Privacy policy

This privacy policy is valid from May 10, 2023 for the internet offer of ScaleUp Technologies GmbH & Co. KG (hereinafter referred to as "ScaleUp" or "we").which is available under the domain as well as the various subdomains and connected domains (hereinafter referred to as "our website").

The protection of your personal data during the collection, processing and use on the occasion of your visit to our homepage is an important concern for us.
In the following, we would like to inform you that and how personal data is requested from you and electronically stored and processed by us.



ScaleUp Technologies GmbH & Co. KG
Süderstr. 198
20537 Hamburg

Tel: +49 40 59380 0
Fax: +49 40 59380 260

Personally liable partner: ScaleUp Management GmbH
Managing Directors: Christoph Streit, Gihan Behrmann

Data Protection Officer

Tobias Mauss
Mauss Data Protection GmbH
New Wall 10
20354 Hamburg
Tel.: +49 40 999 99 52 0

1. general information on data processing

1.1 Personal data

Personal data according to Art. 4 (1) DSGVO is information about you. This includes, for example, information such as your name, address, telephone number or e-mail address, but also data such as your location, IP address or bank details. It is not necessary for you to disclose personal data in order to use our website. In certain cases, however, we need your name and address as well as other details in order to provide you with the requested information or services.

1.2 Encrypted data transmission

The data we collect on our homepage is transmitted to us exclusively in encrypted form. The same applies to the delivery of our web pages. Even in the case of an unencrypted call by you, the response of our web server is already encrypted. The security measures are continuously revised in accordance with technological developments.

1.2 When do we process personal data

We process personal data that you actively provide to us through your input. In addition, we process personal data automatically based on the use of our website. In particular, your personal data may be collected in the following cases:

  • Visit our website;
  • Contact us;
  • Analysis of why which visitors come to our website and how they use it;
  • Use of external tools (e.g. web fonts);
  • Defense against attacks on the technical infrastructure;

For details, please refer to the following comments.

2. processing of personal data

Insofar as we process your personal data for the provision of certain services, we will inform you below about the specific procedures, the scope and the purpose of the data processing as well as the legal basis of the processing and the respective storage period.

2.1 Visiting the website / Automatic collection of technical data (server log files)

When calling up and using our website and its subpages, we automatically collect data that your browser transmits to our server. This data is temporarily stored in a log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. This data is not merged with other personal data of the user.
The following data is stored on our servers for organizational and technical reasons:

  • Name of the retrieved file / the visited page
  • Your full IP address
  • Information about the type and version of the browser used
  • Operating system used (name, version)
  • Date and time of retrieval
  • Website from which you visit us

This data does not allow any conclusions to be drawn about your person. We use this data to evaluate the use of our website and to constantly improve our offer.
The legal basis for the aforementioned data processing is Art. 6 (1) lit. f DSGVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.
A deletion of this technical data takes place automatically after 60 days. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.

2.2 Use of cookies

We use cookies to ensure the technical functionality of our website and to understand how visitors use our website. You will be informed by us about the setting of cookies when you call up the home page and can decide on a case-by-case basis - with the exception of technically necessary cookies - whether to accept them. You also have the option of preventing the setting of cookies via setting options in your browser.

Cookies are small text files that are stored by your browser on your terminal device when you call up our website. If you call up our website again at a later time, we can read these cookies again. Cookies are stored for different lengths of time. You can refuse to accept cookies in your browser at any time, but this may result in our website no longer functioning properly. In addition, you can delete cookies yourself at any time. If you do not do this, we can tell you when saving how long a cookie should be stored on your computer. A distinction must be made between so-called session cookies and permanent cookies. Session cookies are deleted from your browser when you leave our website or close your browser. Permanent cookies are stored for the duration specified by us at the time of storage.

The legal basis for the processing of personal data using technically necessary session cookies is Art. 6 para. 1 lit. f DSGVO. If you have given us your consent to the use of cookies based on a notice given by us on the website ("cookie banner"), the legality of the use is additionally based on Art. 6 para. 1 sentence 1 lit. a DSGVO.

2.3 Hyperlinks / third-party websites

Our website contains so-called hyperlinks to websites of other providers. When activating these hyperlinks, you will be redirected from our website directly to the website of the other provider. This privacy policy does not apply to third-party websites that are connected by links on our website. We cannot guarantee that these third parties will handle your personal information in a reliable or secure manner. We recommend that you read the privacy policy of these websites before using them.

