This Privacy Policy explains to you the nature, scope and purpose of the collection and use of personal data by the controller, Tucan Systeme GmbH Co. KG(“we/us/our”) as the provider of the software Tucan.ai (“Platform”), as well as our website at www.tucan.ai and associated programs (“Tucan” or “Website”) and our LinkedIn page on the platform www.linkedin.com (“LinkedIn Page”). If you have any questions about data protection, you can contact us by email at team@tucan.ai.

 

1. How does Tucan use the data of website visitors or users of the Tucan web platform? 

1. Which third-party services and offers does Tucan use? Is data passed on to third parties?

1. What third-party services and offers and cookies does Tucan use on the website?

1. Is the data transmitted or transferred outside the European Union (EU)?

1. How is data used on our LinkedIn page (LinkedIn page)?

1. Your rights, duration and storage of data

1. Data security, scope of application

 

In the case of a larger order with us (“Enterprise Order”), deviations from this privacy policy can be agreed upon individually. Please contact our sales department at sales@tucan.ai. Deviations from these data protection provisions must be made exclusively in writing within the framework of Enterprise contracts. 

 

Handling of personal data

 

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes, for example, name, email address or telephone number, but also data about hobbies, memberships or which websites have been viewed by someone.

Personal data is only collected, used and passed on by us if this is permitted by law and/or if you consent to the collection of data.

You provide us with your data insofar as this is necessary for the purposes explained in this privacy policy. In order to provide the Tucan products, we need to process information about you. The types of information we collect depend on how you use our products.

1. How does Tucan use the data of website visitors or users of the Tucan web platform?

Visit the website

 

We (or the web space provider) collect data about every visit to our website www.tucan.ai, lp.tucan.ai and all subpages of www.tucan.ai and lp.tucan.ai (so-called server log files) (“access data”). 

 

The access data includes

 

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider as well as the country code and language of the browser. 

 

We use this access data for statistical evaluations for the purpose of the operation, security and optimization of Tucan and to display our content to you in the correct language. However, we reserve the right to check this access data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence. In doing so, we or commissioned third parties pursue the legitimate interests of quality assurance and fraud prevention. 

 

On the web platform of Tucan.ai 

When using the transcription functionality of the platform

 

We collect data about every use of Tucan, including 

 

Username, user ID, time spent on the platform and in the editor, which features you use, audio files you upload and transcribe via Tucan, transcripts you download, any corrections you make either manually or via our AI helper, as well as any changes to file names, your profile, your profile picture (should you add or change one) and billing or company information.

 

We use this data (i) for statistical evaluations for the purpose of user-friendliness, security and improvement of our service, (ii) to optimize the Tucan algorithm, (iii) to respond to your support requests, and (iv) to fulfill our contractual obligations to you. However, we reserve the right to check this access data retrospectively if there is reasonable suspicion of unlawful use based on concrete evidence. We or authorized third parties pursue the legitimate interests of quality assurance and/or fraud prevention.

 

When using the meeting summary functionality of the platform

 

We collect data about every use of Tucan, including 

 

User name, user ID, the name of the meeting, the time spent on the platform, which functions you use, your audio files, as well as the content of the audio files that you upload and transcribe manually or via an integration of Microsoft Teams, Google Hangouts or Zoom after your meeting automatically or via our recording program (because “Meeting Bot”) automatically via Tucan, summaries, that you download, any corrections to (i) meeting transcripts, (ii) content annotations (summaries, questions, tasks and quotes) that you either create manually or that are created via our content analysis algorithm, as well as any changes to file names, your profile, your profile picture (should you add or change one) and billing or company information (should you provide any).

 

We use this data (i) for statistical evaluations for the purpose of user-friendliness, security and improvement of our service, (ii) to optimize the algorithm of Tucan, (iii) to answer your support requests, and (iv) to fulfill our contractual obligations towards you. In particular, the transcription and content analysis of your audio files will only be used to provide you with a summary of your meeting transcript in order to fulfill our contractual obligation to you. We reserve the right to check your access data and audio files retrospectively if there is reasonable suspicion of unlawful use based on concrete evidence. We or authorized third parties pursue the legitimate interests of quality assurance and/or fraud prevention.

