Privacy Policy

1. Introduction

We take the protection of your personal data very seriously. This privacy policy informs you about how we collect, process, and protect your data when you use our website.

2. Controller

3. Server Log Files

When you visit our website, our hosting provider automatically collects server log files including your IP address, browser type, referring URL, date and time of access, and pages visited. This data is processed based on Art. 6(1)(f) GDPR (legitimate interest in ensuring website security and stability). Log data is deleted after 14 days.

4. Waitlist Registration

When you join our waitlist, we collect the following data:

• Email address (required)
• Startup name (optional)

This data is processed based on Art. 6(1)(a) GDPR (your consent). We use a double opt-in process: after registration, you will receive a verification email with a 6-digit code. Only after successful verification will your registration be complete.

You can withdraw your consent at any time by clicking the unsubscribe link in our emails. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Unverified registrations are automatically deleted. Verified registrations are stored until you unsubscribe or until the waitlist purpose has been fulfilled.

5. Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data exclusively within the European Union. We have concluded a Data Processing Agreement (AVV) with Hetzner in accordance with Art. 28 GDPR.

6. Google Analytics

We use Google Analytics 4, a web analytics service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that are stored on your device only after you have given your explicit consent in accordance with § 25 TDDDG.

Data may be transferred to Google LLC in the USA. The transfer is based on Google's participation in the EU-US Data Privacy Framework (DPF), for which an adequacy decision by the European Commission exists (Art. 45 GDPR).

IP addresses are automatically anonymized by Google Analytics 4.

You can withdraw your consent at any time via the cookie settings on our website. You can also prevent data collection by Google Analytics by using a browser add-on to deactivate Google Analytics.

We have concluded a Data Processing Agreement with Google.

7. Cookies

Our website uses only technically necessary cookies by default (e.g., for storing your cookie consent preference). Analytics cookies (Google Analytics) are only set after you have given your explicit consent via our cookie banner, in accordance with § 25 TDDDG.

8. Email Communication

When you contact us by email, we process your email address and the content of your message based on Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). For sending verification and notification emails, we use an email service provider with whom we have concluded a Data Processing Agreement.

9. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany.

10. Changes to this Privacy Policy

We may update this privacy policy from time to time. The current version is always available on our website.