Privacy Policy

Protecting your personal data matters to us. This privacy policy explains which personal data we process on this website and for which purposes — in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Data Protection Code (Legislative Decree 196/2003, as amended).

1. Controller

UPSCALE vGmbH
Innsbruckerstraße 33 – Kampill Center, I-39100 Bozen (BZ), Italy
upscale Office Bruneck: Bachla 6, I-39030 Pfalzen (BZ), Italy
Email: [email protected] · Phone: +39 0471 379 044

2. Hosting and server log files

This website is hosted by DigitalOcean LLC. When you visit the website, technical access data is processed automatically (IP address, date and time, page accessed, browser type). This data is technically necessary for the secure operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.

3. Contact form

If you write to us via the contact form, we process the data you provide (name, company where applicable, email address, message) solely to handle your enquiry (Art. 6(1)(b) GDPR). Your message is delivered to us by email and stored in our CRM; once your enquiry has been dealt with, the data is deleted unless statutory retention obligations apply.

4. Service enquiries (/anfrage)

Through our enquiry form we process the information you provide (requested services, industry, optionally your website and advertising budget, company name, contact person, email address, optionally a phone number and message) to handle your enquiry, to get in touch with you and to prepare for a meeting (Art. 6(1)(b) GDPR). The data is stored in our CRM and additionally delivered to us by email.

If you indicate that you are also interested in Google Ads, we pass your enquiry on to our partner firm SUCHWERT for this purpose, and they may contact you about it.

5. Job applications (/jobs)

Through our application funnel we process the data you submit (name, email address, optionally a phone number, details of your experience, start date and motivation, and optionally a CV and portfolio) solely to carry out the application process (Art. 6(1)(b) GDPR, Art. 111-bis of Legislative Decree 196/2003). Application documents are deleted once the selection process has been completed, generally within twelve months at the latest, unless you have consented to a longer retention period.

6. Recipients and processors

To process the data submitted via the forms, we use the following service providers: Airtable Inc. (USA, CRM/database service), Google Ireland Ltd. (email communication) and DigitalOcean LLC (hosting). Where data is transferred to the USA in the process, the transfer is based on the EU-U.S. Data Privacy Framework or on EU standard contractual clauses (Art. 46 GDPR). Beyond this, no data is shared with third parties.

7. Cookies, analytics and advertising platforms

The technically necessary functions of this website work without tracking cookies. For audience measurement, conversion measurement and interest-based advertising we use the following services — only with your express consent given via the cookie banner (Art. 6(1)(a) GDPR):

META Pixel and META Conversions API (META Platforms Ireland Ltd.): measuring the effectiveness of our ads on Facebook and Instagram, conversion tracking (including server-side) and building audiences for interest-based advertising and retargeting. Data may be transferred to META Platforms Inc. (USA) in the process.

In practice this works as follows: the META Pixel is only loaded after you have given consent. If you reach this website via one of our ads, we store the click identifier assigned by META ("fbclid") in a first-party cookie of our own. If you then submit one of our forms, we also transmit the corresponding conversion event to META server-side (Conversions API) — your e-mail address, name and, where provided, phone number are pseudonymised (hashed) using SHA-256 before transmission; META uses them solely to match the event against existing accounts. The browser and server events share a common event ID so nothing is counted twice. We also log your consent decision itself for accountability purposes (time, version, selection).

Google Analytics 4 (Google Ireland Ltd.): analysis of website usage in aggregated form (IP addresses are processed in truncated form).

Google Ads (Google Ireland Ltd.): conversion tracking and remarketing for ads in the Google advertising network. With both Google services, data may be transferred to Google LLC (USA).

TikTok Pixel (TikTok Technology Ltd., Ireland): measuring and optimising advertising campaigns on TikTok and building audiences. Data may be transferred to TikTok companies outside the EU in the process.

LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company): conversion measurement and retargeting for campaigns on LinkedIn. Data may be transferred to LinkedIn Corporation (USA) in the process.

The same applies to comparable measurement and advertising technologies from other platforms, should we use them — these too are only loaded after consent and are listed individually in the cookie banner. Transfers to the USA are based on the EU-U.S. Data Privacy Framework or EU standard contractual clauses. You can withdraw your consent at any time with effect for the future via the cookie settings. Without your consent, these services are not loaded.

The following cookies are used for this:

8. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing (Art. 15–21 GDPR). You can withdraw any consent you have given at any time. To do so, simply email [email protected]. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

9. Retention period

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention obligations. After that, the data is deleted.

10. Changes

We will update this privacy policy whenever the data processing on this website changes. The version currently published here applies.

This translation is provided for convenience. In case of doubt, the German version prevails.

Last updated: July 2026