2.4 Third party providers & plugins

Complianz Cookie Consent Plug-in

On our website, we use the Complianz privacy suite to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and their privacy-compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

When you visit our website, a Comlianz cookie is stored in your browser, which archives any consent or revocation statements you have entered. This data is not passed on to the provider Complianz, but remains on our server.

Your data on consent to cookie use is collected. This includes data such as 

  • Time Stamp,
  • ControllerID,
  • ProcessorID and
  • User's browser used

We are legally obligated to keep the consent data. The stored data will remain stored until you request us to delete it, delete the Complianz cookie of your own accord or the purpose of the storage no longer applies. Legally required retention obligations remain unaffected. To view the details of Comlianz's data processing policy, please visit

We use Complianz cookie consent technology to obtain legally required consent for the use of cookies. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.

Translated with DeepL at take out.

Mapbox plug-in

We use Mapbox, a service of MapBox Inc. (address: 740 15th St Nw Suite 500 Washington, DC 20005, USA), hereinafter referred to as "Mapbox", on some sub-pages. Mapbox is a service for displaying customizable maps. We use Mapbox to visually display geographic information (e.g., about our data center locations). When using Mapbox, Mapbox also processes data about visitors' use of the map features.

When you visit one of our websites on which Mapbox services are integrated, Mapbox stores a cookie on your end device via your browser. Information about the use of this website, including your IP address, may be transmitted to Mapbox in the USA. This information is processed for the purpose of displaying the website or ensuring the functionality of the Mapbox service.

If you do not want Mapbox to process data about you via our website, you can deactivate this service in your browser settings. In this case, however, you will not be able to use the map display.

For more information, you can read Mapbox's privacy policy at take out.

Statistics / Web Analysis

For the purpose of searching and analyzing errors, evaluating usage and deriving measures for the future development of our website, we process your data using the local analysis software Matomo and Burst Statistic, WordPress.

Matomo processes the following data:

  • Cookies

  • Anonymized IP addresses by removing the last 2 bytes (i.e. instead of

  • Pseudo-anonymized location (based on the anonymized IP address

  • Date and time

  • Title of the called page

  • URL of the called page

  • URL of the previous page (if it allows it)

  • Screen resolution

  • Local time

  • Files that were clicked and downloaded

  • External links

  • Duration of the page load

  • Country, region, city (with low accuracy due to IP address)

  • Main language of the browser

  • User agent of the browser

  • Interactions with forms (but not their content)

Since these services are local analysis tools, no personal data is forwarded to the service provider, to third parties or abroad. In addition, your personal data is anonymized immediately after collection. There is no storage of personal data beyond the first processing step.

The legal basis for the data processing is the legitimate interest (unconditional technical necessity for the provision and delivery of the service "website" expressly requested by you by your call) pursuant to Art. 6 para. 1 lit. f DSGVO.

Social Media - Sassy Social Share Buttons

We use the plugin "Sassy Social Share" on our website. This replaces the native share buttons of the social networks and protects your anonymity.

You can usually recognize the share buttons by the respective social media logos. This application prevents the plugins integrated on this website from transmitting data to the respective provider when you first enter the page.

"Sassy Social Share" embeds share buttons of social networks on our website only as a graphic that contains a link to the corresponding social network. By clicking on the corresponding social icon graphic, you will be redirected to the service of the respective network. The respective button establishes direct contact between the social network (e.g. Mastodon, Twitter, LinkedIn, Reddit) and you only when you actively click on the share button.

After clicking, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g. Twitter) at the same time, the respective provider can assign your visit to this website to your user account.

Activating the plugin constitutes consent within the meaning of Art. 6 (1) lit. a DSGVO. You can revoke this consent at any time with effect for the future.

Embedded "YouTube" videos

On our website we use the plugin of the social network YouTube. YouTube is a video portal of YouTube LLC., 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".

YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield").

Google, and thus also its subsidiary YouTube, ensures that EU data protection regulations are also complied with when processing data in the USA.

We use YouTube in connection with the "Enhanced Privacy Mode" function to show you videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "Enhanced Privacy Mode" function causes the data described in more detail below to be transmitted to the YouTube server only when you actually start a video.

Without this "Enhanced Privacy", a connection to YouTube's servers in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.

