Customer support +49 (40) 59380 500
Mon - Fri 9:00 - 17:00
DATACENTER visit

Privacy policy

This Privacy Policy is effective as of July 10, 2026, for the website of ScaleUp Technologies GmbH & Co. KG. (hereinafter referred to as "ScaleUp" or "we").which is available under the domain www.scaleuptech.com as well as the various subdomains and connected domains (hereinafter referred to as "our website").

The protection of your personal data during the collection, processing and use on the occasion of your visit to our homepage is an important concern for us.
In the following, we would like to inform you that and how personal data is requested from you and electronically stored and processed by us.

Content

Responsible

ScaleUp Technologies GmbH & Co. KG
Süderstr. 198
20537 Hamburg
Germany

Tel: +49 40 59380 0
Fax: +49 40 59380 260
Email: hello@scaleuptech.com

https://www.scaleuptech.com

Personally liable partner: ScaleUp Management GmbH
Managing Directors: Christoph Streit, Gihan Behrmann

Data Protection Officer

Tobias Mauss
Mauss Data Protection GmbH
New Wall 10
20354 Hamburg
Tel.: +49 40 999 99 52 0
E-mail: datenschutz@datenschutzbeauftragter-hamburg.de

https://datenschutzbeauftragter-hamburg.de/

1. processing of personal data

Insofar as we process your personal data for the provision of certain services, we will inform you below about the specific procedures, the scope and the purpose of the data processing as well as the legal basis of the processing and the respective storage period.

1.1 Visiting the website / Automatic collection of technical data (server log files)

When calling up and using our website www.scaleuptech.com and its subpages, we automatically collect data that your browser transmits to our server. This data is temporarily stored in a log file on our servers (in Germany). When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. A consolidation of this data with other personal data of the user does not take place.
The following data is stored on our servers for organizational and technical reasons:

  • Name of the retrieved file / the visited page
  • Your full IP address
  • Information about the type and version of the browser used
  • Operating system used (name, version)
  • Date and time of retrieval
  • Website from which you visit us

This data does not allow any conclusions to be drawn about your person. We use this data to evaluate the use of our website and to constantly improve our offer.
The legal basis for the aforementioned data processing is Art. 6 (1) lit. f DSGVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.
A deletion of this technical data takes place automatically after 60 days. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.

1.2 Storage and retrieval of data on your terminal device

In order to be able to provide the functionalities you have requested, including the provision of the website, we store and read data in your browser in accordance with § 25 of the Teleservices Data Protection Act (TDDSG). For this purpose, we use so-called cookies as well as the session memory and the local memory of the browser. Without this storage and retrieval of data, our website will not function properly.
The legal basis for storing and retrieving the data in and from your browser is our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with. § 25 TDSG to make our websites user-friendly and secure and to fulfill your wishes regarding the usability and functionality of the pages.
All further information on this type of data storage and retrieval can be found in the Consent Manager (bottom right) and the Cookie Policy.

1.2.1 Use of cookies

We use cookies to ensure the technical functionality of our website and to understand how visitors use our website. You will be informed by us about the setting of cookies when you call up the home page and can decide on a case-by-case basis - with the exception of technically necessary cookies - whether to accept them. You also have the option of preventing the setting of cookies via setting options in your browser.

Cookies are small text files that are stored by your browser on your terminal device when you call up our website. If you call up our website again at a later time, we can read these cookies again. Cookies are stored for different lengths of time. You can refuse to accept cookies in your browser at any time, but this may result in our website no longer functioning properly. In addition, you can delete cookies yourself at any time. If you do not do this, we can tell you when saving how long a cookie should be stored on your computer. A distinction must be made between so-called session cookies and permanent cookies. Session cookies are deleted from your browser when you leave our website or close your browser. Permanent cookies are stored for the duration specified by us at the time of storage.

The legal basis for the processing of personal data using technically necessary session cookies is Art. 6 para. 1 lit. f DSGVO. If you have given us your consent to the use of cookies based on a notice given by us on the website ("cookie banner"), the legality of the use is additionally based on Art. 6 para. 1 sentence 1 lit. a DSGVO.

