The protection of your personal data during the collection, processing and use on the occasion of your visit to our homepage is an important concern for us.
In the following, we would like to inform you that and how personal data is requested from you and electronically stored and processed by us.
ScaleUp Technologies GmbH & Co. KG
Tel: +49 40 59380 0
Fax: +49 40 59380 260
Personally liable partner: ScaleUp Management GmbH
Managing Directors: Christoph Streit, Gihan Behrmann
Data Protection Officer
Mauss Data Protection GmbH
New Wall 10
Tel.: +49 40 999 99 52 0
1. general information on data processing
1.1 Personal data
Personal data according to Art. 4 (1) DSGVO is information about you. This includes, for example, information such as your name, address, telephone number or e-mail address, but also data such as your location, IP address or bank details. It is not necessary for you to disclose personal data in order to use our website. In certain cases, however, we need your name and address as well as other details in order to provide you with the requested information or services.
1.2 Encrypted data transmission
The data we collect on our homepage is transmitted to us exclusively in encrypted form. The same applies to the delivery of our web pages. Even in the case of an unencrypted call by you, the response of our web server is already encrypted. The security measures are continuously revised in accordance with technological developments.
1.2 When do we process personal data
We process personal data that you actively provide to us through your input. In addition, we process personal data automatically based on the use of our website. In particular, your personal data may be collected in the following cases:
- Visit our website;
- Contact us;
- Analysis of why which visitors come to our website and how they use it;
- Use of external tools (e.g. web fonts);
- Defense against attacks on the technical infrastructure;
For details, please refer to the following comments.
2. processing of personal data
Insofar as we process your personal data for the provision of certain services, we will inform you below about the specific procedures, the scope and the purpose of the data processing as well as the legal basis of the processing and the respective storage period.
2.1 Visiting the website / Automatic collection of technical data (server log files)
When calling up and using our website www.scaleuptech.com and its subpages, we automatically collect data that your browser transmits to our server. This data is temporarily stored in a log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. This data is not merged with other personal data of the user.
The following data is stored on our servers for organizational and technical reasons:
- Name of the retrieved file / the visited page
- Your full IP address
- Information about the type and version of the browser used
- Operating system used (name, version)
- Date and time of retrieval
- Website from which you visit us
This data does not allow any conclusions to be drawn about your person. We use this data to evaluate the use of our website and to constantly improve our offer.
The legal basis for the aforementioned data processing is Art. 6 (1) lit. f DSGVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.
A deletion of this technical data takes place automatically after 60 days. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.
Cookies are small text files that are stored by your browser on your terminal device when you call up our website. If you call up our website again at a later time, we can read these cookies again. Cookies are stored for different lengths of time. You can refuse to accept cookies in your browser at any time, but this may result in our website no longer functioning properly. In addition, you can delete cookies yourself at any time. If you do not do this, we can tell you when saving how long a cookie should be stored on your computer. A distinction must be made between so-called session cookies and permanent cookies. Session cookies are deleted from your browser when you leave our website or close your browser. Permanent cookies are stored for the duration specified by us at the time of storage.
2.3 Hyperlinks / third-party websites
2.4 Third party providers & plugins
Complianz Cookie Consent Plug-in
On our website, we use the Complianz privacy suite to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and their privacy-compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).
When you visit our website, a Comlianz cookie is stored in your browser, which archives any consent or revocation statements you have entered. This data is not passed on to the provider Complianz, but remains on our server.
Your data on consent to cookie use is collected. This includes data such as
- Time Stamp,
- ProcessorID and
- User's browser used
We are legally obligated to keep the consent data. The stored data will remain stored until you request us to delete it, delete the Complianz cookie of your own accord or the purpose of the storage no longer applies. Legally required retention obligations remain unaffected. To view the details of Comlianz's data processing policy, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Translated with DeepL at https://www.mapbox.com/legal/privacy/ take out.
We use Mapbox, a service of MapBox Inc. (address: 740 15th St Nw Suite 500 Washington, DC 20005, USA), hereinafter referred to as "Mapbox", on some sub-pages. Mapbox is a service for displaying customizable maps. We use Mapbox to visually display geographic information (e.g., about our data center locations). When using Mapbox, Mapbox also processes data about visitors' use of the map features.
When you visit one of our websites on which Mapbox services are integrated, Mapbox stores a cookie on your end device via your browser. Information about the use of this website, including your IP address, may be transmitted to Mapbox in the USA. This information is processed for the purpose of displaying the website or ensuring the functionality of the Mapbox service.
If you do not want Mapbox to process data about you via our website, you can deactivate this service in your browser settings. In this case, however, you will not be able to use the map display.
Statistics / Web Analysis
For the purpose of searching and analyzing errors, evaluating usage and deriving measures for the future development of our website, we process your data using the local analysis software Matomo and Burst Statistic, WordPress.
Matomo processes the following data:
Anonymized IP addresses by removing the last 2 bytes (i.e. 126.96.36.199 instead of 198.51.100.54)
Pseudo-anonymized location (based on the anonymized IP address
Date and time
Title of the called page
URL of the called page
URL of the previous page (if it allows it)
Files that were clicked and downloaded
Duration of the page load
Country, region, city (with low accuracy due to IP address)
Main language of the browser
User agent of the browser
Interactions with forms (but not their content)
Since these services are local analysis tools, no personal data is forwarded to the service provider, to third parties or abroad. In addition, your personal data is anonymized immediately after collection. There is no storage of personal data beyond the first processing step.
The legal basis for the data processing is the legitimate interest (unconditional technical necessity for the provision and delivery of the service "website" expressly requested by you by your call) pursuant to Art. 6 para. 1 lit. f DSGVO.
