Legal
Privacy Policy of the Website
www.scaleup.team
I. General Information
The Website www.scaleup.team ("ScaleUp ") is a service of Masterhouse GmbH, hereinafter also referred to as " Masterhouse" or "we"/"us".
In the following we inform you about the handling of your personal data. If you use our Website and the Masterhouse service, personal data will be processed.
Because the protection of your privacy is important to us, we would like to inform you to what extend your personal data gets processed by us and in what way.
You can access this data protection declaration at any time under the section "Privacy Policy" at www.scaleup.team/legal/privacy/ on our Website.
N.B.: Of course we observe the legal provisions of the data protection regulation ("GDPR"), the Federal Data Protection Act ("BDSG") as well as other data protection regulations.
II. Name and address of the controller
Masterhouse, as operator of the Website, is responsible regarding personal data that gets processed because you use our Website.
Masterhouse
GmbH
Represented by CEO Ralph Chromik
Geigerstrasse 18
82166 Gräfelfing
Deutschland
Phone: +49 (0)800 664 698 7
E-Mail: info (at) scaleup.de
III.Contact details of the data protection officer
If you have any questions or if you wish to exercise your rights, please contact our data protection officer at
Ralph Chromik
Geigerstrasse 18
82166 Gräfelfing
Deutschland
E-Mail: privacy@scaleup.de
IV. Processing personal data
a) Description and scope of data processing
Every time you visit our Website, your browser transmits the following data which gets automatically saved for technical reasons:
- information about your browser type and version
- the operating system you are using
- the previous website from where you are accessing us (referrer URL)
- your IP address
- the date and time when accessing our Website
Our system stores your personal data in log files. This data is not stored with other personal data in relation to you.
b) Legal basis for data processing
We process your data temporarily pursuant to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data processing purpose
It is necessary for us to process your IP address temporarily to enable the Website to be made available on your terminal device. Furthermore, we use your personal data to optimize our Website and guarantee the security of our IT systems. Your data will not be processed for marketing purposes.
These reasons also reflect our legitimate interest in processing your personal data.
d) Storage period
The aforementioned personal data will be deleted as soon as it is not necessary anymore for achieving the processing purpose. This is the case when the respective session has been ended by you.
IP addresses that were processed in log files, will be deleted after seven days. A longer storage period is only appropiate if your IP address is deleted or alienated, which would make it impossible for us to draw any conclusions from the IP address to your person.
e) Possibility to object and removal according to Article 21 GDPR
It is not possible to object the processing of this data since it is necessary for the Website´s functioning.
a) Description and scope of data processing
We offer you on our Website the opportunity to register for self assessment tools, the ScaleUp.team Learning Plattform and other digital tools. For this, we you need to fil out an online registration form and enter your personal data. We require for the online registration the following personal data from you:
- first and last name,
- e-mail address,
- password
- statistical information
Your data will not be transmitted to third parties. When you register on this Website, we will also store your IP address and the date and time of your registration.
b) Legal basis of data processing
Processing your personal data is necessary for entering into a contract that you conclude in the end of the registration process. Regarding this, we process your personal data according to Article 6 Sec. 1 phrase 1 lit. b GDPR.
The legal basis for collecting and storing your IP address, date and time of your registration is Article 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data processing purpose
Personal data which gets collected during the registration process is processed for entering into a contract and for the performance of the contract.
We process your IP address, the date and time of your registration for our security in the event that a third party registers on our Website without your knowledge or misuses your personal data. This is also our legitimate interest for processing your IP address. Data gets not transmitted to third parties or compared with data collected by other website services.
d) Storage period
Your personal data gets deleted when it is not necessary anymore to achieve the processing purpose.
This is usually the case, after the limitation period has been expired, beginning with the end of the year in which the digital or analog coaching relationship has been terminated. When the limitation period has begun, your personal data will be blocked. Your personal data will only be deleted when statutory storage obligations do not hinder us from deleting your personal data. We are in particular obliged to store your personal data for tax reasons. The data will then be deleted after expiry of such storage obligations.
e) Possibility to withdraw according to Article 7 GDPR and removal according to Article 21 GDPR
You can cancel your registration at any time and with it withdraw your consent regarding the processing of your personal data. To execute the withdrawal, write an email to privacy@scaleup.de including the email of the associated account. The profile settings enable you to change your personal data. The withdrawal does not affect the legality of processing personal data that has been processed on the basis of the given consent and took place until the withdrawal has been executed.
