Privacy policy

This policy covers the public Fynder website at usefynder.com, enquiries and sign-ups for a launch notification. It does not describe the processing of candidate or customer data within the Fynder application; that processing requires separate contractual and privacy information.

The controller is Unatrix GmbH, Franz-Joseph-Str. 41, 80801 Munich, Germany, represented by managing director Sacha Taghavi. For privacy questions or requests to exercise your rights, contact us at the address above or by email below.

When your browser requests a page, our hosting infrastructure processes connection information, including your IP address, the requested URL, the date and time, and technical browser or device information sent with the request. This is necessary to deliver the page, maintain availability and investigate technical problems or abuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are operating a reliable website and protecting it against misuse. Technical logs are retained only as needed for those purposes; information relating to a specific security incident may need to be kept until it has been resolved.

The demo form asks for your first name, last name and business email address. Company, telephone number and message are optional. We also receive the language of the page so we can respond appropriately. Please do not include candidate data or sensitive personal information in your message.

We use these details to answer your enquiry, arrange a demonstration and follow up on the discussion you requested. Where you are personally seeking to enter into a contract, the legal basis is Article 6(1)(b) GDPR. When you contact us on behalf of a business, or make another business enquiry, we rely on Article 6(1)(f) GDPR and our legitimate interest in responding to business contacts.

Providing this information is voluntary. Without the required contact details we cannot process a request through the form. A demo request does not sign you up for a newsletter.

We retain demo enquiries for up to six months after the discussion ends, then delete them from the operational mailbox and Slack. If an enquiry becomes a customer relationship, relevant correspondence is handled under the applicable contractual retention rules. Specific legal obligations or the establishment, exercise or defence of legal claims may require longer retention of necessary records.

By submitting the launch notification form, you ask us to send an email when Fynder launches. We process your email address and the selected page language for this purpose on the basis of your consent under Article 6(1)(a) GDPR. This is a launch notification, not a subscription to recurring marketing emails.

You can withdraw your consent at any time by emailing privacy@unatrix.com. Withdrawal does not affect the lawfulness of processing before withdrawal.

We keep your sign-up until the launch notification has been sent or you withdraw your consent, whichever happens first. We then delete it from the operational mailbox and Slack within 30 days, unless a specific legal obligation or legal claim requires retention of necessary records. Providing your email is optional, but we cannot notify you without it.

We check form submissions for automated abuse and limit repeated submissions. For this purpose we create pseudonymous identifiers from the email address and, when available from our trusted hosting infrastructure, the source IP address. These identifiers are generated with a secret cryptographic key. They are not anonymous data, but the anti-spam store does not contain the plain email address, IP address or message content.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in preventing spam, duplicate deliveries and overload. Active rate-limit and duplicate-prevention records expire automatically within 24 hours. This expiry does not delete the separate email or Slack message, and backup retention is separate.

Authorised members of the Unatrix team handle enquiries and launch sign-ups. We use service providers for website hosting, technical operation, email delivery and internal collaboration. Both forms send a message through our email service to an internal Slack channel, so the information submitted is processed by our email provider and Slack as well as Unatrix.

Service providers may process information outside the European Economic Area. Such processing requires an applicable basis under Chapter V GDPR, such as an adequacy decision or appropriate contractual safeguards. The country and applicable safeguards depend on the service and its configuration. You can contact privacy@unatrix.com for information about the recipients and safeguards relevant to your data, including how to obtain a copy of applicable safeguards.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims. Access and disclosure must be limited to what is necessary for the relevant purpose.

The public Fynder landing page does not currently use analytics cookies, advertising pixels or tracking of email opens. Its language choice is part of the URL. The fonts and visual assets used on the landing page are served with the site, without a visitor-side request to Google Fonts.

Links to other websites take you to services with their own privacy information. This policy concerns the public marketing website; authentication and other functions of the Fynder application are outside its scope.

Subject to the conditions in the GDPR, you may request access to your personal data, correction, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw that consent at any time.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may object to processing for direct marketing at any time, without giving a reason.

You can exercise these rights using privacy@unatrix.com. We may request information needed to verify your identity. You also have the right to lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. For Unatrix in Bavaria, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Website enquiries and launch sign-ups are not used for automated decisions that produce legal or similarly significant effects under Article 22 GDPR. Automated spam checks can temporarily prevent a form submission; if this happens, you can contact us by email.

We update this policy when the website or the way we process data changes. The date above identifies the current version. If a new purpose requires your consent, publishing an updated policy does not replace obtaining that consent.