Social Media - Sassy Social Share Buttons
We use the plugin "Sassy Social Share" on our website. This replaces the native share buttons of the social networks and protects your anonymity.
You can usually recognize the share buttons by the respective social media logos. This application prevents the plugins integrated on this website from transmitting data to the respective provider when you first enter the page.
"Sassy Social Share" embeds share buttons of social networks on our website only as a graphic that contains a link to the corresponding social network. By clicking on the corresponding social icon graphic, you will be redirected to the service of the respective network. The respective button establishes direct contact between the social network (e.g. Mastodon, Twitter, LinkedIn, Reddit) and you only when you actively click on the share button.
After clicking, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g. Twitter) at the same time, the respective provider can assign your visit to this website to your user account.
Activating the plugin constitutes consent within the meaning of Art. 6 (1) lit. a DSGVO. You can revoke this consent at any time with effect for the future.
Embedded "YouTube" videos
On our website we use the plugin of the social network YouTube. YouTube is a video portal of YouTube LLC., 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield ("EU-US Privacy Shield").
Google, and thus also its subsidiary YouTube, ensures that EU data protection regulations are also complied with when processing data in the USA.
We use YouTube in connection with the "Enhanced Privacy Mode" function to show you videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "Enhanced Privacy Mode" function causes the data described in more detail below to be transmitted to the YouTube server only when you actually start a video.
Without this "Enhanced Privacy", a connection to YouTube's servers in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
This connection is necessary in order to display the respective video on our website via your internet browser. YouTube will at least record and process your IP address, the date and time as well as the website you visited. In addition, a connection to Google's advertising network "DoubleClick" is established.
If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by setting your internet browser accordingly. You can find more information on this above under "Cookies".
Google provides further information on data collection and use as well as on your rights and protection options in this regard in the data protection information at https://policies.google.com/privacy ready
2.5 Registration / Customer account
If you create a customer account with us via our website, we collect and store the data you provide during registration (i.e., e.g., your name, address or e-mail address) solely for the purpose of providing pre-contractual services, processing contracts or for customer care purposes (e.g., to give you an overview of your previous orders with us). At the same time, we store the IP address and the date and time of your registration. Of course, this data is not passed on to third parties.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.
As far as the opening of the customer account furthermore serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.
You can revoke the consent you have given us to open and manage the customer account at any time with future effect in accordance with Art. 7 (3) DSGVO. For this purpose, you only need to inform us in writing about your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.
2.6 Contact via contact form, e-mail and telephone
As part of our cooperation with HKN GmbH (Hochstadenstr. 5, 47829 Krefeld. Germany) to improve customer service, data may be transferred to this partner.
We act as joint controllers in this process according to Art. 26 DSGVO.
Incoming inquiries via the contact form and the email addresses and phone numbers provided on our website are forwarded to the next available resources at ScaleUp or HKN GmbH. All data collected in this process is stored in the joint CRM system and can be accessed by both companies at any time.
The legal basis for this processing is Art. 6 para. 1 lit. b and f DSGVO.
Our legitimate interest is the more efficient processing of your request as well as process optimization and cost savings.
The data processed in this context will be deleted after the processing of your request has been completed.
Contact form and e-mail
Contact forms are available on our website for electronic contact. These are used for general inquiries, any type of direct contact, for registration for events and tours, and for ordering a product demonstration. We process this data to respond to the inquiries. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
If you contact us directly by e-mail (inquiry, application, other direct approach), your communication and identification data, i.e.
- E-mail address
- Phone number
- Message content
stored with us. With the sending of the message, the following data is also stored:
- IP address of the user
- Date and time
If you contact us via contact form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for the processing and answering of your request - without the provision of the data we can not or only limited answer your request.
The legal basis for this processing is Art. 6 para. 1 lit. b DSGVO.
The data will be used exclusively for processing the conversation.
The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your data will be deleted when your request has been finally processed and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
When you contact us by phone, your phone number (if transmitted) is stored as a communication date in the call history. This serves to manifest the call history.
The deletion takes place automatically after 90 days.
2.7 Transfer of personal data to non-EU countries / server location
With the exception of the above-mentioned cases, no personal data is transferred to non-European countries. The location of the web servers we use is Germany.
2.8 Amendment of the data protection provisions
If you wish to exercise a right to which you are entitled, please contact us as the person responsible at the above indicated Contact details or use one of the other communication options we offer.
With regard to our cooperation with HKN GmbH mentioned above in section 2.6, you may also contact HKN GmbH to exercise your rights under the joint responsibility.
3. rights of users and data subjects
3.1 Right to information
In accordance with Art. 15 of the GDPR, you have the right to request confirmation from us as to whether personal data relating to you is being processed by us. If this is the case, you have the right to information about this personal data as well as other information mentioned in Art. 15 DSGVO.
3.2 Right to rectification
According to Art. 16 DSGVO, you have the right to demand that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purpose of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
3.3 Right to deletion
You have the right to demand that we delete the personal data concerning you without delay. We are obliged to delete personal data without delay if the relevant requirements of Art. 17 DSGVO are met. For details, please refer to Art. 17 DSGVO.
3.4 Right to restriction of processing
In accordance with Art. 18 DSGVO, you have the right under certain conditions to demand that we restrict the processing of your personal data.
3.5 Right to data portability
Pursuant to Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a o DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and the processing is carried out with the help of automated processes.
3.6 Right of objection
Pursuant to Art. 21 DSGVO, you have the right to object to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
3.7 Right to complain to the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. This right exists in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
If you wish to exercise a right to which you are entitled, please contact us as the person responsible at the above-mentioned Contact details. You make it easier for us to process your request if you already provide proof of your identity so that we can assign your request to a specific data subject. If you have any questions about this, please contact us.