individual processing activities / operations#
In the following we want to outline as transparently as possible, which of your data we will process under which circumstances, on what basis and for what purpose.
Server log files#
Each time our website is accessed, the following general information will be automatically sent to our servers by your browser (so called server log files): Your IP address, product and version information of the browser and operating system used (so called user agent), the webpage from which the access originated (so called referer), date and time of the request and possibly your internet service provider. Furthermore the status and the volume of data will be recorded.
This information is logged by the server, stored in a table, and retained there temporarily (so-called server log files). By analyzing these log files, we can identify and subsequently correct errors on the website, determine the website’s traffic volume at specific times and make adjustments or improvements based on that information, as well as ensure the security of the server by tracing the IP addresses from which attacks on our server were launched.
The server log files are deleted on a regular basis (usually after 3 months). Should any of the security-related events mentioned above occur, we reserve the right, within the scope of our legitimate interest, to retain this data for a longer period for the purposes stated above. Once the specified purpose has been fulfilled, the data will be deleted after a reasonable period of time.
The legal basis for the usage of these server log files is Art. 6 (1) point (f) GDPR (legitimate interest of data processing). The legitimate interest arises from the necessity to operate our website, especially to discover and remove website errors, to determine the utilization of the webpage, to make adjustments and improvements and to guarantee the security of the system. You can object to the processing of your personal data based on the legitimate interest at any time under the premises of Art. 21 GDPR. Please use the contact details provided in the imprint. We would like to point out that the processing of your server log files is mandatory in accordance with Art. 21 (1) GDPR, as otherwise the website cannot be operated at all.
Cookies#
To improve user-friendliness we use so called “cookies” and the “web Storage” of your browser on our website.
What Cookies are#
Simply put, a cookie is a small text file, that stores data about visited websites. Cookies can store a kind of “user profile”, including information like your preferred language or other page set-ups, that are required by our website to be able to offer you certain services. This file will be stored on your terminal device and also helps with recognizing you in the event of a new visit to our website.
Under certain circumstances we can gather information on your preferred activities on our webpage through these cookies, and thus align the webpage according to your individual interests and even increase the navigation speed on our website.
How you can avoid Cookies#
You can manually delete the cookies in your browser’s security settings at any time.
Optionally you can prevent the storage of cookies by default via the respective settings of your browser. Please do note that in this case you possibly will not be able to use all functions of our website entirely or that errors may occur in the presentation or usage of the website.
Third party Cookies#
It is possible that third party service providers, with the help of whom we develop and operate our website, independently store cookies on your terminal device, in particular through so called plugins (see section below “Third party services”). Should you solely want to accept our own cookies, but not the cookies of these third parties, you can prevent these third party cookies by use of the respective browser setting “Block third-party cookies”.
Which Cookies are implemented#
In detail our webpage places the following cookies:
| Name | Description | Domain | Validity | Third party access |
|---|---|---|---|---|
_forum_session | Keeps track of your current visit (such as your login state and security checks) and is deleted when you close your browser. | community.vikunja.io | Session | No |
_t | Stores a secure authentication token so you stay logged in to the forum, including between browser sessions if persistent sessions are enabled. | community.vikunja.io | 1 Month | No |
vikunja_refresh_token | Stores a secure authentication token to keep you logged in across browser sessions. | try.vikunja.io | 3 Days | No |
Legal basis#
The legal basis for the use of cookies that are absolutely necessary for the function of the website (e.g. shopping cart cookie, session cookie) is Art. 6 para. 1 p. 1 letter f) GDPR (legitimate interest in data processing) as well as §25 para. 2 No. 2 TTDSG (absolute necessity for the provision of a digital service expressly requested by the user). The legitimate interest results from our need to be able to offer you a functioning website. Cookies are necessary for this because they are an integral part of current Internet technology and without cookies many functions of current websites would not be available. We therefore require cookies to provide you with the website in response to your request.
You can object to the processing of your data based on our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the imprint.
However, we would like to point out that the processing of your data in certain cookies is mandatory in the sense of Art. 21 (1) GDPR, as otherwise the website cannot be operated at all and we do not have the technical possibility to prevent the setting of cookies on certain individual end devices. However, you may be able to do this yourself in your browser. For more information on this, please look at the instructions for your browser.
Web Storage#
What is Web Storage#
Web storage is a technology for web applications that store data in a web browser. Web storage can be seen as a further development of cookies but differs from them in some respects.
In contrast to cookies, which can be accessed by both server and client, the web storage is completely controlled by the client. This means that data is not transferred to the server every time the website is accessed. Access is only possible locally via scripts on the website. Specifically, this means that third parties cannot access the information stored on the website. Only you and we can access the locally stored data.