Current cookie status

WordPress

Functional

Usage

We use WordPress for website development. Read more about WordPress

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
persistent
Function
Store user preferences
Name
Expiration
session
Function
Store browser details
Name
Expiration
persistent
Function
Store user preferences
Name
Expiration
1 year
Function
Store user preferences
Name
Expiration
session
Function
Read if cookies can be placed
Name
Expiration
persistent
Function
Store logged in users
Name
Expiration
session
Function
Store language settings

Cadence Blocks

Functional

Usage

We use Kadence Blocks for website design. Read more about Kadence Blocks

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
persistent
Function
Provide a responsive website

Wordfence

Functional

Usage

We use Wordfence for security and fraud prevention. Read more about Wordfence

Sharing data

For more information, please read the Wordfence Privacy Statement.

Functional

Name
Expiration
session
Function
Provide the identification of trusted web traffic
Name
Expiration
1 day
Function
Read to determine if the user is logged in

Elementor

Statistics (anonymous)

Usage

We use Elementor for content creation. Read more about Elementor

Sharing data

This data is not shared with third parties.

Statistics (anonymous)

Name
Expiration
persistent
Function
Store performed actions on the website

Compliance

Functional

Usage

We use Complianz for cookie consent management. Read more about Complianz

Sharing data

This data is not shared with third parties. For more information, please read the Complianz Privacy Statement.

Functional

Name
Expiration
365 days
Function
Store information about cookies that have been detected on the site
Name
Expiration
365 days
Function
Store accepted cookie policy ID
Name
Expiration
365 days
Function
Store if the cookie banner has been dismissed
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences
Name
Expiration
365 days
Function
Store cookie consent preferences

Purpose pending investigation

Name
New cookie 58
Expiration
Function

Matomo

Statistics (anonymous), Functional

Usage

We use Matomo for website statistics. Read more about Matomo

Sharing data

This data is not shared with third parties.

Statistics (anonymous)

Name
Expiration
13 months
Function
Store a unique user ID
Name
Expiration
session
Function
Store a unique session ID
Name
Expiration
6 months
Function
Store referrer ID's

Functional

Name
Expiration
30 years
Function
Store cookie consent preferences

Mautic

Marketing

Usage

We use Mautic for marketing automation (automated email marketing). Read more about Mautic

Sharing data

For more information, please read the Mautic Privacy Statement.

Marketing

Name
Expiration
1 year
Function
Store and track interaction

Purpose pending investigation

Name
Expiration
session
Function
Store a unique user ID

Microsoft Ads

Marketing

Usage

We use Microsoft Ads for advertising. Read more about Microsoft Ads

Sharing data

For more information, please read the Microsoft Ads Privacy Statement.

Marketing

Name
Expiration
1 day
Function
Store and track visits across websites
Name
Expiration
13 months
Function
Store and track visits across websites

RudderStack

Marketing

Usage

We use RudderStack for visitor tracking. Read more about RudderStack

Sharing data

For more information, please read the RudderStack Privacy Statement.

Marketing

Name
Expiration
1 year
Function
Name
Expiration
1 year
Function
Store a unique user ID

YouTube

Marketing

Usage

We use YouTube for video display. Read more about YouTube

Sharing data

For more information, please read the YouTube Privacy Statement.

Marketing

Name
Expiration
session
Function
Store location data
Name
Expiration
6 months
Function
Provide ad delivery or retargeting
Name
Expiration
session
Function
Store and track interaction
Name
Expiration
8 months
Function
Store user preferences

Google reCAPTCHA

Marketing

Usage

We use Google reCAPTCHA for spam prevention. Read more about Google reCAPTCHA

Sharing data

For more information, please read the Google reCAPTCHA Privacy Statement.

