This privacy statement applies from May, 25th 2018 to the website of ScaleUp Technologies GmbH & Co. KG (hereinafter referred to as „ScaleUp“ or „we“), which is available under the domain as well as the various subdomains and related domains (hereinafter referred to as „our website“).

We would like to inform you at this point about the personal data we collect from you when you visit our website and the purpose for its use.

Since changes in the law or changes in our internal processes may require an amendment to this Privacy Policy, we encourage you to read this Privacy Statement periodically.


Responsible for this website

ScaleUp Technologies GmbH & Co. KG
Suederstr. 198
20537 Hamburg

Tel.: +49 40 59380 0
Fax: +49 40 59380 260

Personally liable partner: ScaleUp Management GmbH
Managing Director: Christoph Streit, Gihan Behrmann


Data Protection Officer

Tobias Mauss
Mauß Datenschutz GmbH
Neuer Wall 10
20354 Hamburg
Tel.: +49 40 999 99 52 0



A. General Information about Data Processing

1. Personal data

Personal data pursuant to Article 4 (1) GDPR is all information relating to an identified or identifiable natural person. This includes, for example, information such as name, age, address, telephone number, date of birth, email address, IP address, as well as data such as your whereabouts, user behavior or bank details. Information which we cannot (or only with disproportionate effort) relate to your person, such as anonymized data, is not personal data. The processing of personal data (such as collecting, querying, using, storing or transmitting) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and no legally required retention obligation has to be fulfilled.
You don’t have to disclose personal data in order to use our homepage/website. However, in certain cases, we may require your name, address, and other information for contract conclusion or an order so we are able to provide the services requested.

2. Processing of personal data

In principle, we process your personal data only insofar as this is necessary for the provision of our website, content, and services. The processing of personal data (e.g., collection, retrieval, use, storage or transfer) always requires a legal, technical or operational basis (such as retention periods, data security, fulfillment of contractual arrangements) or your consent. Processed personal data will be deleted by us as soon as the purpose of the processing has been achieved and no legally required retention obligations have to be fulfilled.

3. Transfer of personal data to third parties and recipients

Your personal data will not be transferred to other recipients or third parties without your necessary prior consent.
In accordance with legal requirements or judicial decisions, ScaleUp is only obligated to forward your personal data to law enforcement authorities in certain cases and, if necessary, to third parties who have been harmed.
ScaleUp will not disclose your information to private third parties unless they are external service providers providing services in the name of and on behalf of ScaleUp. We ensure that these are required to comply with data protection laws. All ScaleUp employees are also required to maintain confidentiality.

We use third-party extensions in some cases. Personal data may be passed on or transmitted automatically in such cases. The nature, extent, purpose, and duration of this processing of personal data may be different in each individual circumstance. We therefore check in each specific situation exactly which third-party services we use on our website and whether there is a transfer of personal data. We record this data processing in the Privacy Policy pursuant to legal provisions.

Personal data is transferred by us to third parties only in specific cases as stated by us separately.

4. Recipient of personal data

a. Recipients of personal data are companies with whom a commissioned data processing contract has been concluded: Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA (for Google Analytics)
b. Third parties within the meaning of the GDPR include companies (such as service providers, advertising partners, companies that use third-party cookies) with whom we have not entered into a commissioned data processing contract.

5. Purpose of Data Processing

Your personal data provided online will be processed by ScaleUp for the purposes set forth in Section B below, based on the legal basis specified.


B. Processing of Personal Data

If we process your personal data for the provision of certain services, we will inform you below about the specific processes, the scope and purpose of the data processing, as well as the legal basis for the processing and the respective retention period.

1. Provision of the homepage / automatic acquisition of technical data (server log files)

When you access and use our website, we automatically collect data that your browser transmits to our server. This information is temporarily stored in a log file. When you use our website, we collect the following data that is technically necessary for us to display our website and to ensure stability and security. This data is not stored together with other personal user data.
The following data is stored here for organizational and technical reasons:

• Names of downloaded files / accessed page
• Your full IP address
• Information about the browser type and version used
• Your operating system (name, version)
• Date and time of access
• Websites from which you came to our website

A conclusion as to the identity of your person is not possible with this data. We use this data to evaluate how our website is used and to constantly improve our products and services.
Article 6 (1) (f) GDPR is the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard the legitimate interests of our company.
This technical data is automatically deleted after 60 days. The collection of this data for the provision of the website and the storage of the data in log files is essential for the operation of the website.