Legal basis#
The legal basis for the use of web storage, which is absolutely necessary for the function of the website, is Art. 6 para. 1 p. 1 letter f) GDPR (legitimate interest in data processing) and §25 para. 2 No. 2 TTDSG (absolute necessity for the provision of a digital service expressly requested by the user). The legitimate interest results from our need to be able to offer you a functioning website. The Web Storage is necessary for this because it is an integral part of current Internet technology and without it many functions of current websites would not be available. We therefore require the Web Storage in order to provide you with the website in response to your request.
You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the imprint.
However, we would like to point out that the processing of your data in web storage may be compulsory within the meaning of Art. 21 (1) GDPR, since otherwise the website cannot be operated at all and we do not have the technical option to prevent the usage on certain end devices. However, you may be able to do this yourself in your browser. For more information, please look at the instructions for your browser.
Newsletter#
We offer to keep you up to date and regularly inform you about special offers through our newsletter service. To subscribe to the newsletter you can enter your email address into our distribution list. Following this you will have to confirm your registration (Double-Opt-In-Procedure). We use the data transmitted by you to us solely in regard to the newsletter service and do not distribute it to third parties for other purposes.
Our newsletter might use so-called web beacons or tracking pixels to analyze your reading behavior. Tracking pixels are extremely small image files that are embedded in the newsletter email, enabling log file recording and analysis.
When you open the newsletter email, the tracking pixel is loaded from the newsletter service’s server, and at the same time, certain information about you is transmitted, such as whether the email was opened, the time it was accessed, and the associated IP address.
In addition, links in the email can provide insight into which products are more interesting to the readers, by recording which were clicked on more frequently than others.
Both the web beacon and the links in the email can be uniquely assigned to the email address used to send the newsletter, thereby allowing the newsletter provider to identify the specific recipient.
The legal basis for the usage of your email address is Art. 6 (1) point (a) GDPR (consent of the data subject). You can revoke your consent with effect for the future at any time. Please use the link included in every newsletter email or the contact details stated in the imprint.
Demo Version on try.vikunja.io#
We provide a demo version of our product at try.vikunja.io. The demo version is a separate test environment that allows you to explore and experience the functionality and features of our product.
You may either create a temporary account yourself within the demo environment or use the demo account provided for this purpose. The demo account can be accessed using the username and password displayed in the demo environment.
The demo version is intended solely for demonstration and testing purposes. Due to the nature of the demo environment, we expressly request that you do not enter personal data relating to yourself or other persons, confidential business information, passwords, access credentials or other sensitive information. The demo environment is not intended for the processing or storage of real personal data. We recommend using fictitious data when testing the functions of the demo.
Any data entered or generated within the demo environment, including data associated with a demo user account, is automatically deleted every 24 hours. The purpose of this limited retention period is to enable you to test the functionality of the product while ensuring that data entered into the demo environment is not retained for longer than necessary for demonstration purposes. The automatic deletion after 24 hours applies to the data stored within the demo application. This does not affect any separate processing that may be necessary for the technical operation, security or protection of our IT systems, such as server logs or other technical data, which may be subject to separate retention periods and are described in the relevant sections of this Privacy Policy.
The processing of data entered into the demo environment is carried out for the purpose of providing and demonstrating the functionality of the product and enabling you to test its features. The legal basis for the processing of Data is Art. 6(1)(b) GDPR, insofar as the processing is necessary to provide the requested demo functionality.
Registration on community.vikunja.io#
You have the option to register directly on our website to gain access to the Vikunja Community and its community forum. To register, you must provide your email address, a username and a password. Providing your name is optional.
After submitting your registration, you will receive an activation email containing a confirmation link. Your registration will only be completed once you have confirmed your email address by clicking this link (double opt-in procedure). This serves to verify your email address and prevent unauthorized registrations using third-party email addresses.
We process the personal data you provide for the purpose of creating and managing your user account, verifying your email address and granting you access to the Vikunja Community and its community forum.
You may voluntarily upload a profile picture to your user account. If you do so, your selected profile picture will be displayed in your community profile and alongside your posts in the forum, together with your chosen username.
Registration via Google#
You also have the option of registering and logging in to our website using your existing Google account (“Sign in with Google”) from the company Google Ireland Limited (“Google EU”), Gordon House, Barrow Street, Dublin 4, Ireland. This company represents the company Google LLC (“Google US”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA in the EU. This allows you to access the Vikunja Community and its community forum without having to create a separate password on our website.
By using this option, data will be transmitted to Google EU and possibly from Google EU to Google US. When you click the corresponding button, you will initially be redirected to a Google website. There, you can sign in using your Google account and consent to the transmission of the data required for authentication to us. You will then be redirected back to our website.
As part of this process, a connection is established between your Google account and your user account on our website. In this context, we receive the following personal data from Google in particular:
- Your name;
- Your email address.