Marketing

Name
Expiration
session
Function
Read and filter requests from bots
Name
Expiration
session
Function
Read and filter requests from bots
Name
Expiration
persistent
Function
Read and filter requests from bots

Miscellaneous

Purpose pending investigation

Usage

Sharing data

Sharing of data is pending investigation

Purpose pending investigation

Name
Expiration
Function
Name
WP_DATA_USER_3
Expiration
Function
Name
e_kit-elements-defaults
Expiration
Function
Name
callus.greeting_activated
Expiration
Function
Name
WP_DATA_USER_2
Expiration
Function
Name
Expiration
Function
Name
pretix_widget_https_pretix_eu_scaleup_opening_2025_
Expiration
Function
Name
mk_jupiter_love_7031
Expiration
Function
Name
pretix_widget_https_pretix_eu_scaleup_ocp_opening_
Expiration
Function
Name
elementor_sidebar_menu_expanded_v2_elementor-custom-elements
Expiration
Function
Name
e_my_templates_source
Expiration
Function

1.3 Hyperlinks / third-party websites

Our website contains so-called hyperlinks to websites of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the other provider. This privacy policy does not apply to third-party websites that are connected by links on our website. We cannot guarantee that these third parties will handle your personal information in a reliable or secure manner. We recommend that you read the privacy policy of these websites before using them.

1.4 Third-party plugins and tools

Our website uses the „The Events Calendar“ plugin from Liquid Web LLC, 2703 Ena Dr, Lansing, MI 48917, USA. We use only the „Add to Calendar“ feature, which allows events to be added to the user’s personal calendar (e.g., Outlook, Apple Calendar, or Google Calendar). This feature is activated only at the user’s explicit request.

We generally process personal data only to the extent that it is technically necessary to provide the plugin. When using this feature, the information required for the respective event (e.g., title, date, time, and venue) is made available in a calendar file or via a calendar link. The data is not used for analysis, tracking, or marketing purposes.

Depending on the calendar application you choose, data may be transmitted to the respective calendar provider when you click on the calendar link. For more information on data processing, please refer to the provider’s privacy policy: https://www.liquidweb.com/policies/the-events-calendar-privacy-policy/.

Use of the plugin is based on Article 6(1)(f) of the GDPR. Our legitimate interest is to provide event dates in a user-friendly manner.

The transfer of your data to Liquid Web, which is headquartered in the United States, is permitted because an adequacy decision pursuant to Article 45(1) of the GDPR has been issued for the United States under the EU-U.S. Data Privacy Framework (DPF), and Liquid Web has submitted to its terms through self-certification.

This website is secured with the service "Wordfence Security", which is operated by Defiant Inc, 800 5th Ave, Suite 4100, Seattle, WA 98104, USA. The use is based on a legitimate interest within the meaning of the GDPR.

We use Wordfence Security for protection against malicious code and defense against attacks by criminals. The plugin is configured so that no cookies are stored on the user's computer. To protect against so-called brute force attacks (numerous automated login attempts from the same identity) or unauthorized access to the web server or database, (only) the IP addresses from which such attempts are made are stored locally on our web server. This enables repeated attack attempts from the same IP to be warded off more effectively. The stored IP addresses are automatically deleted after 30 days. The storage is exclusively local, there is no transfer of data to external service providers, in particular not to the above-mentioned Defiant Inc.

Wordfence Security secures this website and thus also protects visitors to the website from viruses and malware. This constitutes a legitimate interest within the meaning of the GDPR. The Live Traffic View option of the plugin is limited to security-related listings. 

More information on the collection and use of data by Wordfence Security can be found in the provider's privacy policy: https://www.wordfence.com/privacy-policy/

On our website, we use the Complianz privacy suite to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and their privacy-compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

When you visit our website, a Comlianz cookie is stored in your browser, which archives any declarations of consent or revocations you have entered. This data is not passed on to the provider Complianz, but remains on our server in Germany.

Your data on consent to cookie use is collected. This includes data such as 

  • Timestamp,
  • ControllerID,
  • ProcessorID and
  • User's browser used

We are legally obliged to store the data on consent. The stored data will remain stored until you request us to delete it, delete the Complianz cookie of your own accord or the purpose of the storage no longer applies. Legally required retention obligations remain unaffected. To view the details of Comlianz's data processing policy, please visit. https://complianz.io/legal/privacy-statement/.

