Legal

Privacy

Privacy Policy

We take the protection of your personal data seriously and handle it confidentially, in accordance with statutory data protection regulations.

Zuletzt aktualisiert · Juli 2026

1Data Controller

Responsible for data processing

BrandUp Factory GmbH Duvenstedter Berg 55 22397 Hamburg Germany Email: meyer@brandupfactory.com

2Data Collection on Our Website

Cookies

Our website uses cookies. These are small text files that your browser automatically creates and stores on your device. Cookies do not damage your device and do not contain viruses, trojans or other malicious software.

Server log files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. These are: • Browser type and browser version • Operating system used • Referrer URL • Hostname of the accessing computer • Time of server request • IP address

3Contact Form

Description and scope of data processing

Our website has a contact form that can be used for electronic contact. The data is processed exclusively for the purpose of handling your inquiry.

Legal basis

The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.

4Your Rights as Data Subject

Right of access

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

Right to rectification

You have the right to request immediate correction of incorrect personal data concerning you.

Right to erasure

You have the right to request that we delete personal data concerning you immediately.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data.

Right to data portability

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to object

You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.

5Data Retention

General principle

Personal data is only stored as long as it is necessary for the purposes for which it is processed.

Deletion

After expiry of the statutory retention periods, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or contract initiation.

6Data Security

SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://”.

Technical and organisational measures

We take technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

7Third-Party Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies that enable an analysis of how you use the website. The information generated about your use of this website (e.g. pages viewed, time on site, approximate location, device and browser) is generally transmitted to and stored by Google.

IP truncation & pseudonymisation

Google Analytics 4 truncates IP addresses within the EU/EEA before they are passed on to Google; full IP addresses are not stored by default. The evaluation is based solely on pseudonymous usage profiles and is not merged with your identity.

Legal basis & international transfer

The legal basis for the use of Google Analytics is our legitimate interest in the statistical analysis and needs-based improvement of our offering pursuant to Art. 6 (1) lit. f GDPR. Personal data may be transferred to Google LLC in the USA. Google bases this transfer on the EU Commission’s Standard Contractual Clauses and its certification under the EU-US Data Privacy Framework.

Retention & opt-out

The event data collected by Google Analytics 4 is automatically deleted after 2 months by default. You can prevent the collection of your data by disabling cookies in your browser or by installing the browser add-on provided by Google to opt out of Google Analytics (https://tools.google.com/dlpage/gaoptout). Further information on how Google handles user data can be found in Google’s privacy policy at https://policies.google.com/privacy.

External links

Our website may contain links to third-party websites. We have no influence on their content and privacy practices and therefore assume no responsibility.

8Changes to this Privacy Policy

Updates

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.

Last updated

This privacy policy was last updated on: Juli 2026

Rechtliche Fragen?

Bei Fragen zu diesen Dokumenten oder zum Datenschutz helfen wir gerne weiter.

Kontakt aufnehmen