We use this data to verify your identity, create a user account on our website or associate your Google account with an existing user account, and enable you to log in to our website using your Google account in the future.
The data mentioned above is transmitted by Google only after you have granted the relevant permission. Your Google password is not transmitted to us.
During the authentication process, technically necessary information is also exchanged between your device, our website and Google’s servers. This may include, in particular, your IP address, technical connection data and information relating to the authentication process.
Google may further process this data under Google’s sole responsibility. We generally have no influence over data processing carried out under Google’s sole responsibility. This includes, in particular, the processing of the transmitted data by the Google Group to create anonymized user profiles for statistical purposes. Furthermore, if you have a Google account and are logged in to it, Google may associate the transmitted data with your account—even across devices. Google EU is responsible for this data processing.
The company Google LLC complies with the requirements of the “EU-U.S. Data Privacy Framework”. The Privacy Framework Agreement regulates the protection of personal data transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. You can access the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.
You can find more information about the handling of user data in the privacy policy of Google: https://policies.google.com/privacy.
Registration via GitHub#
You also have the option of registering and logging in to our website using your existing GitHub account from the company GitHub, Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA. This allows you to access the Vikunja Community and its community forum without having to create a separate password on our website.
When you click the corresponding button, you will initially be redirected to a GitHub website. There, you can sign in using your GitHub account and consent to the transmission of the data required for authentication to us. You will then be redirected back to the forum.
As part of this process, a connection is established between your GitHub account and your user account on our website. In this context, the information required for authentication and registration is exchanged between GitHub and our website. This may include, in particular, the following personal data:
- Your GitHub username;
- Your name;
- Your email address;
- A unique identifier associated with your GitHub account.
We use this information to verify your identity, create a user account on our website or associate your GitHub account with an existing user account, and enable you to log in to our website using your GitHub account in the future.
The company GitHub, Inc. complies with the requirements of the “EU-U.S. Data Privacy Framework”. The Privacy Framework Agreement regulates the protection of personal data transferred from a member state of the European Union to the USA. It ensures that the data transferred there is also subject to a level of data protection comparable to that of the European Union. You can access the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.
Legal basis#
The legal basis for the usage of data provided by you during the registration process is Art. 6(1)(b) GDPR, insofar as the processing is necessary to provide the requested community functionality.
Furthermore the legal basis for processing mandatory information is Art. 6 (1) point (f) GDPR (legitimate interest of data processing). Our legitimate interest lies in providing a functioning and secure community platform, managing user accounts, ensuring reliable user authentication and enabling communication between registered community members.
You can object to the processing of your personal data based on the legitimate interest at any time under the premises of Art. 21 GDPR. Please use the contact details provided in the imprint.
The legal basis for optional data provided by you during the registration process is Art. 6 (1) point (a) GDPR (consent of the data subject). You can revoke your consent with effect for the future at any time, by adjusting the settings in your profile.
Account deletion#
You can delete your user account through your account preferences if you have made no more than one post. If you have posted more, you can ask us to delete or anonymize your account by contacting us via the email address above. When your account is deleted, your personal data will be deleted unless statutory retention obligations or other legal grounds require continued storage. Content you have posted may be deleted or kept in anonymized form, meaning it is no longer linked to you.
Hosting services#
Our website is hosted on servers of external providers to ensure the efficient and secure provision of the website.
Each time you visit the website, general information is automatically transmitted from your browser to the server (so-called server log files). For more information, see “Server log files” above.
The legal basis for the use of hosting service and the associated processing of your data is Art. 6 para. 1 p. 1 letter f) GDPR (Legitimate Interest in Data Processing). The legitimate interest arises from our need for a technically flawless presentation of our website without requiring in-depth knowledge of website programming and maintenance of IT systems. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. To do so, please use the contact details provided in the imprint. However, we would like to point out that the processing of your data in this context may be mandatory within the meaning of Art. 21 para. 1 GDPR, as otherwise the website cannot be operated at all without disproportionate effort.
Third party services#
For simplification of our data processing and to extend the functionality of our website we use third party services and resources, for example plugins, external content, software or other external service providers (services). In doing so the possibility exists that personal data will be transmitted to the service provider. If required, to protect your data, we have contractually obligated the service provider according to Art. 28 GDPR to solely process the data according to our instructions. We would like to explicitly point out that we are regularly only responsible for the data acquisition and transmission by the service according to the GDPR, but not for a possible subsequential processing by the respective service provider.
In detail we use the following services:
Cloud-applications#
Our website uses cloud-based applications. Cloud-based applications are software solutions that do not need to be installed locally on your device, but are provided and operated by a third-party provider via the Internet on its servers. Maintenance, updates, and data storage are handled centrally by the provider. When you use these applications, personal data is collected by the third-party provider, which may process this data on our behalf in accordance with our and its privacy policies.
