Privacy policy

This is a courtesy translation. The German version is legally binding. Read the German version

Controller

Monaya Labs UG (haftungsbeschränkt) Zur Wolfswiese 13 97816 Lohr a. Main Germany Email: hello@unitoneworks.com

This website sets no cookies. Fonts are loaded from our own server. Apart from the Plausible measurement script, no third-party content is embedded. For cookie-free, privacy-friendly reach measurement we use Plausible Analytics (see below).

Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel automatically processes technical access data (IP address, date and time of access, page requested, browser type and version, operating system, referrer URL). This data is technically necessary to deliver the website and operate it securely.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation). Vercel processes this data as a processor under Art. 28 GDPR on the basis of its Data Processing Addendum (https://vercel.com/legal/dpa), which forms part of its terms of service. Where Vercel processes data for its own purposes, for example to fend off attacks, Vercel is itself responsible for that processing.

Personal data may be transferred to Vercel Inc. in the USA. Where the transfer is covered by Vercel's certification under the EU-US Data Privacy Framework, it relies on the European Commission's adequacy decision under Art. 45 GDPR. For transfers not covered by that certification, the EU Standard Contractual Clauses agreed in the Data Processing Addendum apply under Art. 46(2)(c) GDPR; they are available via https://vercel.com/legal/dpa. Information on the certification: https://vercel.com/legal/privacy-policy.

According to its privacy policy, Vercel keeps this data only for the minimum period necessary for the respective purposes. This is separate from how long we ourselves can view the runtime logs in our project dashboard: one day on the plan we use. This viewing period says nothing about Vercel's own storage or deletion periods.

Reach measurement (Plausible Analytics)

For cookie-free, privacy-friendly reach measurement we use Plausible Analytics, provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible uses no cookies and no other persistent identifiers and does not track people across devices, websites or days. It records the page visited (host and path of the URL only; other URL parameters are discarded), the referrer and supported campaign parameters (UTM), browser, operating system and device type, the approximate location (country, region, city) derived from the IP address, and engagement metrics such as scroll depth and time on page. We use no custom events, properties or revenue tracking. Visitors are told apart by a daily hash of a daily salt, the website domain, the IP address and the user agent; the salt is rotated and deleted every 24 hours. Raw IP addresses and user-agent strings are not stored. Plausible stores individual event and session records in order to calculate statistics from them; in the dashboard we only see aggregated statistics.

Plausible acts as a processor under Art. 28 GDPR; Plausible's data processing agreement forms part of its terms of service (https://plausible.io/dpa). The site data is kept for as long as our account with Plausible exists and is deleted without undue delay when the account or the site is deleted. The daily deletion of the salt (see above) affects only the visitor identifier and is separate from this retention of the records. According to Plausible, all visitor data is processed and stored in the EU on infrastructure owned by European companies. Details: https://plausible.io/data-policy.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the statistical evaluation of usage and reach in order to improve our content. We deliberately do without cookies; no persistent or cross-site profiles are created. You may object to this processing at any time under Art. 21 GDPR on grounds relating to your particular situation; an informal message to hello@unitoneworks.com is sufficient (see also "Your rights"). There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

Contact form and email

If you contact us by email or via our contact form, we process the information you provide (such as your name, email address, company, topic and message) and the time of your enquiry solely to handle it. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR.

The contact form itself sends no data to our server. When you submit it, your own email program opens with a prepared message to us. Nothing is transmitted until you send that email yourself via your own email provider.

Our mailbox is operated by Google Workspace. The contracting party is Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland. Google processes the emails as a processor under Art. 28 GDPR on the basis of the Cloud Data Processing Addendum (https://cloud.google.com/terms/data-processing-addendum). This may involve a transfer to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; where the transfer is covered by that certification, it relies on the European Commission's adequacy decision under Art. 45 GDPR. Details: https://policies.google.com/privacy/frameworks.

We delete your enquiry once it has been fully dealt with, and no later than twelve months after the last contact, unless a statutory retention obligation applies. Where the enquiry must be kept as received commercial or business correspondence (Section 257 HGB, Section 147 AO), a period of six years applies regardless of whether a contract is concluded, counted from the end of the calendar year in which it was received. We delete the data after that.

External links

This website contains links to external websites (for example monayalabs.com, LinkedIn). When you click them, the privacy policy of the respective provider applies.

Your rights

You have the following rights towards us regarding your personal data: right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian Data Protection Authority), Promenade 18, 91522 Ansbach.

Last updated

October 2026