The legal basis for the use of the Consent Manager is our obligation to obtain your consent for certain processing and our legal obligation to be able to prove what kind of consent you have given us (Art. 6 para. 1 lit c DSGVO in conjunction with Art. 7 DSGVO and Art. 5 para. 2 DSGVO). The decision to use an external provider is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to use a modern, secure and at the same time economical solution.

For the dispatch and evaluation of our newsletter, we use "CleverReach", a service of CleverReach GmbH & Co. KG, CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as "CleverReach"). The data provided during your registration for the newsletter will be passed on to CleverReach according to the double opt-in procedure. CleverReach uses this data for the dispatch as well as for the statistical evaluation of the newsletter on our behalf. For this purpose, we have concluded a contract for commissioned data processing with CleverReach in accordance with the DSGVO Directive. 

If you subscribe to one of our newsletters, we process your e-mail address and, if applicable, your first and last name in order to be able to personalize newsletters. A prerequisite for the newsletter subscription is your consent, which you give and confirm in two steps (so-called double-opt-in procedure). 

We process your data described above on the CleverReach platform for this purpose. CleverReach sends you the desired newsletter using your data. The newsletter emails contain so-called web beacons or tracking pixels. These are one-pixel-sized image files that are stored on our websites. This allows your user behavior to be tracked, in particular whether you have opened the newsletter email or which hyperlinks in the email you have clicked on.

CleverReach can also determine whether a previously desired action has taken place after clicking on the hyperlink in the newsletter e-mail. In addition, technical information such as the time of the retrieval, your IP address, data about your web browser and operating system are collected. The data processing takes place on the legal basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

CleverReach uses the following third-party providers for data processing:

Subcontractor

Processing site

Type of service

PlusServer GmbH, Germany

Germany

E-mail dispatch

Amazon Web Services, Inc., USA

Germany, Ireland

Storage and processing of order data

Hetzner Online GmbH, Germany

Germany

E-mail dispatch

Your data will be stored for the duration of our newsletter offer. You can revoke your consent at any time by unsubscribing from the newsletter.

For the purpose of searching and analyzing errors, evaluating usage and deriving measures for the future development of our website, we process your data using the local analysis software Matomo and Wordpress Analytics.

Matomo processes the following data:

  • Cookies
  • Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
  • Pseudo-anonymized location (based on the anonymized IP address
  • Date and time
  • Title of the called page
  • URL of the called page
  • URL of the previous page (if it allows it)
  • Screen resolution
  • Local time
  • Files that were clicked and downloaded
  • External links
  • Duration of the page load
  • Country, region, city (with low accuracy due to IP address)
  • Main language of the browser
  • User agent of the browser
  • Interactions with forms (but not their content)

Since these services are local analysis tools, no personal data is forwarded to the service provider, to third parties or abroad. In addition, your personal data is anonymized immediately after collection. There is no storage of personal data beyond the first processing step.

The legal basis for the data processing is the legitimate interest (unconditional technical necessity for the provision and delivery of the service "website" expressly requested by you by your call) pursuant to Art. 6 para. 1 lit. f DSGVO.

On our website we use the plugin of the social network YouTube. YouTube is a video portal of YouTube LLC., 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".

YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The data processing is carried out on the legal basis of your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO.

We use YouTube in connection with the "Enhanced Privacy Mode" function in order to be able to show you videos. According to YouTube, the "Enhanced Privacy Mode" function causes the data described in more detail below to be transmitted to YouTube's server only when you actually start a video.

Without this "Enhanced Privacy", a connection to YouTube's servers in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.

This connection is necessary in order to display the respective video on our website via your internet browser. YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to Google's "DoubleClick" advertising network is established. The same applies to the use of Google Fonts and Google Photos. What cannot be deactivated when using YouTube.

If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by setting your internet browser accordingly. You can find more information on this above under "Cookies".

Google provides further information on data collection and use as well as on your rights and protection options in this regard in the data protection information at https://policies.google.com/privacy ready

We use Mapbox, a service of MapBox Inc. (address: 740 15th St Nw Suite 500 Washington, DC 20005, USA), hereinafter referred to as "Mapbox", on some subpages. Mapbox is a service for displaying customizable geo-maps. We use Mapbox to visually display geographic information (e.g., about our data center locations). When using Mapbox, Mapbox also processes data about visitors' use of the map features.