Each time you access the application, general information is automatically transmitted from your browser to the server (so-called server log files). For more information on this, see “Server log files” above.
The legal basis for the use of cloud applications and the transmission of your data to them is Art. 6 (1) point (f) GDPR (legitimate interest in data processing), unless otherwise specified for the respective service. The legitimate interest arises from our need for a technically flawless and fast display of our website and to reduce the load on our IT infrastructure. You may object to the processing of your data based on our legitimate interest at any time under the conditions set forth in Article 21 of the GDPR. Please use the contact information provided in the legal notice for this purpose.
We use:
Cloudflare Turnstile#
We use the “Turnstile” abuse protection service provided by Cloudflare Inc. (“Cloudflare”), 101 Townsend St., San Francisco, California 94107, USA.
Cloudflare Turnstile is designed to prevent cyberattacks and harassment by so-called “bots” (artificial website users) by verifying that a real person is visiting the website. This service enables us to operate our website reliably and protect it from abuse.
To do this, Cloudflare analyzes the behavior of website visitors. This is done by evaluating various pieces of information—including headers, user-agent strings, and browser characteristics of website visitors.
The legal basis for the use of Cloudflare Turnstile is Article 6(1)(f) of the GDPR (legitimate interest in data processing). This legitimate interest stems from our need for a technically sound and secure website. You may object to the processing of your data based on our legitimate interest at any time under the conditions set forth in Article 21 of the GDPR. To do so, please use the contact information provided in the legal notice.
Cloudflare Inc. complies with the requirements of the “EU-U.S. Data Privacy Framework.” The Privacy Framework agreement governs the protection of personal data transferred from a member state of the European Union to the United States. It ensures that the transferred data is subject to a level of data protection in the United States comparable to that of the European Union. You can view the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.
For more information on how user data is handled, please see Cloudflare’s Privacy Policy: https://www.cloudflare.com/security-policy/.
Analysis-tools#
We use certain services that record data from website users and provide it to us for analytical purposes. We use this data to make user-oriented improvements to our website, our services and offers. In particular the following information regarding user-behavior can be recorded: Your IP address, product- and version information about the used browser and operating system (so called user agent), the webpage from which your access took place (so called referer), date and time of your request and possibly your internet-service-provider, approximate origin (country and city), language, clicks on content and display time.
We use:
Plausible.io#
On our website, we use the Plausible service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.
This service allows us to collect statistics on the use of our website. It does not track individual users; only aggregated data is used for analysis. For the purpose of calculating visitor statistics, Plausible temporarily processes your IP address and browser information (User-Agent) to generate a daily changing identifier using a cryptographic hash function and a rotating salt. The raw IP address and full User-Agent are not stored. The salt is deleted every 24 hours, preventing visitors from being identified or tracked across different days, websites or devices. Furthermore, no tracking or analysis is performed across multiple devices, websites, or apps. The service does not store any data (cookies, web storage) on the end devices of website visitors.
Plausible processes the following data: referrer, browser, operating system, device information, country, page URL.
For more information on data protection at Plausible, please visit: https://plausible.io/data-policy
The legal basis for the use of Plausible is Article 6(1)(f) of the GDPR (legitimate interest in data processing). This legitimate interest stems from our need to improve our website and to generate statistical analyses of website usage. You may object to the processing of your data based on our legitimate interest at any time under the conditions set forth in Article 21 of the GDPR. To do so, please use the contact information provided in the legal notice.
Other services#
Sentry.io#
We use the error analysis service “Sentry” provided by Functional Software Inc., dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA, on our website try.vikunja.io.
Sentry is used to monitor the technical stability of our website and to identify programming errors on our website. As a result, data is transmitted to the provider and generally stored there, including, for example, your IP address, product and version information about the browser and operating system you are using (known as the “user agent”), the website from which you accessed our site (known as the “referrer”), the date and time of the request, and, in some cases, your Internet service provider, as well as data regarding the time of the error.
Sentry.io complies with the requirements of the “EU-U.S. Data Privacy Framework.” The Privacy Framework Agreement governs the protection of personal data transferred from a member state of the European Union to the United States. It ensures that the transferred data is subject to a level of data protection in the United States that is comparable to that of the European Union. You can view the list of certified companies here: https://www.dataprivacyframework.gov/s/participant-search.
For more information on how Sentry uses data, please see the provider’s privacy policy: https://sentry.io/privacy/
The legal basis for using this service is Article 6(1)(f) of the GDPR (legitimate interest in data processing). We use this service to pursue our interest in continuously maintaining our website and ensuring its availability.
You may object to the processing of your data based on our legitimate interest at any time under the conditions set forth in Article 21 of the GDPR. To do so, please use the contact information provided in the legal notice.
Effective: 2026-09-30