Privacy policy

01Controller

02Hosting and server logs

This website runs on Amazon Web Services (AWS) in the eu-central-1 region (Frankfurt am Main). Processing therefore takes place within the EU.

When you visit the site, our server automatically processes technically necessary access data: IP address, date and time of the request, the page requested, the referrer URL, and your browser and operating system identifier (user agent). This data arises when the pages are rendered and delivered server-side and is used solely to operate the website securely and reliably.

The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Server logs are deleted automatically after a short period and are never merged with other data.

03Cookies, consent and local storage

This website uses a consent management platform provided by Usercentrics GmbH. On your first visit you are shown a notice in which you decide which processing you allow. Your decision is stored so that we do not have to ask again on every visit; that storage is technically necessary and happens regardless of what you choose.

Only once you agree do we load Google Tag Manager, provided by Google Ireland Limited, and the services embedded through it. Without your agreement those scripts are blocked and set no cookies. You can reopen the notice at any time to change or withdraw your decision.

The legal basis for consent-requiring cookies is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG). For storing your decision itself it is § 25(2) TTDSG, since the consent management cannot work without it.

Separately, this website stores your choice between the light and dark theme in your browser's local storage. That happens only when you use the toggle, serves solely the presentation you asked for, and is not evaluated.

04Web analytics with PostHog

We use PostHog to understand how our website is used, running on PostHog's EU Cloud, so the data is processed within the EU.

Our PostHog setup is deliberately cookieless: session data is held only in your browser's memory and discarded when you close the tab. No cookies are set, no cross-device profiles are built, and no cross-site tracking takes place.

Because this sets no cookies and stores nothing on your device, it requires no consent; the analytics therefore run independently of what you choose in the consent notice.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in evaluating how our website is used, in aggregate, and improving it.

05Abuse protection: Cloudflare Turnstile

The request-access form is protected by Cloudflare Turnstile. Turnstile checks whether a request comes from a human, without image puzzles and without tracking cookies.

In doing so, Cloudflare, Inc. processes technical characteristics of your browser and connection (such as IP address and device information) to detect automated abuse.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in protecting the form against spam and automated abuse.

06Access requests

When you request access through the form, we process the data you provide: details about your organization (such as name, contact details, address, tax ID, and industry), the name and email address of your primary contact, and how you heard about us, to handle your request, follow up with you, and set up your organization on the platform.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps taken at your request).

We store this data only as long as needed to handle your request. If no collaboration comes about, we delete it.

07Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21 GDPR).

To exercise these rights, simply contact info@scaleits-solutions.com.

You also have the right to lodge a complaint with a data protection supervisory authority: the one responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA).