Privacy Policy

With this privacy policy we inform you which personal data we collect and for which purpose the data is processed when you use our website or services. Furthermore, we inform you about how we handle your personal data when you contact us. We also inform you about your rights as a data subject.

1. Controller and contact details

Rsponsible for the collection and processing of your personal data is Upvest GmbH (hereinafter “Upvest” or “We”).

Upvest GmbH
Prenzlauer Allee 242 - 247

10405 Berlin

Germany

Email: contact@upvest.co

2. Data protection officer

‍Our data protection officer is available for you at:

Upvest GmbH

Data Protection Officer
Prenzlauer Allee 242 - 247

10405 Berlin

Germany

Email: dataprotection@upvest.co

‍‍3. Visiting our website

Every time you visit our website, we collect the access data that your browser automatically transmits to enable you to use the website. The access data includes in particular:

  • Date and time of the request and time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specifically, the page accessed)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • IP address
  • Operating system and its interface
  • Language and version of the browser software

The data processing of this access data is necessary to enable you to visit the website and to ensure the long-term functionality, security and stability of our systems. The legal basis is Art. 6 (1) lit. f and b GDPR. We have an overriding legitimate interest in data processing for the most reliable and secure presentation of our website possible. For data protection reasons, we do not permanently store or analyze log files. We do not compare it with other data sets or pass it on to third parties.

4. Using our contact form


We offer you the opportunity to send us messages directly using a contact form. To do so, you need to provide an e-mail address where we can reach you. We also ask for your name, company and position so that we can address you. Furthermore, we collect data that enables us to better organise your business request. We process the data you provide in the contact form to answer your request. The legal basis for the described data processing of personal data from the contact form for the purpose of initiating and executing a contract with you is Art. 6 (1) lit. b GDPR, provided that you are a freelancer or self-employed or similar. If you are an employee of a legal entity or in all other cases, we process your personal data on the basis of Art. 6 (1) lit. f GDPR. The data collected when using the contact form will be automatically deleted after your request has been fully processed, unless we still need your data to fulfil contractual or legal obligations.

5. Marketing communication and declaration of consent

We offer you the opportunity to register to receive marketing information via our contact form or other channels. If you give us your consent to do so, Upvest GmbH will process the contact data you provide (name, email address) in order to inform you about products, services, events and news. Communication takes place via email.

Your personal data will be processed for marketing purposes exclusively based on your voluntary consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with future effect by using the unsubscribe link in each email or e.g. by contacting us at dataprotection@upvest.co. The withdrawal has no influence on the legality of the processing carried out up to the time of the withdrawal.

6. Cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. They help improve the website’s functionality and enable specific services.

6.1 Technically necessary cookies

These cookies are essential for the operation of the website. They ensure that you can use our services without technical restrictions.

Cookie: _cf_bm
Domain: .prod.website-files.com
Desciption: This cookie, set by Cloudfare, is used to support Cloudfare But Management.
Duration: 1 hour
Type: Necessary



Cookie: _cfuvid
Domain: .cdn.webflow.com
Desciption: This cookie, set by Cloudfare, is used to support Cloudfare Rate Limiting
Duration: 30 minutes
Type: Necessary

6.2 Marketing and Statistics Cookies

We use Google Analytics 4 to analyse user behaviour, measure performance, and optimise our website. This service collects data through cookie and server technologies to generate reports on website usage.

This tracking technology enables us to measure conversions and optimise marketing campaigns. This requires your explicit consent before any data is processed.

Cookie: _ga
Provider: Google Analytics
Purpose: Contains a randomly generated user ID. Google Analytics can use this ID to recognise returning users on this website and merge the data from previous visits. Used to distinguish users.
Duration: 2 years
Legal basis: Consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG)
Collected data: Device Information, Geographic Location, Browser & OS Details, Screen Resolution, Referrer URL, User Interactions, Date & Time of Visit, Page Views, Online Identifiers, Anonymized IP Address, User ID, Ad Tracking Identifiers


Cookie: _ga_container-id
Provider: Google Analytics
Purpose: Contains a randomly generated user ID. Google Analytics can use this ID to recognise returning users on this website and merge the data from previous visits. Used to persist session state.
Duration: 2 years
Legal basis: Consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG)
Collected data: Device Information, Geographic Location, Browser & OS Details, Screen Resolution, Referrer URL, User Interactions, Date & Time of Visit, Page Views, Online Identifiers, Anonymized IP Address, User ID, Ad Tracking Identifiers

Service Provider:
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

https://support.google.com/policies/contact/general_privacy_form

https://policies.google.com/technologies/cookies?hl=de

https://tools.google.com/dlpage/gaoptout?hl=de

These cookies will only be used if you provide explicit consent in the cookie settings.

7. Storage period

Unless a more specific storage period has been specified in this data protection declaration, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. a legal obligation to store it in accordance with legal, such as tax or commercial, retention periods).

8. Your Data Subject Rights

You have the following rights with respect to us regarding your personal data: You have the right to information about the personal data concerning you that we have processed. If you request information, please note that for legal reasons we are obliged to ask you for proof that you are the person you claim to be.

Furthermore, you have a right to correction or deletion or to restrict processing, insofar as you are legally entitled to do so. In addition, you have a right to object to the processing within the scope of the legal requirements. The same applies to a right to data portability.

You have the right to lodge a complaint with a supervisory authority, for example at the Berlin Commissioner for Data Protection and Freedom of Information, who is responsible for us.

9. Right to object to the processing of your data

Insofar as we base the processing of your personal data on the balancing of interests in Art. 6 (1) lit. f GDPR, you may object to the processing. This is the case, for example, if the processing is not necessary in particular to fulfill a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.

If you have any questions or concerns regarding your data, please do not hesitate to contact dataprotection@upvest.co.