Privacy Policy
How we handle your personal data
This policy explains what personal data we collect, why we use it, and what rights you have. It applies to anyone who visits our website, contacts us, or takes part in our offers.
This privacy policy does not apply to recruiting. Records you and your team store inside a customer workspace are processed under that customer's instructions and a Data Processing Agreement. This policy does cover how we handle your data when you visit this website, create a Worknano account, or connect optional Google or Microsoft services.
Data protection law, in particular the General Data Protection Regulation (GDPR), is part of our daily work. Protecting personal data is a core requirement for us.
Our data protection principles
- We are transparent about how we process data (transparent data processing)
- We only process the data we need (data minimisation)
- We only process data when we have a purpose and a legal basis (purpose-related and legitimate)
- We secure our systems against intrusion and cybercrime (secure and with integrity)
- We work with reliable service providers (accountability)
- We process data only as long as necessary (limited retention)
- We do not process sensitive data such as racial or ethnic origin, political opinions, or religious beliefs
- We do not process data from children. Our website and offers are not intended for people under the age of 16.
- We do not profile you or make decisions based solely on automated processes such as artificial intelligence.
- Providing personal data is neither legally nor contractually required. Without your data, however, we may not be able to provide you with information or services.
When we store and process your personal data
1. You visit our websites
When you visit our websites, we process data about your browser, operating system, location, IP address, and similar technical information to ensure the functionality of the website, the security of the connection, and a good user experience. We also use data for marketing purposes where your consent is required.
- What data: IP address, browser type and version, time zone, operating system, geolocation data, device information, clicking behaviour, cookies, and similar data
- Purposes: Statistics, optimisation, security, marketing
- Legal basis: Legitimate interests, consent (where required)
- Retention: Session duration and up to 30 days (see our Cookie Policy for details)
2. You use our contact form, call us, or send an email
We welcome your contact via web form, email, or phone. We process the data you provide to answer your request and stay in touch. We only share your data with third parties if necessary to handle your inquiry.
- What data: Name, company, phone number, email address, your message
- Purposes: Communication, answering questions, providing support
- Legal basis: Contract or pre-contractual measures
- Retention: Until the purpose is fulfilled or as required by law
3. You request information, resources, or participate in events or webinars
When you request free content, resources, or participate in our webinars, events, or similar offers, we process your contact data. We may ask for consent to use your data for marketing purposes. Newsletter subscriptions require explicit consent, and you can revoke it at any time.
- What data: Name, company, phone number, email address
- Purposes: Providing information, relationship management, marketing (with consent)
- Legal basis: Contract for content delivery, consent for marketing
- Retention: Up to 2 years or until consent is revoked
4. You are interested in Worknano's services or request a demo or trial
If you show interest in our products or request a demo, trial, or consultation, we process your contact data to respond and provide the requested information.
- What data: Name, company, phone number, email address, and other relevant details
- Purposes: Sales, marketing, customer relationship management
- Legal basis: Pre-contractual measures and contract
- Retention: Up to 2 years for prospects, or the duration of the customer relationship plus legal obligations for customers
5. You exercise your data subject rights
When you contact us to exercise your rights under data protection law, we process the necessary data to verify your identity and respond to your request.
- What data: Name, email address, content of your request
- Purposes: Fulfilling legal obligations and your requests
- Legal basis: Legal obligation
- Retention: Up to 2 years
6. You sign in or connect Google or Microsoft
You can create an account and sign in with Google or Microsoft. We receive the identity data the provider shares with us, typically your name, email address, and a unique account identifier, so we can authenticate you and create your Worknano account.
Calendar and email connections are optional. If you connect them from your profile, we access only the data needed for features such as Brief me (today's meetings and unread work email). You can disconnect these integrations at any time. We do not use connected calendar or email content for advertising.
Google and Microsoft process that data under their own terms and privacy policies. Worknano is not affiliated with Google or Microsoft.
- What data: Name, email address, provider account identifier; if you connect them, calendar events and work email you authorize
- Purposes: Authentication, account creation, optional assistant features
- Legal basis: Contract; consent for optional calendar and email access
- Retention: For the life of your account, or until you disconnect the integration
Trusted third parties who process your data
We work with carefully selected service providers for website operation, marketing, analytics, customer support, hosting, and other services. We have data processing agreements in place with them.
We may also share data within our corporate group or when required by law. When transferring data to countries outside the EU/EEA, we ensure appropriate safeguards, for example Standard Contractual Clauses or adequacy decisions.
International data transfers
Some of our service providers may be located outside the EU/EEA. We ensure an adequate level of protection through appropriate safeguards and contracts. Customer data is primarily stored within the European Union where possible.
Cookies and similar technologies
Cookies are small text files stored on your device. Essential cookies are necessary for the website to function. For all other cookies (functional, analytics, marketing), we ask for your consent.
You can manage your cookie preferences at any time via the cookie banner or Cookie Settings.
Your privacy rights
You have the following rights under the GDPR, among others:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise these rights, please contact us using the contact details in our imprint or via our data subject rights form.
Our competent supervisory authority is the Bavarian State Office for Data Protection Supervision, or the authority responsible for your place of residence.
Contact for data protection questions
For questions about this privacy policy or your personal data, please contact us at [email protected].
Changes to this Privacy Policy
We may update this policy from time to time. The current version is dated September 2026.
Last updated: September 2026