Data Protection Declaration
Use of baramundi perform2work
Updated on 04/28/2025.

1. Controller for data processing:
   The controller pursuant to Article 4 (7) of the EU General Data Protection Regulation (GDPR) is

baramundi software GmbH
Forschungsallee 3
86159 Augsburg
Germany
telephone: +49 821 567 08 - 19
e-mail address: info@baramundi.com.

1. Data Protection Officer
   You can reach the data protection officer at privacy@baramundi.com.
2. User Account
   You need a user account with the following mandatory personal details in order to use baramundi perform2work:

E-mail address
User name
Password
These details are required for users to log in to the baramundi perform2work.

The legal basis for the data processing required to perform the contract for the use of the baramundi perform2work is Article 6 (1b) GDPR. The provision of your data is contractually agreed. Failure to provide this would mean that you would not be able to use the baramundi perform2work.

User data will be deleted immediately on termination of the contract or following a request for the deletion of your user account. In this case, please contact our support team at proactive@baramundi.com.

1. Service Provider and Server Location
   We use service providers for the cloud with data centers located within the EU (Western Europe).
2. Cookies
   We use technically essential cookies in order to enable secure login to the baramundi perform2work. The providers of these cookies are baramundi software GmbH and Microsoft Corporation as operator of Azure AD B2C. The legal basis for processing is our legitimate interest in ensuring a secure login in accordance with Article 6 (1f) GDPR.
3. Log Files
   Our cloud services log error messages. The following personal data are stored in the log files:

User ID and e-mail address of the application user
IP address
Designations of endpoints
Date and time of the request and of login and logout processes of the application user
Time zone difference to Greenwich Mean Time (GMT)
Address of the requested page
HTTP status code
Language, type and version of the browser software
Operating system of the application user
This information is required in order to analyze application errors within the scope of customer service and enables us to ensure the safe and trouble-free operation of the service. The legal basis for this is Article 6 (1f) GDPR. Our legitimate interest results from being the responsible operator of the baramundi perform2work.

We generate anonymized data from the log files in order to analyze and regularly improve the use of our baramundi perform2work application. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for this is Art. 6 (1f) GDPR. Our legitimate interest results from being the responsible operator of the baramundi perform2work.

Log files are automatically deleted after 90 days.

1. Your Data Protection Rights
   As a data subject, you have the right of access, the right of rectification, the right of erasure, the right to restrict processing, the right to object processing and the right to data portability. Should you wish to exercise your rights, please contact datenschutz@baramundi.com.

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.