 

When using the text summary functionality of the platform

We collect data about every use of Tucan, including 

 

User name, user ID, the name of the uploaded file, the time spent on the platform, which functions you use, your text file, as well as the contents of the text file that you upload manually or via API manually or automatically via Tucan and have processed, summaries that you download, any analysis of your uploaded texts that you either create manually or that are created via our content analysis algorithm, as well as any changes to file names, your profile, your profile picture (should you add or change one) and billing or company information (should you provide any).

 

We use this data (i) for statistical evaluations for the purpose of user-friendliness, security and improvement of our service, (ii) to optimize Tucan’s algorithm for you, (iii) to respond to your support requests, and (iv) to fulfill our contractual obligations to you. In particular, the text and content analysis of your files will only be used to provide you with a summary or analysis of your texts and thus to fulfill our contractual obligation to you. We reserve the right to check your access data and text files retrospectively if there is reasonable suspicion of unlawful use based on specific indications. We or authorized third parties pursue the legitimate interests of quality assurance and/or fraud prevention.

 

Data when creating a company account on Tucan

If you would like to create a company account on the platform via www.tucan.ai, you will be asked to create a company user account.

 

When a company user account is created, the following data is collected and stored: 

 

Your name, your e-mail address, the name of your team, if applicable also your payment information when booking (if selected by you, either your credit card details (your credit card number, the expiration date of your credit card, the security number of your credit card. This data is collected exclusively via our payment service provider Stripe – see below. We do not have access to your credit card details at any time) or your “direct debit details” (the IBAN of your account)), your company’s VAT number (if applicable), other company information (country of registered office, company telephone number, address of registered office (street and house number, zip code and town))

We collect all data in accordance with your consent, which you can revoke at any time by sending an email to team@tucan.ai. In addition, we collect all data for the following reasons:

 

The data you enter when creating a user account will be used for the purpose of contract fulfillment, to verify your identity as a new user and for billing purposes with your company (Art. 6 GDPR No. 1 lit b). However, we reserve the right to check this access data retrospectively if there is reasonable suspicion of unlawful use based on specific indications. We or authorized third parties pursue the legitimate interests of quality assurance and/or fraud prevention.

 

 

Data when adding new users to a company account

 

If you are a company administrator and want to add new users to your company account on the platform, you will be asked to register these accounts.

 

When new users are added, the following data is recorded and saved: 

 

The e-mail address and the name of the user. 

 

We collect all data in accordance with the added user’s subsequent consent, which we obtain through a double opt-in verification email. You or the added user can revoke this consent at any time by sending an email to . team@tucan.ai

 

In addition, we collect all data for the following reasons:

 

The data you enter when creating a user account is used for the purpose of creating a user account and verifying the person as a new user. However, we reserve the right to check this access data retrospectively if there is reasonable suspicion of unlawful use based on concrete evidence. We or authorized third parties pursue the legitimate interests of quality assurance and/or fraud prevention.

 

 

Contact us

 

When you contact us (e.g. by email), the information you provide will be processed for the purpose of handling your inquiry and in the event that follow-up questions arise.

 

Legal basis for the processing of data

 

The processing of the data when using our offer is generally based on the legal basis of Art. 6 (1) b. GDPR, i.e. the data is processed because it is necessary for the fulfillment of the contract between you and us or for the implementation of pre-contractual measures that are carried out at your request.

 

Furthermore, data processing by us may be based on your consent to the processing of the personal data concerned for specific purposes, in which case the legal basis is Art. 6 (1) a. DSGVO is based. 

 

Furthermore, in special cases, your data may be processed by us on the basis of Art. 6 (1) c. GDPR, if processing is necessary for compliance with a legal obligation to which we or other controllers are subject or on the basis of Art. 6 (1) e. GDPR, if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us or the controller.

 

In addition, the legal basis of Art. 6 (1) f. GDPR – for example in the case of the collection of data when visiting the website or the transmission to our shareholders and service providers – is relevant if the processing is necessary to safeguard our legitimate interests or those of a third party and does not outweigh your interests or fundamental rights and freedoms that require the protection of personal data. A legitimate interest exists, for example, if there is a relevant and appropriate relationship between you (or the data subject) and us (or the controller), for example if the data subject is our user or is a user of a service or is in the service of a service.

