UpscalleThis translation is provided for convenience; the German version is legally binding.
Controller
Upscalle (owner: Nico Schmidt), hallo@upscalle.de
What happens when you visit the site
When you open a page, the server processes technically necessary data (IP address, time, requested page, browser) to deliver the site and protect it against misuse (Art. 6 (1) (f) GDPR). We use no analytics or advertising cookies and embed no content from third-party servers; even the fonts are hosted on our own server.
Hosting
The site and the client portal run on a server operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany, in a data centre in the European Union. The technically necessary data mentioned above is processed there (Art. 6 (1) (f) GDPR).
Domain and email
Cloudflare, Inc. (USA) handles the domain name system (DNS) for our domain. Cloudflare forwards emails sent to hallo@upscalle.de to our mailbox and processes the content and sender details of those emails in doing so. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure and reachable domain (Art. 6 (1) (f) GDPR).
Contact form
We store the details you enter in the form (name, email, optionally company, phone, channel, website, message) to handle your request (Art. 6 (1) (b) GDPR, your consent under Art. 6 (1) (a) GDPR). We delete them once they are no longer needed for the request, unless we are legally required to keep them.
Online orders and payment
When you order online, we process the details from the order form (company, name, email, phone, name of your channel, whether you order as a business or a private person, your consents with time) to conclude and perform the contract (Art. 6(1)(b) GDPR). Payment is made through Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). You enter your payment details directly with Stripe; we do not see them. Stripe also transfers data to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. More in the Stripe privacy policy. We keep invoice and payment data for the statutory periods (up to ten years, Section 147 of the German Fiscal Code). Cancellations sent via "Cancel contracts here" are stored to process and confirm them.
Client portal
To sign in to the portal we set a technically necessary session cookie. We never store passwords in plain text, only as a hash. To protect against misuse we log sign-in attempts (time, account, IP address).
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. You can withdraw consent at any time with effect for the future. Write to hallo@upscalle.de.