Privacy notice

1. Controller

The controller responsible for processing personal data in connection with this website is:

Scalevity GmbH
Marie-Curie-Straße 2
22941 Bargteheide
Germany
Email: info@scalevity.com

Represented by its managing director, Florian Kleene.

2. Data protection officer

You can contact our appointed data protection officer at:

Lena Kleene, Attorney-at-law
Mabel Law
Marie-Curie-Straße 2
22941 Bargteheide
Germany
Email: info@mabel-law.de
Website: www.mabel-law.de

3. Website delivery and security

We use hosting provided by Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA. Accessing this website involves processing connection and request data needed to deliver it. This includes the IP address, time, requested address or file, volume of data transferred, response status, and information supplied by the browser about the browser, operating system and, where provided, referring page.

This processing supports website delivery, availability, security, troubleshooting and abuse prevention. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable website. Without the data required to establish a connection, the website cannot be delivered.

Kinsta uses Cloudflare to protect its infrastructure. Where CDN or edge caching is enabled, content is also delivered through Cloudflare’s network. Cloudflare Inc. and Kinsta’s infrastructure providers may process request data for these purposes. This is separate from marketing or visitor tracking embedded by us.

According to Kinsta’s hosting documentation, server log files remain available for up to four days. Request data, including IP addresses, may also be kept in Kinsta’s analytics infrastructure for operational and security purposes for up to 30 days. These periods concern different systems. Individual records may be retained longer only where necessary, for example to investigate a specific security incident or establish or defend legal claims.

Details about processing and subprocessors: Kinsta Data Processing Addendum and Kinsta Subprocessor List. Section 7 explains potential processing outside the European Economic Area.

4. Cookies, local features and external content

The website code provided by us does not set cookies or use Local Storage or Session Storage. We do not embed advertising pixels, individual visitor-behaviour analytics services or remotely hosted fonts. Fonts, images, scripts and interactive graphics are delivered as parts of our website.

The language is determined by the page address you select. Calculators and animations process inputs within your browser without sending them to analytics or AI services. Social-media logos and technology names shown in illustrations are not embedded services from those providers.

Depending on the security configuration and the request, hosting protection may trigger additional checks. Where this involves accessing information on your device or setting security cookies, processing without consent is permitted only if the requirements of Section 25(2) of the German TDDDG are met. Associated processing of personal data also requires a GDPR legal basis, in particular the security interest described in Section 3.

No consent banner is used for the website features described here. If services requiring consent are introduced, they will be activated only after consent has been given, with a withdrawal option that is as easy to use as giving consent.

5. Contact and email

You can contact us at info@scalevity.com. We process your email address, name, company information where supplied, message and attachments to the extent needed to deal with your enquiry.

Our contact page provides guidance for project enquiries and direct email links. Selecting one of these links opens your email application. A message is transmitted only when you send it from that application.

Our email accounts use Microsoft 365 supplied through GoDaddy. GoDaddy and Microsoft participate in providing, administering, transmitting, storing and securing email communications. Relevant contractual information is available in the GoDaddy Data Processing Addendum and the Microsoft Products and Services Data Protection Addendum.

Article 6(1)(b) GDPR applies to enquiries concerning steps towards a contract with you or performance of that contract. Other enquiries, including communication with a company’s representatives, are handled under Article 6(1)(f) GDPR: our legitimate interest in appropriate communication and handling enquiries. Article 6(1)(c) GDPR applies where statutory retention is required.

Providing information is voluntary. We may be unable to answer without a usable contact address and sufficient details. We retain correspondence for as long as necessary to handle the enquiry and any resulting business relationship. It is then deleted unless statutory retention or evidence needed to establish or defend claims requires further retention. In those cases, the relevant statutory period and the conclusion of any proceedings determine retention.

6. Job applications

If you apply by email, we process contact details, employment history, qualifications, work samples and other information you provide to decide whether to establish an employment relationship. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG). Enquiries about independent professional collaboration are covered by the bases in Section 5.

Access is limited to the people handling the application and service providers required for email processing. Please submit only information relevant to your application. Without the information needed to assess suitability, we may be unable to consider it.

If you are employed, necessary information is transferred to personnel administration and separate information will be provided. Otherwise, application records are deleted after the procedure ends once they are no longer needed for the decision or to establish or defend possible claims. Relevant claim and procedural deadlines and, where applicable, the conclusion of a specific dispute determine that period. Inclusion in a candidate pool requires a separate agreement and information.

7. Recipients and international processing

Within Scalevity, personal data is accessible only to people who need it for the stated purposes. Further recipients include the hosting, security and email providers described above, our data protection officer or legal advisers where necessary, and bodies to which disclosure is legally required.

Kinsta and the international infrastructure and email providers involved may process data outside the European Economic Area, particularly in the United States. Selecting an EU server location does not entirely exclude such processing, for example for support or security functions.

Kinsta’s processing terms incorporate the EU Standard Contractual Clauses for relevant international transfers. The email providers’ contractual terms also address international transfers. Where no applicable adequacy decision exists, a transfer requires appropriate safeguards under Article 46 GDPR, particularly Standard Contractual Clauses and any necessary supplementary measures. You can request details and a copy of the safeguards applicable to your data using the contact information above. The providers’ linked contractual documents contain further details.

8. Your rights

Subject to the applicable legal requirements, you have the following rights:

• Access to your personal data and information about its processing (Article 15 GDPR).
• Correction of inaccurate data and completion of incomplete data (Article 16 GDPR).
• Erasure and restriction of processing (Articles 17 and 18 GDPR).
• Data portability for automated processing based on consent or a contract (Article 20 GDPR).
• Withdrawal of any consent with effect for the future; previous lawful processing remains unaffected (Article 7(3) GDPR).

Contact us or our data protection officer to exercise your rights. The website itself does not make automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR.

9. Right to complain

You may lodge a complaint with a data protection supervisory authority, particularly where you habitually reside or work or where the alleged infringement occurred (Article 77 GDPR). The authority generally responsible for businesses based in Schleswig-Holstein is the Independent Centre for Data Protection Schleswig-Holstein (ULD): www.datenschutzzentrum.de.