 

We also refer to the respective explanations in the description of the processing operations in this privacy policy.

 

Right to object: Every data subject shall have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning him or her or similarly significantly affects him or her. However, this does not apply if the decision (i) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, (ii) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (iii) is based on the data subject’s explicit consent. In these exceptional cases, the controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

 

1. Which third-party services and offers does Tucan use? Is data passed on to third parties?

 

We work together with external service providers who support us in carrying out the steps necessary for processing our offer online or offline. More information on this can be found under III. and IV. You can also contact team@tucan.ai for more information.

 

We only transfer personal data to third parties if

 

• this is necessary for the provision of the product;
• we are legally obliged to do so;
• to protect the vital interests of a person;
• this is necessary to enforce our rights;
• to support a restructuring, financing, purchase or sale of our company or parts of the company;
• to assess and control risks and prevent fraud against us and our users and fraud in connection with our website or offering

 

and insofar as this is legally permissible or you expressly give your consent or instruct us to do so.

 

III What third-party services and cookies does Tucan use on the website?

Integration of third-party services and content

When using Tucan, third-party content, such as videos from Loom or YouTube or graphics from other websites, may be integrated. This always assumes that the providers of this content (“third-party providers”) are aware of your IP address. Without the IP address, they would not be able to send the content to the respective user’s browser. The IP address is therefore required to display this content . We endeavor to only use content whose respective third-party providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. Insofar as we are aware of this, you will be informed of this. We would also like to point out that automated decision-making (“profiling”) may take place when these third-party providers are integrated.

 

Cookies

Cookies are small files that make it possible to store specific, device-related information on the user’s access device (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus you (e.g. storage of login data). On the other hand, they are used to collect statistical data on website usage and to analyze it for the purpose of improving Tucan.

 

When you visit www.tucan.ai and all other websites operated by Tucan, so-called session cookies are used, which are automatically deleted from the user’s hard disk as soon as you close the browser window. The session cookies are required to assign successive page views to the respective users who access Tucan at the same time.

 

We also use cookies on Tucan that enable us to recognize your browser on your next visit and offer you an improved use of the website. These cookies are deleted after 6 months, i.e. the cookies remain stored on your end device until the validity period of the cookies has expired or you delete them before this time expires.

 

Right to object: You can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are restricted without cookies. You can manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.

Facebook Pixel

For the analysis and optimization of Tucan and due to our legitimate interests, we can use the ‘Facebook Pixel’ service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland or Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA on the website. User data is used when visiting the website in order to display targeted advertising for our services on facebook. com to display targeted advertising for our services. This establishes a direct connection to the Facebook servers and transmits information that you have visited Tucan and Facebook assigns this information to your personal Facebook user account. The integration of Facebook therefore involves automated decision-making (“profiling”), see also I. above).

Further information on this and Facebook’s privacy policy can be found at https://de-de.facebook.com/about/privacy/. When integrating Facebook, we pursue the legitimate interests of marketing and optimizing our offer. To protect your data in the USA, we have concluded a data processing agreement with Facebook Inc. on the basis of the standard contractual clauses of the European Commission to enable the transfer of your personal data to Facebook Inc. 

 

Right to object: If you do not wish to be associated with such data, you can make various settings for possible advertising or profiling within your Facebook account.

LinkedIn Pixel

For the analysis and optimization of Tucan and based on our legitimate interests, we may use the ‘LinkedIn Pixel’ service of LinkedIn Ireland Unlimited Company Wilton Place Dublin 2, Ireland (“LinkedIn”) on the website. User data is used when visiting the website to measure the effectiveness of our advertisements on LinkedIn and to display targeted advertising for our services on www.linkedin.com. This establishes a direct connection to the LinkedIn servers and transmits information that you have visited Tucan and LinkedIn assigns this information to your personal LinkedIn user account. When integrating LinkedIn, we pursue the legitimate interests of marketing and optimizing our offer. As a rule, your data is processed and stored exclusively in the European Union. In exceptional cases, data may be processed and stored on servers in the USA (e.g. for fraud prevention). In order to protect your data in the USA as well, we have concluded a data processing agreement with LinkedIn based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to LinkedIn. 