Our website contains hyperlinks to websites of other providers. By activating these hyperlinks, you will be redirected from our website to the website of the other providers. You can recognize this by the changed URL, for example. We cannot accept responsibility for the confidentiality of your information on these third-party websites, as we have no control over their compliance with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on their websites.

2. Processing of your IP address by the web server

For technical reasons, services on the Internet can only be used by disclosing your IP address. IP addresses are unique numeric addresses under which your computer retrieves or sends data on the Internet. As a rule, we do not know which person the respective IP address belongs to. We usually cannot assign the data to a person who can be specifically identified by us.
Exception: You voluntarily provide us with an email address or other data during the use of our website which enables us to identify you. Furthermore, we may identify you if we take legal action against you (for example, in the case of attacks against our website) and we become aware of your identity in the course of the investigation. As a rule, you therefore do not have to worry about us being able to assign the following data to a person who can be specifically identified.

3. Encrypted transmission

All data entered by you on our webpages is transmitted to us in encrypted form (via https), so that they are protected from being viewed by third parties. Our website automatically enforces an encrypted transmission of all content.
We use state-of-the-art encryption technologies. The security measures are continuously revised in line with technological developments.

4. Use of cookies

We use cookies on our website. Cookies are small files that are sent to and stored by your device’s browser as part of your visit to our website. Some features of our website cannot be provided without the use of technically necessary cookies. Other cookies allow us to perform various analyses. For example, cookies are able to recognize the browser you are using when you revisit our website and submit various information to us. Among other things, we use cookies to make our website more user-friendly and effective, for example, by tracking your use of our website and identifying your preferred settings (such as country and language settings). If third parties process information via cookies, they collect the information directly from your browser.

4.1 Types of cookies used

4.1.1 First-party cookies

First-party cookies are deposited and managed directly by ScaleUp. A passing on to a third party does not take place.

4.1.2 Third party cookies

Third-party cookies are deposited and managed by the respective partner to perform statistical analysis of navigation on the ScaleUp website. These analyzes are performed on servers of the partner company, but of course only pseudonym.

4.1.3 Session cookies

Some of the cookies we use are deleted after closing your browser (session cookies). We use these technically-necessary session cookies to manage and secure the login sessions and to adopt language settings.

4.1.3 Persistent cookies

Furthermore, ScaleUp uses tracking and analysis cookies to ensure continuous optimization and customization of our website. These cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). Tracking allows us to statistically record the use of our website by visitors and to further develop our online offer with the help of the knowledge gained through it. The period of validity of cookies is 30 days or 2 years.
The following persistent cookies are used by us:

a) Google Analytics
b) Search engine keyword tracking
c) Cookie consent policy

a) Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountainview, CA 94043 USA (hereafter “Google”) to track and evaluate your user behavior. Google Analytics uses cookies. Of these, we use 3 Google Analytics cookies _ga (valid for 2 years). The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. Before saving, your IP address will be anonymized. This anonymization is carried out by Google within Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. For this purpose, Google Analytics has been extended on our website with the code “anonymizeIp.”
As part of this commissioned data processing, Google uses the aforementioned information to help us evaluate your use of the website, compile reports on website activity, and provide us with other services related to website activity and Internet usage.
The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. We may use it only if you consent to the processing and storage of the cookies by means of a declaration of consent.
For more information about Google Analytics Terms of Use, please visit, for information about privacy at Google, see
We pursue a legitimate interest with this data processing by determining the success of our advertising, planning, designing, and controlling as well as drawing conclusions about how our website is used in order to recognize any need for adjustment in order to improve the use of our website, develop new offers and thus possibly improve the revenue opportunities for our company. The processing of your data is based on Article 6 (1) a/f GDPR.

4.2 Consent to the use of cookies
You will be informed by us about the setting of cookies when you first access out website and can decide whether to give consent in each case to accept them.
Most browsers are pre-set to accept cookies by default. However, you can configure your browser to accept only certain or no cookies at all. However, we would like to point out that you may not be able to use all functions of our website if cookies are deactivated by your browser settings on our website. Your browser settings also allow you to delete cookies already stored in your browser. It is also possible to adjust your browser settings to notify you before cookies are stored.