This connection is necessary in order to display the respective video on our website via your internet browser. YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to Google's advertising network "DoubleClick" is established.

If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by setting your internet browser accordingly. You can find more information on this above under "Cookies".

Google provides further information on data collection and use as well as on your rights and protection options in this regard in the data protection information at ready

2.5 Registration / Customer account

If you create a customer account with us via our website, we collect and store the data you provide during registration (i.e., e.g., your name, address or e-mail address) solely for the purpose of providing pre-contractual services, processing contracts or for customer care purposes (e.g., to give you an overview of your previous orders with us). At the same time, we store the IP address and the date and time of your registration. Of course, this data is not passed on to third parties.
During the further registration process, you will be asked for your consent to this processing and referred to this privacy policy. The data collected by us in this process will be used exclusively for the provision of the customer account.

Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.
As far as the opening of the customer account furthermore serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.

You can revoke the consent you have given us to open and manage the customer account at any time with future effect in accordance with Art. 7 (3) DSGVO. For this purpose, you only need to inform us in writing about your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.

2.6 Contact via contact form, e-mail and telephone

As part of our cooperation with HKN GmbH (Hochstadenstr. 5, 47829 Krefeld. Germany) to improve customer service, data may be transferred to this partner.

We act as joint controllers in this process according to Art. 26 DSGVO.

Incoming inquiries via the contact form and the email addresses and phone numbers provided on our website are forwarded to the next available resources at ScaleUp or HKN GmbH. All data collected in this process is stored in the joint CRM system and can be accessed by both companies at any time.

The legal basis for this processing is Art. 6 para. 1 lit. b and f DSGVO.

Our legitimate interest is the more efficient processing of your request as well as process optimization and cost savings.

The data processed in this context will be deleted after the processing of your request has been completed.

Contact form and e-mail

Contact forms are available on our website for electronic contact. These are used for general inquiries, any type of direct contact, for registration for events and tours, and for ordering a product demonstration. We process this data to respond to the inquiries. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
If you contact us directly by e-mail (inquiry, application, other direct approach), your communication and identification data, i.e.

  • Name
  • E-mail address
  • Phone number
  • Message content

stored with us. With the sending of the message, the following data is also stored:

  • IP address of the user
  • Date and time

If you contact us via contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for the processing and answering of your request - without the provision of the data we can not or only limited answer your request.

The legal basis for this processing is Art. 6 para. 1 lit. b DSGVO.

The data will be used exclusively for processing the conversation.
The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted when your request has been finally processed and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.

Telephone contact

When you contact us by phone, your phone number (if transmitted) is stored as a communication date in the call history. This serves to manifest the call history.

The deletion takes place automatically after 90 days.

2.7 Transfer of personal data to non-EU countries / server location

With the exception of the above-mentioned cases, no personal data is transferred to non-European countries. The location of the web servers we use is Germany.

2.8 Amendment of the data protection provisions

If you wish to exercise a right to which you are entitled, please contact us as the person responsible at the above indicated Contact details or use one of the other communication options we offer.

With regard to our cooperation with HKN GmbH mentioned above in section 2.6, you may also contact HKN GmbH to exercise your rights under the joint responsibility.

3. rights of users and data subjects

3.1 Right to information

In accordance with Art. 15 of the GDPR, you have the right to request confirmation from us as to whether personal data relating to you is being processed by us. If this is the case, you have the right to information about this personal data as well as other information mentioned in Art. 15 DSGVO.

3.2 Right to rectification

According to Art. 16 DSGVO, you have the right to demand that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purpose of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

3.3 Right to deletion

You have the right to demand that we delete the personal data concerning you without delay. We are obliged to delete personal data without delay if the relevant requirements of Art. 17 DSGVO are met. For details, please refer to Art. 17 DSGVO.

3.4 Right to restriction of processing

In accordance with Art. 18 DSGVO, you have the right under certain conditions to demand that we restrict the processing of your personal data.

3.5 Right to data portability

Pursuant to Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a o DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and the processing is carried out with the help of automated processes.

3.6 Right of objection

Pursuant to Art. 21 DSGVO, you have the right to object to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

3.7 Right to complain to the supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. This right exists in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

If you wish to exercise a right to which you are entitled, please contact us as the person responsible at the above-mentioned Contact details. You make it easier for us to process your request if you already provide proof of your identity so that we can assign your request to a specific data subject. If you have any questions about this, please contact us.