 

Right to object: You can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are restricted without cookies. You can manage many online advertising cookies from companies via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

Google Analytics

Tucan uses Google Analytics, a web analytics service provided by Google Inc, Mountain View, CA, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on the end device used and that enable your use of Tucan to be analyzed. The information generated by the cookie about your use of the website, such as browser type/version; operating system used; referrer URL (the previously visited page); host name of the accessing computer (IP address); time of the server request when using the website

are usually transmitted to a Google server in the USA and stored there, but due to the activation of IP anonymization on Tucan, Google’s IP address is shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is therefore not transmitted to a Google server in the USA and shortened there. IP anonymization is active on Tucan. On behalf of Tucan, Google will use this information for the purpose of evaluating the use of Tucan by users, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

Right to object: You can prevent the storage of cookies by setting your browser software accordingly; however, you are advised that in this case you may not be able to use all functions of Tucan to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of Tucan (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. We would like to point out that your use of the website may then be restricted.

Tucan also uses Google Analytics to analyze data from Adwords for statistical purposes. If you do not want this, you can deactivate it at http://www.google.com/settings/ads/onweb/?hl=de.

Further information can also be found in Google’s privacy policy: http://www.google.de/policies/privacy/

 

Google Adwords and conversion tracking

We use Google’s Adwords tool on our website for advertising purposes, which serves as an analysis service for referrals and/or visits to websites (“conversion tracking”). If you have reached our website via a Google ad, a cookie will be stored on your computer. Cookies are small text files that your internet browser places and stores on your computer. These cookies for conversion tracking are valid for 30 days. If you visit certain subpages of our website while the cookie has not yet expired, we and Google can recognize that you as a user have clicked on one of our ads on Google and have been redirected to our website.

 

The information collected by means of cookies for conversion tracking is used by Google to compile statistics about visits to our website. We can use these statistics to find out the total number of visitors who have clicked on our ad and also recognize which subpages of our website were subsequently accessed. However, we do not receive any information from Google via this function that can be used to identify you personally.

 

Right to object: You can prevent the installation of cookies by adjusting your browser settings accordingly, for example by using a browser setting that generally deactivates the automatic setting of cookies or specifically blocks only cookies from the domain “googleadservices.com”. We would like to point out that the use of the website may then be restricted.

 

Google processes data in the USA, but has concluded a data processing agreement with us, which obliges Google not to pass on your data to third parties and to comply with EU data protection security standards. You can inform us of your objection to the processing of your data via Google at any time atteam@tucan.ai . We will endeavor to delete your data from Google, but cannot guarantee this. 

 

We would like to point out that automated decision-making (“profiling”) may take place when Google is integrated, see also I. above. You can also find more information in Google’s privacy policy: services.google.com/sitestats/en.html

Iubenda

We use the Iubenda cookie tool on our website, an offer from iubenda s.r.l

Via San Raffaele, 1 – 20121 Milan (Italy) to inform website users about their rights and consent to Tucan’s cookie policy (“cookie pop-up”). When you visit our websites for the first time, you will be shown a cookie banner that gives you the opportunity to choose your cookie settings. Cookies are small text files that your Internet browser places and stores on your computer. Your IP address is stored and processed in order to display this setting to you.

 

Right to object: You can deactivate and block the installation of cookies by selecting the appropriate settings displayed by Iubenda. We would like to point out that the use of the website may then be restricted.

 

Iubenda processes data exclusively in the European Union and has concluded a data processing agreement with us, which obliges Iubenda not to pass on your data to third parties and to comply with EU data protection security standards. You can inform us of your objection to the processing of your data via Google at any time at team@tucan.ai. We will endeavor to delete your data at Iubenda, but cannot guarantee this. 

 

1. What third-party services and cookies does Tucan use on the web platform?

Error analysis

Sentry

We use “Sentry”, an offer from Funtional Software Inc., to ensure that we can make our offer and our website available to you at all times without errors and with the quality and security standards to which we are accustomed,

45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Via Sentry, we process and store your IP address as well as your network information (such as customer logs, administrative user logs and certain account settings) and, if applicable, other personal data such as your user name, your user ID and your specified e-mail address. Your data may be processed and stored on servers outside the European Union. Sentry complies with all data security and data protection requirements, which has been guaranteed to us on the basis of a data processing agreement based on standard contractual clauses of the European Commission.