It is not possible to object to the processing of your IP address, as the processing of data is absolutely necessary for the prevention and tracing of abuse.
a) Description and scope of data processing
We use so-called cookies on our Website, they serve us to recognize you as a user and to facilitate the usage of our Website. Cookies are small text files which your web browser installs on your terminal equipment. Mostly so-called "session cookies" are used, they get deleted automatically after your session has been completed.
Other cookies, so-called "persistent cookies", remain installed on your terminal equipment until they get removed by you. These cookies allow us to identify your web browser when you visit our Website the next time.
You can check in your web browser the cookies that are installed on your terminal equipment. Within the predefined scope of your web browser settings you can choose whether cookies should be permitted in individual cases, should not be accepted in general or be deleted automatically after your web browser has been closed. Nevertheless, disabling cookies may limit the possibility to use the Website.
We use cookies to make our Website more user-friendly for you. Therefore, some elements of our Website require the possibility to identify the calling browser after a page change has occurred.
The following data is stored in cookies and gets transmitted:
- Log-in information for input masks
- Language Settings of the website
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data processing purpose
We use technical cookies that are necessary to optimize the usage of our Website. Otherwise we would not be able to offer certain functions on our Website. It is essential for these function that your web browser gets recognized after a page change has occurred. These purposes also represent our legitimate interest in processing your personal data.
The use of cookies is required for the following applications:
- Acceptance of language settings
- Memorizing search terms
- Handling user sessions of registered members
We do not use personal data which got collected by technically necessary cookies to create user profiles.
d) Storage period, possibility to object and removal according to Article 21 GDPR
Cookies that are installed on your terminal equipment transfer the stored information to our Website. Thus, you have full control whether and how long cookies are able to store informational data. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. Though, be aware when you deactivated the use of cookies regarding our Website, it may no longer be possible to use all functions our Website can offer you.
a) Description and scope of data processing
We use on our Website Google Analytics, a web analytics service offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google". By using Google Analytics cookies get installed on your terminal equipment that enable Google to analyse your behaviour when you visit our Website. Such cookies generate information regarding your usage behaviour and transmit the generated information to Google which stores it on servers located in the USA.
Since data protection is very important to us, we allow you to use our Website anonymously. Therefore, we use Google Analytics exclusively with the extension "_gat._anonymizeIp". This extension ensures the reduction of your IP address within the territory of the European Economic Area (hereinafter “EEA”), which means, your IP address gets anonymized before leaving the EEA. Only when extraordinary circumstances occur will your IP address be transmitted without reduction to a Google server, in this case the reduction process will be carried out in the USA. According to Google´s own statement, your IP address will not be merged with other data collected by Google.
Google is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework .
Further information of how and to what extend your personal data gets processed by Google Analytics can be found in Google´s Privacy Policy under https://www.google.com/analytics/terms/us.html .
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data Processing purpose
Google uses the collected data to analyse how you have used the Website, to prepare and send us a summary of the activity on our Website and to offer other services that are related to the usage of the internet in general or our Website in particular. These purposes represent also our legitimate interest in the processing your personal data.
When obliged by law or where Google commissions third parties to process data, it may transfer the collected information to third parties.
d) Storage period
The storage period for cookies used by Google Analytics is restricted to 50 months. You can independently uninstall cookies that got installed by Google Analytics and delete the stored data with it. We will explain how this deletion can be carried out by using your web browser´s settings in the following section.
e) Possibility to object and removal according to Article 21 GDPR
You are free to prevent the installation of cookies by adjusting your web browser settings accordingly. Google offers for the most popular web browsers a deactivation add-on to enable you to control the collection of data on websites which use Google Analytics. The add-on informs Google Analytics' JavaScript (ga.js) that no information about the visitors of the respective website should be transmitted to Google. However, the deactivation add-on only prevents the transmission of information that got collected by Google Analytic cookies, information generated by other web analytics services we use will still be transmitted. For more information on installing the respective browser add-on, please visit https://tools.google.com/dlpage/gaoptout?hl=en .
a) Description and scope of data processing
Our Website uses video components of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter "YouTube", which is a company of the Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use the configuration "- extended data protection mode -" provided by YouTube. According to YouTube, when applying this mode, no information will be stored about you as long as you simply visit a website where the YouTube video is embedded. Only when you play the embedded YouTube video, cookies get installed on your terminal equipment and personal data will be transmitted to YouTube. When you are logged in to your YouTube account at the same time as playing the YouTube video on the subpage, your internet usage behaviour will be assigned to your personal YouTube profile.
