5. Case management, ERP and accounting

5.1 Atlassian Jira

We use Atlassian services, particularly Jira, to handle enquiries, support requests and projects. Data may include contact details, case content, communication history, project information and attachments you provide.

Article 6(1)(b) GDPR applies where processing serves a contract or steps before entering one. Other cases may rely on Article 6(1)(f) GDPR, based on our legitimate interest in organised, traceable case handling.

Provider: Atlassian Pty Ltd, Level 6, 341 George Street, Sydney NSW 2000, Australia. Current provider information: Atlassian privacy policy.

5.2 MOCO ERP

We use MOCO as our ERP system to organise business relationships and projects. We process information needed for customer administration, project delivery and commercial organisation. This may include the names and business contact details of contact persons and information relating to orders and projects.

Article 6(1)(b) GDPR applies where processing is necessary to perform a contract or take pre-contractual steps. For information about contacts at our business customers and internal organisation, Article 6(1)(f) GDPR applies; our legitimate interest is the orderly and efficient handling of business relationships.

The provider is everii Switzerland GmbH, In der Weid 15, 8122 Binz, Switzerland. Further information: MOCO privacy policy.

5.3 Lexware accounting

We use Lexware for accounting. This involves personal data contained in invoices, supporting documents and business transactions, such as names, billing addresses, contact details and payment information, where needed for the transaction.

Processing serves the commercial administration of contracts under Article 6(1)(b) GDPR and compliance with legal accounting and documentation obligations under Article 6(1)(c) GDPR. Further product information: Lexware privacy information.

6. Social media

We maintain company profiles on Instagram, Facebook and LinkedIn. When you visit these profiles or contact us there, we process the content you provide and publicly available profile information to answer enquiries and communicate about our company.

Depending on your enquiry, Article 6(1)(b) or (f) GDPR applies. Our legitimate interest is informing people about our business and communicating with prospective and existing customers. Platform operators also process data under their own responsibility, particularly for platform operation and usage analytics. Their privacy notices explain those activities.

7. Communication

7.1 Email and telephone

When you contact us by email or telephone, we process your contact information and enquiry content to respond, perform a contract or take pre-contractual steps under Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR, based on our legitimate interest in appropriate communication.

7.2 WhatsApp

You can also contact us through WhatsApp. Data include telephone number, profile information and messages you send. WhatsApp additionally processes technical usage and connection information under its own privacy notice. Email and telephone are available as alternatives.

Our handling of your enquiry relies on Article 6(1)(b) or (f) GDPR, depending on its subject. Please share only information needed for the enquiry. Further information: WhatsApp privacy information.

7.3 3CX live chat and calling

Our website offers a chat and calling function through 3CX. Using it may involve message content, contact information you voluntarily provide, connection times and technical data such as your IP address. The purpose is to handle your enquiry directly. The function is connected to our 3CX cloud environment.

Contract-related enquiries rely on Article 6(1)(b) GDPR; other enquiries rely on Article 6(1)(f) GDPR. Where additional consent is required, Article 6(1)(a) GDPR applies. Further information: 3CX privacy information.

8. Audio and video conferences with 3CX

We use 3CX WebMeeting for audio and video conferences. Data may include participant names, IP addresses, connection and device information, and the audio, video, chat and screen content you share. The purpose is to conduct business meetings and collaborate with customers, prospective customers and business partners.

Contract-related meetings rely on Article 6(1)(b) GDPR. Other business discussions rely on Article 6(1)(f) GDPR; our legitimate interest is efficient communication and collaboration. Where separate consent is required, Article 6(1)(a) GDPR applies.

Further information: 3CX WebMeeting privacy information.

9. Recipients and international processing

Depending on the matter, necessary data may be available to responsible people within our company and to hosting, IT, communication and other service providers. Legally authorised bodies may also receive data. Relevant services are identified in the preceding sections.

International providers may process data outside the EU or European Economic Area. Such transfers are additionally subject to Articles 44 et seq. GDPR. Depending on the recipient and processing, an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses may be relevant. A European server region does not automatically rule out other international processing by a provider. You can request information about the transfer grounds relevant to a particular processing activity at datenschutz@cunnect.de.