 

Right of objection:

For security reasons, it is unfortunately not possible to use the Tucan platform without Sentry’s error analysis software. However, you can send your objection to Sentry at any time by e-mail toteam@tucan.ai . We will endeavor, but cannot guarantee, to delete your data from Sentry. However, we would like to point out that in this case we will have to delete your user account with all data (unless we are subject to a contractual or statutory retention obligation) and we will have to block your access to Tucan.

Improving user-friendliness

We use PostHog, a service provided by PostHog Inc, 2261 Market St., #4008, San Francisco, CA 94114, United States of America, to better understand the needs of our users and to optimize the offer on the platform. With the help of PostHog’s technology, we get a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and this helps us to tailor our offering to our users’ feedback. PostHog uses cookies and other technologies to collect information about the behavior of our users and about your end devices (in particular IP address of the device (is only recorded and stored in anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). PostHog stores this information in a pseudonymized user profile. The information is neither used by PostHog nor by us to identify individual users or merged with other data about individual users. 

We work with PostHog exclusively via your European cloud solution. The data is therefore processed exclusively in Germany. Further information can be found in PostHog’s privacy policy here https://posthog.com/privacy .

Right to object: You can object to the storage of a user profile and information about your visit to our platform by PostHog and the setting of PostHog tracking cookies on other websites by objecting to tracking in the cookie settings or by sending us an e-mail to . team@tucan.ai

E-mail communication of the platform 

Sendgrid

Our emails are sent via the technical service provider TWILIO INC, 25-28 North Wall Quay, Dublin 1, Ireland (“Sendgrid”), to whom we pass on the data you provided during registration. 

 

Sendgrid uses the email address and the name provided to send the emails on our behalf to you or the person selected by you and to statistically evaluate the emails. We therefore use Sendgrid to fulfill our contractual obligations to you.

 

For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which represent individual image files stored on our website. This enables us to determine whether an email message has been opened and which links have been clicked on. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; a direct personal relationship is excluded. This data is used exclusively for statistical analysis purposes. The results of these analyses can be used to improve the user-friendliness of our website. 

 

 

 Right of objection:

However, you can send your objection to Sendgrid at any time by email toteam@tucan.ai . However, we would like to point out that in this case we will have to delete your user account with all data and we will have to block your access to Tucan, as we will not be able to fulfill our offer to you if our platform is not allowed to communicate with you.

 

1. Where is your data hosted (hosting cloud variant – please contact us)

AWS Hosting

We use the servers of AWS Amazon Web Services, Inc, 410 Terry Avenue North,Seattle WA,98109, United States of America, to store, host and retain your personal data. The AWS servers are located in Frankfurt am Main, Germany. Your data will only be processed in Europe via AWS for the purpose of storing, hosting or retaining your personal data and will not be transferred to any AWS web server in a non-European country. 

 

Right of objection:

You can send your objection to AWS at any time by e-mail to team@tucan.ai and instruct us to process your data exclusively on Hetzner (see below). However, we would like to point out that you may incur additional costs in this case. 

 

Hetzner Hosting (Standard)

We use the servers of Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany (“Hetzner”) to store, host and retain your personal data. Hetzner’s servers are located in Falkenstein and Nuremberg, Germany. Your data will be processed exclusively in Germany for the purpose of storing, hosting or retaining your personal data.

 

Right of objection:

You can send your objection to Hetzner at any time by e-mail to team@tucan.ai and instruct us to process your data exclusively on AWS (see below). However, we would like to point out that you may incur additional costs in this case. 

 

Unfortunately, it is not possible to use the Tucan platform without the Hetzner or AWS servers. However, you can send your objection to Hetzner and AWS at any time by e-mail toteam@tucan.ai . However, we would like to point out that in this case we will have to delete your user account with all data and we will have to block your access to Tucan (unless we contractually agree on an on-premise installation and provided that we are not subject to any contractual or legal obligation to retain data).

VI Which services are used for contact with the Tucan.ai team?

Mailshake

In order to inform you about our services, we will in certain cases send you e-mails to your publicly accessible business e-mail address (“e-mail dispatch”).