We are not aware of the extent YouTube is collecting your data. According to its own statement, YouTube collects location-related data (e.g. your IP address) and uses cookies to uniquely identify your web browser or Google account. The information collected may be shared within the services of the Google Network. For more information about the manner and scope YouTube and Google process your personal data, visit https://policies.google.com/privacy?hl=en&gl=en .
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data processing purpose
Your personal data will be processed to make the respective YouTube video available to you. This is also our legitimate interest for processing your personal data.
d) Storage period
We are not aware for how long the personal data that got collected by YouTube will be stored, neither can we influence it.
e) Possibility to object and removal according to Article 21 GDPR
If you do not want YouTube to connect your personal data directly to your YouTube member account, you should be logged out of your account at the time you are visiting our Website. You can also prevent the YouTube plugin from being used by applying add-ons to your web browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
a) Description and scope of data processing
After completing your registration you receive pre-set notifications regarding the personal and business growth of the client as well as onboarding instructions. You can change the notification settings at any time in your account and receive the notifications as system message. For sending the notifications, we use the e-mail address you stated in the online registration form.
For dispatching our notifications we use the e-mail dispatching tool Mailjet that is operated by Mailjet SAS, a company registered under the laws of France under number 524 536 992 with the Paris Trade & Companies Register, and having its registered office at 13-13 bis, rue de l’Aubrac 75012 Paris, France (hereinafter “Mailjet”) and acts as processor on our behalf. Thus, your e-mail address and name you have provided during the account registration process will be transmitted to and stored on a server operated by Mailjet. The data you have provided through the account registration (e-mail address, name) will exclusively be used for dispatching the newsletter you have subscribed to and will not be transferred to third parties. The collected data will not be synchronised with to other data we collected through other components of our Website.
E-mail notifications sent via Mailjet contain are so-called web-beacons (pixel tags). A web-beacon is a pixel-sized image file that collects certain data when the e-mail is opened, e.g. time of retrieval, your IP address, information about the e-mail program you are using, when you open a link which integrated in the e-mail. These data is sent to a server operated by Mailjet. The name of the image file is individualized for each recipient of the notification e-mail by a unique ID. This enables us to register which ID belongs to which e-mail address. Based on this data Mailjet summarizes a report for us, through which we can recognize if and when you have opened our newsletter and which link contained in the e-mail you have followed.
Mailjet is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework .
b) Legal basis for data processing
We process your personal data pursuant to Art. 6 Sec. 1 phrase 1 lit. a GDPR.
c) Data processing purpose
Your e-mail address is processed for sending you notifications via e-mail. We check the e-mail address you have provided, to ensure that you are in fact the actual owner of the e-mail address.
We the information we gain through the web-beacons to continuously improve our notifications and to adapt it to your personal interests. According to its own statements, Mailjet uses the data only in a pseudonymized form to optimize and improve its own offers.
d) Storage period
Your personal data gets deleted when it is not necessary anymore to achieve the processing purpose. We will not use your e-mail address for sending you notifications via e-mail when you have changed the channel for sending you notifications to “system message”. We do not delete your e-mail address since you need it for the log in onto our Website.
We delete your personal data stored in connection with the use of "web beacons" when you change the channel for receiving notifications to “system message”. We have no influence on the use and storage of your data by Mailjet, for more information how and to what extend Mailjet processes your personal data, see https://www.mailjet.com/privacy-policy/ .
e) Possibility to object according to Article 21 GDPR
You have the possibility to object to receive the notifications via e-mail at any time. For this, log in onto the Website go to “settings” for changing under “notifications” the channel for receiving notifications to “system message” instead of “Email”. To object the processing of your collected personal data through MailChimp, please turn to privacy@mailchimp.com .
a) Description and scope of data processing
We use Google Web Fonts (hereinafter “Google Fonts”) on our Website, a service offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Google Fonts enables us to display you a suitable font after you have accessed our Website. For this service, Google collects your IP address when you access our Website and transmits it outside the EEA and stores your IP address on servers located in the USA.
Google is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework . For further information of how and to what extend your personal data gets processed by Google can be found in Google´s Privacy Policy under www.policies.google.com/privacy?hl=de .
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data Processing purpose
We use Google Fonts to display you a suitable font and increase the attractiveness of our Website and with it, the service we are offering. These purposes represent also our legitimate interest in processing your personal data.
d) Storage period
We are not aware for how long your data gets stored by Google. Google does not disclose the storage period regarding personal data that got collected through Google Web Fonts.
e) Possibility to object and removal according to Article 21 GDPR
If you do not want Google to connect your personal data directly to your Google account, make sure you are logged out at the time you are visiting our Website. For more information, please visit www.privacy.google.com/take-control.html?categories_activeEl=sign-in . Furthermore, you can block the data collection through Google Fonts by installing the software extension Joomla. For more information about disabling Google Fonts, please visit www.extensions.joomla.org/extension/jmg-disable-google-font/ .
a) Description and scope of data processing
We use Google Maps on our Website, a service offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Google Maps enables us to show you on an interactive map the location of persons and institutions which have given testimonials regarding our service.
