Legal

Privacy Policy

  • In the current version from:

Our Relationship with You

The protection of your privacy is an important concern for us. Therefore, we are pleased about your interest in this privacy policy. Your personal data will be used exclusively within the framework of the provisions of the Federal Data Protection Act and the European General Data Protection Regulation (GDPR).

Workspace offers two usage models: On-Premises and Managed-Cloud. The handling of your data differs depending on the chosen model:

  1. In On-Premises installations, your data is stored and processed on your own servers. In this case, your company acts as the controller within the meaning of the GDPR, and workspace has no direct access to your data unless you explicitly grant us access for support or maintenance purposes.
  2. In the Managed-Cloud solution, your data is stored and processed in secure data centers in Germany. Here, workspace acts as a processor according to GDPR, while your company remains the controller. We process your data only to the extent necessary for the provision, maintenance, and improvement of the service, always in accordance with the contractual agreements with your company.

Regardless of the chosen model, our employees are committed to data secrecy and are regularly sensitized and trained on the subject.

If you have any questions about data protection at any time, please feel free to contact our data protection officer. For On-Premises installations, you should primarily contact your internal data protection officer for data protection-related questions.

Information according to Article 13 (1) GDPR

Name and Contact Details of the Controller

The controller within the meaning of data protection law is

AMNAU GmbH, Kronenstraße 13, 30161 Hannover,
represented by Mr. Benjamin Bolzmann (Managing Partner)

Phone number: +49 (0) 511 51 54 54 56 0
Email address: info@amnau.de

Contact Details of the Data Protection Officer

AMNAU has appointed a corporate data protection officer and reported this to the State Commissioner for Data Protection of Lower Saxony in accordance with Article 37 (7) GDPR.

AMNAU GmbH
Data Protection Officer
Kronenstraße 13, 30161 Hannover

Phone number: +49 (0) 511 876 505 0
Email address: datenschutz@amnau.de

Purposes and Legal Basis for the Processing of Personal Data

AMNAU primarily provides a service for web-based multi-project and portfolio management. Personal data may be contained in all messages, attachments, files, tasks, projects and project names, channels, and other content transmitted via the service. Since the customer controls the workspace used by the users, please contact the customer’s data protection officer for questions about the specific workspace settings and data protection practices of the customer whose workspace is being used. AMNAU is a processor for these customers, meaning that we collect and process this information solely on behalf of the customer.

Categories of Personal Data Processing

We do not require users to provide us with information, but certain information, such as the login credentials of a user account, is necessary to grant you access to the service. Additional information may be automatically collected when using the service.

For general workspace content, collection and processing are carried out in accordance with the customer’s instructions. It is not AMNAU, but the customer who sets its own policies for storage, access, changes, deletions, sharing, and retention of content. This also applies to integrations of third-party software or the transmission of content to third parties.

To set up access, we need basic information to authenticate you to the system. This concerns your email address and password. You also have the option to enter optional profile information, including name, phone number, a photo, or other basic demographic data.

You can also provide us with additional information when interacting with AMNAU in other ways. This may include sending emails or providing feedback.

Use of Your Data

AMNAU may only display and use the collected data if it is necessary for the following:

  • Maintenance, provision, and improvement of the service
  • Prevention or resolution of technical or security-related issues and handling of support requests
  • Review if we can assume in good faith or have received a complaint that content violates the customer contract or terms of use
  • Compliance with a valid court subpoena, request, or other lawful process

Information according to Article 13 (2) GDPR

To exercise data subject rights, please contact the customer. This also includes the possibilities of access, deletion, transfer, or objection within the meaning of the EU GDPR. AMNAU is solely a processor for the customers according to 2.3 of this privacy policy.

Further Information

When using Google Analytics and OpenAI, data is transferred to the USA. We have concluded standard contractual clauses with these providers in accordance with Art. 46 (2) lit. c GDPR to ensure an adequate level of data protection.

You have the right to access, rectify, delete, restrict processing, data portability, and object regarding your personal data. To exercise these rights, please contact our data protection officer at the contact details provided above.

We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

The provision of your data for the use of our services is partly required by law or contract or necessary for the conclusion of a contract. Failure to provide it would result in us not being able to conclude the contract with you or provide you with certain services.

Special Data Protection Information

Website (www.workspace.pm)

Interested companies can register on our website to become a customer for workspace. For this purpose, we collect the name of the company, a telephone and electronic contact, as well as the name of a contact person based on Art. 6 (1) lit. b GDPR to establish contact between the company and AMNAU. We process this data until the end of the business relationship or until the expiration of the applicable statutory retention periods; beyond that until the end of any legal disputes in which the data may be needed as evidence.

We store your personal data only as long as it is necessary for the purposes for which it was collected. For customer data, this is usually the duration of the business relationship plus the statutory retention period. Data from interested parties is deleted after 24 months if no contract is concluded.

Accesses are automatically logged on our website www.workspace.pm. The storage serves internal system-related and statistical purposes: name of the retrieved file, date and time of retrieval, transferred data volume, message about successful retrieval, web browser, and IP address of the requesting computer.

Our website uses the analysis service Google Analytics. This web analysis service is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google).

This analysis tool works based on cookies. A cookie is a text file that is sent when visiting a website and temporarily stored on the hard drive of the user of the website to enable an analysis of the use of the website by you. The information stored by the cookie is usually transferred to a Google server in the USA and stored there.

As part of IP anonymization, your IP address is shortened by Google within a member state of the EU or another contracting state of the Agreement on the European Economic Area. On our behalf, Google will use the transmitted information to create a report on the use of the website. The IP address transmitted as part of Google Analytics will not be merged with other data from Google. If you want to prevent the use of cookies, you can do so by making local changes to your settings in the internet browser used on your computer (e.g., Safari, Internet Explorer, Opera, Firefox, etc.), i.e., the program for opening and displaying internet pages. Furthermore, you can prevent the collection and processing of your data by the Google cookie by downloading and installing a browser plugin offered by Google at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information, please refer to Google’s privacy policy, which you can access here: www.google.com/policies/privacy/

The legal basis is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online presence.

We use external fonts from Google Fonts on our website. Google Fonts is a service of Google Inc. (Google). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transmits to the server which of our internet pages you have visited. The IP address of the browser of the visitor’s end device is also stored by Google. For more information, please refer to Google’s privacy policy, which you can access here: www.google.com/policies/privacy/ and www.google.com/fonts#AboutPlace:about

The legal basis is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our online presence.

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstr. 5, 30159 Hannover.

We use cookies on our website. These are small text files that are stored on your device. We use both technically necessary cookies and analysis cookies (Google Analytics). You can adjust your cookie settings at any time in your browser or use our cookie banner to set your preferences.

Currency and Change of this Privacy Policy

Due to the further development of our services, changing legal or regulatory requirements, it may become necessary to update this statement. Therefore, you can access and print the current privacy information on our website at www.workspace.pm/datenschutzerklaerung.

Current List of Subcontractors

Name Type of Subcontracting Country
Hetzner Cloud
Cloud Service Provider
Germany
Open AI, LLC
AI-supported Functionality
USA