GDPR
GDPR Compliance
How BrandUp Factory GmbH implements the requirements of the EU General Data Protection Regulation.
Zuletzt aktualisiert · August 2026
1GDPR Basics
What is GDPR?
The General Data Protection Regulation (GDPR) is a regulation of the European Union that standardises the rules for processing personal data. It came into force on 25 May 2018.
Our commitment
As a responsible company, we fully implement GDPR requirements and ensure the protection of your personal data at the highest level.
2Legal Basis for Processing
Art. 6 (1) GDPR
We only process personal data based on one of the following legal bases:
a) Consent
The data subject has given consent to the processing of their personal data for one or more specific purposes.
b) Contract performance
Processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
c) Legal obligation
Processing is necessary for compliance with a legal obligation to which the controller is subject.
d) Vital interests
Processing is necessary to protect the vital interests of the data subject or of another natural person.
f) Legitimate interests
Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights of the data subject.
3Your Rights as Data Subject
Right of access (Art. 15)
You have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, to access that data and the information specified in Art. 15 GDPR.
Right to rectification (Art. 16)
You have the right to obtain the rectification of inaccurate personal data and to have incomplete data completed without undue delay.
Right to erasure (Art. 17)
You have the right to obtain the erasure of personal data concerning you where one of the grounds listed in Art. 17 GDPR applies.
Right to restriction (Art. 18)
You have the right to obtain restriction of processing where one of the conditions in Art. 18 GDPR is met.
Right to data portability (Art. 20)
You have the right to receive the personal data you provided in a structured, commonly used and machine-readable format.
Right to object (Art. 21)
You have the right to object, on grounds relating to your particular situation, at any time to processing based on legitimate interests.
Right to lodge a complaint (Art. 77)
You have the right to lodge a complaint with a supervisory authority if you consider that the processing infringes the GDPR.
4Categories of Processed Data
Master data
Name, address, contact details, customer number, contract data.
Payment data
Bank details, payment history, credit information.
Usage data
Pages visited, access times, IP addresses, device information.
Communication data
Email correspondence, support requests, feedback.
5Technical & Organisational Measures
Encryption
All data transmissions are encrypted via SSL/TLS. Sensitive data is additionally stored encrypted in our databases.
Access controls
Access to personal data is restricted to authorised employees. All access is logged and regularly reviewed.
Regular reviews
Our security measures are regularly reviewed and adapted to the state of the art.
Data backup
Regular backups ensure the availability of your data. Backup systems are subject to the same security standards as our production systems.
6Transfer to Third Countries
General principle
A transfer of personal data to third countries (outside the EU/EEA) only takes place if an adequate level of data protection is ensured.
Standard contractual clauses
When working with service providers in third countries, we use the Standard Contractual Clauses adopted by the EU Commission, together with any supplementary measures.
7Data Protection Contact
Contact
For all questions regarding data protection: BrandUp Factory GmbH Duvenstedter Berg 55 22397 Hamburg Email: info@brandupfactory.com
Supervisory authority
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit Ludwig-Erhard-Straße 22 20459 Hamburg
8Currency & Changes
Regular review
We regularly review our data protection practices and adapt them to new legal requirements or technical developments.
Last updated
This GDPR information is current as of: August 2026
Rechtliche Fragen?
Bei Fragen zu diesen Dokumenten oder zum Datenschutz helfen wir gerne weiter.
Kontakt aufnehmen