Google processes especially the following data for this purpose:
- Information about your browser type and version
- Your IP address
- The website from which the request is made to Google Maps (referrer URL)
- The date and time when you visited our Website
Google transmits this data outside the EEA and stores your IP address on servers located in the USA. Google is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework . For further information of how and to what extend your personal data gets processed by Google can be found in Google´s Privacy Policy under www.policies.google.com/privacy?hl=de .
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data Processing purpose
We use Google Maps to give you an insight into our international focus regarding the service we are offering and by this, to convince you to engage us as financial consultants.
d) Storage period
We are not aware for how long your data gets stored by Google. Google does not disclose the storage period regarding personal data that got collected through Google Maps. For more information please visit www.policies.google.com/privacy?hl=de and to: https://www.google.com/help/terms_maps.html
e) Possibility to object and removal according to Article 21 GDPR
If you do not want Google to connect your personal data directly to your Google account, make sure you are logged out at the time you are visiting our Website. It is not possible to object to this data processing, as it is absolutely necessary for the presentation of the relevant locations.
a) Description and scope of data processing
We are using Google reCAPTCHA (hereinafter: “reCAPTCHA”) on our Website, a service offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. We apply Google reCAPTCHA to ensure that certain actions on our Website are performed by you as a human and not by a bot.
By applying reCAPTCHA on our Website we enable Google to processes the following data:
- Information about your browser type, version and language settings of your browser
- Your IP address
- Screen and window resolution
- Language settings of your browser
- Website from which the request is made to Google Maps (referrer URL)
- Date and time when you visited our Website
Google transmits this data outside the EEA and stores your IP address on servers located in the USA. Google is listed as participant of the EU-US Privacy Shield and ensures an appropriate level of data protection, see www.privacyshield.gov/EU-US-Framework . For further information of how and to what extend your personal data gets processed by Google can be found in Google´s Privacy Policy under www.policies.google.com/privacy?hl=de .
b) Legal basis for data processing
We process your personal data according to Art. 6 Sec. 1 phrase 1 lit. f GDPR.
c) Data Processing purpose
We use reCAPTCHA to prevent our Website from being misused by automated bots that might cause an impairment of our IT systems.
d) Storage period
We are not aware for how long your data gets stored by Google. Google does not disclose the storage period regarding personal data that got collected through reCAPTCHA. For more information please visit www.policies.google.com/privacy?hl=de .
e) Possibility to object and removal according to Article 21 GDPR
It is not possible to object to this data processing, as the processing of the data is vital to prevent security risks and keep our Website available.
We use on our Website the Google Tag Manager which allows us to manage website tags through a single interface. The tags are implemented by the Google Tag Manager without using cookies and without collecting any personal data, however, the tool triggers other tags, which in turn may collect personal data. The Google Tag Manager neither accesses nor processes this data. Since the Google Tag Manager is a cookieless domain, a deactivation at the domain or cookie level, will not prevent being tracked by tags implemented by the Google Tag Manager.
V. Rights of the data subject
Regarding the processing of your personal data on our Website, you are a data subject within the meaning of the GDPR, therefore, you are entitled of the following rights towards us:
You have the right to request information about your personal data processed by us at any time. This includes information about the origin, recipients or categories of recipients to whom we transfer your data and the purposes for which we process your personal data.
You have the right to request the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
You can ask us to delete your personal data immediately. We are obliged to carry out the deletion immediately unless we are obliged to further process your personal data on the basis of contractual and/or legal regulations. This is the case, for example, if we are prohibited from deleting data under tax law. In such a case we restrict the processing and delete the personal data in question immediately after expiry of the retention period.
You have the right to receive your personal data you have provided in a structured, current and machine-readable format, if this is technically possible. Furthermore, you have the right to transfer this data to another controller without any hindrance.
You have the right not to be subject of a completely automated decision making process - including profiling - that has a legal effect against you or significantly impairs you in a similar manner.
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.
Our competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27 (Schloss), 91522 Ansbach
Postfach 606, 91511 Ansbach
Phone: +49 (0) 981 53 1300
Facsimile: +49 (0) 981 53 98 1300
E-Mail: poststelle@lda.bayern.de
Get in touch
