1. Joint Controllership (Art. 26 GDPR)

As the UAH Connect platform operates internationally, it is jointly operated by two companies. Under data protection law, in particular the EU General Data Protection Regulation (GDPR), the following entities are Joint Controllers:

We have defined in an internal agreement (Joint Controller Agreement) pursuant to Art. 26 GDPR which of us fulfills which data protection obligations. Regardless of this internal arrangement, you may exercise your data protection rights against both entities at any time.

Central contact for privacy inquiries: privacy@united-automationhub.com

2. Data Transfers to Third Countries (USA)

Due to the joint operation of the platform, personal data (e.g. account data, transaction data) is inevitably transferred to Sojka Automation US Inc. in the USA. The USA is considered a third country under data protection law. To ensure an adequate level of European data protection, this data transfer is carried out on the basis of EU Standard Contractual Clauses (SCCs), which have been bindingly concluded between our two companies.

3. Data Collection on Our Website and Platform

a) When visiting the website (Server Log Files)

When accessing our website, information is automatically sent to the server by your browser (e.g. IP address, date, time, browser type, operating system).

Purpose & Legal Basis: Ensuring a smooth connection and system security. Legitimate interest (Art. 6(1)(f) GDPR).

b) Registration and use of the marketplace (Sellers & Buyers)

When you create an account, we collect master data (company name, contact person name, business email, phone number, address, tax ID).

Purpose & Legal Basis: Provision of the account, performance of a contract (Art. 6(1)(b) GDPR), and compliance with legal obligations such as the Platform Tax Transparency Act (DAC7/PStTG) pursuant to Art. 6(1)(c) GDPR.

c) Payment Processing

For the fiduciary processing of marketplace transactions ("Order Products"), we engage licensed Payment Service Providers (PSPs). Your payment data is processed directly by the respective PSP. We do not store complete credit card or bank data ourselves.

Purpose & Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR).

4. Use of Cookies and Tracking Tools

We use cookies on our website.

• Technically necessary cookies: These are essential for the operation of the platform (e.g. login, session management) and are required by law (Legal basis: § 25(2) DDG / Art. 6(1)(f) GDPR).
• Analytics & marketing cookies: We only use tools for analyzing user behavior if you have given us your express consent via our cookie banner beforehand (Legal basis: § 25(1) DDG / Art. 6(1)(a) GDPR). You may revoke this consent at any time.

5. Your Rights as a Data Subject (EU/EEA)

Under the GDPR, you have the following rights:

• Right of access to your processed data (Art. 15 GDPR).
• Right to rectification of inaccurate data (Art. 16 GDPR).
• Right to erasure of your data, provided no statutory retention obligations apply (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR) & data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR): You may object at any time to processing based on our legitimate interest.
• Right to withdraw consent (Art. 7(3) GDPR).

To exercise your rights, please contact us at privacy@united-automationhub.com.

6. Supplemental Privacy Notice for US Users

This section applies additionally to residents of US states with specific privacy laws (e.g. California — CCPA/CPRA).

Do Not Sell or Share My Personal Information: We do not sell your personal data to third parties. Since our platform is purely B2B-focused, we only process data for the purpose of providing our services and processing transactions. US users have the right to access, deletion, and the right not to be discriminated against for exercising these rights. Please direct any requests to the email address above.