Privacy policy

Last updated: November 2026. The German version of this policy is authoritative.

1. Controller

Florian Maier (Scale Smart)
Hofbauernstr. 13, 83700 Rottach-Egern, Germany
Email: consulting@scale-smart.de, phone: +49 8022 24455

2. Hosting (Cloudflare Pages)

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary data (IP address, date and time of access, page requested, browser identifier) to deliver and secure the site. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable provision of the website). Transfers to the USA are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.

3. Request form

If you write to us via the form, we process the data you enter (name, email address, company, message) to handle your request. The message is transmitted via the form service Web3Forms (web3forms.com), which forwards it to our email inbox. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR. The data is deleted once it is no longer required and no statutory retention obligations apply.

4. Appointment booking (Cal.com)

We use Cal.com (Cal.com, Inc., USA) for online booking. The calendar is only loaded when you click "Open calendar". Only then is a connection to Cal.com servers established. When you book, Cal.com processes the data you provide (name, email address, chosen time, optional details), sends confirmation and reminder emails and adds the appointment to our calendar. The legal basis is Art. 6 (1) (b) GDPR. Transfers to the USA are based on the EU Standard Contractual Clauses.

5. Email, calendar and online meetings (Google Workspace)

We run email and calendar on Google Workspace and hold online meetings via Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The data required for communication and for holding the meeting is processed. The legal basis is Art. 6 (1) (b) or (f) GDPR.

6. Fonts

This website uses locally hosted fonts only. No connection is made to servers of Google (Google Fonts) or other third parties.

7. Cookies and tracking

This website sets no cookies and uses no analytics or tracking services.

8. External links

The site links to our own tools at other addresses (for example the AI Act Check). The privacy notices published there apply to those services.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). Please use the contact details above.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.