 

In certain cases, these e-mails are sent via the technical service provider Mailshake, LLC (1920 E. Riverside Dr, Suite A120-116, Austin, TX 78741), to whom we pass on your publicly accessible business e-mail address.

 

Mailshake uses this information to send and statistically evaluate the email on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which display individual image files stored in our emails. This enables us to determine whether an email has been opened and which links have been clicked on. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; a direct personal relationship is excluded. This data is used exclusively for statistical analysis purposes. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

 

If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

 

In addition, Mailshake may also use this data in accordance with Art. 6 para. 1 f) GDPR on the basis of its legitimate interest in the needs-based design and optimization of the service and for market research purposes, for example to determine which countries the recipients come from. However, Mailshake does not use the data of our newsletter recipients to contact the recipients directly or to pass it on to third parties.

 

Right of objection:

If you wish to object to the data analysis for statistical evaluation purposes, you can unsubscribe from the emails at any time. To do so, please click on “Unsubscribe” in one of the emails below or send us an email to team@tucan.ai. 

 

Slack

So that we can offer you fast processing times and the best possible service, we use the chat service of “Slack”, an offer from Slack Technologies Limited, One Park Place, Upper Hatch Street, Dublin, Ireland. Slack processes and stores your chosen username and the email address you provide in order to inform our service team about relevant activities from you and your contact requests so that we can process them as quickly as possible. Your data is processed and stored exclusively on European servers. 

 

Right of objection:

You can inform us of your objection to the processing of your data by Slack at any time by sending us an email to team@tucan.ai. We will make every effort to ensure that your data is deleted by Slack, but we cannot guarantee this.  

 

VII. Which services are used for payments?

Stripe

In order to process your payment data securely, we use the software “Stripe”, an offer from Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. We use Stripe to transmit the information provided to you during the ordering process, along with information about your bookings (surname, first name, e-mail, credit card or direct debit details, invoice amount, transaction number). Stripe processes and stores the payment data for the purpose of processing the payment or collecting the claim from your account. Your payment data is processed and stored exclusively on servers within the European Union. 

 

Right of objection:

You can inform us of your objection to the processing of your data by Stripe at any time by sending us an email toteam@tucan.ai . We will make every effort to ensure that your data is deleted by Stripe, but we cannot guarantee this. However, we would like to point out that in this case we will have to delete your user account with all data (unless we are subject to a contractual or statutory retention obligation) and we will have to block your access to Tucan. 

 

VIII. Is the data transmitted or transferred outside the European Union (EU)?

 

When using the offer, your data may be transferred to third countries, i.e. countries outside the EU, due to the third-party providers involved.

Details can be found above under III. to VII., whereby the integrated third-party providers each comply with the data protection standards applicable in the EU, as explained in each case.

 

1. How is data on our site used by LinkedIn (LinkedIn page)?

 

We operate a social media page on LinkedIn Ireland Unlimited Company Wilton Place Dublin 2, Ireland (“LinkedIn”)

 

Joint responsible persons

When you visit one of our LinkedIn pages, data is processed both by us and by LinkedIn as the controller (see also the agreement at:https://legal.linkedin.com/pages-joint-controller-addendum ). This involves the processing of data in the form of so-called ‘Page Insights’, which are described in more detail at https://legal.linkedin.com/pages-joint-controller-addendum.

LinkedIn assumes the data protection obligations towards you as a user, such as the information on data processing and is the contact for your rights. This follows from the fact that LinkedIn has direct access to the relevant information about the LinkedIn page and the processing of your data. However, you are also welcome to contact us if this should become necessary and we will then forward the request to LinkedIn if necessary.

 

Use of page insights and cookies on LinkedIn

LinkedIn and we process statistical data from users of the LinkedIn page using the Page Insights function. Information on these Page Insights and data processing can be found in LinkedIn’s privacy policy or at https://de.linkedin.com/legal/privacy-policy.

LinkedIn continues to use cookies and storage technologies. More information can be found here: https://de.linkedin.com/legal/cookie-policy? 

 

Transfer of data; processing in other EU countries

We only pass on data that we receive via the LinkedIn page to third parties in accordance with the provisions of this privacy policy.