When you visit one of our websites on which Mapbox services are integrated, Mapbox stores a cookie on your end device via your browser. Information about the use of this website, including your IP address, may be transmitted to Mapbox in the USA. This information is processed for the purpose of displaying the website or ensuring the functionality of the Mapbox service.

If you do not want Mapbox to process data about you via our website, you can deactivate this service in your browser settings. In this case, however, you will not be able to use the map display.

For more information about how Mapbox processes personal data on our behalf, please see the Mapbox Data Processing Addendum at https://www.mapbox.com/legal/dpa take. MapBox itself uses third-party data processing providers. You can find a list of third-party data processing providers at: https://www.mapbox.com/legal/subprocessors

The data processing is carried out on the legal basis of your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO.

We have integrated rating seals from ProvenExpert on this website. Provider is Expert Systems AG, Quedlinburger Str. 1, 10589 Berlin, https://www.provenexpert.com.

The ProvenExpert seal allows us to display customer reviews submitted to ProvenExpert about our company in a seal on our website. When you visit our website, a connection is established with ProvenExpert so that ProvenExpert can determine that you have visited our website. Furthermore, ProvenExpert collects your language settings in order to display the seal in the selected national language.

The IP address of the user is transmitted during the connection to the external server of Proven Expert. This is a technically necessary process to be able to load the content. Furthermore, the language of the user is checked and stored. ProvenExpert collects information on visitor behavior on several websites. 

The transmission of the IP address is necessary so that the server knows where to send the content after the request. You can learn more about the data processed through the use of ProvenExpert in the privacy policy on https://www.provenexpert.com/de-de/datenschutzbestimmungen/

The use of ProvenExpert is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in a presentation of customer reviews that is as comprehensible as possible. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

We use on our website (in the posts of our blog) the plugin "Sassy Social Share". This replaces the native share buttons of the social networks and thus protects your anonymity. The plugin belongs to the company Wordpress, based in San Francisco (USA).

The share buttons can usually be recognized by the logos of the respective social networks. This application prevents the plugins integrated on this website from transmitting data to the respective provider the first time the page is called up.

"Sassy Social Share" embeds the share buttons of the social networks only as a graphic on our website, which contains a link to the respective social network. By clicking on the corresponding social icon graphic, you will be redirected to the service of the respective network. The respective button only establishes direct contact between the social network (e.g. Mastodon, Twitter, LinkedIn, Reddit) and you when you actively click on the share button.

After the click, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g. Twitter) at the same time, the respective provider can assign your visit to this website to your user account.
If, on the other hand, the button is not clicked, no data exchange takes place between you and the social networks.

The activation of the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future.
More detailed information about the plugin can be found here: https://wordpress.org/plugins/sassy-social-share/

1.5 Registration / Customer account

Data collection during registration
If you create a customer account via our website, we collect and store the data you provide during registration, such as your name, address and e-mail address. We also store your IP address and the date and time of registration. We do not pass this data on to third parties.

Intended use
We use your data exclusively for the following purposes:
- Pre-contractual service provision and contract execution
- Customer care (for example, to give you an overview of your previous orders)
- Provision and management of your customer account

Processing in our marketing system
Your data is also processed in our marketing automation system Mautic. This serves the purpose of:
- Tracking and processing your request
- Documentation of the communication history
- Provision of relevant follow-up information
- The analysis of your usage behavior to improve our services
If you have consented to the processing of your data for marketing purposes, we can also send you further information about our products and services.

Legal basis
The processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR) and for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR). During the registration process, you will be asked for your consent and referred to this privacy policy.

Revocation and deletion
You can revoke your consent in writing at any time in accordance with Art. 7 para. 3 GDPR - this is effective for the future. The data collected will be deleted as soon as processing is no longer necessary. However, we must comply with retention periods under tax and commercial law.

