Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website.

Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy set out below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in this website's legal notice (Imprint).

How do we collect your data?
Your data is collected in part by you providing it to us. This may, for example, be data you enter into a contact form.

Other data is collected automatically or after your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, or deletion of this data.

For this and other questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

Analytics Tools and Third-Party Tools

When you visit our website, we analyze your browsing behavior statistically. We use the self-hosted software Matomo for this — without your consent without cookies and with a shortened IP address. We only use further analytics and marketing services (Google Analytics, Google Ads, Leadinfo) with your consent.

You can object to the measurement and change your consent at any time in the privacy settings. Details can be found below in the section “Analytics Tools and Advertising” and in the overview of services at the end of this page.

2. General Information and Mandatory Information

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the browser's address line changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the internet (e.g. when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Responsible Party

The party responsible for data processing on this website is:

UP Designstudio GmbH
Löffelstr. 40,
70597 Stuttgart

Managing Director
Lasse Creutzfeldt

Responsible for content pursuant to § 18 (2) MStV
Lasse Creutzfeldt

Phone
+49 711 32654 60

Email
info@updesignstudio.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, or similar).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient.

The legality of the data processing carried out up to the revocation remains unaffected by the revocation.

Information, Blocking, Deletion

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, where applicable, a right to correction, blocking, or deletion of this data.

For this and other questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.

Objection to Advertising Emails

We hereby object to the use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information materials.

The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.

3. Data Collection on Our Website

Cookies

The internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR.

The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your browsing behavior) are stored, these are dealt with separately in this privacy policy.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

This data is not merged with other data sources.

The legal basis is our legitimate interest in providing the website securely and without technical errors (Art. 6 (1) (f) GDPR).

Hosting

We run our website, the content management system and the audience measurement with Railway Corporation (San Francisco, USA); the servers are located in the EU (region EU West). The host processes the server log data mentioned above on our behalf. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6 (1) (f) GDPR).

Contact and Application Form

If you contact us via the contact or application form, we process your details (e.g. name, email address, message, and for applications also your documents) in order to handle your inquiry or application. The legal basis is Art. 6 (1) (b) GDPR where your inquiry aims at a contract or an employment relationship, otherwise our legitimate interest in responding (Art. 6 (1) (f) GDPR). Your details are delivered to us by email; for this we use the sending service ZeptoMail of Zoho Corporation B.V. (Netherlands) with a data center in the EU. We delete your data as soon as it is no longer required for processing and no statutory retention obligations apply.

To protect against spam, we use Friendly Captcha by Friendly Captcha GmbH (Germany). Your browser solves a small computing task; technical data such as the IP address is transmitted, which Friendly Captcha only processes in encrypted (hashed) form. Friendly Captcha does not set cookies. The legal basis is our legitimate interest in protection against abusive requests (Art. 6 (1) (f) GDPR).

4. Analytics Tools and Advertising

Matomo (Self-Hosted Audience Measurement)

To understand which content of our website is used and to improve it, we use the analytics software Matomo. We run Matomo ourselves on a server in the EU (see “Hosting”); we do not pass the data on to third parties.

Measurement without cookies
Without your consent, we measure without cookies and without reading information from your device. We only record details that your browser transmits with every page view anyway, and your use of the site: pages viewed and time, the previously visited page (referrer), browser, operating system and language, the IP address shortened by two bytes (from which we derive the approximate location) as well as interactions such as scroll depth, reading time, video start and clicks on contact and project links. To recognize a visit across several pages, our server forms an identifier from a secret value that changes daily, the IP address, the browser and the language. It is not stored on your device and changes daily, so we cannot recognize you beyond that day. A visit is only counted from your first input (e.g. click, tap, scroll); we do not record automatic page views without any interaction.

The legal basis is our legitimate interest in designing and improving our website according to demand (Art. 6 (1) (f) GDPR). Since no information is stored on or read from your device, no consent under Section 25 TDDDG is required for this.

With your consent
If you consent to the “Matomo” service in the privacy settings, our server additionally sets the cookie “up_vid” (lifetime 13 months) so that we can recognize returning visits, and Matomo records technical characteristics such as the screen resolution. The legal basis is then your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time in the privacy settings; the cookie is then deleted.

Storage period
We delete the individual measurement data after 13 months. Beyond that we only keep aggregated statistics that do not allow conclusions about individual visits.

Objection
You can object to the measurement at any time: Switch off measurement in this browser. A technically necessary cookie (“up_optout”, lifetime 2 years) is set so that we recognize your objection; if you delete your cookies, you have to object again. Switch measurement back on. If “Do Not Track” is enabled in your browser, we do not measure either.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Processing takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR), which you give via our consent management (Usercentrics) and can revoke at any time with effect for the future. Google Analytics uses cookies that enable an analysis of your use of the website.

IP Anonymisation
We have activated the IP anonymisation function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services to the website operator relating to website and internet use.

The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Objection
You can withdraw your consent to analysis by Google Analytics at any time via the privacy settings on this website. For more information on how Google Analytics handles user data, please see the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Further Services with Your Consent

With your consent, we also use Google Ads (measuring the success of our ads) and Leadinfo (identifying companies by their IP address; the course of your visit may also be recorded). Provider, purposes, storage period and recipients of these services can be found in the overview of services at the end of this page. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), which you can withdraw at any time in the privacy settings.

5. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.

No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR).

You can revoke the consent you have given to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted after you unsubscribe. Data stored by us for other purposes (e.g. email addresses for the members' area) remains unaffected by this.

MailChimp

This website uses the services of MailChimp for sending newsletters. The provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of receiving the newsletter (e.g. email address), it is stored on MailChimp's servers in the USA.

The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses and, where the provider is correspondingly certified, the EU-US Data Privacy Framework. (The former “EU-US Privacy Shield” has been invalid since the European Court of Justice's “Schrems II” ruling of 2020.)

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp's servers in the USA.

This makes it possible to determine whether a newsletter message has been opened and which links, if any, were clicked. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient.

It serves exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not want analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

Data processing takes place on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted both from our servers and from MailChimp's servers after you unsubscribe. Data stored by us for other purposes (e.g. email addresses for the members' area) remains unaffected by this.

For more information, please see MailChimp's privacy policy at: https://mailchimp.com/legal/terms/.