When using LinkedIn, data may also be processed by LinkedIn in the USA and therefore outside the EU. In order to protect your data in the USA, we have concluded a data processing agreement with LinkedIn on the basis of the European Commission’s standard contractual clauses to enable the transfer of your personal data to LinkedIn. 

 

Data processing and legal basis

Our LinkedIn page allows us to communicate with you and provide you with interesting information. We may receive further data from you via your comments, shared images, (voice) messages and reactions, which we then process to respond or communicate with you.

 

The usage data of the LinkedIn page is used to create evaluations and statistics in the form of page insights, which help us to improve our marketing activities and our external presence. We can find out more about users and their behavior who interact with or use our LinkedIn page in order to display relevant content and develop functions that could be of interest to these people. These page statistics show us, for example, which people in certain target groups interact most with our LinkedIn page or which content on the LinkedIn page was visited, shared or liked when and how often. When categorizing people into target groups, demographic data or data about the location where a person is located is also included in order to place targeted advertisements with these people. If you use Facebook on multiple devices, the data can be analyzed across devices. The data collected in this way is processed statistically and is generally anonymous, i.e. we cannot establish a link to individual persons.

Facebook also uses cookies and storage technologies on the LinkedIn pages to analyze and improve the offer.

 

The data processing takes place with your consent or for the purpose of answering your request (Art. 6 (1) a., b. GDPR) or on the basis of our legitimate interests in improving our offer and presentation to the outside world (Art. 6 (1) f. GDPR). GDPR).

 

Your rights and objection, contact:

You are entitled to the rights listed in this privacy policy. These are to be exercised vis-à-vis LinkedIN, as explained above.

 

As a LinkedIn user, you can influence how your user behavior is recorded when you visit the LinkedIn page at any time. To do this, you can manage the settings for advertising preferences in your LinkedIn account. LinkedIN also offers you the option of contacting us or exercising your rights, which you can find here: https:

 

1. Your rights, duration and storage of data

Your rights

In accordance with the statutory provisions, you as the data subject have the right to receive information about your data processed by us free of charge at any time.

In addition, you can assert your rights to rectification, erasure or restriction of processing or the right to object against us at any time. This also applies to the right to data portability.

 

If you have provided us with your personal data on the basis of consent, you can revoke this consent at any time for the future.

To exercise your rights, you can contact us by email at team@tucan.ai. If this involves data processing via our LinkedIn page, this is described under V.

 

You or the data subject have the right to lodge a complaint with a supervisory authority of your choice. The supervisory authorities in Germany are the (data protection) authorities responsible under the respective laws of the federal states, e.g. for Berlin the Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de/ueber-uns/kontakt/).

A list of data protection authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html or http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080

 

Duration of storage of personal data; deletion periods

As a rule, we only store your personal data for as long as is necessary to fulfill the respective purpose and limit the storage period to an absolutely necessary minimum.

 

In the case of contractual relationships, such as the use of our offer, these storage periods may vary, but are generally limited to the duration of the contractual relationship or, with regard to inventory data, at most to the statutory retention periods (e.g. in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO)). Criteria for the storage period include whether the data is still current, whether the contractual relationship with us still exists and whether or not statutory retention periods are relevant for the personal data concerned. 

 

 

1. Data security, scope of application

Data security

For the best possible protection of your data, Tucan’s offer is made via a secure SSL connection between your server and the browser, i.e. the data is transmitted in encrypted form.

 

Data on Tucan is stored exclusively on servers within the European Union (EU), subject to other information to the user.

 

We expressly draw your attention to the fact that data protection and data security for data transmissions in open networks such as the Internet cannot be fully guaranteed according to the current state of the art. You are aware that, from a technical point of view, the provider can view the page content stored on the web server and possibly also other user data stored there at any time. You are fully responsible for the security and backup of the data you transmit to the Internet and store on web servers. We cannot accept any liability for the disclosure of data due to errors or unauthorized access by third parties.

 

Validity of the data protection provisions; amendment

The data protection provisions can be viewed and printed out at any time on the website at https://www.tucan.ai/de/datenschutz/.

We are entitled to amend these data protection provisions in compliance with the applicable regulations.

In case of a discrepancy between the German and the English version of this contract the German version shall always prevail.

Berlin, on 12.09.2025