1.6 Contact via contact form, e-mail and telephone

To improve our customer service, we work together with HKN GmbH (Hochstadenstraße 5, 47829 Krefeld, Germany) as well as with our subsidiary OnlineDienst Nordbayern GmbH, also known as ODN (Hermann-Glockner-Straße 7, 90763 Fürth). In this context, data may be transferred to these partners.

We act as joint controllers in this process in accordance with Art. 26 GDPR.

Inquiries received via the contact form or the e-mail addresses or telephone numbers provided on our website are forwarded to the requested location or the nearest available resources at ScaleUp, ODN or HKN GmbH. All data collected in this process is stored in a shared CRM system and can be accessed by the three companies at any time.

Legal basis
The processing is based on Article 6(1)(b) of the GDPR (performance of a contract or implementation of contractual measures).

The data processed in this context will be deleted after the processing of your request has been completed.

Contact form and e-mail

Our website offers various contact options for general inquiries, event registrations, appointments and product demonstrations.

What data we collect
When you use our contact forms or contact us directly by e-mail, we store your data:
- Name and e-mail address
- Telephone number (if provided)
- Content of your message
- IP address, date and time of transmission

We use this data exclusively to process and respond to your request. It is necessary to provide your contact details - we cannot process your request without them.
The additional technical data stored (IP address, time stamp) is used to prevent misuse and to ensure the security of our IT systems.

Telephone contact

If you contact us by telephone, we store your telephone number in our call history to document the communication. This data is automatically deleted after 90 days.

Legal basis

Processing takes place on the basis of:

- Art. 6 para. 1 lit. b GDPR (contract initiation and fulfillment)
- Art. 6 para. 1 lit. f GDPR (legitimate interests for IT security)

Deletion of the data

Your contact data will be deleted as soon as your request has been finally processed, provided that there are no statutory retention obligations (e.g. in the case of subsequent contract processing).

1.7 Transfer of Personal Data to Non-EU Countries / Server Location

With the exception of the above-mentioned cases, no personal data is transferred to non-European countries. The location of the web servers we use is Germany.

1.8 Obligation to Provide Data

You are under no legal or contractual obligation to provide us with personal data when using our website. However, you cannot access our pages without providing your IP address. Similarly, you can only subscribe to our newsletter by providing your email address.

1.9 Automated Decision-Making

Unless otherwise stated above in the sections on individual processing activities, we do not engage in any automated decision-making.

2. rights of users and data subjects

2.1 Your Rights

Every data subject has the right to Information according to Art. 15 of the GDPR, the right to Correction, Completion, or Addition according to Art. 16 of the GDPR, the right to Deletion according to Art. 17 of the GDPR, the right to Restriction of Processing according to Art. 18 of the GDPR as well as the right to Data Portability from Art. 20 of the GDPR. With regard to the right of access and the right to erasure, the restrictions set forth in §§ 34 and 35 BDSG. In addition, you have the right to file a complaint with a data protection supervisory authority (Art. 77 of the GDPR in connection with. § 19 BDSG).

2.2 Right to Withdraw Consent

According to Art. 7 of the GDPR You have the right to withdraw your consent at any time and without providing a reason. Please note that such withdrawal applies only to the future and does not affect the lawfulness of processing carried out in the past.

2.3 Right to Object

If we name our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO as the legal basis, you have the right of objection listed below pursuant to Art. 21 DSGVO.

According to Art. 21 DSGVO, you have the right to object to the processing of personal data concerning you that is based on Article 6 (1) litt. e or f DSGVO; this also applies to profiling based on these provisions.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

3. reservation of right of modification

We reserve the right to change the security and data protection measures at any time, especially if this becomes necessary due to technical developments. In these cases, we will also adapt this data protection notice accordingly, if necessary. Please therefore note the current version of this data protection notice.

If you wish to exercise a right to which you are entitled, please contact us as the person responsible at the above-mentioned Contact details. You make it easier for us to process your request if you already provide proof of your identity so that we can assign your request to a specific data subject. If you have any questions about this, please contact us.

With regard to our cooperation with HKN GmbH mentioned above in section 1.6, you may also contact HKN GmbH to exercise your rights under the joint responsibility.

ScaleUp Technologies