4.3 Legal basis for the use of cookies
The legal basis for the processing of personal data using technically necessary session cookies is Article 6 (1) (f) GDPR. If you have given us your consent for the use of cookies based on a notice shown by us on the website (“cookie banner”), then Article 6 (1) sentence 1 a GDPR is an additional legal basis.


5. Registration / customer account

If you create a customer account with us via our website, we will record and store the data entered by you during registration (such as your name, address or email address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of customer care (e.g. to provide you an overview of your previous orders with us). We simultaneously save the IP address, date and time of your registration. This data will of course not be forwarded to third parties.
Your consent to this data processing is obtained as part of the further registration process and reference is made to this Privacy Policy. The data collected by us are used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Article 6 (1) (a) GDPR is the legal basis for processing.
Insofar as the opening of the customer account additionally serves pre-contractual measures or the fulfillment of the contract, Article 6 (1) (b) GDPR provides another legal basis for this processing.
The consent granted to us while opening and maintaining the customer account can be withdrawn at any time with effect for the future in accordance with Article 7 (3) GDPR. You only need to inform us in writing about your revocation.
The data collected will be deleted as soon as the processing is no longer necessary. In this case, however, tax and commercial retention periods will be observed.

6. Contact form and email contact

There are contact forms available on our website, which can be used for electronic contact.
These are for general inquiries, any kind of direct contact, for registering participation at events as well as for ordering a product demonstration. We process this data to answer inquiries. If a user utilizes this option, the data entered in the input template will be transmitted to us and saved.
If you contact us by email directly (request, application, any kind of direct contact), your communication and identification data will be recorded and stored by us, including:
• name
• email address
• phone number
• content of the message.
At the time the message is sent, the following data is also stored:
• IP address of the user
• date and time
If you contact us via contact form or email, the data you provide will be used to process your request. The specification of the data is necessary for processing and answering your inquiry. We cannot answer your inquiry or at best only to a limited extent without provision of this data.
The legal basis for this processing is Article 6 (1) (b) GDPR.
We will not share this information without your consent. The data is used exclusively for processing the conversation.
The other personal data processed during the sending process serve to prevent misuse of the contact form and ensure the security of our information technology systems.
Your data will be deleted, provided that your request has been finally answered and the deletion does not conflict with any statutory storage requirements, such as in the event of subsequent contract execution.

7. Phone contact

If you contact us by phone, your phone number (if it is sent) will be saved as communication data in the call history.
This serves to show the call history. It will be automatically deleted after 90 days.
The legal basis of the processing is Article 6 (1) (a/f) GDPR.


C. Rights of Users and Data Subjects

As user and data subject, you have the following rights:

Right to information about your personal data
According to Article 15 GDPR, you have the right to ask us for a confirmation as to whether your personal data is being processed. If this is the case, you have a right to information about this personal data and further information as set out in Article 15 GDPR.

Right to rectification
According to Article 16 GDPR, you have the right to demand immediate correction of incorrect personal data concerning you. Furthermore, taking into account the purpose of processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure
You have the right to demand that personal data relating to you be deleted immediately. We are obliged to delete personal data immediately, provided that the corresponding requirements of Article 17 GDPR are met. For details please refer to Article 17 GDPR.

Right to restriction of processing
In accordance with Article 18 GDPR you have the right to demand that we restrict the processing under certain conditions.

Right to object
According to Article 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1), including profiling based on those provisions.

Right to lodge a complaint with a supervisory authority
According to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. This right shall apply, in particular, to the Member State of the person’s place of residence, place of work or the place of the alleged infringement if you consider that the processing of the personal data concerning you is contrary to the GDPR.

Provision of personal data
There is no legal obligation for you to provide personal data.
The latest Privacy Policy can be viewed on the ScaleUp website ( or requested from ScaleUp using the contact details provided above.

If you wish to make use of a right to which you are entitled, please contact us using above contact details. You can make it easier for us to process your request by providing proof of your identity, so that we can assign your request to a specific data subject. If you have any questions, please do not hesitate to contact us.